last executing test programs: 3m44.350380191s ago: executing program 32 (id=96): r0 = socket(0x10, 0x3, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xffffffff, 0x640184, 0x1, 0x8001, 0x2, 0x0, 0x0, 0x0, 0x100, 0x7}}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x900, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x1}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r1, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40014) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x3}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000580)=[@request_death={0x400c630e, 0x2}], 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000052000100000000000000000002000000090001"], 0x20}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r5) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001780)=ANY=[@ANYBLOB="78120000", @ANYRES16=r6, @ANYBLOB="01000403000000000000030000005000068008000600060000004100040067636d28616573290000000000000000000000000000000000000000000000001900000031de83ad782b6fd730f466e0debd8f358d79fafea9ccc722d40000006c0001802c0004001400010002004e24ac14141100000000000000001400020002004e23ac1e000100000000000000000d0001007564703a73797a3200000000080003000800000008000300050000000d0001007564703a73797a32000000000800030002000000040002"], 0x1278}}, 0x0) (async) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) fadvise64(r7, 0xa, 0x80000001, 0x3) 3m15.280196421s ago: executing program 33 (id=500): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0xfffffffffffffff4, 0x0) (async) madvise(&(0x7f0000000000/0x4000)=nil, 0xfffffffffffffff4, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000340), 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wg2\x00'}) read(r2, &(0x7f00000027c0)=""/4073, 0xfe9) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r2, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x3f57955e7be81d83, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x4000040) (async) sendmsg$can_raw(r2, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x3f57955e7be81d83, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x4000040) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) (async) bind$bt_hci(r4, &(0x7f0000000040), 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 1m53.571255822s ago: executing program 34 (id=1700): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x81200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, r1, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000d00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000200)={0xaac, r2, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x324, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x90, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x6, 0x30, 0x16, 0x6c, 0x24, 0x9, 0x6, 0x48, 0x9, 0x36, 0x24]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x18, 0x36, 0x3]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1b, 0x9, 0x9, 0x48, 0x1, 0x24, 0xb, 0x3, 0xc, 0x5, 0x2, 0x5, 0x48, 0x12, 0xc, 0x1b, 0x24, 0x1b, 0xb, 0x6c, 0x4, 0x60, 0x16, 0x24, 0x48, 0x9, 0x6]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x6c, 0x9, 0x48, 0x5, 0x67, 0x4, 0x3, 0x6, 0x5, 0x16, 0x48, 0x18, 0x1b, 0x1b, 0x48, 0x48, 0x16, 0x48, 0x3, 0x4, 0x36, 0x9, 0x6, 0x48, 0x30, 0x30, 0x60, 0x5, 0x1]}]}, @NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0xf, 0x3, 0xa9e, 0x6, 0x8, 0xa, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x1, 0x4}, {0x2, 0x2}, {0x5, 0x4}, {0x3, 0x7}, {0x2, 0x5}, {0x2, 0x6}, {0x6}, {0x3, 0x8}, {0x2, 0x8}, {0x6, 0x7}, {0x1, 0x7}, {0x5, 0xa}, {0x3, 0xa}, {0x5}, {0x1, 0x5}, {0x6, 0x7}, {0x5}, {0x2, 0x3}, {0x6, 0x4}, {0x4, 0x5}, {0x4, 0x1}, {0x2, 0xa}, {0x2, 0xa}, {0x5}, {0x1, 0x3}, {0x6, 0x2}, {0x4, 0x5}, {0x3, 0x4}, {0x5, 0x6}, {0x1, 0x8}, {0x1, 0x6}, {0x4, 0x6}, {0x0, 0xa}, {0x7, 0x2}, {0x3, 0x6}, {0x2, 0x7}, {0x1, 0x7}, {0x6, 0xa}, {0x0, 0x6}, {0x4}, {0x3, 0x9}, {0x6, 0x2}, {0x5, 0x4}, {0x4, 0x4}, {0x4, 0x6}, {0x2, 0x4}, {0x7, 0x4}, {0x7, 0x1}, {0x4, 0x3}, {0x0, 0x8}, {0x0, 0x8}, {0x2, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0x4, 0x1, 0x2, 0xffb1, 0x4, 0x5]}}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x0, 0x6c, 0x3, 0x9, 0x2, 0x1, 0x16, 0x3, 0x6c, 0x1, 0x5, 0x9, 0x36, 0x5, 0x2, 0x48, 0x18, 0x3a, 0x9, 0x6, 0x6, 0xb, 0x6, 0x24, 0xc, 0x60]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x0, 0x9}, {}, {0x4, 0xa}, {0x0, 0x8}, {0x3, 0xa}, {0x6, 0x8}, {0x7, 0x2}, {0x4, 0x9}, {0x5, 0xa}, {0x2, 0x4}, {0x6, 0x1}, {0x6, 0x5}, {0x3, 0x7}, {0x6, 0x8}, {0x3, 0x3}, {0x5, 0x2}, {0x0, 0x5}, {0x7, 0x4}, {0x5}, {0x4, 0xa}, {0x3, 0x3}, {0x1, 0x4}, {0x6, 0x7}, {0x6, 0x5}, {0x4, 0x8}, {0x6, 0x3}, {0x4, 0x4}, {0x7, 0xa}, {0x7, 0x9}, {0x0, 0x6}, {0x5, 0x6}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x48, 0x18, 0xb, 0x4d, 0x24, 0x6c, 0x24, 0xb, 0xb, 0x3, 0xb, 0x18, 0x16, 0x1, 0x5, 0x5]}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x48]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x7d88, 0xd6f0, 0xfffe, 0xaa6, 0x8, 0x0, 0xfff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8001, 0x6, 0x4, 0x6, 0x2c, 0x3, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x6, 0x7, 0x0, 0x0, 0x3, 0xa, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x40, 0x9257, 0x60b, 0x2, 0x6dd, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x23da, 0x0, 0x6662, 0x4, 0x9, 0x9, 0xa800, 0x384]}}]}, @NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0xf44d, 0x1, 0x3, 0x9, 0x1, 0xdc]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x3, 0xcf, 0x2, 0x2, 0x48, 0x1200, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x60, 0x6c, 0x1b, 0x3, 0x6, 0x30, 0x24, 0x48, 0x18, 0x24, 0x30, 0x47, 0x6c, 0xe, 0x16, 0x48, 0x63, 0x12, 0x4, 0x2, 0x66, 0x36, 0x30, 0x36, 0x1, 0x60, 0x16, 0x3, 0x6, 0x4, 0x18, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0xd, 0x200, 0x7, 0x936, 0x4, 0x0, 0x2]}}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x5, 0x4}, {0x4, 0x8}, {0x0, 0x6}, {0x3, 0x5}, {0x0, 0x1}, {0x3}, {0x3, 0x8}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x18, 0x6c, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xbc17, 0x49c8, 0xa, 0x5, 0x2, 0x81, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xc, 0x2, 0x0, 0x12fd, 0x6, 0xc, 0x1, 0xa1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff6, 0xffff, 0x8000, 0x1602, 0x400, 0x7f, 0x1, 0x6]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0x12, 0x2, 0x6, 0x2, 0x18, 0x1]}]}]}, @NL80211_ATTR_TX_RATES={0x120, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xfff8, 0x3, 0xc, 0x8, 0x2, 0x2d, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x1000, 0x100, 0x1000, 0x5, 0x2, 0xe, 0x39e4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x6d}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x4, 0x4}, {0x0, 0x9}, {0x3, 0x6}, {0x5, 0x9}, {0x6, 0x5}, {0x5, 0x9}, {0x0, 0x3}, {0x5, 0x9}, {0x1, 0x7}, {0x2, 0x6}, {0x1, 0x2}, {0x5, 0x7}, {0x0, 0x3}, {0x3, 0x8}, {0x0, 0x7}, {0x3, 0x1}, {0x6, 0x4}, {0x1, 0x9}, {0x2}, {0x4, 0x8}, {0x1, 0x4}, {0x2, 0x3}, {0x3, 0x4}]}]}, @NL80211_BAND_6GHZ={0xb4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x7, 0x1}, {0x3, 0x9}, {0x7, 0x2}, {0x1, 0x5}, {0x1, 0x5}, {0x6, 0x3}, {0x6, 0x8}, {0x2, 0x4}, {0x0, 0x6}, {0x7, 0x4}, {0x1}, {0x1, 0x4}, {0x7, 0x8}, {0x4, 0x8}, {0x1}, {0x2, 0x9}, {0x7, 0x5}, {0x3, 0x5}, {0x2, 0x1}, {0x4, 0x5}, {0x7, 0x7}, {0x0, 0x5}, {0x1, 0x6}, {0x3, 0x5}, {0x1}, {0x2, 0x4}, {0x7, 0x7}, {0x7, 0x9}, {0x3, 0x2}, {0x5, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd0, 0x9, 0x6, 0x2, 0x3, 0x100, 0x39ca, 0x8d41]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x1, 0x1, 0x40, 0x0, 0x3ff, 0x1]}}, @NL80211_TXRATE_HT={0x35, 0x2, [{0x7, 0x1}, {0x7, 0x5}, {0x5, 0x6}, {0x0, 0x6}, {0x5, 0x4}, {0x2, 0x5}, {0x3}, {0x5, 0x6}, {0x0, 0x5}, {0x3, 0x9}, {0x7, 0x7}, {0x5, 0xa}, {0x4, 0x9}, {0x1, 0x3}, {0x2, 0x5}, {0x1, 0x4}, {0x2, 0x6}, {0x1, 0x4}, {0x2, 0x9}, {0x0, 0x9}, {0x1, 0x6}, {0x0, 0x6}, {0x1, 0xa}, {0x4, 0x4}, {0x3, 0x2}, {0x5}, {0x4, 0x7}, {0x0, 0xa}, {0x3, 0x8}, {0x6, 0x5}, {0x1, 0x2}, {0x2, 0x7}, {0x7, 0x3}, {0x6}, {0x6, 0x8}, {0x0, 0x5}, {0x6, 0x1}, {0x2, 0xa}, {0x3, 0x6}, {0x1, 0x7}, {0x6, 0x7}, {0x6, 0x7}, {0x5, 0x7}, {0x6, 0x5}, {0x4, 0x5}, {0x3, 0x1}, {0x1, 0x5}, {0x4, 0xa}, {0x1, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x4a50, 0x8, 0x0, 0x4, 0x401, 0x6, 0x8001]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x1dc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x4, 0x7}, {0x3, 0x8}, {0x5, 0x2}, {0x2, 0x7}, {0x4, 0x8}, {0x2, 0x7}, {0x1, 0x9}, {0x0, 0xa}, {0x7, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x16, 0x1, 0x16, 0x6c, 0x9]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x1, 0x2, 0xb, 0xb, 0x30, 0x63, 0x24, 0x60, 0x16, 0x60, 0x3, 0x9, 0x0, 0x48, 0x16, 0x1b, 0x24, 0x12, 0x2, 0x16, 0x6ea4d788efe5878b, 0x30, 0x1d, 0x1b, 0xac1c11a5f1c9606c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1000, 0x7, 0x9, 0x5, 0x7, 0x1, 0x9]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x3, 0x5, 0x16, 0x30, 0x18, 0x5, 0x24, 0x1b, 0x60, 0x36, 0x2, 0x3, 0x24, 0x2, 0x6c, 0x3a, 0x60, 0x9, 0x18, 0x36, 0xb, 0x9, 0xc, 0x68, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x4, 0x7, 0xfffd, 0x3, 0x1, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff9, 0x0, 0x800, 0x361, 0x1ff, 0x7, 0x0, 0x8]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x30, 0xc, 0xc, 0x12, 0x18, 0x1, 0xb, 0xc, 0x2, 0x4]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0xf, 0x2, 0xf, 0x9, 0x4, 0x4a]}}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x5, 0xf5c5edff082ec77c, 0x12, 0x36, 0x22, 0x12, 0xc, 0x60, 0xb, 0x1, 0x6c, 0x1b, 0xc, 0x18, 0xc, 0xb, 0x30, 0x12, 0x24, 0x24, 0x36, 0x623b8e1034e8cfb, 0xc, 0x6c, 0xb]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x36, 0x2, [{0x2, 0x9}, {0x3, 0x7}, {0x6, 0x2}, {0x2, 0x3}, {0x4, 0x1}, {0x4, 0x9}, {0x7, 0x4}, {0x4, 0xa}, {0x3, 0x6}, {0x0, 0x3}, {0x1, 0xa}, {0x6, 0x5}, {0x0, 0x2}, {0x6, 0x8}, {0x7, 0x4}, {0x0, 0x1}, {0x2, 0x3}, {0x2, 0xa}, {0x5, 0x3}, {0x2, 0x6}, {0x7, 0x6}, {0x5, 0x9}, {0x7, 0x2}, {0x6, 0x3}, {0x0, 0xa}, {0x1, 0x1}, {0x6}, {0x1, 0x5}, {0x0, 0x7}, {0x4, 0x6}, {0x7, 0x1}, {0x1, 0x9}, {0x1, 0x4}, {0x6, 0x4}, {0x1, 0x7}, {0x7, 0x8}, {0x1, 0x7}, {0x2, 0x9}, {0x0, 0x5}, {0x0, 0x3}, {0x5, 0x7}, {0x0, 0x6}, {0x0, 0x7}, {0x6}, {0x4}, {0x0, 0xa}, {0x1, 0x4}, {0x5, 0x4}, {0x0, 0x1}, {0x6, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x81, 0x2, 0x0, 0x8, 0x5, 0x4, 0x400, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x7, 0x9, 0x9, 0x40, 0x0, 0x40]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x2, 0x2, 0x60, 0x30, 0x9]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x38c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x4, 0x1, 0x9a5, 0x8, 0x9b, 0xa77, 0x6f68]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x3, 0x2}, {0x0, 0x6}, {0x0, 0x1}, {0x0, 0x3}, {0x0, 0x3}, {0x3, 0x6}, {0x1, 0x7}, {0x6, 0x6}, {0x6, 0x2}, {0x5, 0x3}, {0x7, 0x2}, {0x1, 0x5}, {0x7, 0x6}, {0x3, 0x4}, {0x0, 0x7}, {0x2, 0x8}, {0x7}, {0x3}, {0x5, 0x5}, {0x5, 0x3}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8000, 0x3ff, 0xa4, 0x81, 0xcb23, 0x8, 0x8]}}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xfffe, 0x0, 0x7, 0x7ff, 0xaf, 0xb8, 0x1]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0x4, 0x570, 0x7, 0x6, 0xf7, 0xb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0x48, 0xc, 0x36, 0x4, 0x2, 0xb]}]}, @NL80211_BAND_5GHZ={0x3c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x8001, 0xfff9, 0x94f, 0x5, 0xff, 0x5, 0x2]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0xf, 0x48, 0x2, 0xb, 0x1, 0x1d, 0x6, 0x1b, 0x3, 0x30, 0x12, 0x6, 0x16, 0x5, 0x17, 0x3, 0xc, 0x9, 0x36, 0x9, 0x5, 0x6, 0x12, 0x1, 0x16, 0x60, 0x3, 0x1, 0x5, 0x4, 0x12]}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x0, 0x4}, {0x1, 0x9}, {0x6, 0x9}, {0x2, 0x4}, {0x6, 0x6}, {0x2, 0xa}, {0x4, 0x6}, {0x3, 0x3}, {0x5, 0x9}, {0x0, 0x7}, {0x0, 0x1}, {0x0, 0x4}, {0x1, 0x5}, {0x7, 0x5}, {0x7}, {0x0, 0x5}, {0x1, 0x2}, {0x4, 0x2}, {0x3, 0x8}, {0x3, 0x6}, {0x7, 0x1}, {0x4, 0x5}, {0x1, 0x7}, {0x0, 0x6}, {0x7, 0x6}, {0x1, 0xa}, {0x2, 0x5}, {0x5, 0x3}, {0x3, 0x5}, {0x1, 0x4}, {0x4, 0x3}, {0x0, 0x1}, {0x1, 0xa}, {0x5}, {0x5, 0x6}, {}, {0x5, 0x3}, {0x2}, {0x4, 0x6}, {0x6, 0x7}, {0x0, 0x4}, {0x4, 0x9}, {0x1, 0x9}, {0x2, 0xa}, {0x0, 0x5}, {0x6, 0x1}, {0x5, 0x6}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x6, 0x7}, {0x0, 0x3}, {0x6, 0x2}, {0x6, 0x5}, {0x4}, {0x3, 0x3}, {0x1}, {0x2, 0x7}, {0x3, 0x7}, {0x7, 0x1}, {0x3, 0x9}, {0x2, 0x7}, {0x0, 0x5}, {0x6, 0x5}, {0x7, 0x4}, {0x5}, {0x4, 0x8}, {0x5, 0x9}, {0x4, 0x1}, {0x5, 0x2}, {0x7, 0x8}, {0x1, 0x2}, {0x5, 0x5}, {0x6, 0xa}, {0x7, 0x7}, {0x7, 0x2}, {0x3, 0x4}, {0x2, 0xa}, {0x5, 0x5}, {0x1, 0x5}, {0x4, 0x8}, {0x3, 0x4}, {0x3, 0x4}, {0x2, 0x7}, {0x3, 0x3}, {0x4, 0xa}, {0x0, 0x3}, {0x1, 0x7}, {0x1, 0x2}, {0x1, 0x6}, {0x0, 0x3}, {0x3}, {0x6, 0x8}, {0x6, 0x9}, {0x3, 0x6}, {0x5, 0xa}, {0x0, 0x7}, {0x1, 0x9}, {0x3, 0x4}, {0x1, 0x8}, {0x1, 0x3}, {0x5, 0x7}, {0x4, 0x9}, {0x5, 0x3}, {0x7, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x800, 0x4, 0x7, 0x1, 0x0, 0x8]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x36, 0x1b, 0x5, 0x30, 0x30, 0x1b, 0x12, 0x36, 0xc, 0x6, 0x36, 0x4, 0xa6, 0x48, 0x54]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x0, 0x4, 0x2, 0x1, 0x48, 0x3, 0x30, 0x30, 0x18, 0xb, 0x6c, 0x12, 0x60, 0x3, 0xc, 0x1, 0x1b, 0x3e, 0x36, 0x6]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x3, 0x8}, {0x4}, {0x3, 0x2}, {0x0, 0x9}, {0x0, 0x3}, {0x7, 0x9}, {0x7}, {0x0, 0x8}, {0x1}, {0x4, 0xa}, {0x5, 0x5}, {0x0, 0x9}, {0x0, 0x2}, {0x3, 0xa}, {0x3, 0x9}, {0x4, 0x1}, {0x5, 0x9}, {0x6, 0x4}, {0x0, 0x4}, {0x4, 0x2}, {0x7, 0x6}, {0x1, 0x5}, {0x3, 0x5}, {0x3, 0x8}, {0x5, 0xa}, {0x1, 0x3}, {0x1, 0x1}, {0x4, 0x9}, {0x2, 0x2}, {0x3, 0x3}, {0x2, 0x3}, {0x4, 0x5}, {0x1, 0x8}, {0x2, 0x9}, {0x5, 0x8}, {0x0, 0x8}, {0x1, 0x8}, {0x7, 0x6}, {0x0, 0x1}, {0x4, 0x8}, {0x4, 0xa}, {0x6, 0x4}, {0x4, 0x2}]}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{0x5, 0x7}, {0x7, 0x7}, {0x6, 0x3}, {}, {0x6, 0x9}, {0x1, 0x4}, {0x1, 0x8}, {0x1, 0x7}, {0x1, 0x9}, {0x2, 0x1}, {0x0, 0x6}, {0x5}, {0x4, 0x9}, {0x5, 0x6}, {0x3, 0x6}, {0x7, 0x2}, {0x5, 0x4}, {0x0, 0x4}, {0x3, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x7, 0xfffe, 0x7c1, 0x3, 0xcb4, 0xfa15]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0xbc2, 0x2, 0x7, 0xc, 0x4, 0x5, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x83f6, 0x3, 0x1, 0x8, 0x100, 0x2, 0xfff, 0xf491]}}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x7, 0x2}, {0x3, 0x5}, {0x0, 0x7}, {0x2, 0x4}, {0x6, 0x3}, {0x1, 0xa}, {0x7, 0x7}, {0x1, 0xa}, {0x1, 0x8}, {0x6, 0x5}, {0x1}, {0x5, 0x7}, {0x4, 0x9}, {0x1, 0x6}, {0x6, 0x8}, {0x6, 0x1}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x5}, {0x1, 0x8}, {0x6, 0x6}, {0x3, 0x8}, {0x7, 0x6}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x7}, {0x3, 0x6}, {0x7, 0x5}]}]}, @NL80211_BAND_60GHZ={0x44, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x1, 0x0, 0x5, 0x1, 0x6, 0x9, 0x1ff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x4, 0xf, 0x7, 0x1, 0x9b1c, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x1, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0xf59, 0x7ff, 0x3, 0xe, 0x0, 0x7fff, 0x6]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x36, 0x6c, 0x3, 0x1b, 0x12, 0x12, 0x1, 0x6c, 0x40, 0x3, 0x4, 0x60, 0x5, 0xc, 0x18, 0x16, 0x6c, 0x6c, 0x6e, 0x60, 0xc, 0x9, 0x60]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x48, 0x24, 0x6c, 0x5, 0x24, 0x6e, 0x6, 0x36, 0x1]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x36, 0x12, 0x12, 0x6c, 0x60, 0x6c, 0x0, 0x2, 0x1b, 0x9, 0x5, 0x5, 0x12, 0x6, 0x5, 0x24, 0xb, 0x6c, 0x13]}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x55, 0xfff, 0x3ff, 0x1ec9, 0x3, 0x1, 0xff81]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x9, 0x24, 0x48, 0x48, 0x5, 0x60, 0x16, 0x48, 0x48, 0x24, 0x9, 0xa91c6e3d7b884850, 0x18, 0x1d, 0x60, 0x6, 0x48, 0x6, 0x36, 0x30, 0x1b, 0x9, 0x5, 0x1]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x400, 0x4, 0x6, 0x0, 0x0, 0x401]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x30, 0x60, 0x6c, 0x24, 0xb, 0x1, 0xb, 0x9, 0xc, 0x6, 0x6, 0xb2, 0x16, 0x16, 0x2]}]}]}, @NL80211_ATTR_TX_RATES={0xac, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x9c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0xb517, 0xfffd, 0xa, 0x1ff, 0x3, 0x2, 0xb3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5177, 0x2000, 0x7, 0x7, 0x0, 0x9, 0x9, 0x401]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7, 0x0, 0xa, 0xbbde, 0x81, 0x5, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x2, 0x101, 0x6, 0x1ff, 0x400, 0x4, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x1b, 0x30, 0x5, 0x1, 0x36, 0xc, 0x1, 0xc, 0x24, 0x2, 0x12, 0xb, 0x12]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xfffc, 0x3, 0x9, 0x9, 0x6, 0x2, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x40, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x100, 0x9, 0x7, 0x6, 0x6, 0x1, 0xfffa]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0x5, 0xf, 0x2000, 0x8, 0x77f, 0x7]}}]}]}]}, 0xaac}}, 0x4004040) sendto$inet(0xffffffffffffffff, &(0x7f0000000d40)="f37d8738f7126b74becfbe9b2d1fda85fe362a91c1c3c2ea659785ec205efe732c1cfb711ca445506faaf33febdb506334c3d714f6f798e9825311ebe810d63b37868a191890fee3f8fede63", 0x4c, 0x80, &(0x7f0000000dc0)={0x2, 0x4e23, @multicast2}, 0x10) clock_gettime(0x0, &(0x7f0000003880)={0x0, 0x0}) futex_waitv(&(0x7f0000002cc0)=[{0x1000, &(0x7f0000000e00)=0x7, 0x2}, {0x9, &(0x7f0000000e40)=0x5, 0x2}, {0x7fffffff, &(0x7f0000000e80)=0x5}, {0x7fffffffffffffff, &(0x7f0000000ec0)=0x7, 0x82}, {0x3, &(0x7f0000000f00)=0x6, 0x82}, {0x10001, &(0x7f0000000f40)=0x3, 0x2}, {0x9315, &(0x7f0000000f80)=0x5, 0x82}, {0x7ff, &(0x7f0000000fc0), 0x82}, {0x1ff, &(0x7f0000001000)=0x2, 0x2}, {0x4, &(0x7f0000001040)=0xfffffffffffffff1, 0x2}, {0x644a, &(0x7f0000001080), 0x2}, {0x2, &(0x7f00000010c0), 0x2}, {0x6, &(0x7f0000001100)=0xc}, {0x6, &(0x7f0000001140), 0x2}, {0x69c, &(0x7f0000001180)=0x9c03, 0x2}, {0x2, &(0x7f00000011c0)=0x5, 0x2}, {0x1, &(0x7f0000001200)=0xc0, 0x2}, {0x8, &(0x7f0000001240)=0x3c38062e, 0x82}, {0x0, &(0x7f0000001280)=0x7, 0x2}, {0x7, &(0x7f00000012c0)=0x5, 0x2}, {0x401, &(0x7f0000001300)=0x240000000, 0x2}, {0x4, &(0x7f0000001340)=0x9c63, 0x2}, {0x7, &(0x7f0000001380)=0x1, 0x82}, {0x7, &(0x7f00000013c0)=0x80000000000000, 0x82}, {0x7, &(0x7f0000001400)=0x5, 0x82}, {0x6, &(0x7f0000001440)=0x80, 0x2}, {0x8, &(0x7f0000001480)=0x3, 0x82}, {0x7c, &(0x7f00000014c0)=0x837, 0x2}, {0xdc9, &(0x7f0000001500)=0x3ff, 0x82}, {0xfffffffeffffffff, &(0x7f0000001540)=0x5, 0x82}, {0x46c, &(0x7f0000001580)=0x8, 0x82}, {0x76, &(0x7f00000015c0)=0x1, 0x2}, {0x1d, &(0x7f0000001600)=0x80, 0x82}, {0x0, &(0x7f0000001640), 0x82}, {0x4, &(0x7f0000001680)=0x80000000, 0x2}, {0x0, &(0x7f00000016c0)=0x52bc, 0xc3}, {0x40, &(0x7f0000001700)=0xc, 0x2}, {0x4737344a, &(0x7f0000001740)=0x4, 0x82}, {0x1000, &(0x7f0000001780)=0x8, 0x2}, {0xfff, &(0x7f00000017c0)=0xfffffffffffffffb, 0x82}, {0x5ae, &(0x7f0000001800)=0x8000, 0xfb1a47edc9636174}, {0x7, &(0x7f0000001840)=0x9, 0x2}, {0x536a, &(0x7f0000001880)=0x7, 0x82}, {0x3, &(0x7f00000018c0)=0xcd46, 0x2}, {0x7, &(0x7f0000001900)=0xffffffffffffffff, 0x82}, {0x0, &(0x7f0000001940)=0xffffffff, 0x82}, {0x2, &(0x7f0000001980)=0x1000, 0x82}, {0x4, &(0x7f00000019c0)=0xffffffffffff0001, 0x2}, {0x2, &(0x7f0000001a00)=0x1000, 0x82}, {0x8000, &(0x7f0000001a40)=0x8, 0x82}, {0xfe, &(0x7f0000001a80)=0x5, 0x82}, {0x1, &(0x7f0000001ac0)=0x3, 0x82}, {0x7e9, &(0x7f0000001b00)=0x200, 0x82}, {0x9, &(0x7f0000001b40)=0x1d, 0x82}, {0xfffffffffffffff7, &(0x7f0000001b80)=0x9}, {0x0, &(0x7f0000001bc0)=0x3, 0x82}, {0x6, &(0x7f0000001c00)=0x8, 0x82}, {0x0, &(0x7f0000001c40)=0x6, 0x82}, {0x9, &(0x7f0000001c80)=0xfffffffffffffff7, 0x82}, {0x8, &(0x7f0000001cc0)=0x1, 0x2}, {0x1d9, &(0x7f0000001d00)=0x7, 0x2}, {0x6fe7, &(0x7f0000001d40)=0xfffffffffffffffb, 0x7aff7a0a57413bd4}, {0xe41, &(0x7f0000001d80)=0x7ff, 0x2}, {0xa, &(0x7f0000001dc0)=0x2, 0x2}, {0xe6d, &(0x7f0000001e00)=0x8, 0x82}, {0x8000000000000001, &(0x7f0000001e40)=0xff, 0x2}, {0x5, &(0x7f0000001e80)=0x5, 0x2}, {0x1, &(0x7f0000001ec0)=0x7, 0x2}, {0x8000000000000001, &(0x7f0000001f00)=0x9, 0x2}, {0x2, &(0x7f0000001f40)=0x9, 0x82}, {0x2, &(0x7f0000001f80)=0x9}, {0xbcb, &(0x7f0000001fc0), 0x82}, {0x8, &(0x7f0000002000)=0x7, 0x82}, {0x8, &(0x7f0000002040)=0x3, 0x82}, {0x7, &(0x7f0000002080)=0x401, 0x2}, {0x7, &(0x7f00000020c0)=0xe083, 0x2}, {0x3, &(0x7f0000002100)=0xf, 0x82}, {0x7f, &(0x7f0000002140)=0x40, 0x82}, {0x7ff, &(0x7f0000002180)=0xa, 0x82}, {0x9, &(0x7f00000021c0)=0x90ce, 0x2}, {0x7, &(0x7f0000002200)=0x7, 0x82}, {0x6, &(0x7f0000002240)=0x1c, 0x2}, {0x100000000, &(0x7f0000002280), 0x82}, {0x9, &(0x7f00000022c0)=0x8000000000000001, 0x2}, {0x185, &(0x7f0000002300)=0x1, 0x2}, {0xfffffffffffffffb, &(0x7f0000002340)=0x401, 0x2}, {0x5, &(0x7f0000002380)=0x69cf, 0x2}, {0x3, &(0x7f00000023c0)=0x100000001, 0x2}, {0xf, &(0x7f0000002400)=0x7, 0x2}, {0xcf, &(0x7f0000002440)=0x9b06, 0x82}, {0xa, &(0x7f0000002480)=0x8001, 0x82}, {0x101, &(0x7f00000024c0)=0x3, 0x82}, {0x800, &(0x7f0000002500)=0x9, 0x2}, {0x3800, &(0x7f0000002540)=0x383, 0x2}, {0x16fd, &(0x7f0000002580)=0x3, 0x2}, {0x65, &(0x7f00000025c0)=0xfffffffffffffff8, 0x2}, {0x8000000000000000, &(0x7f0000002600)=0x4, 0x82}, {0x4, &(0x7f0000002640)=0x7, 0x2}, {0x101, &(0x7f0000002680)=0x6}, {0x2, &(0x7f00000026c0)=0xce34, 0x2}, {0x8, &(0x7f0000002700)=0x8, 0x82}, {0x6, &(0x7f0000002740)=0x9, 0x82}, {0x0, &(0x7f0000002780)=0x6, 0x2}, {0x26, &(0x7f00000027c0)=0x2, 0x2}, {0x8, &(0x7f0000002800), 0x82}, {0x1, &(0x7f0000002840)=0xff, 0x82}, {0x2, &(0x7f0000002880)=0x8, 0x82}, {0x2, &(0x7f00000028c0)=0x91e, 0x82}, {0x7, &(0x7f0000002900)=0x4, 0x82}, {0x5, &(0x7f0000002940)=0x62d, 0x2}, {0xa681, &(0x7f0000002980)=0x6, 0x82}, {0x5, &(0x7f00000029c0)=0x5, 0x2}, {0x4, &(0x7f0000002a00)=0x65f9ff11, 0x2}, {0x0, &(0x7f0000002a40), 0x82}, {0x1, &(0x7f0000002a80)=0x42, 0x2}, {0x5ad0, &(0x7f0000002ac0)=0x25f0, 0x82}, {0x385d, &(0x7f0000002b00)=0x7fffffff, 0x2}, {0x3, &(0x7f0000002b40)=0x3, 0x2}, {0x9, &(0x7f0000002b80)=0x1ff, 0x2}, {0x100000000, &(0x7f0000002bc0)=0x7, 0x2}, {0x5, &(0x7f0000002c00)=0x9, 0x2}, {0x7fffffff, &(0x7f0000002c40)=0x100000001, 0x2}, {0x3f, &(0x7f0000002c80)=0x2, 0x2}], 0x7b, 0x0, &(0x7f00000038c0)={r3, r4+10000000}, 0x1) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000003a80)={&(0x7f0000003900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003a40)={&(0x7f0000003940)={0xfc, r1, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000003ac0)) syz_genetlink_get_family_id$tipc2(&(0x7f0000003b00), r0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000003b40)={'pimreg1\x00', 0x7fff}) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000003b80), 0x2, 0x0) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000003c00), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r5, &(0x7f0000003d80)={&(0x7f0000003bc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000003d40)={&(0x7f0000003c40)={0xfc, r6, 0x2, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x4008804) syz_genetlink_get_family_id$devlink(&(0x7f0000003dc0), r5) r7 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000003e00), 0x2, 0x0) setsockopt$bt_BT_SNDMTU(r7, 0x112, 0xc, &(0x7f0000003e40)=0xfffb, 0x2) write$UHID_CREATE2(r7, &(0x7f0000003e80)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x12, 0x200, 0x3, 0xa3a9, 0xddb6, 0xce, "2511e93b8b7ab05fef14633f2312e8596d84"}}, 0x12a) timer_create(0x3, &(0x7f0000004180)={0x0, 0x2d, 0x1, @thr={&(0x7f0000003fc0)="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", &(0x7f00000040c0)="a511f1a8a3b895cffe0aacaf44b5c2db391a82c86c7d0c82b99fe2902c4d3734a682b053db8825a4f84acdb9aca576bb136d0c11ffb833b51325e05b33f56a9dd3f8764dc72f0c4ff7e38cc49360dc3a4faed5574f8d56592cb0353c5141a1018ca7603e26d5f138f6d8acf74ea11a1b1605e515915369e8921b4cfdf33deb3bd7f07eb4c4fbfa405fe1e37fd5936b252e237250e46a9c2b"}}, &(0x7f00000041c0)=0x0) timer_settime(r8, 0x0, &(0x7f0000004200)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000004240)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004280), 0x69, 0x0, &(0x7f00000042c0)="eb028275af3381de2f24f1e6c1698aec11d5bb16be9bc0176d294df6da37ad462b8e11b15876a5322973fe1513c6ee0b254934efc0496a577d675f67a5a5d26ac0d7c42bdc8c2e676c25924cb37dc2d3dcfe04020589578ceba468683cda74f831bd588b1d0a212846"}) socket$netlink(0x10, 0x3, 0xb) syz_genetlink_get_family_id$batadv(&(0x7f0000004380), r5) read$FUSE(r7, &(0x7f00000043c0)={0x2020}, 0x2020) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000066c0)={&(0x7f0000006400)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000006680)={&(0x7f0000006440)={0x224, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6c}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x1c5, 0x33, @probe_request={{{}, {}, @device_a, @device_b, @from_mac=@device_b, {0x7, 0x2}}, @void, @val={0x1, 0x4, [{0x5}, {0x1}, {0x1, 0x1}, {0x1, 0x1}]}, @val={0x3, 0x1, 0xa9}, @void, @val={0x72, 0x6}, [{0xdd, 0x7c, "4518f16f1ee7dc71682b87bbea2836fbafcec845f13407fd3ee9c977bd4510d92d5780a174cd08ceccd47e291428dc81975df1ce353a9965fbf2411a4b7f899fb40a6a9594bc65965d667015cd34fde40e819652b39524b38113a6a533c3d25d1ae4577150a8eb689a2d375a1ac1450c0794d738a05a1615d475ff0e"}, {0xdd, 0x48, "063048c38682005876ac3df71519d1afd72a9bca4bcf526f7e7340e16699a95bc19315bee5d5a21de8e5e78e24d03cae1904e42d832c38c14d92d24d7f487e4edb53291e66371526"}, {0xdd, 0x30, "9f333cdf75216f435c0778ce840aff61600cf0062712157d6cfff30d282fa1fc90fa013bee9410e547dfe92410a5784c"}, {0xdd, 0x9c, "e36251618c0651fd3ca52641c814cd4f30c90952572f10d80aea5fe6185e0999194c28e171375231030ac314fc85898e2a6f5ecf088f2ee8a05c197f254b245b3e9bdb96aa24dfda5b83ce54bc3cac72c8e6e80659af3cff559329c23af29f7d3a599030c2ff58268f9428b6879dfe311e683bc557becc69816644f3b837588360e2385c703982dff84d219cc23f2c983a166e5f90a40a16403c2602"}]}}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x341}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1bf}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x224}, 0x1, 0x0, 0x0, 0x4}, 0x8814) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000006900)={&(0x7f0000006700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000068c0)={&(0x7f0000006740)={0x148, r6, 0x1, 0x70bd25, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x4fb000}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x4}, {0x8, 0x13, 0x2}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff8827}, {0x6, 0x11, 0xff}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7f}, {0x6, 0x11, 0x972}, {0x8, 0x13, 0x3}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x401}, {0x5, 0x14, 0x1}}]}, 0x148}, 0x1, 0x0, 0x0, 0x20008040}, 0x20040040) ioctl$HIDIOCGRAWNAME(r7, 0x80404804, &(0x7f0000006940)) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000069c0), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000006a80)={&(0x7f0000006980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000006a40)={&(0x7f0000006a00)={0x14, r9, 0x10, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x10) 1m42.467726916s ago: executing program 35 (id=1656): r0 = socket$packet(0x11, 0x2, 0x300) fcntl$getflags(r0, 0xb) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x2, 0x6}, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000240)=0x2, 0x4) (async, rerun: 64) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) (async, rerun: 64) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9402000012000a062abd7000fbdbdf25230480684e214e210900000004000000ec00000001000000feffffffcb0000004000000081000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x294}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000003d40)={0x0, 0x0, &(0x7f0000003d00)={&(0x7f0000003bc0)=ANY=[@ANYBLOB="54000053a3291eabc311faba00130003042cbd7000ffdbdf2518da0505000001000000020600000082210000f400", @ANYRES32=0x0, @ANYBLOB="ffffffff7f00000008000000000200000400010004000100"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async, rerun: 64) r2 = socket(0x18, 0x5, 0x0) (rerun: 64) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) (async) listen(r2, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) io_setup(0x82, &(0x7f0000000240)=0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x138) io_submit(r4, 0x2, &(0x7f0000000740)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1, r5, 0x0, 0x0, 0x3}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x7, r5, 0x0, 0x0, 0x7fff, 0x0, 0x2}]) (async) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) (async) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff0600000005000000450000002500000019000d00000008000d00000000000006040000000000f93132", 0x39}], 0x1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r8 = socket(0x28, 0x1, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x4, 0x9, 0x5c, 0x5, 0x9, 0x7, 0x6d9e, 0x6, 0x6, 0x7fff, 0x0, 0x9, 0x10, 0x8, 0x6], 0xeeee0000}) (async, rerun: 32) connect$vsock_stream(r8, &(0x7f0000000080), 0x10) (rerun: 32) 1m39.235532149s ago: executing program 36 (id=1789): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) r1 = fsopen(&(0x7f00000000c0)='overlay\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='source', &(0x7f0000000180)=':..:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x743, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x25) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='ceph\x00', 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000300)='./file0\x00', 0x8) setxattr$incfs_metadata(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024f01c173a49b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$setregset(0x4205, r3, 0x1, &(0x7f00000004c0)={&(0x7f0000000640)="f62611ea80d4ffee843307c67df0b9db927d70db8c8a7446d7d7e9a08b482294c994494d606fce4ea5be9f18841f792edc5548b6d53f1b1708db242761ec696a0597f28f952b12f75e0c1f8c1ae7740a92a64ea417fe0000ffffff7fec531c6bf402701e19031a0a012832a06d7259185eb5cfd838f981997c20f41c650babf1802abb0e71861f825ca92754e27db5b3", 0x90}) lsetxattr$security_capability(0x0, 0x0, &(0x7f0000000180)=@v3={0x3000000, [{0x0, 0x8}, {0x2, 0x70000000}], r0}, 0x18, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800800, &(0x7f0000000800)=ANY=[@ANYBLOB="756de43d85b87134dd14026abb9511a11645bbfa663bdcc1a61c166f3333b8bade9982ffaf375965c40d96e42ac69452ae26aa0010d33200fc3bb793d1ded34913925389f5233b691db44987ed663c4423f2c9f1adf99c386a39a050674c4897950134b89f7238785ebcf9233881bc070f85aa03d20e0695df0700000000000000469c5f8863d7ab4d63a73650973d1f73fd81b9497184ad8d200374572fede8151d2f0b5c631ccc668acf47f2533fe821dba41e2b92e3c485ad59a4e5c9a1d5abbea25de42140f3040416575c93062e853a", @ANYRESHEX=r0, @ANYBLOB="2c6673757569643d303465bc356532372d656134332d363433642d003232632d39383030380134632c00"]) r5 = socket$pptp(0x18, 0x1, 0x2) ptrace$ARCH_SHSTK_STATUS(0x1e, r3, &(0x7f0000000480), 0x5005) bind$pptp(r5, &(0x7f0000000000)={0x18, 0x2, {0x3, @rand_addr=0x64010100}}, 0x1e) r6 = socket$pptp(0x18, 0x1, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r7) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000080)=0x3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) bind$pptp(r6, &(0x7f0000003c40)={0x18, 0x2, {0x3, @remote}}, 0x1e) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') sendmsg$AUDIT_USER_TTY(r10, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="f0000000640400002dbd7000fedbdf256c7f960431ccf0f350247c77dbedac96dba06e278f3ad4c42c37ef2eaff0a61cee4dab8361f2fba7dd0ffc537f0395b7d5ad4e99eae39bbed6bf37e3b841548311f3edc866b0ef098c20870db8b01d1c4c67b493372e7ca549faea5f5bf365f582c454bdd610578fd7f913a6bb3fad6924e9211fbee7a37415156f4adce02e3200f737315bf926bf91191c8d6be2930ecf16d21caa6f6376b3e937496807458e2db15adf8ff957520a9706bf6e0555450fe08863a4935222387b281cc17893ff99b49361e8c347145feaecadbca8c92d2018a3dc5cfbac223e319cbe435965976ed4d53d3b"], 0xf0}, 0x1, 0x0, 0x0, 0x20080000}, 0x4044010) 1m35.678060768s ago: executing program 37 (id=1734): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r6 = dup(r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x3c, r8, 0x1, 0x200000, 0xfffffffc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xfffffff9}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x9}]}, 0x3c}}, 0x0) connect$packet(r6, &(0x7f0000000080)={0x11, 0x1, 0x0, 0x1, 0x6}, 0x14) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000004788001c09102c28", 0x49, 0x4008044, &(0x7f0000000500)={0x11, 0x6, r4, 0x1, 0x0, 0x6, @random="78a0291e7aa3"}, 0x14) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r11 = dup(r10) socketpair(0xa, 0x3, 0x47, &(0x7f0000000140)) write$FUSE_BMAP(r11, &(0x7f0000000100)={0x18}, 0x18) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r12, 0x0) listen(r12, 0x3) write$FUSE_DIRENTPLUS(r11, &(0x7f0000000600)=ANY=[@ANYRES8=r11, @ANYRES64=r9, @ANYRES8=r9, @ANYRESOCT=r11, @ANYRESOCT=r12, @ANYRES32=r2, @ANYRES64=r11], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB="2c64656275673d3078303030303030303030303030303030322c61667a93b53baf3030382c00"]) r13 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f00000004c0)='veth1_to_batadv\x00', 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x50, r14, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xf3}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x3}, @ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x6}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x4}]}, 0x50}}, 0x4000) sendfile(r13, r0, 0x0, 0x80000000) 1m32.952400153s ago: executing program 4 (id=1839): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x100000001, 0x280) ioctl$LOOP_GET_STATUS(r0, 0x4c03, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='cpu.stat\x00', 0x275a, 0x0) fallocate(r2, 0x0, 0x0, 0x10fff9) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x7000001, 0x12, r2, 0x0) (async) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000280)={0x0, 0x9, {0x55, 0x1dc, 0x62b1, {0x1, 0xe5d9}, {0xfc00, 0x6}, @ramp={0x7fff, 0x0, {0x5, 0x7, 0xfffe, 0x1}}}, {0x51, 0x7, 0x1ac2, {0xa151, 0x1}, {0x4, 0x6}, @const={0x1, {0x8, 0xffff, 0x7, 0x7}}}}) (async) prctl$PR_CAP_AMBIENT(0x2f, 0x3, 0x0) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000200)="3d4077e50823258d495dc9d2c2a25bc7dc0b11bde0d15d0770675db1790111e7", 0x20}, {&(0x7f0000000240)="b28231adddba8ed6f23bf98ca8caa015ab797f57353ec4ceacbd4995a9a6", 0x1e}], 0x2, 0x0) (async) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000400)={"260ad9e58fa69a2e964f200bb425b9ebe33ebe63b474b0e785dcf24298b60e02a79ece5d3a0ffe120f4705bcf60f2b0db29e20994f63c4b9cd21e6c874ac9401b46e44334afc936e9b7723d6344f271fc9cd3ec6aa401729ad51e48edc88149ad080e37774b4d63d92665941ca10b135503714b94b1b6eedcd34f46818fc188b434db333162cdc72c780757b3ada52991a8e22787fe2013fae4dbaf75c866d3e5cea631ec28da09c00a7e03dc21cadaa73d466945c3e0dcad661e3a1da75d1e524ca83e9c76a25e728ad2651254416f222393eaa0edc0307200f32be69913312346e7a7d32031c317311645f63a1f302dbdc71c5f275731308fc5a03bf46e2387499f285a44d794f524b560d9919ca938a6268d20f244c9517115550d7b4802a726d65b69280cde795dc3a9cf84b72f534ba0330ee2f9f0a6c0a984cf2a32a4a4af48eb5d7e75967b3b5388d30c7ff6209bc67d65e64489310da03c7cfa5866466ee759123b3b80821f34ed500cd09180d49eac740b1071e95d7557720efd716c831757d65e40e0f3434a5a7908c37b4efec244e6b13c7cbe8f47748383ee7e69894b6d36323fbfdd245b33a485e1950409aa08956b34f17554f0a0cee8ea42b2cfe66d24ad4a8df9c911deee3a9b3e4c0d6e229bcdaad25d803daa1900feffff8e4d358101408722565b5d96475a1da15aea7bf4892f4b6375d320ad6fa09f2902f5e6d7b3d31449becb701b01d607998dedaaf3a159d05532e22ad8c0bb627fda5be1ccd63cf26a7d696986f4978c53e729668791fd2c82d414d81c06924d8ce178390e29fe5537d0c7ef546806195cafb58e39258e520b370d10208b713266de2a2f77cf893dee330e5b8ed89906aa224512a05d49b3de41436e78c0ecfb0b7dca624d63fc316669b934c874bfd89b4e8cbc4e12a9ddc311afc1953258eec2333206f4aff8163420ccaab985f5db0b3d75b60137a4da84fb6d38fc25df8e9d02412153e2df0e27eaf91d51ca0c4f56240b7b2eeb9c2751491fa35ebfc34f632740af856994c74a54e7e147be3a8098d1b5c523b1154b6c0df5d1160d2b4fec579cc6a4ce92ef45d189bf42684a57cc6f6c4bbab890707a57e8e9276810284441cc8a11a60fcc6b27a7f47f2a2fed8603b4fcdf9d16bf035d995002aa25cac33b9f0c86c965046d991a0b022b36c00b440dc760555b2ee50d80f3d3c29b8d52ebc81fd300ca8386b097d6a1cd24a9e89d5b5b21bc98eaaef3980bc6d6eb402d807dbe4aad3bb31191fb02f33fe04036bba0c955476493021fee785efb196487e439da2ac3b9150916aa72de1538797a98a0a7ed49293913e46d49a511fc3c49f29687f14cb826f9c9d8cd35ccb760632bbeb52c7454b86b9d326b1c5f4b68c26d8be1c97fcc9f6a9b9388bc222b023e356c2750b1e6435691d97b65263c941"}) r4 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r4, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom1\x00', 0x3939b5dfc5bb93bb, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETLINK(r6, 0x400454cd, 0x339) (async) dup(r2) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000040)=@rnullb, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r5, 0x411}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f0000000100)={[0xb]}, 0x8) prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0xb) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r7) sendmsg$IEEE802154_SCAN_REQ(r7, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="812a0000000000dcdf25090000000500154240598b2bf000040000000500"], 0x24}}, 0x20048080) close_range(r5, 0xffffffffffffffff, 0x0) 1m32.786328846s ago: executing program 4 (id=1841): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r1, &(0x7f0000000000), 0x2002) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xe7) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f00000001c0)=[@acquire_done={0x40106309, 0x2}], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000840)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, 0x0, 0xffffffffffffffe1, 0x0, 0x14}, @fda={0x66646185, 0x8, 0x400, 0x9}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x0, 0x0, 0x0}) 1m31.884418561s ago: executing program 4 (id=1851): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x8, &(0x7f0000001b80), &(0x7f00000004c0)=0x80) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) socket(0x5, 0x2, 0x9) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r6 = fcntl$dupfd(r5, 0x406, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x1, 0x0, &(0x7f0000000080)={0x80, 0x3, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x2, 0x48000000, 0x0, 0x0, 0x0}) close_range(r4, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000a25000/0x2000)=nil, 0x2000, 0x1, 0x10012, r7, 0x0) mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) getdents64(r1, &(0x7f00000000c0)=""/54, 0x36) mount$binderfs(0x0, &(0x7f0000000180)='./binderfs2\x00', 0x0, 0x801804, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) 1m31.818349172s ago: executing program 4 (id=1854): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000540)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setgroups(0x1, &(0x7f00000001c0)=[r2]) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="6d61783d30303030303030303030271402d83737373737373737372c00"]) 1m31.31146556s ago: executing program 9 (id=1858): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f0000000180)=[@dead_binder_done], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='v7\x00', 0x2000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000140)="1081b3", 0x3, 0xffffffffffffffff) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') ioctl$MON_IOCX_MFETCH(r2, 0xc0109207, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0], 0x1, 0x3275}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000540500000e0002006e657464657673696d0000000f0002"], 0x34}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x1c, 0x0, &(0x7f0000000040)=[@enter_looper, @increfs={0x40046304, 0x3}, @request_death={0x400c630e, 0x2}], 0xbb, 0x0, &(0x7f0000000240)="05de66730879c09a3dad5fda5a11568bd6922cdb8a6c55bad3ce0e7d04883d574b211f9860b41a93ac458aca9afb423d03bb15483d60c14ac6fee5f3fae5d384e42707be029a067801fd291926efc34abc3049c3e2a53a6b88d05b53f9e0e598d164bd80d7dc3a2b92cafd605e38d9d62ed71495a0a11f2b2df6f33e9482ae85adda08eee500da7654f7ab9d754db694b9b9bbad95115f25efc6dd563e708784f81ca79e966bc1608167fa9eb815a3b09bd4042fd962392f1bd82e"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) 1m30.921482947s ago: executing program 4 (id=1860): getpid() (async, rerun: 64) setns(0xffffffffffffffff, 0x24020000) (rerun: 64) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) (async) ioprio_set$pid(0x1, 0x0, 0x0) (async) sendfile(r0, r0, 0x0, 0x7ffff000) 1m30.480339214s ago: executing program 9 (id=1865): unshare(0x20000400) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1}, 0x6e) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) sendfile(r2, r3, 0x0, 0x2af) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 1m30.232324738s ago: executing program 4 (id=1867): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mkdir(0x0, 0x3) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES8=r1, @ANYBLOB="070304001600010000002e"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) sendmsg$TIPC_NL_BEARER_SET(r3, 0x0, 0x4040140) mprotect(&(0x7f0000036000/0x3000)=nil, 0x3000, 0x1000000) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_INPUT2(r5, 0x0, 0x0) r6 = dup3(r1, r2, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00002}]}) r8 = inotify_init1(0x80000) close_range(r8, r8, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x80082102, &(0x7f0000000080)={r9, 0x0, r7}) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) fstat(r10, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r11) setfsuid(r11) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x6}) modify_ldt$write(0x1, &(0x7f0000000040)={0x3, 0x0, 0x1000, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) socket$netlink(0x10, 0x3, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 1m30.230174668s ago: executing program 9 (id=1868): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) keyctl$reject(0x13, 0x0, 0x9, 0x200, 0xfffffffffffffff9) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, 0x0) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000ed3000/0x3000)=nil, 0x3000}, 0x1}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000180)=[@dead_binder_done, @enter_looper, @request_death, @clear_death={0x400c630f, 0x2}, @acquire_done], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async) userfaultfd(0x801) (async) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) keyctl$reject(0x13, 0x0, 0x9, 0x200, 0xfffffffffffffff9) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, 0x0) (async) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) (async) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000ed3000/0x3000)=nil, 0x3000}, 0x1}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000180)=[@dead_binder_done, @enter_looper, @request_death, @clear_death={0x400c630f, 0x2}, @acquire_done], 0xf7, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c11bfc5a6d01cefde1031b79382c34c2da32f2058e7357c3d1fa5931bb923f0ebd396a976c32940686"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) 1m30.151606339s ago: executing program 38 (id=1867): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mkdir(0x0, 0x3) r1 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r4) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES8=r1, @ANYBLOB="070304001600010000002e"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) sendmsg$TIPC_NL_BEARER_SET(r3, 0x0, 0x4040140) mprotect(&(0x7f0000036000/0x3000)=nil, 0x3000, 0x1000000) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_INPUT2(r5, 0x0, 0x0) r6 = dup3(r1, r2, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x5, 0x7fc00002}]}) r8 = inotify_init1(0x80000) close_range(r8, r8, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000100)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x80082102, &(0x7f0000000080)={r9, 0x0, r7}) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) fstat(r10, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r11) setfsuid(r11) ioctl$MON_IOCX_MFETCH(r6, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x6}) modify_ldt$write(0x1, &(0x7f0000000040)={0x3, 0x0, 0x1000, 0x1, 0x3, 0x1, 0x0, 0x1, 0x0, 0x1}, 0x10) socket$netlink(0x10, 0x3, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 1m29.981571002s ago: executing program 9 (id=1872): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="04180020"], 0x18, 0x4000801}, 0xd0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe28, 0x4, @mcast2, 0x7}, 0x1c) connect$inet6(r4, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 1m29.812366275s ago: executing program 9 (id=1873): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000a80)={'syz1\x00', {0x1}, 0xd, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63f3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x2a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3df, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x2, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x45c) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0xe) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x2) ioctl$UI_DEV_CREATE(r1, 0x5501) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, &(0x7f0000000200)=0xa4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/kheaders.tar.xz', 0x900, 0x11) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r5 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10, 0x80800) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r6) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x401, 0x88143) r8 = open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000000c0)={r8, 0x0, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x1b, 0x15, "2e7da51a8dc4b9505dfa1ab0a34a10622e64ee4edb80cc9bd36b93b23733e6180aa539ec68114b5aba1c98911df5ba72296d56740d56ea4d0434aa3592a47913", "fc0177a6f3bb16d5d5568693e0e50bbf206c9d8db97cd01095e7ea15b0ba5f8a654e14dc7c4cc6b50488873b3acc6e02cd3eac8be657b534bfa1142100696b29", "c921095856cdf9fd8199034f3b875fe5c92394e3c7a178fb1c16c99189819ef4", [0x80, 0x8000000000000000]}}) getsockopt$inet_int(r5, 0x0, 0xd, &(0x7f0000000180), &(0x7f0000000200)=0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffc, 0x7, @empty, 0x200}, 0x1c) r9 = socket$inet6(0x10, 0x2, 0x4) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) write$tcp_mem(r10, &(0x7f0000000300)={0xfffffffffffffffe, 0x20, 0x3, 0x20, 0x8}, 0x48) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e21, @remote}, {0x2, 0x4e22, @local}, {0x2, 0x4e21, @multicast2}, 0x40, 0x0, 0x0, 0x0, 0xd, 0x0, 0x3, 0x400000000000, 0x279}) sendto$inet6(r9, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_opaque(r5, &(0x7f0000000240), &(0x7f00000002c0), 0x2, 0x2) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0x200000, &(0x7f0000000380)=ANY=[@ANYBLOB='max=00000000000000000000002,stats=global,stats=']) 1m29.750063126s ago: executing program 9 (id=1875): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x121010, r0, 0x3a177000) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000001180)={0xffffffffffffff97, 0x2, @multicast2}, 0x10) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000040)=0x28) 1m29.637488998s ago: executing program 39 (id=1875): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x121010, r0, 0x3a177000) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000001180)={0xffffffffffffff97, 0x2, @multicast2}, 0x10) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000000)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000040)=0x28) 46.388602233s ago: executing program 3 (id=2229): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = signalfd4(r0, &(0x7f0000000040)={[0x8]}, 0x8, 0x101000) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000080)=0x0) tkill(r2, 0x3e) write$selinux_attr(r1, &(0x7f00000000c0)='system_u:object_r:depmod_exec_t:s0\x00', 0x23) (async) gettid() (async) r3 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, r3) (async) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0, 0x0}, 0x2020) quotactl_fd$Q_SETINFO(r1, 0xffffffff80000601, r6, &(0x7f0000002240)={0xfffffffffffffff9, 0x8000, 0x0, 0x1}) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000002280)={0x0, 0x6}) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000022c0)={0xaa, 0x3}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000002300)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async) write$cgroup_int(r1, &(0x7f0000002700)=0x2, 0x12) (async) write$FUSE_INIT(r1, &(0x7f0000002740)={0x50, 0x0, r5, {0x7, 0x2b, 0x104, 0x100000, 0xa9, 0x6, 0xfff, 0x4, 0x0, 0x0, 0x40, 0x9}}, 0x50) (async) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000027c0)) close_range(r0, r1, 0x0) (async) ioctl$F2FS_IOC_GARBAGE_COLLECT(r0, 0x4004f506, &(0x7f0000002800)) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000028c0)=[@text32={0x20, &(0x7f0000002840)="66baf80cb89c0eb080ef66bafc0cedf30f1efc440f20c03505000000440f22c066baf80cb82a950f87ef66bafc0c66ed660f2a15fa0000000f015b42653e64f367c13279b86a2700000f23d80f21f835800000900f23f82e0f01c8b93c0b00000f32", 0x62}], 0x1, 0x0, &(0x7f0000002900), 0x0) (async) flock(r1, 0x4) (async) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000002940)={0x60000000}) keyctl$instantiate(0xc, r4, &(0x7f0000002980)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'P'}, 0x16, r4) (async) timer_create(0x7, &(0x7f0000002b00)={0x0, 0x10, 0x0, @thr={&(0x7f00000029c0)="12fe36bad2f25e63e554e1db1efd5430d56b19b44cdd3b6778ea133b59ab4d9ee3846227807e6f77aa75b696f64681861ae15976c6b7be50d8723bd76aca8127e81a9e5e65b58fe2675e385d2457e935d7a0b2768f67c40912b7b8a4b070ec5c39792b0c4569150be75856e86633d1232a17fd932b731ae6645636fbc7c8d8790e247a8df345a98ae96ea3ae3b3f570e896ad5e464835a5eee7f17d518ab560b70f7200131ccf5a4a64d2b9ed388545af71de44e8a8bc5c0caa78a837e1cb39edb41ee0782b9979b600c5e961e53326eadd2602ae1c7e6e8e4aebaceea060342", &(0x7f0000002ac0)="4ca61e958c716da1007f6ab5eac4133152c5d81b8d116279dfd9115a1c6dfe8281aa79a55d35c1da69f1c77724d001e5aaad7aaca4d19eb3f96baaa0edbab9"}}, &(0x7f0000002b40)=0x0) clock_gettime(0x0, &(0x7f0000002b80)={0x0, 0x0}) timer_settime(r7, 0x0, &(0x7f0000002bc0)={{}, {r8, r9+10000000}}, &(0x7f0000002c00)) (async) r10 = add_key$keyring(&(0x7f0000002cc0), &(0x7f0000002d00)={'syz', 0x3}, 0x0, 0x0, r4) r11 = add_key$keyring(&(0x7f0000002c40), &(0x7f0000002c80)={'syz', 0x3}, 0x0, 0x0, r10) r12 = add_key(&(0x7f0000002d40)='id_resolver\x00', &(0x7f0000002d80)={'syz', 0x2}, &(0x7f0000002dc0)="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", 0x1000, r11) keyctl$KEYCTL_MOVE(0x1e, r11, r12, r10, 0x1) (async) socket$inet_udp(0x2, 0x2, 0x0) 46.300267065s ago: executing program 3 (id=2230): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004300), 0x2000, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000063c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 45.32833914s ago: executing program 3 (id=2238): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_usb_connect$cdc_ecm(0x0, 0x7f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x1, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x10, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x400, 0x3, 0x0, 0x1}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0xbcc, 0x80, 0x5, 0x16, 0x86}, @mbim_extended={0x8, 0x24, 0x1c, 0xf5d, 0x80, 0x7}, @dmm={0x7, 0x24, 0x14, 0x2, 0x81}, @ncm={0x6, 0x24, 0x1a, 0x5, 0x13}, @obex={0x5, 0x24, 0x15, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x40, 0x5, 0xc5, 0x5, 0x21}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff}}}}}]}}]}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x80) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x28de, 0x1102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x6, 0x1, 0x3, 0x1, 0x3, 0x1, {0x9, 0x21, 0x2, 0x10, 0x1, {0x22, 0x2fd}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x9, 0xc}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x3, 0x6, 0x3, 0x10}, 0x25, &(0x7f0000000140)={0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x7fffff6, 0xf, 0x0, [0xff00, 0x0, 0xff00c0, 0x3f0f, 0xc00f]}]}, 0x9, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x419}}, {0xc0, &(0x7f0000000240)=@string={0xc0, 0x3, "29b1e124ebd574afbf90fea5ffdcbc15a1beffbfd67a110e4be369850e9e3266e777d2555813a0425e3c5774e7c23ff80ab1856f4bfaf45f7a54fbaf458fa83bb7fd992000fa794dd3a10ba302ae4aecbbab9147d15ed8f9758e988606afc270f26cd278fc42016ceb5c7984604b2009edcf2ad7fc569eea13cd474cde8982e0610939d2e56ecb1d7d5cdfa3f9d7fee0d18ca20d06656c38ef612ca108e1ec254ee0e7469cc6f3adc8e0063fbac0c2f866d86c0aa7e8023eff321ee2f18f"}}, {0x79, &(0x7f0000000300)=@string={0x79, 0x3, "557cf3f24672b70cce41d929a8e78d45977033e5a4676638be6483a87a4a2fa61ef31b6094f9c7dd39bfe9a92149a1cd3640bd319f7fd3af8a0c74227e45d68d37bdb42d9e9fe4d7f09505f68463b5de29308a92146e835e7651467c5980abefefff63fec9416d169b4b07373073fe1aee6895c4ef4f8e"}}, {0x83, &(0x7f0000000380)=@string={0x83, 0x3, "025f0ff3e011baf78eebdb698f6510db835a1ac8eea245ab26f1b3417b28a9f1d1783fc54f2188f0252717515f4224c6f33c843509bc33b49febcdc5a8814b1423564b41105c86803753be810de76f20b0ba6dedf33c832efdf9482d7d1d52c5e96a28d3818717f5811eb044917da1aabc2be4486a47d757f87e03d2710f1fbf46"}}, {0x9d, &(0x7f0000000440)=@string={0x9d, 0x3, "cb252b018d18c9dfa4ec703a0c7f1d54afd9df9469f5f3d6e3967457c42048269ac3e8a91fab8b84e6e9fd77e6f8c503a064967be4300a3c72f7e77c962e1c7a2c67157f7547a461ce52e2c0959db16c06f7da8fafb4ee6e505330053f9212d6be23474bbb18182eaf92a4f753addd83254ad0e4096a11cfdb590c1197253ae0107265bf31cd0f837eb790ec5dc52546d5ba1510af809d92dbe004"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x437}}, {0xa2, &(0x7f0000000540)=@string={0xa2, 0x3, "4157e4bf928f77ff9bca33973c09909d5ffe748bae6b0eda8e1d5d7612dc4242ac6bc1441ed4dbbb8c0a50e5fa8b4e6dc69d8faad8ae548eeeeeb5d1029f04eb302b683f8094fb70a5e05f106a10b6374a4040129c28fd5d44ac48434255f78732bd3029ad151bbab981e1b539f849d9f75261844e7a73df648c20cc563c740deecad5c46800fad127ae93d3b349d6c1b36c710c37dd5f2c948bf74e2d778223"}}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) 43.876363874s ago: executing program 3 (id=2247): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r3 = socket$unix(0x1, 0x5, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendmsg$can_bcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_procfs(r1, &(0x7f0000000000)='loginuid\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 43.865138825s ago: executing program 3 (id=2248): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x40010002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x101, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, 0x0) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0a08000000000100"}, 0x10}}, 0x0) r5 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000ec01000040"]) close_range(r6, 0xffffffffffffffff, 0x0) getpgid(r5) r10 = syz_pidfd_open(r5, 0x0) setns(r10, 0x20000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r11, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000940)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, 0x0}) 43.814696275s ago: executing program 3 (id=2249): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000d40)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x880, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03ffdf"]) 43.772132896s ago: executing program 40 (id=2249): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000d40)) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x880, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03ffdf"]) 38.68245933s ago: executing program 1 (id=2295): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb02163c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x4) socket$inet6(0xa, 0x80002, 0x0) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x189003, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000040), 0x4) ioctl$BLKCLOSEZONE(r2, 0x40101287, &(0x7f0000000040)={0x8000000000000000}) (async) ioctl$BLKCLOSEZONE(r2, 0x40101287, &(0x7f0000000040)={0x8000000000000000}) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c) socket$inet6(0xa, 0x80002, 0x0) (async) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c) ptrace$ARCH_SET_CPUID(0x1e, 0xffffffffffffffff, 0x0, 0x1012) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f00000015c0), 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x9) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x9) sendmmsg$inet6(r1, &(0x7f0000001580)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x2, @mcast2, 0x80}, 0x1c, &(0x7f0000001500)=[{&(0x7f0000000340)="7365d0fc0e91f2b006217907950f0551af03f1df22ee291a5a315fddc2f412b88367ffcb7375bb7d32c51374e6634a9723c177d7f0ff6742acb386c18fbe78", 0x3f}, {&(0x7f0000000380)="cc8cae340e1df38589710335f0ce585bea034668c388437eb218c1ae52e6df04c870adbf77ecbcb7d7c955c81ed0e1bbc7f200847532eafbe3b4932ff870fbccf12b94190ed565a91b588eb8c8ec999f91dee3d7d6c60d4f7334b715a2ec650658444dcafa0653334042d78b116f229342a154459338bd03faf051b8846a35e53207805c7d094ec30774d2cfacf06897ee659dce5d8764fa2446e07b6db9a12c41afebbda03ca24069d63de8ab7f8977b777884812b295b625ccb5b8c9d2d3a3df398e6b4cceafeec4576df41e8c7e027207", 0xd2}, {&(0x7f0000000480)="1d54504855d4b60e5da24462c8077ea8f27d503cc8b12e2937141414ab62f90c9908dac044da8d24fca44fda66114105ce90c33160ea4c8e0341be80df42d6bc86ce21e49d6fd52ad5f5009300117e3870d04f0ec15ec455bc0e53acb8dc55215333bfa47dc90eb496b21a3fae05d9f9d8ce82", 0x73}, {&(0x7f0000000500)="990ea79467511e47f804df3a73d205838b72dcee7f7dfbda1f8ff669a1451bae92646c23384ebddc65f7c4094c6432c0114ea46131fba9e86fafb09432d64362064642e7be8489b8bb302f8b8fac462368f502b6702de66c541627dbb7716cb2f1cf23b7644e04aaa084710faf3d8daff39a0d1d43e6fd237bda1a08d75a7e2d0bec20243cf52957606aceef981ce9dd6f7920d2c74844338ae39a2800dada6918d7aa8fbbd1ee5f3a1e488cd53a42290b25248083e0e547a1bbcde3bd6675348c0c3b34e773748e5f334b605a3d75a23e8b026812ba8e703487c3a848297aac7526d9d8e7dfb6ee3b9893a2302cd1b5707cd9230d1f202e98d2531847338be014a5d85829f12fae6c1ba58b544305db7818937960f3ff525616f864c3e4d53b745acb37d983c4649ea7d3751cb907c901794471eca9fc7d5351b37be115b9fbdee2305f2824fb2d5ea29aab78e769735a77410fd8e919a2c79195d8a6e83afeec558fa1474f11bd421b23774eec288154dd35290fa89ccfa4a6d7a450f11419c062bda160e53b43b7b4981e03c7ab37b275210657447586d46ab991f70cefb8895fe1b7c02ce512901248954d46bb55d6d278d7d16bbcacff76c188f5ab772bd58aaf9c38fa692e5a545184088a1c2dfe5fe0df132001dfda2de23a25b1aa69c0ca0904db1af0f7e451db13f09dfd30bbd2c91d3bafe734972d15e3dff8ddffdfa890ed37b881193b31db2ed88b0e1804114a28328f0271b43bac68bcb52d516a7c5952f94035d50edde519496054aa654a50cbcbd994429d0e782283dd18cb1fbd87981ea586519ea784731f5edfc8af74944a9fd72ad42636701c2195e80381010ba960f63112a7a6cb09abab6cc671c8440e1f4329304d3985c4bd699bbbe6c1016d78cd8401c668b0240882b1266864c3ee9c09cdaaf36748cbf4472ab27ef55ce08be0fd31b703f5493e3d3058ae8b1652e5a7993a29b8ed0006b9f9ac25f989dd25d5155d30708670c6835b6bc5e3a7f282361ee408755d29de87b8271a1f841cd53d77624aa91d7a570e8e1ae3e09dd14d204d7ada7f7adbedcb061607656284ef290e2152dfbaea1d2121e825032913cd1d0023d5081598954ec09b254045329ba61d61a4ff9c06a632586cdd6ce46b0c88b0695cd2852d42c30dc9d13e2237ab82c8d0db30b1a84f55928948f8e195b73ed31e24f2bfcca7aa3ff36e88cdbe3cce8597f0cbc1c4602670611c157a6c9d5f498728a00b8eed80e6e1213c001d91e4a7c7d721afa17ec4339c342b32ed17744ad8537ae49139c27e8f0998c4ec1397362b4d8d13c1b25eba8429c00435c9a483c4c24cdc9c31793c1cae3d2d5da1f665db564d2f3bec2f3b4e8a5a239885c2a5ba030815d661db9c1ccd828407d8be79d599a19360f18abf6a9d3b25db614ac44ccc033b148746c7187ac4985efd3332dd8c2214c722a921dde8803c33f0abd50e981368b096954cf773d49f610e364b5b78278d1e23b17cbffb052059539c86f78f873ac2b7519b1836e771c085fd7f95bb37e576cb3ff3c89c9a5c5ee693b660fef11390a12d547231d9e5184e39580e50ff209857b5c34304b8b0ff4d3f403ad29c347e7a8d78dbdd766774acd33458640db954ef422b4c2b7108ccf7262744d65043337e9790525abcc350929dc5e980d8ed03f0198b2e049de363c43d6b5d61bdaa34569b623c863569642cfbb62b6b8d5587479e40ade5f24b4da1cb26b315db12eda588ea220f8bc89b650ac46c22b32d1d591301048091712011a5686c3de16d88a71b3d3d5ffa1bb1bc5e7c7b50c24c7952b79f76a390177e06966d5c967a231b801b5546d7715d62090508067e1e842e33f20112da1bc722982c1b54d0d5506ca5dbd996de7f22f596cbfed0a1ad0291d1466b7ff9d4b8bee0d3775a153513d341d256fb2dfe1e4b87f5b4093fb8dc31b1c21579765aedb3364f5d2d176598b5e61851e9844aeb4ba66aa1e5396fa2dbb0d2fa5548c2e274fd5d3d912aea3bfb17fc0bfc8a4ea8b44ebff6027588f893881120d94b3b527a8e66bbe9db3fa494ae2f0df9b6d15b20324ad45c2923820b5ac7fc7e5100a107c37582dfcb761c43082e7f61eae510dd314893fed4c57d91b1d9241e4d4178df10b0e317e6074566e0d7a30a9d457e84b747d1b5fa50a320e761a066fe632fe5563f223ec82d5e7ef38ed34db3d1eeb8746b72c3a9c6b50f4abc6adfa1fa0ae224aebf0c0f93f5e609d00ece945e229fe01102b4f6643641f6654576d1045a84405a17cbd4dcc189d8985ee6449233b6f212b1047d2afc367c63af3e7b6a320ef75d034c1da86873c7feba894e15bcfbe981aad554a484bb6762d84cefa4a33ee82c62306c74315a2c4ceb313db98268727df3f8c90f60063b0bc5a896e6ac8f47051ff5f489189ac0dc8452b23054a0b4e6740ce9fcd8fc4a727312b267d1a95f7284a7f85da2fc99d2a2d9f4b9754ddaf8cee7ec85cb0b85337aaad3f2b10703588d6a4e18f8fb28422b7fda11910b7dd69a63f0d40b35806b06a8a881a842c223a53373a585f9bb499d269b68c85ce10d6b8ecc1eb4a51c333cb840ff1f8f849b1e889fbcb35b9734de796b6a966fede91be2c03cb14ef90ad58f60067e3445497e3f9663ecdd5d33a3a571edb516e2bcd6678d21551341770e02765b10394d5f6f477ea0457d51d1a986b0d8cc3c140064826aa1d69c65c81094a41638542805d67baba5102a9640f9b6cc129a3909e7fd03de6f0502a098cbe505f678623bead7082ddce2a2d89206f3a7b5323485fb0f5faed0baca5dd656faac9fe48af011148c7281b1bf159b5cf75c9db378140057be169b3953cf9328ea9bd72e73ab1789f8d12780e308913005f87ca600c7fa5b03f247ab800d481b77ba2c8b207139c075a39469b9658d65bd7a04a1da8c977fce56f5b0dfc0b7c8ef263d6f8bd163ec3704e861bdd49c95269e50dc50d8189af34d1c4d6534bc522cbae34aa620d00001e906a392269d1572d4df8b367c16ff78903983d33ffd9aa109a1d30c5605fb9e94eba049a214c5c2d3651485a4c023180d34b08f3abcb14b81babbf1ead40c74166088df6c7397a5f2c7b618662bb9ccdfe1e6078fdcb7cabb2796da9420b3d2e09ff8dd9bfe7e0f7738ac6a75ecee55322a135f0587d1815dd9c4299189472c07174482c8175fa410699bcd0c9ae66931f63c1822ede84b9cffdb9ca47631c43247f5669fbbc465a41d3fa0f09e0f5308312ebceece3ac6eca50bed05e7ef4f8c0ae16b5c929acea70fcd4007e645a9727b91b32cd89f17244bad004d113e782cf9f249b26391bda89c8a4984a04bd9bcd0f4e7f04f4668195058dfa96682e80b461875a8603b2d3d4cefc77cba33f0d6f53c23fe2d45bdf47d224e5a214a721e15323e1cdd23360ad1fdb419c293c8bc4991bc7cdecd05c1f3f49820c348c3d5c19047c419351cb6172aa8db06b7ccb0c8af81ea4103f8ac71fbfb62e46a4f2fccbe443b338128b8713e78976a8840f336b33954aa00f56b8871facae4346df578a86531af0e815a2a15d829f60bb2cedeb3a94ad9ab03bb48bec3d3e216920e4120d2591ba4b55d3739e483a27a0f33374a95fe6ba0c95b1d807a8ac8a63d30ebd4064ef5c1e17b1ed990e915469d2047d43e42b38c476d8b9abd511b72b72a233ba64f88d0fbb5d8c3c101a5cf5513654cc1ddda4e2c94d70f36610e981c013db3fd7921553fe4bf501fd904697530b6c626bec3d7f659c96d60003c2fd6853fafa1b163eac0c19657afe5daefa168cef5f3f6e5cc4a73795dcf1705f998b01d06665812056c569e44ccb0bab696df2226c4041745ef0001bd4a79db07a1d3545bd51fffb4d7d737a87712615dfb89b39ffe41d5d48bca8b7d957d92081d2c937f564e196cd45a7f0d16baeefd42a2a508e221e2fb8f3c151c00ad356a221356bd201de27e9eca716124ee8caff673f549afaf11e660dcf311cd0536755aaf2c14e5947d7b18020888f567791dd968434ad98e1f771fba3f476b1931414eb465c99d56a1579cb10959a7583885a3ae663c5e9438d36dfa917468383269019d08cbec7da140f34ad37700d47061a14e2ff9a2cbb3e741e5f0ad5606c954f580122223b859927f062709744646e5a15216f2db79507b0e0c6f96a5c024521c9a5a18a75787a275e7fec2e16f63deb668a505f7b59f7a1ebcae7ded3333a3c2dcf898ce254044833cefc93a04acccde960f78590265bda954f98502985dd47b10bcf1bcdb650bde5dc73f9657105ac467be50fc341c1f2ec74f172dd902b1d20332edccfb56ffb1a666bef70664021beac2d8a76120da2b10c66dc30959dcdfc2323984e230399ed11a6ba8388e7768916366698f9473e6a0730252d99be7135110a87b889ca1d14ad018706125e3102c680f147601a513e470cc2d8a6fca93e5ce39967a38ed31a43375f80bb3429d38e79eca571e6b9c10cb4d01c97aae918c223648978d946360be81966b4d67753d555165d644a1000ba0e45a90b9fe10c58ebd42644a4c31e7d030984a8f796581e61bf582a5b4364df73424ef0880dff31ba37f180adf5fde0dce57f29ca8d478a21e5792fc369e4ca950ca773483521d45b029bded257f3faca86bdd88fe3c4a06afe8a1a8af7f58ba96579c51a90be26d24a90e3a8875cc0c1cc8e8909991f42af7f2e3414600b364b137d30e05d56f4697f8a716f8b263b83d80256754669262307b59b7bc042a4fafe93b41aba4fc10b9b483fc69ce65ae8abc41d7de89b959f2c95e832bdde766d0c5a6cc47f767e9882cf6f5a070844695bbba39653d882f7ee8a76199c924b6017b2f800ef1c94dcd3348d3366da498c0b57be75316d5d7fcc4680eac4fa3a8299bc7ad9b1bda06f2a7062ee1530965483d93155dac7602ec517a38b747c25b3968cab491166e4dd29896c398ff09c4f7089451a9ce0fedbe6f32004cc4508b63d421479229e79bc6d6b0257c3cc5551e97105cd6d6690f212a7a39fc32eed652688f2fa4989662ae076f431e967e1b9c06ba7b0711b1e865da49895844234af94ffc8c5275898df81d3228c482ef7c9eb5e4a0ec9ce4e89f9a5d64c04dabe8bbd6ddf9e26522841e0ce0659619cb69e607fa950612624d0ceed0a22a311d7ddb64bff3a9e1bca725ee1f5e35d244a65ed72aa9e832b94091ea4dd120b036f2099e1596182870c2b36119e0006be4905f3a09a6e99f542fb75cc8bbbad7e1a7eb9a5162faa4267d53846109e0f61fbc198bc0abbec883e91b69a9ac41c6c3d692d2ac5da9437ab098678a67695b7a3853441c0d52c9fd0d172ab7015fa9ca57c6c08343e236f1453555fcc764ad83d122cf2288bccf7e38009c1b522588ddaab0af500e6d9b6426528574c66ae3021e6e9cf80895267eb25730ac23796b8db33f8c0e3a5bfa2d54677ee529e83651f2a2ececa560cb18a7e48b1a68c7102c404615ea67f209e195115d8783e3fff95454985fdb362c6cd26cc0b590e5efd462c18358a3a1e98086f71b285917f63d3946c4f458849e0bb499092f655ee836f5dd32e5307e5878513938014683836874722f066afdab8aa03d0d19d5e42aba93799a7bb54ae5af0ee43a58318920856b642c712febb4fe1947b1088ce7c75def82bf5808a226b20c16115e491cc60c58924c0c119b3172f9993fc823318d117cb382c52afe1c17ca405ffded6f03418a0c41a8d659b80ded0a9e64a8160755ac6ce97dbda496d670e007cafca52e", 0x1000}], 0x4, &(0x7f0000001540)=ANY=[@ANYBLOB="380000000000000029000000390000000004017f0000edfffb000000000000000000000000000001fc0100"/56], 0x38}}], 0x1, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x8000}, 0x8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) r7 = userfaultfd(0x801) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x88}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa07, &(0x7f0000001a00)={{&(0x7f0000978000/0x3000)=nil, 0x3000}, 0x1}) syz_open_procfs(r6, &(0x7f0000000080)='net/vlan/vlan1\x00') (async) syz_open_procfs(r6, &(0x7f0000000080)='net/vlan/vlan1\x00') 36.339867019s ago: executing program 1 (id=2305): mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) (async) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='incremental-fs\x00', 0x809002, &(0x7f0000000180)='unconfined_u') 36.24453694s ago: executing program 1 (id=2306): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x3f5c00, 0x0) (async) r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@generic, &(0x7f00000000c0)=0x80, 0x0) listen(r1, 0x4359) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) (async, rerun: 32) r2 = socket$netlink(0x10, 0x3, 0x8000000004) (async, rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) listen(r3, 0x5) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224effffffff", 0x58}], 0x1) (async) ioctl$BLKPG(r0, 0x1269, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x0}) 36.134580132s ago: executing program 1 (id=2307): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/protocols\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000140)={0xa0002006}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x7b7306ca40510a6}) epoll_pwait(r5, &(0x7f0000000000)=[{}, {}], 0x2, 0x200, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000140)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/156, 0x9c, 0x1, 0x33}, @fda={0x66646185, 0x0, 0x2000000, 0x1}}, &(0x7f0000000100)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 35.960379695s ago: executing program 1 (id=2309): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x400000, 0x169) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) (async) r2 = socket(0x22, 0x6, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth0_to_batadv\x00', 0x0}) sendto$packet(r1, &(0x7f0000000480)="330320000c00140000007ef500005f530c0900000000000000f786dd3baa4b1f0f858c4632f47042195e6b", 0x2b, 0x40008c1, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x9, 0x6, @broadcast}, 0x14) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bfe000/0x400000)=nil) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r5, r5, 0x0, 0x4) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000180)={0xea, 0x0, "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"}) (async) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async) r6 = memfd_create(&(0x7f0000000000)='\x00', 0x3) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000400)={0x0, 0xb, 0x1, [0x3, 0x5, 0x4b, 0x4, 0x4], [0xf, 0xffff, 0x4, 0x100000000, 0x5, 0xece1, 0x1, 0x0, 0x585b2e6f, 0x8e1, 0x9, 0x8000, 0x3, 0x6, 0x9, 0xfffffffffffffff8, 0x4, 0x10001, 0x6, 0x101, 0x4, 0x5, 0x9, 0x7, 0xffffffffffff0001, 0x116, 0x4, 0x7d000000000, 0xffff, 0x4, 0x3, 0x6, 0x0, 0x9, 0x7fffffffffffffff, 0x6, 0x52, 0x6, 0x0, 0x8, 0x7fff, 0x3, 0x2, 0xfffffffffffffff9, 0x9, 0x402d8db8, 0x0, 0x319, 0x81, 0x4e1, 0x0, 0x7, 0x9, 0x0, 0x4, 0x3, 0x8, 0x8000000000000000, 0xa1a, 0x1, 0x138, 0x3, 0x9, 0x400, 0x3, 0x466, 0x9, 0x9, 0xfffffffffffffffc, 0x5b, 0x9, 0x4, 0xfffffffffffff800, 0x8, 0x7fffffffffffffff, 0x8, 0x3, 0x7, 0x7, 0x8, 0x4e1, 0x80, 0xfffffffffffffff7, 0xfffffffeffffffff, 0x80000000, 0x400, 0x1, 0x3792, 0x7, 0x328, 0xffffffffffffffc0, 0x7f, 0x8, 0x7, 0x0, 0x7, 0x7b, 0xb34, 0x0, 0x705e, 0x4, 0x7fff, 0xb3, 0x1bf, 0xe939, 0xf4, 0x6d67, 0x8000000000000000, 0x4, 0xffffffffffffff69, 0x6, 0x4, 0x5, 0x0, 0x2, 0x9, 0xfff, 0x1, 0x0, 0x40, 0x73c5c0e]}) ioctl$BTRFS_IOC_RESIZE(r6, 0x50009403, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYBLOB="e9000000", @ANYRESDEC=r7, @ANYBLOB=':max']) (async) openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r8, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f00000034c0)=""/211, 0xd3}, {&(0x7f00000035c0)=""/76, 0x4c}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/127, 0x7f}, {&(0x7f0000000500)=""/66, 0x42}], 0xb}, 0x81}, {{0x0, 0x0, 0x0}, 0x8}], 0x4, 0x2100, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000c00), 0x0, 0x0, 0x0}) 35.776997159s ago: executing program 1 (id=2311): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x204020, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) io_setup(0xe4, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001540)={0x10, 0x10, 0x1, 0x0, 0x25dfdbfe}, 0x10}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) io_setup(0x7, &(0x7f0000000140)) openat$kvm(0xffffffffffffff9c, 0x0, 0xa02, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000600)=""/177, 0xb1}, {&(0x7f0000000100)=""/247, 0xf7}, {&(0x7f0000001a40)=""/260, 0x104}, {&(0x7f0000000880)=""/4091, 0xffb}, {&(0x7f0000000080)=""/52, 0x34}, {&(0x7f0000001940)=""/197, 0xc5}, {&(0x7f0000000380)=""/215, 0xd7}], 0x7}, 0xa}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40012100, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000380)={'syz0\x00', {0x1ff, 0x6, 0x12, 0x6}, 0x4b, [0xdb8, 0x4, 0x4, 0x8, 0x2, 0x40, 0x5, 0x2, 0xb, 0x4, 0x5, 0x2, 0xa6dc, 0x0, 0xfffffff8, 0x6, 0x9, 0x1, 0x2, 0x7, 0x2fe, 0x7ff, 0x8, 0x1ff, 0x739, 0x6, 0x930, 0x4, 0x1a15, 0xfffffc00, 0x200, 0x4, 0x0, 0xb, 0x6, 0xa, 0x81, 0x4, 0x1000, 0x1, 0x9, 0x0, 0xffffffff, 0x2, 0xfffffff7, 0x8, 0x7, 0x1, 0x5a3a8d03, 0x4081, 0x6, 0xdf4, 0x5, 0x10001, 0x9, 0x7, 0x81, 0xb4c, 0x8e, 0x5, 0x8, 0x3, 0xab, 0x2], [0x9, 0x8, 0x791, 0xe0, 0x1, 0xdae9, 0xb8f, 0xfffffff6, 0x9, 0x7fffffff, 0x1, 0x3, 0x6, 0x200008, 0xffffe45d, 0x6, 0x5, 0x20, 0x1, 0x4, 0xce, 0x2, 0x1, 0x0, 0x0, 0x7f, 0x4d5, 0x0, 0x5176145d, 0x3f, 0x0, 0x3, 0x100, 0x82, 0x3, 0x5a, 0x3, 0xf459, 0x2, 0x8, 0x3ce67e22, 0x2, 0x7, 0x2, 0x80, 0x8, 0x7, 0x4, 0xffffffff, 0x5, 0x4, 0xe21, 0x4, 0x8, 0xbe9c, 0x6, 0xa, 0x0, 0x9, 0x1, 0x6, 0x2, 0xfffffffb, 0x1], [0x3, 0x5, 0xfe, 0x10001, 0x2, 0x8, 0x3, 0xfffffffe, 0x48, 0x0, 0x5, 0x4, 0x4a, 0x7, 0x8, 0x5, 0x6, 0x3, 0x5983, 0x9bc5, 0x81, 0x1, 0xfffffffa, 0xfc78, 0x4, 0x8, 0x1, 0x14, 0xa, 0x101, 0x9, 0x7, 0x0, 0x44ccc0de, 0x3, 0x6, 0x6, 0x200, 0xd7, 0x3, 0x1, 0x27f2, 0x9, 0xf02f, 0xffffffff, 0x2, 0x526, 0x8, 0x7fff, 0x400, 0x6, 0xa4, 0x0, 0x2, 0xffffffff, 0xc4e, 0x1, 0x3, 0xfffffffa, 0x2, 0x80, 0x8001, 0x22, 0xff], [0x563bac4e, 0x80000000, 0x1, 0x4, 0xbfe, 0x9, 0x8, 0x0, 0x2a7, 0x1, 0x7, 0x7, 0x7fffffff, 0x137aff, 0x7fff, 0xffffffff, 0xb0a, 0x5, 0x5, 0x6, 0x101, 0x2, 0x400002, 0x100, 0xddc4, 0x6, 0x9, 0x7f, 0x8, 0x101, 0x4, 0xea, 0x3, 0x7, 0x6, 0x2, 0x7f, 0xfffffffd, 0x4, 0x401, 0x401, 0x3, 0x3, 0x3, 0x1, 0xc, 0x1004, 0x9, 0x3d1a, 0x7, 0x7, 0x4, 0x0, 0x2, 0x0, 0xfffffc00, 0x7, 0x1, 0x1, 0x3, 0x40, 0x3, 0xcd5d, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x1b) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0xffffff5e}], 0x1, 0x54, 0x0, 0xfffffffffffffd9c) ioctl$KVM_RUN(r7, 0xae80, 0x0) 35.70439131s ago: executing program 41 (id=2311): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x204020, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) io_setup(0xe4, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001540)={0x10, 0x10, 0x1, 0x0, 0x25dfdbfe}, 0x10}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) io_setup(0x7, &(0x7f0000000140)) openat$kvm(0xffffffffffffff9c, 0x0, 0xa02, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000600)=""/177, 0xb1}, {&(0x7f0000000100)=""/247, 0xf7}, {&(0x7f0000001a40)=""/260, 0x104}, {&(0x7f0000000880)=""/4091, 0xffb}, {&(0x7f0000000080)=""/52, 0x34}, {&(0x7f0000001940)=""/197, 0xc5}, {&(0x7f0000000380)=""/215, 0xd7}], 0x7}, 0xa}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x40012100, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000380)={'syz0\x00', {0x1ff, 0x6, 0x12, 0x6}, 0x4b, [0xdb8, 0x4, 0x4, 0x8, 0x2, 0x40, 0x5, 0x2, 0xb, 0x4, 0x5, 0x2, 0xa6dc, 0x0, 0xfffffff8, 0x6, 0x9, 0x1, 0x2, 0x7, 0x2fe, 0x7ff, 0x8, 0x1ff, 0x739, 0x6, 0x930, 0x4, 0x1a15, 0xfffffc00, 0x200, 0x4, 0x0, 0xb, 0x6, 0xa, 0x81, 0x4, 0x1000, 0x1, 0x9, 0x0, 0xffffffff, 0x2, 0xfffffff7, 0x8, 0x7, 0x1, 0x5a3a8d03, 0x4081, 0x6, 0xdf4, 0x5, 0x10001, 0x9, 0x7, 0x81, 0xb4c, 0x8e, 0x5, 0x8, 0x3, 0xab, 0x2], [0x9, 0x8, 0x791, 0xe0, 0x1, 0xdae9, 0xb8f, 0xfffffff6, 0x9, 0x7fffffff, 0x1, 0x3, 0x6, 0x200008, 0xffffe45d, 0x6, 0x5, 0x20, 0x1, 0x4, 0xce, 0x2, 0x1, 0x0, 0x0, 0x7f, 0x4d5, 0x0, 0x5176145d, 0x3f, 0x0, 0x3, 0x100, 0x82, 0x3, 0x5a, 0x3, 0xf459, 0x2, 0x8, 0x3ce67e22, 0x2, 0x7, 0x2, 0x80, 0x8, 0x7, 0x4, 0xffffffff, 0x5, 0x4, 0xe21, 0x4, 0x8, 0xbe9c, 0x6, 0xa, 0x0, 0x9, 0x1, 0x6, 0x2, 0xfffffffb, 0x1], [0x3, 0x5, 0xfe, 0x10001, 0x2, 0x8, 0x3, 0xfffffffe, 0x48, 0x0, 0x5, 0x4, 0x4a, 0x7, 0x8, 0x5, 0x6, 0x3, 0x5983, 0x9bc5, 0x81, 0x1, 0xfffffffa, 0xfc78, 0x4, 0x8, 0x1, 0x14, 0xa, 0x101, 0x9, 0x7, 0x0, 0x44ccc0de, 0x3, 0x6, 0x6, 0x200, 0xd7, 0x3, 0x1, 0x27f2, 0x9, 0xf02f, 0xffffffff, 0x2, 0x526, 0x8, 0x7fff, 0x400, 0x6, 0xa4, 0x0, 0x2, 0xffffffff, 0xc4e, 0x1, 0x3, 0xfffffffa, 0x2, 0x80, 0x8001, 0x22, 0xff], [0x563bac4e, 0x80000000, 0x1, 0x4, 0xbfe, 0x9, 0x8, 0x0, 0x2a7, 0x1, 0x7, 0x7, 0x7fffffff, 0x137aff, 0x7fff, 0xffffffff, 0xb0a, 0x5, 0x5, 0x6, 0x101, 0x2, 0x400002, 0x100, 0xddc4, 0x6, 0x9, 0x7f, 0x8, 0x101, 0x4, 0xea, 0x3, 0x7, 0x6, 0x2, 0x7f, 0xfffffffd, 0x4, 0x401, 0x401, 0x3, 0x3, 0x3, 0x1, 0xc, 0x1004, 0x9, 0x3d1a, 0x7, 0x7, 0x4, 0x0, 0x2, 0x0, 0xfffffc00, 0x7, 0x1, 0x1, 0x3, 0x40, 0x3, 0xcd5d, 0x3]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$UI_SET_PROPBIT(r4, 0x4004556e, 0x1b) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0xffffff5e}], 0x1, 0x54, 0x0, 0xfffffffffffffd9c) ioctl$KVM_RUN(r7, 0xae80, 0x0) 24.951864207s ago: executing program 8 (id=2417): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@private1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f00000000c0)=0xe8) setuid(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r3 = socket(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x0, 0x0}) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) write(r3, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40afd03000000", 0x41d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, 0x0, &(0x7f0000000080)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000200)={@mcast2, 0xffffffa3, 0x1, 0x2, 0x2, 0x3, 0x96}, 0x20) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f00000000c0)={0x1, 0x0, @pic={0x4e, 0x5, 0x57, 0x5, 0x66, 0x1, 0x0, 0x1, 0xa, 0x41, 0x3, 0x3, 0x2, 0x6, 0x7, 0x3}}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="66baa00066ed3666440738821d00000000263e47f4b9a5030000540f3232bad104b0fb6e3e0f01c53e0f21910f32440f20c0350e000000440f22c067660f32", 0x3f}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) sendto$inet(r10, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendmmsg$inet(r10, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000680)="48ca8b98825ad05ecffa939c1c3f3abe962e289527340a9df3ca6a2d07954526dbc1734e9a6e1e26e4fa634d92009ed008cc3a7e5f36b40685bae810134441fdc3d3a30034038c5ae30a2ecc9ab1e87c3783b1f44bf73bcd89aa1fa45ca62dffe4e3863c445fa43350f4cb136cbfc130c556a37442fad8258458834fc01cbed5a5a48487795104f157aff06b58b8d3", 0x8f}, {&(0x7f0000000740)="97d17744aa9566d244b4a6a7bac3043aad7ead0625c7a01517485ca1171e2d8b21659736b5247ad8288fdd48f9bc2cdf7ab29c70255fbab7766e6e0d0d3fa89bad35b4aed5a0965fe952f739534fd4b4af3050df9aa7d23396b9d8f3b227083db9ab8c639c9ee9792923dcfe9d05a323c7984d2e7a6fa33748b6729b3ff9b59edf8f98e8ae7521b231410b752a4b3bdc57b6dc866405f0ca", 0x98}, {&(0x7f0000000280)="d0dc81873ef03a796b2a22ba029070ad1380604c9fc692ef42cff0e4d191a9", 0x1f}, {&(0x7f0000000540)="6d2657493131db30447fce55af67ac7d10106db6d5cacd06cd9a77b801ded29e208feef1fc2a5b2369", 0x29}], 0x4}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)="722abe089bad444a712571d5db482a97046f64a6e9f378fbfeeec001e410", 0x1e}, {&(0x7f00000008c0)="3c79412e1982c663c230408536db37b8bc008e6bbfec6aa93cba6c477c38e440c1dbcb4e80155f3f9388ec70f454827e62a7a249feff2092ade32b7f3da4bfd132b4ef59b4d4157c24b464dfbd6383b01950d650241163d5fc6b6e90b1d440a017dc84cfec4161d7c33c21eae64d70", 0x6f}, {&(0x7f0000001a40)="f6ebd69cb61b04dbd8e4dc5f132da95cea069c4cf1c50489523f8e2bfaf472441fc9ebaebd435dc0be7c9fa1dae115b46dfffa947c43edc40e0b95cc166de9fde1ec361ce6d6a73600b2d484b8457469b28fb04cb38d8a13e483efc4f4102fe6accce43ef76ae1bf1f34d051501c250a10a879323c67e9e14be35a0ff24a9c56a06c2489f5068b43198feed152c7749f5368a07f20c68ed5192c6c90d48e69046294b1b97c873d09691413243175e8e0091e5b5d8f09f771e2b5ea45f1806a77788434c435e029e8d6c3eb8dd5ce365c52794fdeba397f17c239169772f93af2a9044137b11b0e2e8e03996120b5bd749ee87140dd44a0a2b7472470809acd7a635e842a104ce4ef522cf1c29a602ab806adc85d00bc0bce12d80aad3c94b4e84d25800876137f071ac2eca2ab5b41110bb1b92d7ead272e52679b26359424687374065f02a29a37f53fe6c611953c3fac4898b32df7435e0bca7fdb5153bd2c6b90614e6d437c7b0f0fdf132d6cf57a7225d52116fe404d4b7dceb4a332e623cfa298623cf64728dc66104bc16c799341c5182da780e898bcf71a3561d8f3c60b4077fbb83fdffe581e5f4dfa6497c1a6a7b3f616e22322189ea75aa4960109e0ea55d2eec2646f7339d35d70b0890624bdcea5e9a6b50530005beffd3a74204fcb754ecc7b3b6328b0f586d4ec3a680c2ccba4fae25c93646a3a511d214429338a531b7c97b0e71fef2b65325b651bfb79bec3bd983955e3a6ae6f25420373b705cd5a0ae4e88b0cb798dcdff1840e9c223afd2c2b775ec47d469dbcfc3291351d158f29e91bb8e026a83c3e1119f354b4d6de223fc3841d43b0fcb5ec44322b83e54fce32d21b42e82a9309fbb0a83307dd531372cdcebb9e3ada079fb014445dd3926473befecaea1fa995b8e65422c93715a52aba5634713227b9ab695b7f77e2ff044fb7e94b917cd37ad642a555bb8d2b884252c48147e3545d2a4b448e8be5aa61f7a14257e9f0f777c9a012b15a1c9139d8a4af53cd48c5a70c0729734947c3ac75eacf941fd1aeb771d9c789f04a95155b5154909441ca153df09dfcbde5472c37ebc5a8788e6cc606014e478fe7e2257309929c09351de59cd3de9f2f3ef3a4e7801019cf34833d5c9f55ed06e388948afbaac5224f0bd51ae32d13de5aec183b5906615ede66537a70d07aa75df2d3ca8cd2ff049728d60b8c7d52d8dee72b062e16b00e064a5de0a44ae0f3e0e50cda01e5f44d966727bde3fdcdb40f53669379e790a841e63549b1bcc6fe8b523f8ca110666611543dba205ac9282839b83f62af961b3743bcf5eb16a4182b10f647aec2b4ca6dce273803ad36b70afa6f04be62d3605b11c053a4bd6963adfca9a145edc0259d93295eed70b44abc59878101801563190a3121a049ef8b77ef44950ea7c6af543387aa37e40800eb03d5f45aaa73f0e23b2eacff9744afb4fb2a4f5a04644fd23302c80fe1389d61d6a589e27ccc7067a5ce6fa2f79b6ed5279a59ecb11074bf31beb27dee216255b003cfed235abba923f70f82f059de8254ce74cfbe709cb0fc8898a3a45acdc2d98a83b1abc22b69c9843c2787f6109c9c7f655c12bd5e7e2b8d60535c50ad4eebcaf4650d9c8d297658abcc802008b13c7edef23e65d645fde267dae6d9db8db53c5b4481370ea24f6657ae740ea0074b787cc47ff24617ed30012816998967f942c963f0abde5d76c9d7e036b4130a1e6c3dd27a010e3b62b17167e91b3df5126f679f0fd7dfce334b10b20f3aeb60628342d735f2488bd2b69b7c20c0d18b7b3efb7e59384383ce09c9508da0952c744627b8dcf15644406579f18d23295a15f3cc92b2ee54474afda3dac13c552f9bae4938354a15360eb2d5991541e332819d852881d0e22376a3977a06df6bf86a0c54237eb89b85be61e8ac7fad3f26ae8cba397736fe0977028ae6eb3342b0e74d93164eb5f7494f66571ac6b734034083007575e1f1e2bc882cb641623336e275c59e2a30ec98ff913cd9df5e7af4c977d8e5549c443d99785337548d36cd617fc82e4386ce36795bf3d4004ded873252a692758ef89175cdd54b08097a6f73d443ae583e42458534acd5aeebc46771b1e624632242f570ab622d2ee8a68f359e11780676e8340ced6c6b7b38632518a1e6f16e502a8c47c8a1b12038ebe181c3edbe3223a611aa060c768744aa8f9c78048a8c3c4d6805930a375af1d02503b639b952d78be871a8ea148f0cf8afb71cafca4d99631f672f531e88a1b8d27716ab2cef302416aa21da7c8206cb6fcd5e66fe966f9ad7b46b617ff02f613b51fee7bf9ec709310b3f126c1f88951855713010e2be1c9d17bf094fb6358c5c9e9970b186eaa123a06f051ad7a4b7e339b163e9f9e5d9108f0e142c33bee0cfc33e469755f14c40c6311bf79221501057e43074f06ff098bab5827acb10e9890697aeb94fd30d241ed521319bb65865396739514be568b99e30002cf5b69c01e550a4258a396840d8d786490609755bcb90e293b01418389a649be1791b3fae9d946666e3b46817bc49f1b84ba99fe5244a26de6a11811cda82e7432b9b4fc8fcd94b7f8b9b78af1a76fbf45297e7e2956b56489132a6be34825af94e7b6c5a33f9f4e5bd962436d603ab73df5a2c33117295046532b3f3207371681c17333fb5f51742f0edb4da3c2d5cefa31a8a772e1d9099adf30e532eaf1ad3a874b830c79fa9665af7f42b50ed581f9099670ef923c2f182690d17c638e90bfa439d21ef8ed5e1a1946b977278bb93da72e58f5c7e78bece53fac3435017072bd4d2385debfb7f29e8b83fff12d0493200142a0c070c239b41b6caac4a8c6294cfec3adbfe056481387e674bda09e08a70ab6678be35f8c1ce7701b82b0edad73dd7d6da94be26197f4b92948e389c2e67a272004427dbf4db45dde59195f9c1c51913b968f97e1cad5707508757952eef02c07ae3feaea1cd90e85b7da429dcf9271c81a6e45cbe7966b3aca0edd532b1a084fc19ea6235e7226cff78b4ccabcb3caef6fe31c7280b435efa2deaf9acc6a7cfb8ba7fa47f3d56b96e4765b6e074408e2d67d6e37139db80fb19c3a9e0a0236f4d776af7ffbe175c5aa30ce0c0496cdf25a54fb122a77fb738a1b56b12c5b26b80568d6c513c6c1f02d3f8acc33cae368d433d1685d785060355bc3690c0ec28a98dfbde3d4686d0fe0861867ebf5cb2c37db8930e3c645739b16564074cb326ec3ee8ff4a5b480e755f063c9e6b3f6ea4bf558ae90e0f3d32d422a0fc284d2fbb0b08af9609180647160803ad18f0a90aaffe76af020063b306c330b0192b527bf3b945648467f53751b44d4ccbf1e8111e0888e80a0e68bfe2c6ab325254f2ad633a9471d7b20117488167f172603e19627fcd179effdeb5f030ff764bb160f91ddc9cd8aa281ee0e2701594fb8fa3a803390b3ff7ed7130693bb74ec856d5fa83b0671518f71002561312244cfb5668415c278d24f5ee5f0617eb3aed7c7d52baa9b5e3d69b9f2baa09d1834505686198987d5a0517a94d5fc39bc64db3dd531eddea09942bb4b51d2964ab48f0b4c753f356d53271d6bd5727f220e6cd56d6866e3bfc1b542b9022bc5fa8a46ea2b4c1208994b5f2ba8631f2e1af84fa9bec1c7d23dee4d2528e49db4e75ce60ab1ab78a31974e49171818603b03c242fdb016d399b865ccacad3f6957009c54065181583a7de2ebb2cf41323ebdf73169a64617ca56600bc693cebc9de80a292f866c8a5314bc69468f50e4b0ce94e46083403e74a95d7be4704ae9f2c58f5f6bc8f29cf94930b179a538779f0596bc0987a6b1dbd8cfdf49eed49317b175e4d87cdedf6fe17ccca3b0ef2c45c3c5d1f76f52a4920eb091f46614d2c2b7779b737c8381d2c0273496cd15a3b6982a15bd22e03c17bbb1bf85f0b215a40f07dbe0452a024f23e51427cd79c60905ceb73e2b314af315ed8ecb7ac937e83b8cc6f2fc253790e27bd38dcd458dce255a10eef8412e71c500d4f58e7eddb61d5dba88df2a3303fb64ead5a84a806b0e62f60a391595c8781d1e481f7a9edffa6075067a69aae1d51dbd055d12a470a3b3c240453980a295c5f16111d67ed0aafc66d629fcd101d8659d3e9ab66fb9c53639e53a8f1b205d2cc2b15d985491c8be3dee1081b7ed76a9c12fea337b9a0cf0e1da5f8137007db125e9ca5a85c46bf67ecd288f2f9ae5e6389f2bb47fc6690568923cb6735147947ee4eb32561db82303ea5aef20bc300d8e47e49614490e68d79490591f5a7ce94615783e2b38b127cebec15beb7c0fa922efef2c6a646c66ddd564f59218681bf5177de08beb56002520808758d8180adbeed291b572d5b80a18ada5da1b667d1bff37d71611142ac2718791bf8876dda922545119a403d13a0da7bd153c9826189ff3d2af2bb4ff16be5e2d6c6bfae9f4dba0476cbec6c8b74b8ce8a4a6fd29494d2819724c151155770265c314588880779204b82e54a59853f3a71fb0e5abb82c887604e48826e2539cc5c1b36fa743dbc9bdd458540abbee05e31a6f5343566f6f538a7c3660f7335bb7bcb4e36963f52bfd9843bc9d602514405985faf1adcb6ee85268d09234effec60a870db1da0e34d0e224b19c84862b9863ca19acf1fe92ce89d9d86ed4a0862d52698b2e62ec4df0dd30ce6e3155647336c44ceef310c482431bda513e59b44465749434bfa606a9264eb028f8957225196788aafe4103a5546cea702b869b2f789b439b13e814db8eaf3b29e8e552c4a87b3936629ad46af529abdfb27f38a90c3922ac4de619b9dcb4fa6c3d41f0a820815889b56fa5d72fa84b8cbab370c4798722d0b61692b5e898a725004eb930d789142d7e0ef570bad58b0f2d777d26aa1a14cf80617608e112467f311b69328e39d18df06356689cceb8c9103658b0c5ef8d1048b38213c42e2ff9a13c6cdc5a527ad5ca75cca9cd433f22738921e54131eb982f4782dda1189f09776f7e1ae767b4d06237a78862aae3ef8b9407e285da74dbdbdc320e6895caba483322be2ecf1ab0172d46d2b449264d3b5ae4940d1cab848e1ec54448ad2142e37a102795ad081318abd95dc7de72b412528493e14a7517f1e3d817ee63d5c104bcdfbb89f48489b08b263f1340d709e7a9403e40b8245b2551c63fcf618f88b51675cbc1745418c4cbc6a4a533b41f8cbdc94981398b347888005a4a046055a468594be0e0043ed0eeeea9c7fcc26a9687df78b84d66be4fd25f0f14bea7c61dd534936343412d6f7334253396125d3e8f", 0xeb3}, {&(0x7f0000002a40)="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", 0x605}], 0x4, &(0x7f00000009c0)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x4000040) 24.845346319s ago: executing program 8 (id=2418): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff0600000005000000450000002500000019000d000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f00000002c0)=[@decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0}) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000300)={0x1, 0x1000, "a12246e6e328cf1a1d41b4044709c2ec61f1ad87dca998929bc1d483f67ad590e8a130b536a57bb0a38e1308af3c73dd07fc601fa82c8bc79501eae89a572147472e4f7ec3a3c04df25a79073e2074c26d3b13ddec6deff2baf6c08728971cd04018c4bcd08500f2f9053620a40984af7e1993ce81d4a73d9572a94bffecc7e57d9065a867c22e5123e29c88af61a6205b084c1adc62c521f5b98f4227066c3dec53b54067695caa722a37792be40869788807da4717058881511894f2ccade330d406ad4cb593edc2556384860716a79f707d2fd1c15b1e4a9f5d4a6021115615f244dca6ed8d634e58352e2a7da057c4c0e0c61259ad97dc4ca757610fd6cc6be0eab3d89afe9447712abcecaf1aec28d7f126a413f458b43d229b4fa98835a85e98e7f1407f996a3bf7db367bf50109eb4e2debcf758fa2b0731cba6454e358b7406f86d17844941874cfb24911528b91a72b0655dac67a206ac20263107ce2af90ec3961dcb1c98e8f83427d86ab3f23ddab37419344009f0616fad094312bee0d8cc075f2b509eb34e89a0e646de70aaf0a4030c33357ae9028cf0356243958cee06bfa6d349ff423f4ac98688f1dd394699ceb1527436315d0d3192617dbe8c20a67640075f6d590d769a80e2aa595b6207cb43d37061ee3c6f2601cbaad4da46903d79a0a9b4f537c2baf2286759f40054da0033dbeda8cb07b92199b5a99072d12ac99d8c44511b2798ed29cff5609009f20e6044943033e8e112df4e394ef8e81461eb5736735f2b262b9d790886df8c3caad9361e1ec664cab7332a91f1fd58ae391c9dd83e55e45f423ca458bf1f5a8d36c1e49f2467146bf9bb274d2778b54d570f7082f25b2cbc54f716e8f376c96d2f377729e1286fe180e6f4c6fd91350b2f236d313a7b5526dae9b2e8c0eb5b84b3d87b6f4d3cf3fbc55ab9b368872ae007db58dd1b6ce4943c6c45f4d35ba4d5bec272a607b4c8cc969a8a7e19064ee9cde0e2c7a84bad958c8a4306eb644de0fa195e7a02190c4318e8bbb0b3e1ee2ab05601aa3a69327988078c2f96881ccc9f98fc42b927a8398ec0fda2bdfa86ea94b7567f653b79583fb922362744f4517341a2adcd9037e27720271050455b5320ea85aadc78945a5b8cc6460c4c150dc646954d1b29514c3b8cecad46413e6502dfcec971016e4ec0238f389e5312e387a6e1685da466e1bc18faa2f3fc98fa768b48f74af322160acc48a66f81b9e492e24352acb745b53fbf8cf067729ac166b5eb269794902f31a175a9a9dc4e2c54294e6462f6219a75006536efb9487318fd19f2ac38619500ee13c43628ec789c7f8d6f893b93259c0a873f0396e1c290cb6b6bae3beca1275a8cc848cc7a681e1deae32907e8b6d89f4933efb76bad1c4ab811c88bb9e289e75966b157e4ea6de5d0faacc76977ebdbad091d9d37b3afd9884e8203f13eb2709e26f947b9484d08ed87cc627d1bb9ad77ae66cdcb3458d2af0bab343ac8d52179727258109f36a14c63d73bae9625f651a09cac899ebe700b9a74ddd44374a2d6e0bdab1b4ea8decd678488ba8fd885cd2fab7f7ddc8103fb4273754d540b8c0e6b42fdeea76abb1f792b23d434f548f597af57a62bdfea28c6a1c7dd6152a8b803dff3af35aa9cd3f9ed0c5f47526c3377a7027a7748f1f17cca574563c7195924464a468f44fd9c4e69c0a46b40383b3b4cfb7643880cf28fbaa5e7e81cb2f38aa5cd0410fa17e54c940e1d6d881c117a597dd7a99b8b4f256e7e3eb3909b780a1f3b3c2f8597b9f55ebc778f4d43aab1eddc47ecc5b6c2ec57915b95d431c07064c272f676128f8ff35ac097c94ceeb73d382187293fc085c37a07f9a60ca45312b4aeb55db75cb114b77743a190d22d646082c0f5485b86dd19b526ada225e828a9691927aab2c4b22d076314624594db3485b005ff4e2292fdd0ea48facbe4649fd0f12e33a1b8e2bb67b474329c6ea09e511f81e065ebf1cf7e2fc1bb9ef1d3b4557c62652733e0031408ee3f560e551e68a205696644fb5b5b2f7ad194d1dac9f5f22e2a5a4f213139018cc1bc4d10ef34bd0a8de4d7319bd6bf2788deaacd06d00935db6f9f36f06b279799b35afd309e6ac6d53e8ce1342d5f0f0dc5bb46a7aa3bd2e9efa21b8018a3c3f5c267b367be551caf8a663db041886d6117d0eada54d45c53264c27eab6f7a06b60c417568513b1e18e2dbbd00bf7e256053783b7a04f951412f99dac20e088ef40841a7e51cb0005c9153cdeaa013b0af78385494ae0b6c632f85e3681a1024abb3385605d08f2bfe944d8b36bc9e3a2893edc948cc2b8e3771a9500099a87b0a932b22fd439d3dd4f5cfd1d744cd5edb51eb6b13d87b0ce544d279055a416136c3bae6d4303ec7e0fac11c45688bbc51003a9705d0180d2c0eacda5eb23a54801405158a67706196cddc47e85448d8b2d0f4b0f869f782a071ffb05c0cbf81d107df27322bfe35e9211670461cdd05fad835eac764907aadf2b99407b8fbb42856ccdc11ee32dc456b9f960f3efbd2d1a18a209e6f342a8edf426d22b91b0a8ac54dc512ddce15ed2d0f20fd2d3aa93f616911b678f2ba73e222bc94d9413f3c06ea55b613bcad4398177cc6fb17c00e95fcf469de752ba0b17d1b45de744d5cce56fcd2610a779b29a99a9dc55d2c2cb2005f856d32b724fec9f994b3506d269c6770e1ba60289794a84acf9bf973c13bbe750e521e1208e6404746125ddb81b197f498232c00c553156ecc6f3564c0b84d517767abeaf32b1d929276aeb0169fb383f2062f0df0553e8ae80242e713c65e02259c4baa7d25f893c33098729e9cdad9c2f088fde15f8df79359287971ef43247ef95251a8272147b1d5ffd265df2a1c75e8ba26dffca76e46ff65150246036b3c34d1d881387eb326270a1796a3af7e6b6f17137801f800d81431a9f43696bac5a53a840ee09d16d377a7d6dfee3573f863e646a341f5659284c91e9bf17064f873415ba865511906023b74e68acc78d9bba86ed1048d8134ccb586cb6a7bfb4a18263cdb5da7550a18cc14396d2769b0c18c4b9affbcc9b912d8b1c09ed7e274da0ca157306e6a58d829ee7c02e3a492be537ba35cb42ae759c20d54b9052ca2a38f8f304a377d88dc94e018f80f53210692aa7f41b7534e31b1d7440369fb501d94677e9aa63f23917e4d7a3ee95b45c2d91f9f4cf6d0d7908f73c48a08edb13dfd6d41b3d99351d5ba5f3c2bd51855bdc1324c6a4466b03d9251d2a0762fed8df5e7358cd705218153e52a075b8dd2ac9568a55e7f67086f00bce78b54a7e763f1b78478b2550d989602b0d35ec8e6c4da24a62551e332b07ca1af15d9fcd788de93385dd5fc1d8d39f27567ce81532a5087c648fb605701d40d1571aa6ae70ee6364d1472af3a4fd73f4b182f8ed9192d136aea7ea58345c10b75a37fdee1a37cff2dbdbc50a2fa5214b7aaf38df5318850396fac35667099378479f74d8207e9f42d2077f9095ca71edbaab6d88eac1a2ab9dae5d443e509c092185895c154beb6a8493b4b079e9ed773ab744ab6b0462bfb27e476da1d043f8838b4f8ae63d5e105e0933de2356c10255c7ea111de3ec2c15721a50387397a178a7d4c7f01a8b55e69fcd6dd5eeda8f1862369351d9be63d7316bf08646866ac880981291e57128d9ef14297a0e19e59c16416986f60d217127045ae351207f2f4f8ddc23815834bc76d02b93283e281d9314ee492afbd90e0cb1cfc83a33b3878d30ab52403d1c045fc228862186bb0c5ef16d9ff215e3845144bc46cf8cc76e1d3f533139e3cf40801511c2a1ba1faaa167741c8e91f4022224ed56c18ee06270fec01378d31b58a88b237a1e57fc250f1d1092a75bbf9baa2abc6bee2738957a601f0b4e9f688602fefec0ff9422eba8109564d9f58b66512f45edf4f5e754b8ee925c3529e5c6a923c4f030b81426cdc46b601df783eb90b7b97a443c1ca2a892045a06e6e0df8d4aa829767517327dd9f5312ab27f615bd4a088f3531ac5a827387ca841a80e3b23a5186b1e2a496e34e43033df75f846ec9d32614a52962af165495dda285f0a5c21a69944f33c70c4e9a836a61ee8f2e1d3f4b845682f8091edcda79e44967e6ed9d4f69ce429405a5b74b8ca93040ac0491881f00f6056cd679cab7a6d7ea9b21e45a6fa99fd4aab9b90e38446145ec330298cccab6d3a7ee001f5c227c161f3fdc0e5f8d55d4a9631751bf5379b1ebe0b40caefbf16cbad9dfef61c3cf6b6addfb9efd2e8cb8e57f1a1ec853e10606b234ae1a6fe6ad9863acd24ccd1573b5b5efb0f4070969d9841aae138b0d089ff8ade83b8ffa39b95e4da0f60c99b5b314d83ec31f6b810317cd5fcb2748f2cd178f8b58fa6acbbc9ff312c954703161c4e9a666a9dd20a53924cdf68041645a8d5756c63a1b588e92b219e543d7f2c151ff40373902a703c0f492589ff9a796a84953e3acd9b0148c4f4338c9cbea660b7c2df375dca6613f3c77c0b7586027ef5105b616564c152ec40e5e1947228343a5732778c25b1c0546da9dceb8472f4957f662619d98b16cf2cf92830bcf48a566857b4ea3e8218b81afddec0248321bc3804a970628df5f871a237f9875d47342cd775fc0e08393d8004e9909e3b62e49f46a73105fae1993b85abc5be25822dd4f50141afd24d92b95f28def38c28a22079efa2e1955dabba7dfc91696bbd79a9267fddfeb0bc289c35befc73c617ad3bab24c761282f4cbb656538878e2ba2689ce87b4ebd513ec936a7fb98325bfa33904dcf46b09cafc766b52ead4a1a99163d709a6f79f4494929123fde36d58f6420101648bc8496162006697ce511940b1a457d4b74f689efb6b2fde88346e9ab25f9fcf5f1ae809c091409b0b9a787502e85bac3a9b59310106bd9db6eb576aba1950db7271709a247d23bf5e0949b2eb469628aae74cf05c3180133aec88f0eadbfd46ac07fd65fb942754e935cf6b2c4f8d2c0bce96aa13c353c0447a65fc61cd6e652cb7fd5e90a72584a4049b89b89d0a48ba196827cbfcbc0147165abba91a06e7c1ec25f987b76ea30f789f998195f4ced87c6c2b7bfb597a02766fe3488d586a9ac4eab2eb862a5b31195c18d1e93e055c919c129309375a8e2a166840f9b5344d4f81e6396080f36e39147097400d46cdef24791002795b8acd4e91ccf2d1435f56ece58a9e2bd8b0f84697b9616d8267a296a92d8a495964e5e1a599ab0f239056437a684fdb603f4d1d14015b3cc075983eb60041d3a4f598f2ce3c3c03b33acd4e721645ddb05f08eb97a1f31bf8df336603f3c377ca5606529d96981f473d37378f2925fc6a7a4668b5e45fb8a3a8eb437426b2ed877bd887d52143a5d9413a92a5092d0b75438820d923da90c98131fdd7fb5e5f6db3ed5b92eb193ba2f9270b38b94f088b4aec7ce036f7bdef094c6dd5d774bab7d52b3b20e4199c1dae3703874efb94cf4e76b83c5ba74d39ee2e9deb00858f0e116063508245f99eb37525546d50651ab2b00866b95513b259277b17d8c650b8b6f95b1c0f926f279ba7abcb59d9190f166167e1f9cad2bd4e22e0b0417965683a2bcb004906d87f055b6e4cff8112c13b1f0c6b732060faf8a443d7e5e8095f86fff15719de50a8c94095b422522ba7459e2955a645e3fb537f61e0043a42c01eb7fe2d98a358a6c02895c9045a5a451c6f470442ed6cd797a5d632fa5804859fe8e11b14842f17bd90f50406664df922f34e8abe7cefe0"}) 24.835402829s ago: executing program 8 (id=2419): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0xffffffff}}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'macvlan0\x00'}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r1, 0x20, 0x70bd2c, 0x25dfdbfd}, 0x14}}, 0x840) read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) getdents(r0, &(0x7f00000003c0)=""/4096, 0x1000) 24.79067363s ago: executing program 8 (id=2420): r0 = fsopen(&(0x7f0000000480)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='/dev/udmabuf\x00', &(0x7f0000000100)='ext2\x00', 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) socket$unix(0x1, 0x2, 0x0) personality(0x5400004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x99b33000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x4, r2, &(0x7f0000001040), 0x282d) fsopen(&(0x7f0000000480)='debugfs\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='/dev/udmabuf\x00', &(0x7f0000000100)='ext2\x00', 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) personality(0x5400004) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x99b33000) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x10, r2) (async) ptrace$poke(0x4, r2, &(0x7f0000001040), 0x282d) (async) 24.668583872s ago: executing program 8 (id=2421): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/reserved_size', 0x80802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB='\v\x00'], 0x1c7) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000100)={0x33, 0x6, 0x0, {0x4, 0x6, 0xa, 0x0, '/dev/fuse\x00'}}, 0x33) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000440)=[@acquire_done={0x40106309, 0x0, 0xfc}], 0x0, 0x0, 0x0}) 24.668169992s ago: executing program 8 (id=2422): syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a2e5ed20c40704a0e3b40102030109022400010000100009048a00"], 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000000)) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) r4 = syz_open_dev$usbmon(&(0x7f0000001480), 0x32, 0x0) preadv(r4, &(0x7f0000002800)=[{&(0x7f00000014c0)=""/148, 0x94}], 0x1, 0x0, 0x5) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10010, r6, 0x91080000) pread64(r5, 0x0, 0x0, 0x5) 16.008757015s ago: executing program 0 (id=2469): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = timerfd_create(0x0, 0x0) fsync(r1) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0x10, 0x114, 0x4}], 0x10}, 0xc4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) (async) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) (async) flock(r2, 0x3) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000840)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x14}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}, @flat=@weak_binder={0x77622a85, 0x110a, 0x2}}, 0x0}, 0x400}], 0x50, 0x0, &(0x7f0000000300)="ae3f238d87e4ee9205d0842b529db2744ccf6892f6f65ebc4671b63de4ba15bd1a1533502e2a569d6aea8936ab051cf9bfc0d34c0581506339d94a60289c526d8168e83c2efd49c75aa9d82de77714ff"}) 15.964868426s ago: executing program 0 (id=2471): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) personality(0x5400004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x99b33000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r1 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0) ioctl$BTRFS_IOC_DEFRAG(r1, 0x4c00, 0x3) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x4, r2, &(0x7f0000001040), 0x282d) 15.825443788s ago: executing program 0 (id=2474): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x202, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x2) (async) r1 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000580), 0x80003, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, 0x0) (async) r2 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0x200, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=ANY=[@ANYBLOB="88010000100013070000000000000000fe880000000000000000000000000001fc02000000000000000000000000000100000000000000000000008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa00000000330000002011000000000000000000000000000200000000000000000100000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000800000200000027bd70000235000002"], 0x188}}, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 15.605507762s ago: executing program 0 (id=2476): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='veth0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) fchmodat(r1, &(0x7f0000000080)='./file0\x00', 0x88) move_mount(r1, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x100) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000009c0)={0x4c, 0x0, &(0x7f0000001380)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000001300)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='veth0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) fchmodat(r1, &(0x7f0000000080)='./file0\x00', 0x88) (async) move_mount(r1, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x100) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000009c0)={0x4c, 0x0, &(0x7f0000001380)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000001300)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) (async) 15.512472164s ago: executing program 0 (id=2477): write$binfmt_misc(0xffffffffffffffff, &(0x7f00000003c0)="6bdb0727dad994c993c00d77b5fd1b80c5dd500767cec9dc42b36ee488cf43229229b361fdad00241549ae4a6e0f825208e1cbff83e3068b3860b7ac09900d11b58ea52d903aa9293f61294057de4b30cc0138380795fdc12f89638d8fc078f4ace5e1ce007d53d5fb703494e7ac5a110c409614f0f31742e85d799aa7a6b9394924dfe04db4f3f240ca3f7c6d542336ed4f149e441799a4e8809d78bf063252d0b971f4d3874482583c702f2497b02f2237c0cf90b346f125c93550849f98e20fd810923c5e4805a59ad58d6611ddc2", 0xd0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r0) r1 = fsopen(&(0x7f0000000540)='msdos\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x12, r1, 0xf1a48000) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) 15.479475364s ago: executing program 0 (id=2480): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r4, &(0x7f0000000800)=[{&(0x7f0000000280)='2', 0x1}], 0x1) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) sendfile(r2, r5, 0x0, 0x2af) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) fcntl$addseals(r3, 0x409, 0x2) socket$nl_route(0x10, 0x3, 0x0) 15.402262095s ago: executing program 42 (id=2480): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, 0x0, 0x0, 0x1, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r4, &(0x7f0000000800)=[{&(0x7f0000000280)='2', 0x1}], 0x1) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) sendfile(r2, r5, 0x0, 0x2af) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) fcntl$addseals(r3, 0x409, 0x2) socket$nl_route(0x10, 0x3, 0x0) 8.593709608s ago: executing program 43 (id=2422): syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a2e5ed20c40704a0e3b40102030109022400010000100009048a00"], 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000000)) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) r4 = syz_open_dev$usbmon(&(0x7f0000001480), 0x32, 0x0) preadv(r4, &(0x7f0000002800)=[{&(0x7f00000014c0)=""/148, 0x94}], 0x1, 0x0, 0x5) r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10010, r6, 0x91080000) pread64(r5, 0x0, 0x0, 0x5) 2.508693859s ago: executing program 6 (id=2616): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13, 0xc13, 0x10, 0x1}}) 2.508485279s ago: executing program 6 (id=2617): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000340)=0x7) 2.263069393s ago: executing program 6 (id=2622): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x2}) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) 2.068429456s ago: executing program 2 (id=2624): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd08074af65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9009402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="b000000000000000f9ffffffffffffff0200000000000000030000000000000001000000000000000100000000000000000000000f00000003000000000000000400000000000000ffffff7f0000000097000000000000000f00000000000000060000000000000078000000400000000100000000600000ff010000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="80000000f7ffffff0000ff070000721c2d746d6f64a840487076e872a3"], 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) 2.064024106s ago: executing program 6 (id=2626): r0 = socket(0x22, 0x7, 0x9) recvfrom$unix(r0, &(0x7f0000000000)=""/121, 0x79, 0x40000120, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e23}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x80000) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x60000726) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1.896574909s ago: executing program 7 (id=2629): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/oops_count', 0x8a883, 0x2) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$BLKRRPART(r0, 0x125f, 0x0) 1.839901279s ago: executing program 2 (id=2630): unshare(0x28000600) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) pread64(r0, &(0x7f00000001c0)=""/200, 0xc8, 0x2) preadv(r0, &(0x7f0000002500)=[{&(0x7f0000000300)=""/173, 0xad}], 0x1, 0xdf, 0xff1) 1.597264224s ago: executing program 6 (id=2633): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async) chdir(&(0x7f0000000000)='./file0\x00') (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000380)=[@exit_looper, @enter_looper], 0xcf, 0x0, &(0x7f0000000400)="8b0b4c404981a6ef39f577efb9c2c64f47b576cec3dab5adbd25d802c31aa20f47283d909cfc1520a8ebb223d441539406505ea001848d180490b7a70bc561639b136ecae6c156d04957009916c1b24ba79c86ea06832ee972c31e6a0359b8b206c9498c06983956a604106001a616cb4d1c1bb6acb016cfecfc7ec3b0b2b9ad9ab9ad605bc7f30634cd84a3fa558165a23ef2774c87ec29f64cbf0b7d687933d9e1b3d23238f45fa89ff9f03aeed168cc4492998e962f5fc8d328b4204e969666ffdeb879c288373569757aa945c1"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) 1.595370954s ago: executing program 2 (id=2634): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ftruncate(0xffffffffffffffff, 0x398a0bdb) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) connect$inet(r2, &(0x7f00000001c0)={0x1e, 0x4e20, @empty}, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x0, &(0x7f0000000080)=0x480, 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) close_range(r3, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000840)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x14}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}, @flat=@weak_binder={0x77622a85, 0x110a, 0x2}}, 0x0}, 0x400}], 0x50, 0x0, &(0x7f0000000300)="ae3f238d87e4ee9205d0842b529db2744ccf6892f6f65ebc4671b63de4ba15bd1a1533502e2a569d6aea8936ab051cf9bfc0d34c0581506339d94a60289c526d8168e83c2efd49c75aa9d82de77714ff"}) 1.532958825s ago: executing program 7 (id=2635): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @remote}, 0x10, 0x0}}, {{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000000000007000000940200000000006e"], 0x18}}], 0x2, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) quotactl_fd$Q_GETFMT(r1, 0xffffffff80000401, 0xee01, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1, 0xfffffffffffffffe}) r3 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x400}) ioctl$UFFDIO_CONTINUE(r4, 0xc028aa05, &(0x7f0000000140)={{&(0x7f0000032000/0x4000)=nil, 0x4000}, 0x1000000}) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, 0x0, &(0x7f00000006c0)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000240)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200400000000005) r8 = socket$inet6(0xa, 0x3, 0x1) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f0000000440)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) clock_adjtime(0x0, &(0x7f00000002c0)={0x4, 0x10, 0x3, 0x2, 0x3, 0x9, 0x8, 0x8000000000000d, 0xc, 0x1, 0xfffffffffffffffb, 0x91, 0xfffffffffffff150, 0x2, 0xffffffffffffffff, 0x7, 0x7, 0x8, 0x1000, 0x2, 0x9, 0xeed, 0x10000, 0x7, 0x3ce, 0x8}) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r9, 0x40045402, &(0x7f0000000140)=0x1) read(r9, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@flat=@binder={0x73622a85, 0x100, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/19, 0x13, 0x2, 0x1c}, @flat=@weak_binder={0x77622a85, 0x10a, 0x1}}, &(0x7f0000000000)={0x0, 0x18, 0x40}}}], 0x50, 0x0, &(0x7f0000000100)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) 1.21811571s ago: executing program 7 (id=2636): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) (async) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8000) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) (async) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc)=0x2, 0x5, 0x10000, 0x0, &(0x7f0000048000)=0xffffffff, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) getresgid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000140)) r3 = geteuid() r4 = geteuid() mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x4002, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x81}}, {@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x2}}], [{@euid_gt={'euid>', r3}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/ashmem\x00'}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@smackfshat}, {@obj_role={'obj_role', 0x3d, '/dev/ashmem\x00'}}, {@permit_directio}, {@fowner_gt={'fowner>', 0xee01}}]}}) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x4002, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x81}}, {@blksize={'blksize', 0x3d, 0x400}}, {@max_read={'max_read', 0x3d, 0x2}}], [{@euid_gt={'euid>', r3}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/ashmem\x00'}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@smackfshat}, {@obj_role={'obj_role', 0x3d, '/dev/ashmem\x00'}}, {@permit_directio}, {@fowner_gt={'fowner>', 0xee01}}]}}) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000008, 0x2012, r0, 0x4d757000) 1.028441913s ago: executing program 7 (id=2637): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x49d0, 0x4) sendto$inet6(r0, 0x0, 0xc, 0x8045, &(0x7f0000000080)={0xa, 0x4e23, 0xfffffffc, @local}, 0x1c) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.stat\x00', 0x26e1, 0x0) close(r2) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) recvfrom$inet6(r3, &(0x7f0000000040)=""/21, 0x15, 0x0, &(0x7f0000000100)={0xa, 0x4e21, 0x7a0f93fa, @private0, 0x80}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b2b, &(0x7f0000000000)={'wlan1\x00', @remote}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000001240)={0x2, &(0x7f0000001200)=[{0x87, 0x0, 0x0, 0x4}, {0x6}]}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_io_uring_setup(0x6042, 0xfffffffffffffffe, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) keyctl$session_to_parent(0x12) ioctl$KVM_RUN(r9, 0xae80, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 965.993844ms ago: executing program 7 (id=2638): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a7040, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fstat(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000001010300000000000000000005000006060012"], 0x44}, 0x1, 0x0, 0x0, 0x10000}, 0x4000080) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000001c0), 0x4) setuid(r2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x18, 0x209, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x10, 0x8, 0x0, 0x1, [@typed={0xb, 0x20, 0x0, 0x0, @str='{&(/(:\x00'}]}]}, 0x2c}}, 0x0) ioctl$BLKBSZSET(r0, 0x40081271, 0x0) 904.385245ms ago: executing program 7 (id=2639): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r3, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_4={0x3, 0x1, 0x2}, @main=@item_4={0x3, 0x0, 0xb, "813e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_4={0x3, 0x2, 0x3, "5d8c3dda"}]}}, 0x0}, 0x0) ioctl$TUNSETPERSIST(r3, 0x400454cb, 0x1) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100007776a280cfc41670b6d0bb8b3e0ec5a6dae0942b42f13634e45882714b4e08c4ac30f6e070cf268a69c12ead308fbbae58d5236dd6a1c87e44a526017fa183c9"]) close_range(r0, 0xffffffffffffffff, 0x0) 656.453389ms ago: executing program 2 (id=2640): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x800, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNGETFILTER(r3, 0x801054db, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r2, 0x3312, 0x9) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x6, 0x0, 0x0) r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000e40), 0x1, 0x0) copy_file_range(r8, 0x0, r7, 0x0, 0x7fff, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r6, 0xff, 0x8, 0x9}) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f00000000c0)={0x2, 0x0, [{0x99f, 0x0, 0x9}, {0xb91, 0x0, 0x401}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r10, &(0x7f0000000340)={0x28, 0x2, 0x0, {0x4, 0x10000, 0x7}}, 0x28) write$vga_arbiter(r1, &(0x7f0000000200)=@other={'lock', ' ', 'io'}, 0x8) ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f0000000100)={0xffff0001}) r11 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r11) write(r11, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) madvise(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x65) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper={0x40046306}], 0x0, 0x0, 0x0}) 647.601269ms ago: executing program 6 (id=2641): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc623, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0xbb, 0x1, {0x22, 0x45}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x81}}}}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x12b, &(0x7f0000000780)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x119, 0x2, 0x1, 0x40, 0x0, 0x2a, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "3915"}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0xf, 0x4, 0x80, 0x5}, {0x6, 0x24, 0x1a, 0xfffa}, [@network_terminal={0x7, 0x24, 0xa, 0x3, 0x4, 0xf, 0x6}, @dmm={0x7, 0x24, 0x14, 0x4, 0x60e}, @dmm={0x7, 0x24, 0x14, 0x4, 0x100}, @mdlm_detail={0x8d, 0x24, 0x13, 0x9, "03bb7784e46142bed55d27ca18170c462c2f0230d2a393f145850c71a96744eb10f145d620b094180dd558901878c418dfda9033c6c746f31c2de0e7bd457964f9a0432ef01f0b9fcec92d54bc50cf7b33b69dc9e1b7ece8a06d20d325774f8712e0be1ada26ed2661dac2dd64d73b51fd28456ef7526600e7d128834091ac59987b51d342ca1d09e2"}, @acm={0x4}, @mdlm={0x15, 0x24, 0x12, 0x8606}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x8, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x1b, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x0, 0x1, 0x9}}}}}}}]}}, &(0x7f0000000c00)={0xa, &(0x7f00000008c0)={0xa, 0x6, 0x200, 0x0, 0xb1, 0xf, 0x20, 0x8}, 0x5, &(0x7f0000000900)={0x5, 0xf, 0x5}, 0xa, [{0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x424}}, {0x58, &(0x7f00000009c0)=@string={0x58, 0x3, "ad7cbc9e29af60042d1869b01a901e0ae19c3d69008ddd23d7671633a827673ee626d811f4ddf12b6859922819dfe5ee17d4ddc972765f5fa7efa1e99d6518a7c545393b4abb342b6980dbebcb8808679b1b8b57ad83"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x1c35}}, {0x2, &(0x7f0000000b00)=@string={0x2}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000b80)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0xc0a}}]}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)={0x0, 0xe, 0x4b, {0x4b, 0xc, "e5883414dcf6593489b00d4245f43c98dddadd599838270027938a3457c08fa691866aacc2cba9701ca3a8eeab4f46b45514e16d19bd49898acd3fc6d2ec9b89b58c631cbeb7b33301"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40e}}, &(0x7f0000000180)={0x0, 0xf, 0x2f, {0x5, 0xf, 0x2f, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "91d436e54d59edf5a9c192b0abbe8a24"}, @wireless={0x61, 0x10, 0x1, 0x4, 0x30, 0x5, 0x10, 0x4, 0xf7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x8, 0xa, 0xffff, 0x40}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3f, 0x18, 0x8, 0x2, "ebaa804a", "619bff50"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x3, 0x5, 0x81, 0x7, 0xfbff, 0xe52}}}, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)={0x40, 0x15, 0x1b, "1110eb88c85c4aa5a5e7fbf93a106dd184089ee9deebd798c2b270"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0xc1}, &(0x7f0000000380)={0x20, 0x0, 0x4}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x200, 0x2, [0xff]}}, &(0x7f0000000400)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000480)={0x40, 0xb, 0x2, "47d4"}, &(0x7f00000004c0)={0x40, 0xf, 0x2}, &(0x7f0000000500)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000540)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000580)={0x40, 0x19, 0x2, "98a9"}, &(0x7f00000005c0)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000600)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000000640)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x7f}}) (async) dup(0xffffffffffffffff) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) 460.430352ms ago: executing program 2 (id=2643): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000080)=[@request_death={0x400c630e, 0x2}, @request_death={0x400c630e, 0x3}, @exit_looper, @enter_looper, @increfs={0x40046304, 0x2}, @acquire={0x40046305, 0x2}], 0x34, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x4) close_range(r0, 0xffffffffffffffff, 0x0) (async) openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x408000, 0x2) 460.011682ms ago: executing program 5 (id=2644): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x2800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r1, 0x147a5000) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) syz_clone(0xae003400, 0x0, 0xffffff39, 0xfffffffffffffffd, 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f0000000000)=0x1, 0x4) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0xc0189436, &(0x7f0000000140)=0x800) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f00000001c0)=0x51) ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, &(0x7f00000000c0)={0x100, 0xfffffffd}) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000000", 0x6}], 0x1, 0x0, 0x2) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_TPR_ACCESS_REPORTING(r6, 0xc028ae92, &(0x7f0000000200)={0x9, 0x1}) r7 = dup(r2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$packet(r7, &(0x7f0000000080)={0x11, 0x3, r8, 0x1, 0xc7}, 0x14) 459.216713ms ago: executing program 2 (id=2645): syz_usb_connect(0x3, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x110, 0x5d, 0x82, 0x2c, 0x10, 0x4b4, 0x6830, 0x683b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8c, 0x2, 0x0, 0xd6, 0xc2, 0x69}}]}}]}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) madvise(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0x17) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r1, r1) linkat(r0, &(0x7f00000001c0)='./file1\x00', r0, 0x0, 0x1000) r2 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000300)=ANY=[], 0x40) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) eventfd2(0x5, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x189003, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0xeff, 0x0, [@sadb_key={0x2, 0x9, 0x10, 0x0, 'p&'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x5, 0x6, 0xe0000000}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) ioctl$BLKRRPART(r4, 0x125f, 0x0) 362.575704ms ago: executing program 5 (id=2646): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000380)="240000001a005f1414f9f407000904000a00000000ff8008000f0001000000181fa198b0", 0x24) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x721880, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001380), 0x101100, 0x0) read$FUSE(r4, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000380)={0x1}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r6 = eventfd2(0x6, 0x80800) clock_adjtime(0x8fd7fd18bd254f93, &(0x7f0000000080)={0x6, 0x400, 0x9, 0x5, 0x3, 0x8, 0x7, 0x101, 0x3f4, 0x3, 0x7ff, 0xd, 0x1, 0x2, 0x1, 0xfffffffffffffff7, 0x3, 0x3, 0x7fffffffffffffff, 0x6, 0x3, 0xfffffffffffffffd, 0x8000, 0x1}) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getpgid(r5) ptrace$getregset(0x4204, r5, 0x2, &(0x7f0000000200)={&(0x7f0000000300)=""/90, 0x5a}) ioctl$KVM_HYPERV_EVENTFD(r3, 0x4018aebd, &(0x7f0000000040)={0x3, r6}) close_range(r1, 0xffffffffffffffff, 0x0) 284.204315ms ago: executing program 5 (id=2647): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @pic={0x7, 0x9, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}}) (async) ioctl$KVM_IRQ_LINE(r3, 0x4008ae61, &(0x7f0000000000)={0x0, 0x1}) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, 0x0, 0x0) (async) sendmmsg$inet6(r4, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040) (async) openat$rnullb(0xffffffffffffff9c, 0x0, 0xa00, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f000007f000/0x4000)=nil, 0x4000, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) close(0x3) (async) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) ioctl$TIOCSWINSZ(r5, 0x5414, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x74, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1c, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x15}, @flat=@handle={0x73682a85, 0x200, 0x2}, @flat=@weak_binder={0x77622a85, 0xa, 0x2}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}, @decrefs={0x40046307, 0x3}, @increfs_done={0x40106308, 0x1}, @free_buffer={0x40086303, r1}], 0x51, 0x0, &(0x7f0000000540)="ae3f238d87e4ee9205d0842b529db2744ccf6892f6f65ebc4671b63de4ba15bd1a1533502e2a569d6aea8936ab051cf9bfc0d34c0581506339d94a60289c526d8168e83c2efd49c75aa9d82de77714ff7a"}) 112.659098ms ago: executing program 5 (id=2648): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6a, r2}) mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext']) 107.633358ms ago: executing program 5 (id=2649): mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = getpid() sendmsg$netlink(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)={0x10, 0x21, 0x2, 0x70bd28, 0x25dfdbfd}, 0x10}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r5, r2, r3}}}], 0x20, 0x4}, 0x0) r6 = getegid() getgroups(0x6, &(0x7f0000000200)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee01]) getgroups(0x5, &(0x7f0000000240)=[0xee01, 0xee01, 0x0, 0x0, 0xee01]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) stat(&(0x7f0000000300)='./cgroup/../file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x8, &(0x7f00000003c0)=[0x0, 0x0, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01]) lsetxattr$system_posix_acl(&(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x1}, [{0x2, 0x1, r2}], {}, [{0x8, 0x6}, {0x8, 0x2, r6}, {0x8, 0x0, r7}, {0x8, 0x5, r8}, {0x8, 0x0, r9}, {0x8, 0x0, r10}, {0x8, 0x4, r11}], {0x10, 0x6}, {0x20, 0x2}}, 0x64, 0x1) r12 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x12081, 0x20) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./cgroup\x00', r12, &(0x7f0000000140)='./cgroup/file0\x00', 0x30) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x28) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) fstat(r1, &(0x7f0000000440)) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) getpid() (async) sendmsg$netlink(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000002c0)={0x10, 0x21, 0x2, 0x70bd28, 0x25dfdbfd}, 0x10}], 0x1, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r5, r2, r3}}}], 0x20, 0x4}, 0x0) (async) getegid() (async) getgroups(0x6, &(0x7f0000000200)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee01]) (async) getgroups(0x5, &(0x7f0000000240)=[0xee01, 0xee01, 0x0, 0x0, 0xee01]) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) (async) stat(&(0x7f0000000300)='./cgroup/../file0\x00', &(0x7f0000000340)) (async) getgroups(0x8, &(0x7f00000003c0)=[0x0, 0x0, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01]) (async) lsetxattr$system_posix_acl(&(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0)='system.posix_acl_access\x00', &(0x7f0000000400)={{}, {0x1, 0x1}, [{0x2, 0x1, r2}], {}, [{0x8, 0x6}, {0x8, 0x2, r6}, {0x8, 0x0, r7}, {0x8, 0x5, r8}, {0x8, 0x0, r9}, {0x8, 0x0, r10}, {0x8, 0x4, r11}], {0x10, 0x6}, {0x20, 0x2}}, 0x64, 0x1) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x12081, 0x20) (async) move_mount(0xffffffffffffffff, &(0x7f0000000000)='./cgroup\x00', r12, &(0x7f0000000140)='./cgroup/file0\x00', 0x30) (async) 0s ago: executing program 5 (id=2650): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e1c, @multicast1}, 0x10) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xd0, 0x0, 0x0) (async) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfc\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xa4\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01L\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x06\xb3\xf0wVq\xe9d\xac\xe9\xaa\x9dR\x00\x9b\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2G\x1b+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2v\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x1e\x11X\f\x0f\xf0\xe2\xb5\xf8', 0xb) ftruncate(r3, 0xffff) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r5 = syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000600)=ANY=[@ANYBLOB="00010902cfcda7d3f0f224254a7682d0995224008100000000090400000103f6e68e33290441fa8bd3e29bf82bd354d6feb2dd5f33a342afb9fa2c8b870000092100"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="002205000000368daf452c67fffade717c49dd459901813757ecf5b009864a583d9b6d37706990f39b21c3c298000000c81344c107c6a33dd850fe14ead961f049974814c03b76e227d14065eb55c399c5b42bcb995b974ac02bb69eac894cc441f6b9d9ec89f656f9ae1a5fb4a5f1e160daeee87505b39f18f05373f89cec5e50bc5d684853ee960571a3933dc68a246065d0"], 0x0}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, 0x0, &(0x7f00000005c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x0}) (async, rerun: 64) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0x100000000b, 0x101301) (rerun: 64) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback, 0xffffffff}, 0x1c) (async) listen(r1, 0x0) (async) r7 = add_key$fscrypt_provisioning(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000700)=ANY=[@ANYBLOB="00000000000000000102030405060708090a0b0c0d0e0f101112132981daf6ce41406e6f301ce0411415161718191a1b1c1d1e1f202122232425262728292a2b2c2d2e2f303132333435363738393a3b3c3d3e3f40222e268fca266dc23d540ea69fc8d2ccec1b5f181d494e8d65175674363dc03cdebee070a563cb3a0fbab3714ea7276830eea7cc8c5a7b29b889faa200e54deb108d8912d1941e9b76dc06dbefa06778a898b413841318d841639dd77bde4c623e6de53f81f85d895a585d1e"], 0x48, 0xffffffffffffffff) keyctl$read(0xb, r7, &(0x7f0000000280)=""/163, 0xa3) (async) r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x60882) ioctl$USBDEVFS_ALLOW_SUSPEND(r8, 0x5522) (async, rerun: 64) ioctl$USBDEVFS_ALLOC_STREAMS(r8, 0x8008551c, &(0x7f00000004c0)=ANY=[@ANYBLOB="a8ccee720429eeb1ec9490686ce27101557aeda0060029284901896ea307c7ecd9c7cb24accb00abe164bc741d78f8fe10aac729ba91fc91feaf536fda7398c232a23cf48dd7b63ed98fa999ca161cb104716014c35a255c9b5cb28e598e26b35b0e313955f5cd5c916e64d9c8d89a1d2692856d9db2"]) (rerun: 64) dup(r0) bind$bt_l2cap(r0, &(0x7f00000021c0)={0x1f, 0x0, @none}, 0xe) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x8) (async) listen(r0, 0x9) kernel console output (not intermixed with test programs): dm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 182.198019][ T36] audit: type=1400 audit(1753709581.873:10371): avc: denied { read open } for pid=6606 comm="syz.8.1994" path="net:[4026532317]" dev="nsfs" ino=4026532317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 182.221863][ T36] audit: type=1400 audit(1753709581.873:10372): avc: denied { create } for pid=6606 comm="syz.8.1994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 182.241947][ T36] audit: type=1400 audit(1753709581.873:10373): avc: denied { read write } for pid=6606 comm="syz.8.1994" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.265575][ T36] audit: type=1400 audit(1753709581.873:10374): avc: denied { read write open } for pid=6606 comm="syz.8.1994" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 182.293138][ T31] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 182.314490][ T329] usb 4-1: Using ep0 maxpacket: 16 [ 182.322367][ T329] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.335932][ T329] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.345093][ T329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 182.353129][ T329] usb 4-1: SerialNumber: syz [ 182.374700][ T329] hub 4-1:1.0: bad descriptor, ignoring hub [ 182.380694][ T329] hub 4-1:1.0: probe with driver hub failed with error -5 [ 182.453462][ T31] usb 9-1: Using ep0 maxpacket: 16 [ 182.461573][ T31] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 182.470345][ T31] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.480464][ T31] usb 9-1: config 1 interface 0 has no altsetting 0 [ 182.488679][ T31] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 182.497743][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 182.505782][ T31] usb 9-1: SerialNumber: syz [ 182.859730][ T61] usb 4-1: reset high-speed USB device number 7 using dummy_hcd [ 182.953779][ T31] usb 9-1: USB disconnect, device number 6 [ 183.127973][ T9] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 183.298678][ T9] usb 2-1: Invalid ep0 maxpacket: 32 [ 183.372980][ T31] usb 4-1: USB disconnect, device number 7 [ 183.447724][ T61] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 183.455328][ T9] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 183.587644][ T329] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 183.618776][ T9] usb 2-1: Invalid ep0 maxpacket: 32 [ 183.624234][ T61] usb 8-1: Using ep0 maxpacket: 32 [ 183.629520][ T9] usb usb2-port1: attempt power cycle [ 183.637348][ T61] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 183.645508][ T61] usb 8-1: config 0 has no interface number 0 [ 183.654682][ T61] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 183.663796][ T61] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.671811][ T61] usb 8-1: Product: syz [ 183.676003][ T61] usb 8-1: Manufacturer: syz [ 183.680621][ T61] usb 8-1: SerialNumber: syz [ 183.687103][ T61] usb 8-1: config 0 descriptor?? [ 183.696721][ T61] smsc95xx v2.0.0 [ 183.747046][ T329] usb 9-1: Invalid ep0 maxpacket: 16 [ 183.896724][ T329] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 183.992922][ T9] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 184.014971][ T9] usb 2-1: Invalid ep0 maxpacket: 32 [ 184.067760][ T329] usb 9-1: Invalid ep0 maxpacket: 16 [ 184.073622][ T329] usb usb9-port1: attempt power cycle [ 184.153298][ T9] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 184.174656][ T377] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 184.183011][ T9] usb 2-1: Invalid ep0 maxpacket: 32 [ 184.188601][ T9] usb usb2-port1: unable to enumerate USB device [ 184.347350][ T377] usb 4-1: not running at top speed; connect to a high speed hub [ 184.357129][ T377] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.369964][ T377] usb 4-1: config 1 interface 0 has no altsetting 0 [ 184.380251][ T377] usb 4-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 184.389347][ T377] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.397347][ T377] usb 4-1: Product: syz [ 184.401543][ T377] usb 4-1: Manufacturer: syz [ 184.406165][ T377] usb 4-1: SerialNumber: syz [ 184.452655][ T329] usb 9-1: new low-speed USB device number 9 using dummy_hcd [ 184.475138][ T329] usb 9-1: Invalid ep0 maxpacket: 16 [ 184.523997][ T61] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 184.542335][ T61] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 184.553471][ T61] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 184.581166][ T61] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 184.594658][ T61] usb 8-1: USB disconnect, device number 9 [ 184.611760][ T379] udevd[379]: setting mode of /dev/bus/usb/008/009 to 020664 failed: No such file or directory [ 184.624415][ T329] usb 9-1: new low-speed USB device number 10 using dummy_hcd [ 184.643385][ T379] udevd[379]: setting owner of /dev/bus/usb/008/009 to uid=0, gid=0 failed: No such file or directory [ 184.668284][ T329] usb 9-1: Invalid ep0 maxpacket: 16 [ 184.674449][ T329] usb usb9-port1: unable to enumerate USB device [ 184.746324][ T377] usbhid 4-1:1.0: can't add hid device: -71 [ 184.772008][ T377] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 184.803728][ T377] usb 4-1: USB disconnect, device number 8 [ 184.840334][ T6645] rust_binder: Error while translating object. [ 184.840361][ T6645] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 184.847795][ T6645] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:117 [ 185.082942][ T6659] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:123 [ 185.508582][ T6675] rust_binder: 6674 RLIMIT_NICE not set [ 185.523196][ T61] rust_binder: 6672: removing orphan mapping 0:4240 [ 186.002779][ T61] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 186.123458][ T6690] binder: Unknown parameter 'fscontext?}' [ 186.141789][ T61] usb 4-1: device descriptor read/64, error -71 [ 186.188408][ T6694] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 186.188451][ T6694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:217 [ 186.207767][ T6694] rust_binder: 217: no such ref 1 [ 186.222059][ T6694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:217 [ 186.366284][ T377] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 186.398340][ T61] usb 4-1: device descriptor read/64, error -71 [ 186.424263][ T6699] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 186.424285][ T6699] rust_binder: Read failure Err(EFAULT) in pid:222 [ 186.473987][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2023'. [ 186.561026][ T377] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 186.574450][ T377] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 186.601642][ T377] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.610734][ T377] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 186.654929][ T61] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 186.662564][ T377] usb 2-1: SerialNumber: syz [ 186.683857][ T6685] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 186.785430][ T6718] rust_binder: Write failure EFAULT in pid:234 [ 186.815256][ T61] usb 4-1: device descriptor read/64, error -71 [ 186.819984][ T6716] rust_binder: 192: no such ref 2 [ 186.835222][ T6716] rust_binder: 192: no such ref 0 [ 186.912490][ T377] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 186.922745][ T6722] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 186.922771][ T6722] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:194 [ 186.947418][ T377] usb 2-1: USB disconnect, device number 30 [ 187.063376][ T6731] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false [ 187.067965][ T6733] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 187.093188][ T61] usb 4-1: device descriptor read/64, error -71 [ 187.172307][ T6740] /dev/sr0: Can't lookup blockdev [ 187.222076][ T61] usb usb4-port1: attempt power cycle [ 187.280738][ T6741] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:202 [ 187.281265][ T6741] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 187.291384][ T6741] rust_binder: Read failure Err(EFAULT) in pid:202 [ 187.296959][ T6745] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2036'. [ 187.317617][ T6745] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2036'. [ 187.328572][ T36] kauditd_printk_skb: 863 callbacks suppressed [ 187.328587][ T36] audit: type=1400 audit(1753709586.869:11238): avc: denied { ioctl } for pid=6744 comm="syz.1.2036" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 187.359461][ T36] audit: type=1400 audit(1753709586.869:11239): avc: denied { ioctl } for pid=6744 comm="syz.1.2036" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.384980][ T36] audit: type=1400 audit(1753709586.869:11240): avc: denied { ioctl } for pid=6744 comm="syz.1.2036" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.411576][ T36] audit: type=1400 audit(1753709586.897:11241): avc: denied { ioctl } for pid=6735 comm="syz.7.2032" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.449115][ T377] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 187.458845][ T36] audit: type=1400 audit(1753709586.990:11242): avc: denied { ioctl } for pid=6735 comm="syz.7.2032" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.485778][ T36] audit: type=1400 audit(1753709587.009:11243): avc: denied { ioctl } for pid=6735 comm="syz.7.2032" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.513447][ T36] audit: type=1400 audit(1753709587.009:11244): avc: denied { ioctl } for pid=6735 comm="syz.7.2032" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.539870][ T36] audit: type=1400 audit(1753709587.056:11245): avc: denied { ioctl } for pid=6682 comm="syz.3.2016" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.573779][ T36] audit: type=1400 audit(1753709587.084:11246): avc: denied { ioctl } for pid=6735 comm="syz.7.2032" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.600496][ T36] audit: type=1400 audit(1753709587.084:11247): avc: denied { read write } for pid=6226 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 187.607406][ T61] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 187.653769][ T377] usb 8-1: Using ep0 maxpacket: 16 [ 187.673680][ T377] usb 8-1: config 1 has an invalid interface number: 96 but max is 0 [ 187.702586][ T377] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.725895][ T61] usb 4-1: device descriptor read/8, error -71 [ 187.732613][ T377] usb 8-1: config 1 has no interface number 0 [ 187.749422][ T377] usb 8-1: config 1 interface 96 has no altsetting 0 [ 187.752240][ T6754] binder: Bad value for 'max' [ 187.763288][ T377] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.772403][ T377] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 187.780443][ T377] usb 8-1: SerialNumber: syz [ 187.865945][ T61] usb 4-1: device descriptor read/8, error -71 [ 188.005649][ T377] hub 8-1:1.96: bad descriptor, ignoring hub [ 188.011690][ T377] hub 8-1:1.96: probe with driver hub failed with error -5 [ 188.034245][ T377] usbhid 8-1:1.96: couldn't find an input interrupt endpoint [ 188.140920][ T61] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 188.195637][ T61] usb 4-1: device descriptor read/8, error -71 [ 188.237095][ T377] usb 8-1: reset high-speed USB device number 10 using dummy_hcd [ 188.267327][ T6764] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 188.335525][ T6765] input: syz1 as /devices/virtual/input/input24 [ 188.344043][ T61] usb 4-1: device descriptor read/8, error -71 [ 188.461733][ T61] usb usb4-port1: unable to enumerate USB device [ 188.617053][ T377] usb 8-1: failed to restore interface 96 altsetting 7 (error=-71) [ 188.634875][ T377] usb 8-1: USB disconnect, device number 10 [ 188.926591][ T6770] 9pnet: Could not find request transport: nd [ 189.060164][ T6778] binder: Bad value for 'max' [ 189.089166][ T6779] 9pnet_fd: Insufficient options for proto=fd [ 189.219930][ T6786] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 189.230955][ T6786] rust_binder: Write failure EFAULT in pid:97 [ 189.257531][ T6789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6789 comm=syz.3.2050 [ 189.431851][ T6801] rust_binder: Write failure EFAULT in pid:156 [ 189.517513][ T6800] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 128, size: 61) [ 189.537006][ T6804] rust_binder: Write failure EINVAL in pid:158 [ 189.547597][ T6800] rust_binder: Error while translating object. [ 189.558377][ T6800] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 189.566970][ T6804] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 189.570172][ T6800] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:247 [ 189.588353][ T6804] rust_binder: 158: no such ref 3 [ 189.679430][ T6809] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 189.840716][ T366] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 190.011759][ T366] usb 9-1: device descriptor read/64, error -71 [ 190.240249][ T6839] tipc: Can't bind to reserved service type 0 [ 190.267114][ T6835] rust_binder: Error while translating object. [ 190.267141][ T6835] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 190.273421][ T6835] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:171 [ 190.282905][ T366] usb 9-1: device descriptor read/64, error -71 [ 190.429636][ T6851] overlayfs: failed to resolve './bus': -2 [ 190.493330][ T6855] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2071'. [ 190.526212][ T6857] rust_binder: Error while translating object. [ 190.526292][ T6857] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 190.545735][ T6857] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:107 [ 190.556974][ T366] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 190.654457][ T6861] loop0: detected capacity change from 0 to 1 [ 190.727332][ T6863] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock [ 190.770780][ T366] usb 9-1: device descriptor read/64, error -71 [ 191.031290][ T366] usb 9-1: device descriptor read/64, error -71 [ 191.146420][ T366] usb usb9-port1: attempt power cycle [ 191.189537][ T6886] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.189804][ T6886] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.189825][ T6880] rust_binder: Failed to allocate buffer. len:112, is_oneway:true [ 191.196729][ T6887] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:189 [ 191.218482][ T6881] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:287 [ 191.221257][ T6886] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.236915][ T6880] rust_binder: Failure in copy_transaction_data: BR_DEAD_REPLY [ 191.249967][ T6880] rust_binder: Failure BR_DEAD_REPLY during reply - delivering BR_FAILED_REPLY to sender. [ 191.258118][ T6886] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 191.278120][ T61] rust_binder: 6879: removing orphan mapping 0:1024 [ 191.508657][ T366] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 191.529421][ T6896] Invalid ELF header type: 2 != 1 [ 191.551360][ T366] usb 9-1: device descriptor read/8, error -71 [ 191.559677][ T6896] Invalid ELF header type: 3 != 1 [ 191.692501][ T6908] rust_binder: Got transaction with invalid offset. [ 191.692536][ T6908] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 191.699195][ T6908] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:200 [ 191.728879][ T366] usb 9-1: device descriptor read/8, error -71 [ 191.747802][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2086'. [ 192.010898][ T366] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 192.045853][ T366] usb 9-1: device descriptor read/8, error -71 [ 192.187264][ T366] usb 9-1: device descriptor read/8, error -71 [ 192.342570][ T366] usb usb9-port1: unable to enumerate USB device [ 192.696549][ T36] kauditd_printk_skb: 863 callbacks suppressed [ 192.696566][ T36] audit: type=1400 audit(1753709591.892:12111): avc: denied { read write } for pid=6942 comm="syz.8.2095" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 192.751074][ T36] audit: type=1400 audit(1753709591.892:12112): avc: denied { read write open } for pid=6942 comm="syz.8.2095" path="/dev/binderfs/binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 192.802989][ T6948] 9pnet_fd: Insufficient options for proto=fd [ 192.803483][ T36] audit: type=1400 audit(1753709591.966:12113): avc: denied { write } for pid=6944 comm="syz.3.2096" name="001" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 192.866124][ T36] audit: type=1400 audit(1753709591.966:12114): avc: denied { write } for pid=6944 comm="syz.3.2096" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 192.904481][ T36] audit: type=1400 audit(1753709591.966:12115): avc: denied { read write } for pid=5956 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 192.940979][ T36] audit: type=1400 audit(1753709591.966:12116): avc: denied { read write open } for pid=5956 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 192.990848][ T36] audit: type=1400 audit(1753709591.966:12117): avc: denied { ioctl } for pid=5956 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 193.025995][ T36] audit: type=1400 audit(1753709591.976:12118): avc: denied { write } for pid=6944 comm="syz.3.2096" name="001" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 193.051509][ T36] audit: type=1400 audit(1753709591.976:12119): avc: denied { write } for pid=6944 comm="syz.3.2096" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 193.077168][ T36] audit: type=1400 audit(1753709591.985:12120): avc: denied { mounton } for pid=6944 comm="syz.3.2096" path="/66" dev="tmpfs" ino=365 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 193.629389][ T6969] netlink: 188 bytes leftover after parsing attributes in process `syz.7.2103'. [ 194.090584][ T6986] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 194.098768][ T6986] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 194.107370][ T6986] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 194.115668][ T6986] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 194.116949][ T61] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 194.174611][ T6996] SELinux: policydb table sizes (8,8) do not match mine (8,7) [ 194.191807][ T6996] SELinux: failed to load policy [ 194.202479][ T329] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 194.301939][ T61] usb 8-1: Using ep0 maxpacket: 8 [ 194.314162][ T61] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.345531][ T61] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.380815][ T61] usb 8-1: New USB device found, idVendor=5543, idProduct=006e, bcdDevice= 0.00 [ 194.398025][ T329] usb 2-1: config index 0 descriptor too short (expected 1051, got 27) [ 194.416268][ T329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 194.416278][ T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.418234][ T61] usb 8-1: config 0 descriptor?? [ 194.433222][ T7010] overlayfs: statfs failed on './file0' [ 194.459014][ T329] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 194.486069][ T329] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 194.501784][ T329] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.510055][ T329] usb 2-1: Product: syz [ 194.514478][ T329] usb 2-1: Manufacturer: syz [ 194.519422][ T329] usb 2-1: SerialNumber: syz [ 194.525955][ T329] usb 2-1: config 0 descriptor?? [ 194.669322][ T6978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.682042][ T6978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.751852][ T5255] Bluetooth: hci0: Frame reassembly failed (-84) [ 194.759340][ T5255] Bluetooth: hci0: Frame reassembly failed (-84) [ 194.772365][ T620] usb 2-1: USB disconnect, device number 31 [ 194.920545][ T61] usbhid 8-1:0.0: can't add hid device: -71 [ 194.926633][ T61] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 194.936319][ T61] usb 8-1: USB disconnect, device number 11 [ 195.448403][ T7040] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:259 [ 195.688464][ T329] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 195.859495][ T329] usb 4-1: Using ep0 maxpacket: 32 [ 195.871578][ T329] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 195.886579][ T329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 195.887193][ T7059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.917800][ T329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 195.923670][ T61] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 195.930470][ T329] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 195.937333][ T7059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.949805][ T329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.973925][ T329] usb 4-1: config 0 descriptor?? [ 195.980462][ T7041] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 195.990202][ T329] hub 4-1:0.0: USB hub found [ 196.116143][ T7063] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 196.206923][ T329] hub 4-1:0.0: config failed, hub has too many ports! (err -19) [ 196.641446][ T329] hid-generic 0003:046D:C314.0010: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.3-1/input0 [ 196.858651][ T7041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.867283][ T7041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.896542][ T1208] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 196.902863][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 196.992787][ T10] usb 4-1: USB disconnect, device number 13 [ 197.080340][ T10] rust_binder: 7064: removing orphan mapping 0:1048 [ 197.135927][ T7070] 9pnet_fd: Insufficient options for proto=fd [ 197.503365][ T620] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 197.613580][ T7084] fuse: Bad value for 'rootmode' [ 197.687624][ T620] usb 9-1: Using ep0 maxpacket: 16 [ 197.711656][ T620] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.726439][ T620] usb 9-1: config 1 interface 0 has no altsetting 0 [ 197.735403][ T620] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.744944][ T620] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 197.755505][ T620] usb 9-1: SerialNumber: syz [ 197.769682][ T620] hub 9-1:1.0: bad descriptor, ignoring hub [ 197.776986][ T620] hub 9-1:1.0: probe with driver hub failed with error -5 [ 197.992674][ T7073] netlink: 556 bytes leftover after parsing attributes in process `syz.8.2137'. [ 198.057528][ T36] kauditd_printk_skb: 723 callbacks suppressed [ 198.057545][ T36] audit: type=1400 audit(1753709596.896:12844): avc: denied { read write } for pid=7100 comm="syz.3.2145" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 198.087172][ T36] audit: type=1400 audit(1753709596.896:12845): avc: denied { read write open } for pid=7100 comm="syz.3.2145" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 198.113987][ T36] audit: type=1400 audit(1753709596.896:12846): avc: denied { read } for pid=7100 comm="syz.3.2145" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 198.139860][ T36] audit: type=1400 audit(1753709596.896:12847): avc: denied { read open } for pid=7100 comm="syz.3.2145" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 198.164905][ T36] audit: type=1400 audit(1753709596.896:12848): avc: denied { read write } for pid=7100 comm="syz.3.2145" name="udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 198.188179][ T36] audit: type=1400 audit(1753709596.896:12849): avc: denied { read write open } for pid=7100 comm="syz.3.2145" path="/dev/udmabuf" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 198.212667][ T36] audit: type=1400 audit(1753709596.896:12850): avc: denied { ioctl } for pid=7100 comm="syz.3.2145" path="/dev/udmabuf" dev="devtmpfs" ino=83 ioctlcmd=0x7542 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 198.237394][ T36] audit: type=1400 audit(1753709596.980:12851): avc: denied { ioctl } for pid=7071 comm="syz.8.2137" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 198.275615][ T366] usb 9-1: reset high-speed USB device number 15 using dummy_hcd [ 198.283537][ T36] audit: type=1400 audit(1753709597.046:12852): avc: denied { ioctl } for pid=7071 comm="syz.8.2137" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 198.311930][ T36] audit: type=1400 audit(1753709597.064:12853): avc: denied { read write } for pid=6211 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 198.639817][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 198.692527][ T366] usb 9-1: failed to restore interface 0 altsetting 1 (error=-71) [ 198.714127][ T366] usb 9-1: USB disconnect, device number 15 [ 198.810122][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 198.823287][ T10] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 198.831306][ T10] usb 4-1: can't read configurations, error -22 [ 198.991858][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 199.048315][ T7121] netlink: 'syz.1.2151': attribute type 27 has an invalid length. [ 199.079083][ T7121] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.086360][ T7121] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.163028][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 199.185257][ T10] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 199.203445][ T10] usb 4-1: can't read configurations, error -22 [ 199.216615][ T10] usb usb4-port1: attempt power cycle [ 199.595411][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 199.633696][ T7147] rust_binder: 7145 RLIMIT_NICE not set [ 199.634401][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 199.649422][ T10] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 199.658695][ T10] usb 4-1: can't read configurations, error -22 [ 199.686726][ T334] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 199.757147][ T7150] FAT-fs (rnullb0): bogus number of reserved sectors [ 199.782970][ T7150] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 199.815133][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 199.858760][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 199.869390][ T10] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 199.877343][ T10] usb 4-1: can't read configurations, error -22 [ 199.889853][ T334] usb 2-1: device descriptor read/64, error -71 [ 199.898008][ T10] usb usb4-port1: unable to enumerate USB device [ 200.003445][ T7154] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 200.016673][ T7154] kvm: pic: level sensitive irq not supported [ 200.016776][ T7154] kvm: pic: non byte read [ 200.028642][ T7154] kvm: pic: level sensitive irq not supported [ 200.028732][ T7154] kvm: pic: non byte read [ 200.042302][ T7154] exFAT-fs (rnullb0): invalid boot record signature [ 200.049394][ T7154] exFAT-fs (rnullb0): failed to read boot sector [ 200.057654][ T7154] exFAT-fs (rnullb0): failed to recognize exfat type [ 200.114387][ T61] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 200.146440][ T334] usb 2-1: device descriptor read/64, error -71 [ 200.264037][ T61] usb 8-1: device descriptor read/64, error -71 [ 200.387422][ T7168] rust_binder: Error while translating object. [ 200.387459][ T7168] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 200.393814][ T7168] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:307 [ 200.413758][ T334] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 200.520607][ T61] usb 8-1: device descriptor read/64, error -71 [ 200.563390][ T334] usb 2-1: device descriptor read/64, error -71 [ 200.777189][ T61] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 200.819974][ T334] usb 2-1: device descriptor read/64, error -71 [ 200.916164][ T61] usb 8-1: device descriptor read/64, error -71 [ 200.937620][ T334] usb usb2-port1: attempt power cycle [ 201.172738][ T61] usb 8-1: device descriptor read/64, error -71 [ 201.247981][ T7170] netlink: 5 bytes leftover after parsing attributes in process `syz.8.2164'. [ 201.290446][ T61] usb usb8-port1: attempt power cycle [ 201.311768][ T334] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 201.335225][ T334] usb 2-1: device descriptor read/8, error -71 [ 201.474234][ T334] usb 2-1: device descriptor read/8, error -71 [ 201.653829][ T61] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 201.677493][ T61] usb 8-1: device descriptor read/8, error -71 [ 201.728710][ T334] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 201.753078][ T334] usb 2-1: device descriptor read/8, error -71 [ 201.828177][ T61] usb 8-1: device descriptor read/8, error -71 [ 201.902995][ T334] usb 2-1: device descriptor read/8, error -71 [ 202.016635][ T7185] rust_binder: Write failure EFAULT in pid:293 [ 202.017909][ T334] usb usb2-port1: unable to enumerate USB device [ 202.081514][ T61] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 202.105112][ T61] usb 8-1: device descriptor read/8, error -71 [ 202.183177][ T7187] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 202.250303][ T61] usb 8-1: device descriptor read/8, error -71 [ 202.381188][ T61] usb usb8-port1: unable to enumerate USB device [ 202.605275][ T366] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 202.793264][ T366] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 202.806432][ T7202] SELinux: policydb magic number 0x37373130 does not match expected magic number 0xf97cff8c [ 202.816759][ T7202] SELinux: failed to load policy [ 202.821468][ T366] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 202.852389][ T366] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 202.872609][ T366] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 202.889913][ T366] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 202.899390][ T366] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.911593][ T366] usb 9-1: config 0 descriptor?? [ 202.918962][ T7197] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 202.987842][ T7208] fuse: Bad value for 'group_id' [ 202.992891][ T7208] fuse: Bad value for 'group_id' [ 203.139797][ T61] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 203.270710][ T7212] /dev/nbd1: Can't lookup blockdev [ 203.300182][ T61] usb 8-1: Using ep0 maxpacket: 16 [ 203.333287][ T61] usb 8-1: config 1 has an invalid interface number: 96 but max is 0 [ 203.353979][ T7214] virtio-fs: tag not found [ 203.359824][ T61] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.378746][ T61] usb 8-1: config 1 has no interface number 0 [ 203.392425][ T61] usb 8-1: config 1 interface 96 has no altsetting 0 [ 203.407159][ T36] kauditd_printk_skb: 3103 callbacks suppressed [ 203.407175][ T36] audit: type=1400 audit(1753709601.910:15957): avc: denied { ioctl } for pid=7203 comm="syz.7.2175" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 203.408291][ T61] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.423933][ T36] audit: type=1400 audit(1753709601.910:15958): avc: denied { ioctl } for pid=7203 comm="syz.7.2175" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 203.444564][ T6226] audit: audit_backlog=65 > audit_backlog_limit=64 [ 203.468683][ T36] audit: type=1326 audit(1753709601.910:15959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.3.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ae58e9a9 code=0x7ff00000 [ 203.473419][ T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 203.480050][ T36] audit: type=1326 audit(1753709601.910:15960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.3.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ae58e9a9 code=0x7ff00000 [ 203.502481][ T6226] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 203.511714][ T36] audit: type=1326 audit(1753709601.910:15961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.3.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ae58e9a9 code=0x7ff00000 [ 203.534223][ T61] usb 8-1: SerialNumber: syz [ 203.543925][ T7215] fuse: Bad value for 'fd' [ 203.565147][ T6226] audit: backlog limit exceeded [ 203.572150][ T36] audit: type=1326 audit(1753709601.910:15962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.3.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ae58e9a9 code=0x7ff00000 [ 203.606297][ T36] audit: type=1326 audit(1753709601.910:15963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7205 comm="syz.3.2176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87ae58e9a9 code=0x7ff00000 [ 203.652315][ T7215] cgroup: Invalid name [ 203.849769][ T61] hub 8-1:1.96: bad descriptor, ignoring hub [ 203.857257][ T61] hub 8-1:1.96: probe with driver hub failed with error -5 [ 203.865103][ T61] usbhid 8-1:1.96: couldn't find an input interrupt endpoint [ 204.069905][ T61] usb 8-1: reset high-speed USB device number 17 using dummy_hcd [ 204.073614][ T7226] netlink: 'syz.3.2183': attribute type 5 has an invalid length. [ 204.085509][ T7226] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.2183'. [ 204.092204][ T61] usb 8-1: device reset changed ep0 maxpacket size! [ 204.101522][ T61] usb 8-1: USB disconnect, device number 17 [ 204.156485][ T366] usbhid 9-1:0.0: can't add hid device: -71 [ 204.162484][ T366] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 204.188701][ T366] usb 9-1: USB disconnect, device number 16 [ 204.434470][ T61] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 204.615898][ T61] usb 8-1: Using ep0 maxpacket: 32 [ 204.631353][ T61] usb 8-1: unable to get BOS descriptor or descriptor too short [ 204.649935][ T61] usb 8-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1015 [ 204.660507][ T61] usb 8-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.673810][ T61] usb 8-1: config 1 interface 0 has no altsetting 0 [ 204.683479][ T7247] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=36 [ 204.683502][ T7247] rust_binder: Error while translating object. [ 204.692373][ T7247] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 204.699047][ T7247] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:177 [ 204.719810][ T61] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 204.738168][ T366] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 204.747452][ T61] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.760350][ T61] usb 8-1: Product: syz [ 204.764548][ T61] usb 8-1: Manufacturer: syz [ 204.769248][ T61] usb 8-1: SerialNumber: syz [ 204.779555][ T7204] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 204.909672][ T366] usb 9-1: config 0 has an invalid descriptor of length 14, skipping remainder of the config [ 204.920321][ T366] usb 9-1: config 0 interface 0 altsetting 51 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 204.957199][ T366] usb 9-1: config 0 interface 0 has no altsetting 0 [ 204.963884][ T366] usb 9-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 205.010734][ T366] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.023617][ T7204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.043000][ T7204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.054991][ T366] usb 9-1: config 0 descriptor?? [ 205.077390][ T7204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.108990][ T7204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.155163][ T61] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 205.206000][ T61] usb 8-1: USB disconnect, device number 18 [ 205.242518][ T61] usblp0: removed [ 205.305607][ T366] usb 9-1: string descriptor 0 read error: -71 [ 205.315249][ T366] usb 9-1: USB disconnect, device number 17 [ 205.422277][ T7285] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=36 [ 205.422302][ T7285] rust_binder: Error while translating object. [ 205.457394][ T7285] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 205.477382][ T7285] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:191 [ 205.593844][ T7294] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 6 [ 205.644692][ T7294] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 120, limit: 144, size: 97) [ 205.644718][ T7294] rust_binder: Error while translating object. [ 205.673498][ T7294] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 205.679720][ T7294] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:339 [ 205.722859][ T366] rust_binder: 7290: removing orphan mapping 0:1048 [ 205.833848][ T620] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 205.927868][ T334] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 206.019098][ T620] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 206.030918][ T620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.048354][ T620] usb 2-1: config 0 descriptor?? [ 206.101128][ T377] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 206.133161][ T334] usb 8-1: Using ep0 maxpacket: 16 [ 206.140405][ T334] usb 8-1: config 1 has an invalid interface number: 96 but max is 0 [ 206.152864][ T334] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 206.163005][ T334] usb 8-1: config 1 has no interface number 0 [ 206.169648][ T334] usb 8-1: config 1 interface 96 has no altsetting 0 [ 206.187085][ T334] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 206.196262][ T334] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 206.218693][ T334] usb 8-1: SerialNumber: syz [ 206.253267][ T377] usb 4-1: device descriptor read/64, error -71 [ 206.377206][ T7326] 9pnet_fd: Insufficient options for proto=fd [ 206.507339][ T377] usb 4-1: device descriptor read/64, error -71 [ 206.614725][ T7338] binder: Unknown parameter 'm0000000000000߬>' [ 206.775237][ T377] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 206.945710][ T377] usb 4-1: device descriptor read/64, error -71 [ 207.149294][ T334] hub 8-1:1.96: bad descriptor, ignoring hub [ 207.155755][ T334] hub 8-1:1.96: probe with driver hub failed with error -5 [ 207.163479][ T620] usb 2-1: Cannot set MAC address [ 207.168593][ T620] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 207.180194][ T334] usbhid 8-1:1.96: couldn't find an input interrupt endpoint [ 207.188964][ T620] usb 2-1: USB disconnect, device number 36 [ 207.207661][ T377] usb 4-1: device descriptor read/64, error -71 [ 207.352331][ T377] usb usb4-port1: attempt power cycle [ 207.362614][ T334] usb 8-1: reset high-speed USB device number 19 using dummy_hcd [ 207.371095][ T334] usb 8-1: device reset changed ep0 maxpacket size! [ 207.378155][ T334] usb 8-1: USB disconnect, device number 19 [ 207.512378][ T620] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 207.544335][ T366] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 207.672645][ T620] usb 2-1: Using ep0 maxpacket: 8 [ 207.681033][ T620] usb 2-1: config 1 interface 0 has no altsetting 0 [ 207.691152][ T620] usb 2-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.40 [ 207.700274][ T620] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.708341][ T620] usb 2-1: Product: 《 [ 207.712515][ T620] usb 2-1: Manufacturer: 居ꣾ邎걬杞턂㱌沇䄱쒥ᤓ㵗캦鴳驛匰퐮㾗갫ᑺ䊎＿慟ㆴ曣偫䫑祗볹蘒匧停﹵䱐ﶳ覆髼Ƚ [ 207.728281][ T334] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 207.735893][ T620] usb 2-1: SerialNumber: 뷽츕堐얨嘈즾ɕ姷벬褾៊墕쫔泖뫸ȿ斨謳蘙餴淦澹葯ꄿ⏿쫒壋휵줴穧ᐴ싿뺤㥠忱湧ἙⓀ䋏흡㜐糛偸᡿ᖚ圿׼䁀ﲧứ溇✁颳窕 [ 207.736791][ T377] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 207.780217][ T366] usb 9-1: config 1 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 8 [ 207.790243][ T366] usb 9-1: config 1 interface 0 has no altsetting 0 [ 207.800320][ T366] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 207.809622][ T366] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.817734][ T366] usb 9-1: Product: syz [ 207.822460][ T366] usb 9-1: Manufacturer: syz [ 207.828052][ T366] usb 9-1: SerialNumber: syz [ 207.833772][ T377] usb 4-1: device descriptor read/8, error -71 [ 207.844112][ T7347] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22 [ 207.929571][ T334] usb 8-1: Using ep0 maxpacket: 32 [ 207.938677][ T334] usb 8-1: unable to get BOS descriptor or descriptor too short [ 207.948578][ T334] usb 8-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1015 [ 207.958605][ T334] usb 8-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.971453][ T334] usb 8-1: config 1 interface 0 has no altsetting 0 [ 207.982227][ T334] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 207.991795][ T334] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.993326][ T377] usb 4-1: device descriptor read/8, error -71 [ 208.014701][ T334] usb 8-1: Product:  [ 208.019019][ T334] usb 8-1: Manufacturer: 魠Ꙅ褝値鐥⹆摖鈁ꄊץｭԗ洚氨䟙贡੶䊩Ⱉ꘳숞農稩趆ঞ헐㙧闶뭊䗉葉폋瀲듘⽌ꇾ脿熸䴂螐튲蜥挄亐⑑ᙔ桐莂췛辶ᠷ炊왲涝⺾ً媦؇꥚ꠥ媣쨘贼쬿嶮蕬㿀篙↨肪ബ툌䁫꣒矸Ԣ稪䅽輋㣽倵㻑훢 [ 208.047283][ T334] usb 8-1: SerialNumber: У [ 208.055720][ T7296] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 208.260668][ T377] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 208.285324][ T334] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 208.296650][ T377] usb 4-1: device descriptor read/8, error -71 [ 208.308042][ T334] usb 8-1: USB disconnect, device number 20 [ 208.323703][ T334] usblp0: removed [ 208.455564][ T377] usb 4-1: device descriptor read/8, error -71 [ 208.549444][ T620] usbhid 2-1:1.0: can't add hid device: -71 [ 208.555646][ T620] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 208.575922][ T377] usb usb4-port1: unable to enumerate USB device [ 208.584066][ T620] usb 2-1: USB disconnect, device number 37 [ 208.756906][ T7355] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 208.756942][ T7355] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:223 [ 208.769565][ T36] kauditd_printk_skb: 3612 callbacks suppressed [ 208.769584][ T36] audit: type=1400 audit(1753709606.914:19561): avc: denied { name_bind } for pid=7354 comm="syz.1.2224" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 208.787617][ T7355] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 208.815109][ T36] audit: type=1400 audit(1753709606.914:19562): avc: denied { node_bind } for pid=7354 comm="syz.1.2224" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 208.847531][ T36] audit: type=1400 audit(1753709606.914:19563): avc: denied { mounton } for pid=7354 comm="syz.1.2224" path="/70/bus" dev="tmpfs" ino=393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 208.910193][ T36] audit: type=1400 audit(1753709606.933:19564): avc: denied { unlink } for pid=7354 comm="syz.1.2224" name="#34" dev="tmpfs" ino=397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 208.933987][ T36] audit: type=1400 audit(1753709606.961:19565): avc: denied { mount } for pid=7354 comm="syz.1.2224" name="/" dev="overlay" ino=391 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 208.956310][ T366] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 12 proto 1 vid 0x0525 pid 0xA4A8 [ 208.975543][ T366] usb 9-1: USB disconnect, device number 18 [ 208.984140][ T36] audit: type=1400 audit(1753709606.961:19566): avc: denied { ioctl } for pid=7354 comm="syz.1.2224" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 209.009831][ T366] usblp0: removed [ 209.014830][ T36] audit: type=1400 audit(1753709606.989:19567): avc: denied { unmount } for pid=6226 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 209.042423][ T7361] binder: Bad value for 'defcontext' [ 209.076812][ T36] audit: type=1400 audit(1753709606.998:19568): avc: denied { read write } for pid=5860 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.131247][ T36] audit: type=1400 audit(1753709606.998:19569): avc: denied { read write open } for pid=5860 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.181383][ T61] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 209.216581][ T36] audit: type=1400 audit(1753709606.998:19570): avc: denied { ioctl } for pid=5860 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 209.364680][ T61] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.376110][ T61] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 209.386356][ T61] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.399891][ T61] usb 2-1: config 0 descriptor?? [ 209.598732][ T7374] rust_binder: Error in use_page_slow: ESRCH [ 209.598756][ T7374] rust_binder: use_range failure ESRCH [ 209.604817][ T7374] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 209.610377][ T7374] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 209.618497][ T7374] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:340 [ 209.629904][ T61] usbhid 2-1:0.0: can't add hid device: -71 [ 209.647923][ T61] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 209.657649][ T61] usb 2-1: USB disconnect, device number 38 [ 210.099393][ T61] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 210.207815][ T7389] __vm_enough_memory: pid: 7389, comm: syz.7.2234, bytes: 18014402804453376 not enough memory for the allocation [ 210.266187][ T61] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.302535][ T61] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 210.333260][ T61] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.356169][ T61] usb 2-1: config 0 descriptor?? [ 210.482640][ T7399] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 210.496276][ T7399] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 210.519930][ T7399] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 210.530531][ T7399] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 210.719442][ T377] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 210.795095][ T61] keytouch 0003:0926:3333.0011: fixing up Keytouch IEC report descriptor [ 210.805700][ T61] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0011/input/input27 [ 210.890267][ T61] keytouch 0003:0926:3333.0011: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 210.906839][ T377] usb 4-1: Using ep0 maxpacket: 8 [ 210.923113][ T377] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023 [ 210.933092][ T377] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 210.955464][ T377] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 210.964747][ T377] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 210.972984][ T377] usb 4-1: SerialNumber: syz [ 211.006906][ T7401] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 211.139396][ T7410] rust_binder: Write failure EFAULT in pid:388 [ 211.201176][ T7410] netlink: 92 bytes leftover after parsing attributes in process `syz.8.2241'. [ 211.237799][ T7401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.246724][ T7401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.255395][ T377] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 211.287586][ T377] usb 4-1: USB disconnect, device number 22 [ 211.526272][ T7418] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 211.533385][ T7418] rust_binder: 393: no such ref 0 [ 211.538455][ T7418] rust_binder: inc_ref_done called when no active inc_refs [ 211.539095][ T7418] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:393 [ 211.616562][ T7415] rust_binder: Write failure EFAULT in pid:225 [ 211.647364][ T7422] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 211.777962][ T7425] netlink: 'syz.7.2246': attribute type 4 has an invalid length. [ 212.116488][ T5255] bridge_slave_1: left allmulticast mode [ 212.122330][ T5255] bridge_slave_1: left promiscuous mode [ 212.128020][ T5255] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.137115][ T5255] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.276520][ T7429] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.284395][ T7429] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.291554][ T7429] bridge_slave_0: entered allmulticast mode [ 212.298063][ T7429] bridge_slave_0: entered promiscuous mode [ 212.306105][ T7429] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.313178][ T7429] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.320579][ T7429] bridge_slave_1: entered allmulticast mode [ 212.327077][ T7429] bridge_slave_1: entered promiscuous mode [ 212.334533][ T5255] veth1_macvtap: left promiscuous mode [ 212.340061][ T5255] veth0_vlan: left promiscuous mode [ 212.414212][ T7434] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 212.423173][ T7434] overlayfs: failed to set xattr on upper [ 212.432977][ T7434] overlayfs: ...falling back to redirect_dir=nofollow. [ 212.439876][ T7434] overlayfs: ...falling back to uuid=null. [ 212.463534][ T7435] 9pnet_fd: Insufficient options for proto=fd [ 212.643887][ T7445] netlink: 'syz.8.2253': attribute type 4 has an invalid length. [ 212.735987][ T620] usb 2-1: USB disconnect, device number 39 [ 212.758709][ T5256] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.765806][ T5256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.803092][ T5256] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.810191][ T5256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.037591][ T7429] veth0_vlan: entered promiscuous mode [ 213.103918][ T7429] veth1_macvtap: entered promiscuous mode [ 213.253699][ T7456] netlink: 'syz.8.2257': attribute type 1 has an invalid length. [ 213.298131][ T7456] netlink: 'syz.8.2257': attribute type 2 has an invalid length. [ 213.731112][ T7467] netlink: 1536 bytes leftover after parsing attributes in process `syz.8.2260'. [ 213.805351][ T7470] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 213.817332][ T7470] binder: Unknown parameter '18446744073709551615bL+~f' [ 213.862798][ T7472] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 214.075457][ T7478] tipc: Failed to remove unknown binding: 66,1,1/0:3737340693/3737340696 [ 214.120472][ T36] kauditd_printk_skb: 818 callbacks suppressed [ 214.120490][ T36] audit: type=1400 audit(1753709611.928:20389): avc: denied { sys_module } for pid=7481 comm="syz.1.2266" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 214.155771][ T36] audit: type=1400 audit(1753709611.947:20390): avc: denied { read write } for pid=7477 comm="syz.8.2265" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="/sbin/dhclient" [ 214.182993][ T36] audit: type=1400 audit(1753709611.947:20391): avc: denied { read open } for pid=7477 comm="syz.8.2265" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="/sbin/dhclient" [ 214.209654][ T36] audit: type=1400 audit(1753709611.947:20392): avc: denied { map } for pid=7477 comm="syz.8.2265" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="/sbin/dhclient" [ 214.248544][ T36] audit: type=1400 audit(1753709611.947:20393): avc: denied { read } for pid=7477 comm="syz.8.2265" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="/sbin/dhclient" [ 214.275590][ T36] audit: type=1400 audit(1753709611.956:20394): avc: denied { map } for pid=7477 comm="syz.8.2265" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="/sbin/dhclient" [ 214.301963][ T36] audit: type=1400 audit(1753709611.956:20395): avc: denied { read } for pid=7477 comm="syz.8.2265" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="/sbin/dhclient" [ 214.375451][ T36] audit: type=1400 audit(1753709612.162:20396): avc: denied { read write } for pid=5956 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 214.399798][ T36] audit: type=1400 audit(1753709612.171:20397): avc: denied { read write open } for pid=5956 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 214.426192][ T36] audit: type=1400 audit(1753709612.171:20398): avc: denied { ioctl } for pid=5956 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 214.855018][ T7494] 9pnet: p9_errstr2errno: server reported unknown error [ 214.958272][ T7498] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 215.314951][ T7512] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2275'. [ 215.842406][ T7518] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 215.976095][ T7525] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 215.984216][ T7525] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 215.995008][ T7525] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 216.004487][ T7525] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 216.173089][ T7532] random: crng reseeded on system resumption [ 216.877165][ T7563] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2292'. [ 217.091584][ T334] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 217.262098][ T334] usb 9-1: Using ep0 maxpacket: 32 [ 217.269407][ T334] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.279588][ T334] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 217.292018][ T334] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 217.301641][ T334] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.309677][ T334] usb 9-1: Product: syz [ 217.313832][ T334] usb 9-1: Manufacturer: syz [ 217.318463][ T334] usb 9-1: SerialNumber: syz [ 217.636115][ T334] cdc_ncm 9-1:1.0: CDC Union missing and no IAD found [ 217.648867][ T334] cdc_ncm 9-1:1.0: bind() failure [ 217.655089][ T334] usb 9-1: USB disconnect, device number 19 [ 218.407277][ T7597] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 218.641209][ T620] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 218.812248][ T620] usb 8-1: Using ep0 maxpacket: 8 [ 218.820099][ T620] usb 8-1: config 0 has an invalid interface number: 151 but max is 1 [ 218.828354][ T620] usb 8-1: config 0 has no interface number 1 [ 218.834465][ T620] usb 8-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 218.845338][ T620] usb 8-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 218.857021][ T620] usb 8-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 218.868346][ T620] usb 8-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 218.878812][ T620] usb 8-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 218.891949][ T620] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 218.902781][ T620] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 218.915847][ T620] usb 8-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.88 [ 218.924978][ T620] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.933035][ T620] usb 8-1: Product: syz [ 218.937186][ T620] usb 8-1: Manufacturer: syz [ 218.941820][ T620] usb 8-1: SerialNumber: syz [ 218.948064][ T620] usb 8-1: config 0 descriptor?? [ 218.954916][ T7596] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 218.965449][ T620] usb 8-1: invalid MIDI in EP 0 [ 218.977281][ T620] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 219.281086][ T7599] binder: Bad value for 'defcontext' [ 219.304232][ T1208] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 219.313251][ T334] usb 8-1: USB disconnect, device number 21 [ 219.439573][ T7606] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 219.477330][ T36] kauditd_printk_skb: 548 callbacks suppressed [ 219.477350][ T36] audit: type=1400 audit(1753709616.942:20947): avc: denied { write } for pid=7603 comm="syz.8.2304" name="001" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 219.538391][ T36] audit: type=1400 audit(1753709616.970:20948): avc: denied { write } for pid=7603 comm="syz.8.2304" path="/dev/bus/usb/005/001" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 219.574676][ T36] audit: type=1400 audit(1753709616.970:20949): avc: denied { read write } for pid=7603 comm="syz.8.2304" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 219.620427][ T36] audit: type=1400 audit(1753709616.970:20950): avc: denied { read write open } for pid=7603 comm="syz.8.2304" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 219.696119][ T36] audit: type=1400 audit(1753709616.970:20951): avc: denied { ioctl } for pid=7603 comm="syz.8.2304" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 219.764835][ T36] audit: type=1400 audit(1753709616.970:20952): avc: denied { write } for pid=7603 comm="syz.8.2304" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.817229][ T36] audit: type=1400 audit(1753709616.970:20953): avc: denied { remove_name } for pid=7603 comm="syz.8.2304" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.854628][ T36] audit: type=1400 audit(1753709616.970:20954): avc: denied { unlink } for pid=7603 comm="syz.8.2304" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 219.878469][ T36] audit: type=1400 audit(1753709616.970:20955): avc: denied { create } for pid=7603 comm="syz.8.2304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 219.899888][ T36] audit: type=1400 audit(1753709616.970:20956): avc: denied { create } for pid=7603 comm="syz.8.2304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 219.960579][ T5255] bridge_slave_1: left allmulticast mode [ 219.966380][ T5255] bridge_slave_1: left promiscuous mode [ 219.972040][ T5255] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.980409][ T5255] bridge_slave_0: left allmulticast mode [ 219.986122][ T5255] bridge_slave_0: left promiscuous mode [ 219.992521][ T5255] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.009608][ T334] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 220.193854][ T334] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.204819][ T334] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.214615][ T334] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 220.227549][ T334] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 220.236692][ T334] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.249078][ T334] usb 9-1: config 0 descriptor?? [ 220.258000][ T7628] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.265129][ T7628] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.274397][ T7628] bridge_slave_0: entered allmulticast mode [ 220.282830][ T7628] bridge_slave_0: entered promiscuous mode [ 220.291680][ T7628] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.298835][ T7628] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.305928][ T7628] bridge_slave_1: entered allmulticast mode [ 220.312396][ T7628] bridge_slave_1: entered promiscuous mode [ 220.341013][ T61] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 220.410359][ T7628] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.417439][ T7628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.424735][ T7628] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.431804][ T7628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.485783][ T5255] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.493493][ T5255] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.508558][ T5255] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.515650][ T5255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.527035][ T5255] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.534096][ T5255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.544120][ T61] usb 8-1: Using ep0 maxpacket: 32 [ 220.553600][ T61] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.565609][ T61] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.575484][ T61] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 220.585305][ T61] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.595539][ T61] usb 8-1: config 0 descriptor?? [ 220.604033][ T61] hub 8-1:0.0: USB hub found [ 220.678689][ T7628] veth0_vlan: entered promiscuous mode [ 220.715288][ T334] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 220.722767][ T334] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 220.730808][ T334] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 220.739523][ T334] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 220.746949][ T334] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 220.748953][ T7628] veth1_macvtap: entered promiscuous mode [ 220.755944][ T334] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 220.767667][ T334] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 220.776286][ T334] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 220.784492][ T334] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 220.792145][ T334] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving [ 220.803501][ T334] plantronics 0003:047F:FFFF.0012: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 220.818160][ T61] hub 8-1:0.0: 1 port detected [ 220.936381][ T7640] FAT-fs (rnullb0): bogus number of reserved sectors [ 220.943134][ T7640] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 220.992718][ T7642] loop7: detected capacity change from 0 to 16384 [ 221.141368][ T7644] rust_binder: Read failure Err(EAGAIN) in pid:4 [ 221.156987][ T7646] SELinux: security_context_str_to_sid () failed with errno=-22 [ 221.207823][ T7643] loop7: detected capacity change from 16384 to 0 [ 221.215411][ C0] I/O error, dev loop7, sector 15440 op 0x0:(READ) flags 0x80700 phys_seg 13 prio class 0 [ 221.393245][ T7655] rust_binder: Failed to allocate buffer. len:1072, is_oneway:true [ 221.445635][ T7657] overlayfs: conflicting lowerdir path [ 221.451352][ T7653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.468355][ T61] hub 8-1:0.0: activate --> -90 [ 221.473429][ T7653] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.490380][ T7653] Invalid ELF header magic: != ELF [ 221.905167][ T7627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.919278][ T7627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.945622][ T329] usb 8-1: USB disconnect, device number 22 [ 222.179927][ T61] usb 8-1-port1: config error [ 222.329451][ T334] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 222.356575][ T7698] rust_binder: Error while translating object. [ 222.356613][ T7698] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 222.362910][ T7698] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:421 [ 222.500481][ T334] usb 3-1: Using ep0 maxpacket: 16 [ 222.516688][ T334] usb 3-1: config 1 has an invalid interface number: 96 but max is 0 [ 222.525855][ T334] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 222.535984][ T334] usb 3-1: config 1 has no interface number 0 [ 222.542089][ T334] usb 3-1: config 1 interface 96 has no altsetting 0 [ 222.550241][ T334] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 222.559296][ T334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 222.567321][ T334] usb 3-1: SerialNumber: syz [ 222.817910][ T334] hub 3-1:1.96: bad descriptor, ignoring hub [ 222.827915][ T7687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.840628][ T334] hub 3-1:1.96: probe with driver hub failed with error -5 [ 222.853426][ T7687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.862138][ T334] usbhid 3-1:1.96: couldn't find an input interrupt endpoint [ 222.928466][ T620] usb 9-1: USB disconnect, device number 20 [ 223.056444][ T334] usb 3-1: reset high-speed USB device number 43 using dummy_hcd [ 223.064949][ T334] usb 3-1: device reset changed ep0 maxpacket size! [ 223.072565][ T334] usb 3-1: USB disconnect, device number 43 [ 223.228289][ T7720] 9pnet_fd: Insufficient options for proto=fd [ 223.387808][ T334] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 223.484047][ T377] usb 8-1: new full-speed USB device number 23 using dummy_hcd [ 223.558883][ T334] usb 3-1: Using ep0 maxpacket: 32 [ 223.567887][ T334] usb 3-1: unable to get BOS descriptor or descriptor too short [ 223.577649][ T334] usb 3-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1015 [ 223.588154][ T334] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.601168][ T334] usb 3-1: config 1 interface 0 has no altsetting 0 [ 223.611650][ T334] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 223.621307][ T334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.629395][ T334] usb 3-1: Product: syz [ 223.633730][ T334] usb 3-1: Manufacturer: syz [ 223.638394][ T334] usb 3-1: SerialNumber: syz [ 223.646755][ T7688] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 223.667270][ T377] usb 8-1: not running at top speed; connect to a high speed hub [ 223.680064][ T377] usb 8-1: config 1 has an invalid interface number: 143 but max is 3 [ 223.689213][ T377] usb 8-1: config 1 has an invalid interface number: 95 but max is 3 [ 223.697336][ T377] usb 8-1: config 1 has an invalid interface number: 50 but max is 3 [ 223.706306][ T377] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 223.716285][ T377] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 223.727150][ T377] usb 8-1: config 1 has 3 interfaces, different from the descriptor's value: 4 [ 223.736932][ T377] usb 8-1: config 1 has no interface number 0 [ 223.743869][ T377] usb 8-1: config 1 has no interface number 1 [ 223.749969][ T377] usb 8-1: config 1 has no interface number 2 [ 223.756145][ T377] usb 8-1: config 1 interface 95 altsetting 215 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 223.767143][ T377] usb 8-1: config 1 interface 95 altsetting 215 has an invalid descriptor for endpoint zero, skipping [ 223.778130][ T377] usb 8-1: config 1 interface 50 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 223.791121][ T377] usb 8-1: config 1 interface 143 has no altsetting 0 [ 223.797919][ T377] usb 8-1: config 1 interface 95 has no altsetting 0 [ 223.804747][ T377] usb 8-1: config 1 interface 50 has no altsetting 0 [ 223.815011][ T377] usb 8-1: New USB device found, idVendor=045e, idProduct=0723, bcdDevice=66.09 [ 223.824113][ T377] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.832144][ T377] usb 8-1: Product: syz [ 223.836335][ T377] usb 8-1: Manufacturer: syz [ 223.841276][ T377] usb 8-1: SerialNumber: syz [ 223.874017][ T334] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 44 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 223.886186][ T334] usb 3-1: USB disconnect, device number 44 [ 223.896807][ T334] usblp0: removed [ 224.068714][ T377] usb 8-1: Found UVC 0.00 device syz (045e:0723) [ 224.075217][ T377] usb 8-1: No valid video chain found. [ 224.086695][ T377] usb 8-1: USB disconnect, device number 23 [ 224.337770][ T7729] overlay: Unknown parameter 'subj_user' [ 224.531804][ T1208] Bluetooth: hci0: command 0x1003 tx timeout [ 224.537842][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 224.611164][ T7749] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 224.619171][ T7749] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 224.627551][ T7749] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 224.636628][ T7749] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 224.692265][ T7754] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 224.713445][ T329] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 224.727833][ T7754] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 224.788291][ T334] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 224.846744][ T36] kauditd_printk_skb: 726 callbacks suppressed [ 224.846762][ T36] audit: type=1400 audit(1753709621.955:21683): avc: denied { name_bind } for pid=7759 comm="syz.7.2350" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 224.890955][ T36] audit: type=1400 audit(1753709621.955:21684): avc: denied { node_bind } for pid=7759 comm="syz.7.2350" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 224.913753][ T329] usb 9-1: Using ep0 maxpacket: 16 [ 224.920018][ T36] audit: type=1400 audit(1753709621.955:21685): avc: denied { name_bind } for pid=7759 comm="syz.7.2350" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 224.942427][ T36] audit: type=1400 audit(1753709621.955:21686): avc: denied { node_bind } for pid=7759 comm="syz.7.2350" saddr=::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 224.944689][ T329] usb 9-1: config 1 has an invalid interface number: 96 but max is 0 [ 224.970033][ T36] audit: type=1400 audit(1753709621.974:21687): avc: denied { mounton } for pid=7761 comm="syz.0.2351" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 224.974678][ T329] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 225.014992][ T36] audit: type=1400 audit(1753709621.974:21688): avc: denied { read write } for pid=7761 comm="syz.0.2351" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 225.033625][ T7769] netlink: 'syz.0.2353': attribute type 27 has an invalid length. [ 225.044662][ T334] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.049905][ T36] audit: type=1400 audit(1753709621.974:21689): avc: denied { read write open } for pid=7761 comm="syz.0.2351" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 225.059351][ T334] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 225.084815][ T36] audit: type=1400 audit(1753709621.974:21690): avc: denied { create } for pid=7761 comm="syz.0.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 225.093587][ T329] usb 9-1: config 1 has no interface number 0 [ 225.120597][ T329] usb 9-1: config 1 interface 96 has no altsetting 0 [ 225.122898][ T36] audit: type=1400 audit(1753709621.974:21691): avc: denied { setopt } for pid=7761 comm="syz.0.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 225.134561][ T334] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 225.148319][ T36] audit: type=1400 audit(1753709621.974:21692): avc: denied { ioctl } for pid=7761 comm="syz.0.2351" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x7211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 225.155997][ T334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.189292][ T329] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 225.198398][ T329] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 225.206500][ T334] usb 3-1: Product: syz [ 225.210695][ T334] usb 3-1: Manufacturer: syz [ 225.215418][ T329] usb 9-1: SerialNumber: syz [ 225.220074][ T334] usb 3-1: SerialNumber: syz [ 225.227556][ T7769] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.234782][ T7769] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.254715][ T7774] SELinux: security_context_str_to_sid (syste_uGй :) failed with errno=-22 [ 225.456708][ T329] hub 9-1:1.96: bad descriptor, ignoring hub [ 225.470739][ T7741] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 225.481199][ T329] hub 9-1:1.96: probe with driver hub failed with error -5 [ 225.489129][ T329] usbhid 9-1:1.96: couldn't find an input interrupt endpoint [ 225.502663][ T334] cdc_mbim 3-1:1.0: bind() failure [ 225.513467][ T334] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 225.529788][ T334] cdc_ncm 3-1:1.1: bind() failure [ 225.545326][ T334] usb 3-1: USB disconnect, device number 45 [ 225.552961][ T329] usb 9-1: USB disconnect, device number 21 [ 225.623322][ T7785] kvm: kvm [7783]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x3072 [ 225.725760][ T7790] SELinux: security_context_str_to_sid () failed with errno=-22 [ 225.833275][ T7797] tipc: Enabling of bearer rejected, failed to enable media [ 226.113700][ T7802] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2361'. [ 226.324036][ T7808] tipc: Started in network mode [ 226.349148][ T7808] tipc: Node identity ac1414aa, cluster identity 4711 [ 226.362329][ T7808] tipc: Enabled bearer , priority 10 [ 226.705383][ T7818] netlink: 'syz.0.2365': attribute type 7 has an invalid length. [ 226.740096][ T7818] netlink: 'syz.0.2365': attribute type 5 has an invalid length. [ 226.766077][ T7818] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2365'. [ 226.775463][ T7821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2366'. [ 226.802859][ T7824] binder: Bad value for 'max' [ 226.805140][ T7822] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=36 [ 226.807579][ T7822] rust_binder: Error while translating object. [ 226.817067][ T7822] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 226.823321][ T7822] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:453 [ 226.971537][ T7832] /dev/loop0: Can't lookup blockdev [ 227.493723][ T329] rust_binder: 0: removing orphan mapping 0:4120 [ 227.578532][ T366] tipc: Node number set to 2886997162 [ 227.776695][ T7862] rust_binder: Failed to allocate buffer. len:40, is_oneway:true [ 228.039906][ T7870] netlink: 57 bytes leftover after parsing attributes in process `syz.2.2378'. [ 228.067767][ T7870] /dev/loop0: Can't lookup blockdev [ 228.385372][ T7881] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000000 not found [ 228.406193][ T7881] rust_binder: Write failure EINVAL in pid:469 [ 228.425545][ T7879] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 228.499147][ T7884] kvm: user requested TSC rate below hardware speed [ 228.542252][ T7893] binder: Bad value for 'max' [ 228.557238][ T7894] binder: Bad value for 'max' [ 228.700137][ T7909] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 228.708826][ T7909] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 228.725504][ T7910] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 228.771457][ T7913] 9pnet_fd: Insufficient options for proto=fd [ 229.083175][ T7926] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 229.687098][ T7940] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:99 [ 229.798505][ T7946] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7946 comm=syz.7.2405 [ 229.857956][ T7944] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 229.875771][ T7944] netlink: 'syz.8.2404': attribute type 28 has an invalid length. [ 229.944628][ T7953] netlink: 'syz.8.2408': attribute type 2 has an invalid length. [ 230.112235][ T329] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 230.198355][ T36] kauditd_printk_skb: 937 callbacks suppressed [ 230.198372][ T36] audit: type=1400 audit(1753709626.969:22630): avc: denied { ioctl } for pid=7947 comm="syz.2.2406" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 230.241147][ T36] audit: type=1400 audit(1753709627.007:22631): avc: denied { ioctl } for pid=7950 comm="syz.7.2407" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 230.267444][ T36] audit: type=1400 audit(1753709627.007:22632): avc: denied { read write } for pid=5956 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 230.309403][ T334] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 230.326022][ T329] usb 3-1: Using ep0 maxpacket: 16 [ 230.334763][ T36] audit: type=1400 audit(1753709627.007:22633): avc: denied { read write open } for pid=5956 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 230.362329][ T329] usb 3-1: config 1 has an invalid interface number: 96 but max is 0 [ 230.372357][ T329] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.383233][ T329] usb 3-1: config 1 has no interface number 0 [ 230.389333][ T329] usb 3-1: config 1 interface 96 has no altsetting 0 [ 230.396113][ T36] audit: type=1400 audit(1753709627.007:22634): avc: denied { ioctl } for pid=5956 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 230.422876][ T36] audit: type=1400 audit(1753709627.053:22635): avc: denied { read } for pid=7964 comm="syz.8.2412" dev="nsfs" ino=4026532317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 230.451257][ T329] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 230.460886][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 230.469980][ T329] usb 3-1: SerialNumber: syz [ 230.475688][ T36] audit: type=1400 audit(1753709627.053:22636): avc: denied { read open } for pid=7964 comm="syz.8.2412" path="net:[4026532317]" dev="nsfs" ino=4026532317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 230.500749][ T36] audit: type=1400 audit(1753709627.053:22637): avc: denied { create } for pid=7964 comm="syz.8.2412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 230.515491][ T334] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 230.521891][ T36] audit: type=1400 audit(1753709627.053:22638): avc: denied { setopt } for pid=7964 comm="syz.8.2412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 230.548958][ T334] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.556998][ T5956] audit: audit_backlog=65 > audit_backlog_limit=64 [ 230.563737][ T334] usb 8-1: Product: syz [ 230.582058][ T334] usb 8-1: Manufacturer: syz [ 230.601648][ T334] usb 8-1: SerialNumber: syz [ 230.721358][ T329] hub 3-1:1.96: bad descriptor, ignoring hub [ 230.734520][ T7948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.744801][ T329] hub 3-1:1.96: probe with driver hub failed with error -5 [ 230.751422][ T7948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.752324][ T329] usbhid 3-1:1.96: couldn't find an input interrupt endpoint [ 230.888291][ T7980] netlink: 'syz.8.2418': attribute type 13 has an invalid length. [ 230.896817][ T7980] erspan0: refused to change device tx_queue_len [ 230.967453][ T329] usb 3-1: reset high-speed USB device number 46 using dummy_hcd [ 230.987177][ T329] usb 3-1: device reset changed ep0 maxpacket size! [ 231.000335][ T329] usb 3-1: USB disconnect, device number 46 [ 231.320246][ T329] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 231.352323][ T61] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 231.480608][ T329] usb 3-1: Using ep0 maxpacket: 32 [ 231.488911][ T329] usb 3-1: unable to get BOS descriptor or descriptor too short [ 231.496652][ T329] usb 3-1: too many configurations: 37, using maximum allowed: 8 [ 231.506440][ T329] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 231.514056][ T329] usb 3-1: can't read configurations, error -61 [ 231.525880][ T61] usb 9-1: config 0 has an invalid interface number: 138 but max is 0 [ 231.534231][ T61] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.544317][ T61] usb 9-1: config 0 has no interface number 0 [ 231.553771][ T61] usb 9-1: New USB device found, idVendor=07c4, idProduct=a004, bcdDevice=b4.e3 [ 231.562829][ T61] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.570859][ T61] usb 9-1: Product: syz [ 231.575023][ T61] usb 9-1: Manufacturer: syz [ 231.579632][ T61] usb 9-1: SerialNumber: syz [ 231.585526][ T61] usb 9-1: config 0 descriptor?? [ 231.593511][ T61] ums-datafab 9-1:0.138: USB Mass Storage device detected [ 231.651705][ T329] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 231.812034][ T329] usb 3-1: Using ep0 maxpacket: 32 [ 231.820380][ T329] usb 3-1: unable to get BOS descriptor or descriptor too short [ 231.828577][ T329] usb 3-1: too many configurations: 37, using maximum allowed: 8 [ 231.838977][ T329] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 231.846669][ T329] usb 3-1: can't read configurations, error -61 [ 231.853055][ T329] usb usb3-port1: attempt power cycle [ 232.200369][ T8000] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 232.218494][ T329] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 232.240372][ T329] usb 3-1: Using ep0 maxpacket: 32 [ 232.248621][ T329] usb 3-1: unable to get BOS descriptor or descriptor too short [ 232.256645][ T329] usb 3-1: too many configurations: 37, using maximum allowed: 8 [ 232.266913][ T329] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 232.274633][ T329] usb 3-1: can't read configurations, error -61 [ 232.280398][ T8002] __vm_enough_memory: pid: 8002, comm: syz.0.2424, bytes: 1125904168255488 not enough memory for the allocation [ 232.410700][ T329] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 232.432681][ T329] usb 3-1: Using ep0 maxpacket: 32 [ 232.441022][ T329] usb 3-1: unable to get BOS descriptor or descriptor too short [ 232.448624][ T8013] input: syz1 as /devices/virtual/input/input29 [ 232.449765][ T329] usb 3-1: too many configurations: 37, using maximum allowed: 8 [ 232.465664][ T329] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 232.475948][ T329] usb 3-1: can't read configurations, error -61 [ 232.482715][ T329] usb usb3-port1: unable to enumerate USB device [ 233.075331][ T8017] rust_binder: Error in use_page_slow: ESRCH [ 233.075351][ T8017] rust_binder: use_range failure ESRCH [ 233.081378][ T8017] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 233.086882][ T8017] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 233.094722][ T8017] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:106 [ 233.138129][ T329] usb 8-1: USB disconnect, device number 24 [ 233.423936][ T8036] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 233.433246][ T8036] rust_binder: Error in use_page_slow: ESRCH [ 233.443388][ T8036] rust_binder: use_range failure ESRCH [ 233.450345][ T8036] rust_binder: Failed to allocate buffer. len:24, is_oneway:true [ 233.455937][ T8036] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 233.465115][ T8036] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:113 [ 233.519538][ T8041] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 233.535958][ T8044] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 233.597139][ T8049] rust_binder: Write failure EFAULT in pid:120 [ 233.647396][ T8052] rust_binder: 8048 RLIMIT_NICE not set [ 233.971603][ T366] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 234.014287][ T61] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 234.146327][ T366] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 234.154026][ T366] usb 8-1: can't read configurations, error -61 [ 234.174651][ T61] usb 3-1: Invalid ep0 maxpacket: 64 [ 234.302966][ T366] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 234.313628][ T61] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 234.467214][ T366] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 234.475346][ T61] usb 3-1: Invalid ep0 maxpacket: 64 [ 234.480752][ T366] usb 8-1: can't read configurations, error -61 [ 234.488467][ T61] usb usb3-port1: attempt power cycle [ 234.497301][ T366] usb usb8-port1: attempt power cycle [ 234.858840][ T61] usb 3-1: new low-speed USB device number 53 using dummy_hcd [ 234.869535][ T366] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 234.880924][ T61] usb 3-1: Invalid ep0 maxpacket: 64 [ 234.894628][ T366] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 234.902224][ T366] usb 8-1: can't read configurations, error -61 [ 235.019223][ T61] usb 3-1: new low-speed USB device number 54 using dummy_hcd [ 235.040878][ T366] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 235.048575][ T61] usb 3-1: Invalid ep0 maxpacket: 64 [ 235.054020][ T61] usb usb3-port1: unable to enumerate USB device [ 235.076228][ T366] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 235.083879][ T366] usb 8-1: can't read configurations, error -61 [ 235.090231][ T366] usb usb8-port1: unable to enumerate USB device [ 236.932826][ T36] kauditd_printk_skb: 604 callbacks suppressed [ 236.932844][ T36] audit: type=1400 audit(1753709633.255:23241): avc: denied { read write } for pid=5860 comm="syz-executor" name="loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 236.970370][ T36] audit: type=1400 audit(1753709633.255:23242): avc: denied { read write open } for pid=5860 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 237.008502][ T36] audit: type=1400 audit(1753709633.255:23243): avc: denied { ioctl } for pid=5860 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=56 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 237.048327][ T36] audit: type=1400 audit(1753709633.283:23244): avc: denied { read write } for pid=8069 comm="syz.7.2447" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 237.072624][ T36] audit: type=1400 audit(1753709633.283:23245): avc: denied { read write open } for pid=8069 comm="syz.7.2447" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 237.098462][ T36] audit: type=1400 audit(1753709633.302:23246): avc: denied { read } for pid=8069 comm="syz.7.2447" dev="nsfs" ino=4026532328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 237.098926][ T8072] kvm: user requested TSC rate below hardware speed [ 237.119914][ T36] audit: type=1400 audit(1753709633.302:23247): avc: denied { read open } for pid=8069 comm="syz.7.2447" path="net:[4026532328]" dev="nsfs" ino=4026532328 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 237.129724][ T8072] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3304665512 (6609331024 ns) > initial count (5832947598 ns). Using initial count to start timer. [ 237.152125][ T36] audit: type=1400 audit(1753709633.302:23248): avc: denied { create } for pid=8069 comm="syz.7.2447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 237.188271][ T36] audit: type=1400 audit(1753709633.302:23249): avc: denied { bind } for pid=8069 comm="syz.7.2447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 237.208207][ T36] audit: type=1400 audit(1753709633.302:23250): avc: denied { listen } for pid=8069 comm="syz.7.2447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 237.596882][ T8082] fuse: Unknown parameter 'grou' [ 237.674206][ T8084] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:514 [ 238.016671][ T8089] exFAT-fs (rnullb0): invalid boot record signature [ 238.032411][ T8089] exFAT-fs (rnullb0): failed to read boot sector [ 238.039159][ T8089] exFAT-fs (rnullb0): failed to recognize exfat type [ 238.643464][ T329] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 238.816516][ T329] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 238.828041][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 238.839645][ T329] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 238.849405][ T329] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 238.862329][ T329] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 238.871607][ T329] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.882183][ T329] usb 3-1: config 0 descriptor?? [ 238.985438][ T620] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 239.148484][ T620] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.160113][ T620] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.171361][ T620] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 239.185895][ T620] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 239.196238][ T620] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.205029][ T620] usb 8-1: Product: syz [ 239.209283][ T620] usb 8-1: Manufacturer: syz [ 239.215779][ T620] usb 8-1: SerialNumber: syz [ 239.331697][ T329] usbhid 3-1:0.0: can't add hid device: -71 [ 239.337717][ T329] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 239.360681][ T329] usb 3-1: USB disconnect, device number 55 [ 239.441531][ T8117] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 239.634073][ T8131] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 239.642057][ T8131] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 239.650408][ T8131] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 239.658314][ T8131] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 239.676330][ T620] cdc_ncm 8-1:1.0: failed GET_NTB_PARAMETERS [ 239.701714][ T620] cdc_ncm 8-1:1.0: bind() failure [ 239.707940][ T620] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 239.733389][ T620] cdc_ncm 8-1:1.1: bind() failure [ 239.749331][ T620] usb 8-1: USB disconnect, device number 29 [ 239.913657][ T8151] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 239.948165][ T8154] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2474'. [ 240.025110][ T8157] rust_binder: Error in use_page_slow: ESRCH [ 240.025137][ T8157] rust_binder: use_range failure ESRCH [ 240.031256][ T8157] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 240.036806][ T8157] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 240.044890][ T8157] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:151 [ 240.119077][ T8159] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 240.262777][ T8168] tmpfs: Unknown parameter 'noinode32' [ 240.449570][ T8176] /dev/loop0: Can't lookup blockdev [ 240.529842][ T8180] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 240.538519][ T8174] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.545586][ T8174] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.552738][ T8174] bridge_slave_0: entered allmulticast mode [ 240.558985][ T8174] bridge_slave_0: entered promiscuous mode [ 240.566202][ T8174] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.573279][ T8174] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.580378][ T8174] bridge_slave_1: entered allmulticast mode [ 240.586694][ T8174] bridge_slave_1: entered promiscuous mode [ 240.743805][ T8174] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.750988][ T8174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.758280][ T8174] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.765328][ T8174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.844368][ T5256] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.853099][ T5256] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.872520][ T5256] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.879684][ T5256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.902234][ T5256] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.909285][ T5256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.097798][ T8174] veth0_vlan: entered promiscuous mode [ 241.149614][ T8174] veth1_macvtap: entered promiscuous mode [ 241.172694][ T8211] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 241.180699][ T8211] rust_binder: Failed to allocate buffer. len:112, is_oneway:false [ 241.183385][ T8211] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 241.917751][ T8221] netlink: 393 bytes leftover after parsing attributes in process `syz.2.2494'. [ 242.455034][ T36] kauditd_printk_skb: 693 callbacks suppressed [ 242.455066][ T36] audit: type=1400 audit(1753709638.428:23944): avc: denied { read write } for pid=7628 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 242.524042][ T36] audit: type=1400 audit(1753709638.428:23945): avc: denied { read write open } for pid=7628 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 242.566762][ T36] audit: type=1400 audit(1753709638.428:23946): avc: denied { ioctl } for pid=7628 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 242.609704][ T36] audit: type=1400 audit(1753709638.484:23947): avc: denied { write } for pid=8239 comm="syz.2.2499" name="mcfilter" dev="proc" ino=4026532684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 242.628203][ T8243] rust_binder: 8242 RLIMIT_NICE not set [ 242.641688][ T36] audit: type=1400 audit(1753709638.484:23948): avc: denied { write } for pid=8239 comm="syz.2.2499" path="/proc/176/net/mcfilter" dev="proc" ino=4026532684 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 242.649303][ T61] rust_binder: 8241: removing orphan mapping 0:4248 [ 242.684926][ T36] audit: type=1400 audit(1753709638.512:23949): avc: denied { read write } for pid=7628 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 242.721590][ T36] audit: type=1400 audit(1753709638.512:23950): avc: denied { read write open } for pid=7628 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 242.765131][ T36] audit: type=1400 audit(1753709638.512:23951): avc: denied { ioctl } for pid=7628 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=51 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 242.812658][ T36] audit: type=1400 audit(1753709638.531:23952): avc: denied { read } for pid=8241 comm="syz.2.2500" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 242.836055][ T36] audit: type=1400 audit(1753709638.531:23953): avc: denied { read open } for pid=8241 comm="syz.2.2500" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 243.218943][ T61] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 243.379243][ T61] usb 3-1: Using ep0 maxpacket: 32 [ 243.386630][ T61] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.397570][ T61] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 243.407454][ T61] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0xCC, changing to 0x8C [ 243.418938][ T61] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 243.433686][ T61] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 243.442745][ T61] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.450765][ T61] usb 3-1: Product: syz [ 243.454985][ T61] usb 3-1: Manufacturer: syz [ 243.459568][ T61] usb 3-1: SerialNumber: syz [ 243.684148][ T8248] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 243.980125][ T8255] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 243.980151][ T8255] rust_binder: Read failure Err(EFAULT) in pid:579 [ 244.337985][ T8248] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 244.587714][ T8248] rust_binder: 183: no such ref 2 [ 244.666284][ T8271] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:595 [ 244.859529][ T8276] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 245.810618][ T8296] /dev/loop0: Can't lookup blockdev [ 245.993489][ T8303] binder: Unknown parameter '00000000000000000000000' [ 246.062450][ T61] cdc_ncm 3-1:1.0: bind() failure [ 246.078144][ T61] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 246.101755][ T61] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 246.124097][ T61] usb 3-1: USB disconnect, device number 56 [ 246.142016][ T379] udevd[379]: setting mode of /dev/bus/usb/003/056 to 020664 failed: No such file or directory [ 246.176549][ T379] udevd[379]: setting owner of /dev/bus/usb/003/056 to uid=0, gid=0 failed: No such file or directory [ 246.268542][ T8320] exFAT-fs (rnullb0): invalid boot record signature [ 246.275253][ T8320] exFAT-fs (rnullb0): failed to read boot sector [ 246.281672][ T8320] exFAT-fs (rnullb0): failed to recognize exfat type [ 246.543941][ T8330] rust_binder: 627: no such ref 2 [ 246.551967][ T8330] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 246.559352][ T8330] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 246.880140][ T8342] /dev/loop0: Can't lookup blockdev [ 247.440423][ T8370] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 247.497151][ T8377] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 247.522899][ T8368] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.529670][ T8377] rust_binder: Error in use_page_slow: ESRCH [ 247.530037][ T8377] rust_binder: use_range failure ESRCH [ 247.536247][ T8377] rust_binder: Failed to allocate buffer. len:88, is_oneway:false [ 247.546917][ T8368] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.547997][ T8377] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 247.561883][ T8377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:194 [ 247.570304][ T8368] bridge_slave_0: entered allmulticast mode [ 247.588005][ T8368] bridge_slave_0: entered promiscuous mode [ 247.597874][ T8368] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.613183][ T8377] syz.2.2545 (8377) used obsolete PPPIOCDETACH ioctl [ 247.623444][ T8368] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.635924][ T8377] rust_binder: Error in use_page_slow: ESRCH [ 247.635946][ T8377] rust_binder: use_range failure ESRCH [ 247.656241][ T8368] bridge_slave_1: entered allmulticast mode [ 247.671832][ T8377] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false [ 247.671856][ T8377] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 247.681017][ T8377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:194 [ 247.691595][ T8368] bridge_slave_1: entered promiscuous mode [ 247.706195][ T8380] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 247.832770][ T36] kauditd_printk_skb: 743 callbacks suppressed [ 247.832789][ T36] audit: type=1400 audit(1753709643.460:24697): avc: denied { read write } for pid=8174 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 247.894875][ T36] audit: type=1400 audit(1753709643.460:24698): avc: denied { read write open } for pid=8174 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 247.952345][ T36] audit: type=1400 audit(1753709643.460:24699): avc: denied { ioctl } for pid=8174 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 248.018973][ T36] audit: type=1400 audit(1753709643.507:24700): avc: denied { read } for pid=8382 comm="syz.6.2547" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 248.051045][ T36] audit: type=1400 audit(1753709643.507:24701): avc: denied { read open } for pid=8382 comm="syz.6.2547" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 248.119906][ T36] audit: type=1400 audit(1753709643.507:24702): avc: denied { ioctl } for pid=8382 comm="syz.6.2547" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 248.171708][ T5255] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.178819][ T5255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.196325][ T36] audit: type=1400 audit(1753709643.507:24703): avc: denied { create } for pid=8368 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 248.227779][ T5254] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.228158][ T36] audit: type=1400 audit(1753709643.507:24704): avc: denied { write } for pid=8368 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 248.234908][ T5254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.332243][ T36] audit: type=1400 audit(1753709643.507:24705): avc: denied { read } for pid=8368 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 248.382346][ T8368] audit: audit_backlog=65 > audit_backlog_limit=64 [ 248.495029][ T8368] veth0_vlan: entered promiscuous mode [ 248.561488][ T8368] veth1_macvtap: entered promiscuous mode [ 248.672793][ T8415] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 249.172531][ T8433] rust_binder: validate_parent_fixup: new_min_offset=42, sg_entry.length=0 [ 249.204085][ T8433] rust_binder: Error while translating object. [ 249.237859][ T8433] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 249.244100][ T8433] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:214 [ 249.611873][ T8281] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 249.815040][ T8281] usb 8-1: Using ep0 maxpacket: 16 [ 249.830211][ T8439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.849696][ T8439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.865887][ T8281] usb 8-1: unable to get BOS descriptor or descriptor too short [ 249.880007][ T8281] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 249.887660][ T8281] usb 8-1: can't read configurations, error -71 [ 250.702743][ T8485] rust_binder: Write failure EFAULT in pid:672 [ 250.706471][ T8487] rust_binder: Write failure EFAULT in pid:672 [ 251.073213][ T8508] SELinux: security_context_str_to_sid () failed with errno=-22 [ 251.098885][ T8510] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 251.100210][ T8510] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 251.135982][ T8510] rust_binder: Error in use_page_slow: ESRCH [ 251.174705][ T8510] rust_binder: use_range failure ESRCH [ 251.180743][ T8510] rust_binder: Failed to allocate buffer. len:96, is_oneway:true [ 251.206219][ T8510] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 251.227803][ T8510] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:228 [ 251.621712][ T620] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 251.834083][ T620] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.866504][ T620] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.887054][ T620] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 251.921047][ T620] usb 8-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 251.936162][ T620] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.957799][ T620] usb 8-1: config 0 descriptor?? [ 252.439021][ T620] acrux 0003:1A34:0802.0013: unknown main item tag 0x0 [ 252.476876][ T620] acrux 0003:1A34:0802.0013: unknown main item tag 0x0 [ 252.493160][ T620] acrux 0003:1A34:0802.0013: unknown main item tag 0x0 [ 252.500159][ T620] acrux 0003:1A34:0802.0013: unknown main item tag 0x0 [ 252.507040][ T620] acrux 0003:1A34:0802.0013: unknown main item tag 0x0 [ 252.519870][ T620] acrux 0003:1A34:0802.0013: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.7-1/input0 [ 252.554160][ T620] acrux 0003:1A34:0802.0013: no inputs found [ 252.560178][ T620] acrux 0003:1A34:0802.0013: Failed to enable force feedback support, error: -19 [ 252.654558][ T10] usb 8-1: USB disconnect, device number 32 [ 253.192670][ T36] kauditd_printk_skb: 683 callbacks suppressed [ 253.192689][ T36] audit: type=1400 audit(1753709648.465:25375): avc: denied { read write } for pid=8174 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.255920][ T36] audit: type=1400 audit(1753709648.465:25376): avc: denied { read write open } for pid=8174 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.282703][ T36] audit: type=1400 audit(1753709648.465:25377): avc: denied { ioctl } for pid=8174 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.308494][ T36] audit: type=1400 audit(1753709648.483:25378): avc: denied { create } for pid=8581 comm="syz.6.2616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 253.364159][ T36] audit: type=1400 audit(1753709648.483:25379): avc: denied { ioctl } for pid=8581 comm="syz.6.2616" path="socket:[50293]" dev="sockfs" ino=50293 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 253.430235][ T36] audit: type=1400 audit(1753709648.530:25380): avc: denied { read write } for pid=8174 comm="syz-executor" name="loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.520987][ T36] audit: type=1400 audit(1753709648.530:25381): avc: denied { read write open } for pid=8174 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.556241][ T36] audit: type=1400 audit(1753709648.530:25382): avc: denied { ioctl } for pid=8174 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=55 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.583015][ T36] audit: type=1400 audit(1753709648.558:25383): avc: denied { unmount } for pid=8368 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 253.606255][ T8598] fuse: root generation should be zero [ 253.708978][ T36] audit: type=1400 audit(1753709648.614:25384): avc: denied { read write } for pid=7628 comm="syz-executor" name="loop2" dev="devtmpfs" ino=51 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.911233][ T8611] loop7: detected capacity change from 0 to 7 [ 253.917612][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 253.926800][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 253.941100][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 253.950302][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 253.958220][ T379] loop7: unable to read partition table [ 253.969376][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 253.978583][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 253.992852][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 254.002074][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 254.010038][ T8611] loop7: unable to read partition table [ 254.018805][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 254.028002][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 254.047774][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 254.051165][ T8611] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 254.056987][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 254.092319][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 254.101488][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 254.112399][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 254.121592][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 254.130542][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 254.139750][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 254.148463][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 254.157652][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 254.165508][ T8615] loop7: unable to read partition table [ 254.210016][ T8624] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 254.220915][ T8623] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 254.227841][ T8626] binder: Unknown parameter '' [ 254.316310][ T8630] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 254.430836][ T8623] rust_binder: Error in use_page_slow: ESRCH [ 254.445039][ T8630] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 254.451133][ T8623] rust_binder: use_range failure ESRCH [ 254.466848][ T8623] rust_binder: Failed to allocate buffer. len:1112, is_oneway:true [ 254.478252][ T8630] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:694 [ 254.487984][ T8623] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 254.497176][ T8623] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:284 [ 254.809894][ T8641] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2638'. [ 254.885329][ T8643] tap0: tun_chr_ioctl cmd 1074025675 [ 254.890720][ T8643] tap0: persist enabled [ 255.149641][ T366] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 255.278597][ T8652] rust_binder: Write failure EFAULT in pid:289 [ 255.331353][ T366] usb 8-1: Using ep0 maxpacket: 16 [ 255.359160][ T366] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.373230][ T366] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.394997][ T366] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 255.409439][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2646'. [ 255.422455][ T366] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 255.433133][ T366] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.449697][ T366] usb 8-1: config 0 descriptor?? [ 255.617840][ T8668] binder: Bad value for 'defcontext' [ 255.661904][ T8670] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 255.669900][ T8670] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 255.678360][ T8670] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 255.686360][ T8670] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 255.695305][ T620] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 255.706811][ T8670] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 255.714844][ T8670] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 255.723288][ T8670] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 255.731239][ T8670] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 255.855199][ T620] usb 3-1: Using ep0 maxpacket: 16 [ 255.863639][ T620] usb 3-1: config 4 has an invalid interface number: 140 but max is 0 [ 255.872735][ T620] usb 3-1: config 4 has no interface number 0 [ 255.878921][ T620] usb 3-1: config 4 interface 140 has no altsetting 0 [ 255.888756][ T620] usb 3-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=68.3b [ 255.897827][ T620] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.906501][ T620] usb 3-1: Product: syz [ 255.910726][ T620] usb 3-1: Manufacturer: syz [ 255.913542][ T366] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 255.915422][ T620] usb 3-1: SerialNumber: syz [ 255.928704][ T366] microsoft 0003:045E:07DA.0014: ignoring exceeding usage max [ 255.937967][ T620] ums-cypress 3-1:4.140: USB Mass Storage device detected [ 255.952501][ T366] ================================================================== [ 255.960613][ T366] BUG: KASAN: slab-out-of-bounds in mon_bin_event+0x12c1/0x23e0 [ 255.968311][ T366] Read of size 2816 at addr ffff88810b2696e1 by task kworker/0:3/366 [ 255.976387][ T366] [ 255.978728][ T366] CPU: 0 UID: 0 PID: 366 Comm: kworker/0:3 Not tainted 6.12.38-syzkaller-gd64d8b7dab32 #0 b11b2e695edb96cef1ea16b3c17c686b1091986c [ 255.978762][ T366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 255.978776][ T366] Workqueue: usb_hub_wq hub_event [ 255.978817][ T366] Call Trace: [ 255.978825][ T366] [ 255.978834][ T366] __dump_stack+0x21/0x30 [ 255.978861][ T366] dump_stack_lvl+0x10c/0x190 [ 255.978903][ T366] ? __cfi_dump_stack_lvl+0x10/0x10 [ 255.978928][ T366] ? __cfi__printk+0x10/0x10 [ 255.978958][ T366] print_address_description+0x71/0x220 [ 255.978979][ T366] print_report+0x4a/0x70 [ 255.978997][ T366] kasan_report+0x163/0x1a0 [ 255.979016][ T366] ? mon_bin_event+0x12c1/0x23e0 [ 255.979042][ T366] ? mon_bin_event+0x12c1/0x23e0 [ 255.979068][ T366] kasan_check_range+0x299/0x2a0 [ 255.979086][ T366] ? mon_bin_event+0x12c1/0x23e0 [ 255.979111][ T366] __asan_memcpy+0x31/0x80 [ 255.979148][ T366] mon_bin_event+0x12c1/0x23e0 [ 255.979174][ T366] ? mon_bin_complete+0x50/0x50 [ 255.979204][ T366] ? __kmalloc_noprof+0x1b1/0x450 [ 255.979228][ T366] ? __hid_request+0x1e5/0x410 [ 255.979255][ T366] ? hid_connect+0x49a/0x1a20 [ 255.979280][ T366] ? hid_hw_start+0xcb/0x160 [ 255.979306][ T366] ? ms_probe+0x194/0x460 [ 255.979329][ T366] ? __cfi_mon_bin_submit+0x10/0x10 [ 255.979353][ T366] mon_bin_submit+0x2b/0x40 [ 255.979377][ T366] mon_submit+0x1b9/0x230 [ 255.979397][ T366] usb_hcd_submit_urb+0x12d/0x1a20 [ 255.979421][ T366] ? bus_probe_device+0x18b/0x270 [ 255.979444][ T366] ? usb_probe_device+0x1d4/0x380 [ 255.979460][ T366] ? really_probe+0x2d6/0x890 [ 255.979477][ T366] ? __driver_probe_device+0x198/0x280 [ 255.979512][ T366] ? driver_probe_device+0x54/0x3f0 [ 255.979530][ T366] ? __device_attach_driver+0x2f1/0x4b0 [ 255.979549][ T366] usb_submit_urb+0x111b/0x1800 [ 255.979574][ T366] usb_start_wait_urb+0x11b/0x2f0 [ 255.979600][ T366] ? usb_api_blocking_completion+0xd0/0xd0 [ 255.979625][ T366] ? __kasan_kmalloc+0x96/0xb0 [ 255.979656][ T366] ? __kasan_check_write+0x18/0x20 [ 255.979679][ T366] ? usb_alloc_urb+0x9b/0x200 [ 255.979701][ T366] usb_control_msg+0x25a/0x490 [ 255.979726][ T366] usbhid_raw_request+0x457/0x590 [ 255.979752][ T366] __hid_request+0x1e5/0x410 [ 255.979777][ T366] hidinput_connect+0x241b/0x3340 [ 255.979799][ T366] hid_connect+0x49a/0x1a20 [ 255.979826][ T366] ? usbhid_start+0x1a67/0x2530 [ 255.979848][ T366] ? __cfi_hid_connect+0x10/0x10 [ 255.979875][ T366] hid_hw_start+0xcb/0x160 [ 255.979901][ T366] ms_probe+0x194/0x460 [ 255.979925][ T366] hid_device_probe+0x2c4/0x5d0 [ 255.979953][ T366] ? __cfi_hid_device_probe+0x10/0x10 [ 255.979980][ T366] really_probe+0x2d6/0x890 [ 255.979997][ T366] __driver_probe_device+0x198/0x280 [ 255.980026][ T366] driver_probe_device+0x54/0x3f0 [ 255.980043][ T366] ? __device_attach_driver+0x2db/0x4b0 [ 255.980061][ T366] __device_attach_driver+0x2f1/0x4b0 [ 255.980078][ T366] bus_for_each_drv+0x260/0x2f0 [ 255.980111][ T366] ? __cfi___device_attach_driver+0x10/0x10 [ 255.980128][ T366] ? __cfi_bus_for_each_drv+0x10/0x10 [ 255.980149][ T366] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 255.980191][ T366] __device_attach+0x2bd/0x3a0 [ 255.980224][ T366] ? device_attach+0x40/0x40 [ 255.980251][ T366] ? _raw_spin_lock+0x8c/0x120 [ 255.980273][ T366] ? __cfi__raw_spin_lock+0x10/0x10 [ 255.980296][ T366] device_initial_probe+0x1e/0x30 [ 255.980325][ T366] bus_probe_device+0x18b/0x270 [ 255.980349][ T366] device_add+0x80c/0xc00 [ 255.980377][ T366] hid_add_device+0x39b/0x560 [ 255.980404][ T366] usbhid_probe+0xde3/0x12b0 [ 255.980429][ T366] usb_probe_interface+0x696/0xc00 [ 255.980447][ T366] ? __cfi_usb_probe_interface+0x10/0x10 [ 255.980465][ T366] really_probe+0x2d6/0x890 [ 255.980487][ T366] __driver_probe_device+0x198/0x280 [ 255.980517][ T366] driver_probe_device+0x54/0x3f0 [ 255.980533][ T366] ? __device_attach_driver+0x2db/0x4b0 [ 255.980551][ T366] __device_attach_driver+0x2f1/0x4b0 [ 255.980587][ T366] bus_for_each_drv+0x260/0x2f0 [ 255.980610][ T366] ? __cfi___device_attach_driver+0x10/0x10 [ 255.980629][ T366] ? __cfi_bus_for_each_drv+0x10/0x10 [ 255.980653][ T366] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 255.980677][ T366] __device_attach+0x2bd/0x3a0 [ 255.980707][ T366] ? device_attach+0x40/0x40 [ 255.980734][ T366] ? _raw_spin_lock+0x8c/0x120 [ 255.980757][ T366] ? __cfi__raw_spin_lock+0x10/0x10 [ 255.980779][ T366] device_initial_probe+0x1e/0x30 [ 255.980808][ T366] bus_probe_device+0x18b/0x270 [ 255.980832][ T366] device_add+0x80c/0xc00 [ 255.980860][ T366] usb_set_configuration+0x1ad4/0x20b0 [ 255.980893][ T366] usb_generic_driver_probe+0x95/0x160 [ 255.980918][ T366] usb_probe_device+0x1d4/0x380 [ 255.980935][ T366] ? __cfi_usb_probe_device+0x10/0x10 [ 255.980953][ T366] really_probe+0x2d6/0x890 [ 255.980972][ T366] __driver_probe_device+0x198/0x280 [ 255.981001][ T366] driver_probe_device+0x54/0x3f0 [ 255.981019][ T366] ? __device_attach_driver+0x2db/0x4b0 [ 255.981038][ T366] __device_attach_driver+0x2f1/0x4b0 [ 255.981057][ T366] bus_for_each_drv+0x260/0x2f0 [ 255.981080][ T366] ? __cfi___device_attach_driver+0x10/0x10 [ 255.981098][ T366] ? __cfi_bus_for_each_drv+0x10/0x10 [ 255.981122][ T366] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 255.981146][ T366] __device_attach+0x2bd/0x3a0 [ 255.981175][ T366] ? device_attach+0x40/0x40 [ 255.981202][ T366] ? _raw_spin_lock+0x8c/0x120 [ 255.981222][ T366] ? __cfi__raw_spin_lock+0x10/0x10 [ 255.981246][ T366] device_initial_probe+0x1e/0x30 [ 255.981274][ T366] bus_probe_device+0x18b/0x270 [ 255.981298][ T366] device_add+0x80c/0xc00 [ 255.981325][ T366] usb_new_device+0x9ed/0x1590 [ 255.981353][ T366] ? __cfi_usb_new_device+0x10/0x10 [ 255.981380][ T366] hub_event+0x2c81/0x4270 [ 255.981416][ T366] ? __cfi_hub_event+0x10/0x10 [ 255.981444][ T366] ? __kasan_check_write+0x18/0x20 [ 255.981469][ T366] ? pwq_dec_nr_in_flight+0x6c7/0xc60 [ 255.981503][ T366] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 255.981527][ T366] ? kick_pool+0xb9/0x550 [ 255.981546][ T366] process_scheduled_works+0x7d2/0x1020 [ 255.981578][ T366] worker_thread+0xc58/0x1250 [ 255.981610][ T366] kthread+0x2ca/0x370 [ 255.981628][ T366] ? __cfi_worker_thread+0x10/0x10 [ 255.981656][ T366] ? __cfi_kthread+0x10/0x10 [ 255.981674][ T366] ret_from_fork+0x67/0xa0 [ 255.981697][ T366] ? __cfi_kthread+0x10/0x10 [ 255.981715][ T366] ret_from_fork_asm+0x1a/0x30 [ 255.981755][ T366] [ 255.981775][ T366] [ 256.605271][ T366] Allocated by task 366: [ 256.609511][ T366] kasan_save_track+0x3e/0x80 [ 256.614214][ T366] kasan_save_alloc_info+0x40/0x50 [ 256.619333][ T366] __kasan_kmalloc+0x96/0xb0 [ 256.623935][ T366] __kmalloc_noprof+0x1b1/0x450 [ 256.628801][ T366] __hid_request+0xa9/0x410 [ 256.633328][ T366] hidinput_connect+0x241b/0x3340 [ 256.638363][ T366] hid_connect+0x49a/0x1a20 [ 256.642886][ T366] hid_hw_start+0xcb/0x160 [ 256.647362][ T366] ms_probe+0x194/0x460 [ 256.651537][ T366] hid_device_probe+0x2c4/0x5d0 [ 256.656406][ T366] really_probe+0x2d6/0x890 [ 256.660932][ T366] __driver_probe_device+0x198/0x280 [ 256.666322][ T366] driver_probe_device+0x54/0x3f0 [ 256.671361][ T366] __device_attach_driver+0x2f1/0x4b0 [ 256.676740][ T366] bus_for_each_drv+0x260/0x2f0 [ 256.681595][ T366] __device_attach+0x2bd/0x3a0 [ 256.686382][ T366] device_initial_probe+0x1e/0x30 [ 256.691423][ T366] bus_probe_device+0x18b/0x270 [ 256.696283][ T366] device_add+0x80c/0xc00 [ 256.700641][ T366] hid_add_device+0x39b/0x560 [ 256.705332][ T366] usbhid_probe+0xde3/0x12b0 [ 256.709945][ T366] usb_probe_interface+0x696/0xc00 [ 256.715056][ T366] really_probe+0x2d6/0x890 [ 256.719559][ T366] __driver_probe_device+0x198/0x280 [ 256.724856][ T366] driver_probe_device+0x54/0x3f0 [ 256.729895][ T366] __device_attach_driver+0x2f1/0x4b0 [ 256.735271][ T366] bus_for_each_drv+0x260/0x2f0 [ 256.740148][ T366] __device_attach+0x2bd/0x3a0 [ 256.744931][ T366] device_initial_probe+0x1e/0x30 [ 256.750060][ T366] bus_probe_device+0x18b/0x270 [ 256.754940][ T366] device_add+0x80c/0xc00 [ 256.759300][ T366] usb_set_configuration+0x1ad4/0x20b0 [ 256.764781][ T366] usb_generic_driver_probe+0x95/0x160 [ 256.770296][ T366] usb_probe_device+0x1d4/0x380 [ 256.775157][ T366] really_probe+0x2d6/0x890 [ 256.779679][ T366] __driver_probe_device+0x198/0x280 [ 256.784976][ T366] driver_probe_device+0x54/0x3f0 [ 256.790000][ T366] __device_attach_driver+0x2f1/0x4b0 [ 256.795374][ T366] bus_for_each_drv+0x260/0x2f0 [ 256.800235][ T366] __device_attach+0x2bd/0x3a0 [ 256.805010][ T366] device_initial_probe+0x1e/0x30 [ 256.810043][ T366] bus_probe_device+0x18b/0x270 [ 256.814900][ T366] device_add+0x80c/0xc00 [ 256.819251][ T366] usb_new_device+0x9ed/0x1590 [ 256.824027][ T366] hub_event+0x2c81/0x4270 [ 256.828482][ T366] process_scheduled_works+0x7d2/0x1020 [ 256.834050][ T366] worker_thread+0xc58/0x1250 [ 256.838734][ T366] kthread+0x2ca/0x370 [ 256.842803][ T366] ret_from_fork+0x67/0xa0 [ 256.847320][ T366] ret_from_fork_asm+0x1a/0x30 [ 256.852092][ T366] [ 256.854418][ T366] The buggy address belongs to the object at ffff88810b2696e0 [ 256.854418][ T366] which belongs to the cache kmalloc-8 of size 8 [ 256.868128][ T366] The buggy address is located 1 bytes inside of [ 256.868128][ T366] allocated 7-byte region [ffff88810b2696e0, ffff88810b2696e7) [ 256.881927][ T366] [ 256.884257][ T366] The buggy address belongs to the physical page: [ 256.890685][ T366] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88810b269340 pfn:0x10b269 [ 256.900851][ T366] flags: 0x4000000000000000(zone=1) [ 256.906065][ T366] page_type: f5(slab) [ 256.910062][ T366] raw: 4000000000000000 ffff888100041500 ffffea0004309ec0 dead000000000002 [ 256.918646][ T366] raw: ffff88810b269340 0000000080800073 00000001f5000000 0000000000000000 [ 256.927226][ T366] page dumped because: kasan: bad access detected [ 256.933645][ T366] page_owner tracks the page as allocated [ 256.939371][ T366] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 1901053801, free_ts 1843956199 [ 256.957705][ T366] post_alloc_hook+0x3b9/0x3f0 [ 256.962492][ T366] prep_new_page+0x1c/0x120 [ 256.968045][ T366] get_page_from_freelist+0x46bb/0x4750 [ 256.973599][ T366] __alloc_pages_noprof+0x30d/0x6c0 [ 256.978802][ T366] alloc_slab_page+0x6b/0x1f0 [ 256.983493][ T366] allocate_slab+0x69/0x440 [ 256.988031][ T366] ___slab_alloc+0x59a/0x8b0 [ 256.992641][ T366] __kmalloc_noprof+0x243/0x450 [ 256.997494][ T366] acpi_ns_internalize_name+0x2cf/0x470 [ 257.003041][ T366] acpi_ns_get_node+0x1a4/0x350 [ 257.007909][ T366] acpi_ns_evaluate+0x36b/0xa50 [ 257.012769][ T366] acpi_ut_evaluate_object+0x153/0x5a0 [ 257.018237][ T366] acpi_ut_execute_power_methods+0x9f/0x1d0 [ 257.024137][ T366] acpi_get_object_info+0x55d/0xe60 [ 257.029337][ T366] acpi_init_device_object+0x6d0/0x15b0 [ 257.034887][ T366] acpi_add_single_object+0x10c/0x1960 [ 257.040348][ T366] page last free pid 1 tgid 1 stack trace: [ 257.046150][ T366] free_unref_page+0xae5/0xdd0 [ 257.050918][ T366] __free_pages+0x6b/0x3b0 [ 257.055335][ T366] __free_slab+0xb6/0x110 [ 257.059669][ T366] free_slab+0x18/0xf0 [ 257.063751][ T366] discard_slab+0x23/0x40 [ 257.068082][ T366] __slab_free+0x201/0x2b0 [ 257.072496][ T366] ___cache_free+0xc9/0xe0 [ 257.076910][ T366] qlist_free_all+0xb5/0x130 [ 257.081512][ T366] kasan_quarantine_remove_cache+0x33b/0x360 [ 257.087521][ T366] kasan_cache_shrink+0xd/0x20 [ 257.092293][ T366] kmem_cache_shrink+0x11/0x30 [ 257.097072][ T366] acpi_os_purge_cache+0x19/0x30 [ 257.102017][ T366] acpi_purge_cached_objects+0x93/0xd0 [ 257.107477][ T366] acpi_initialize_objects+0x32/0xb0 [ 257.112759][ T366] acpi_bus_init+0xcf/0x6d0 [ 257.117266][ T366] acpi_init+0xc5/0x23b [ 257.121445][ T366] [ 257.123770][ T366] Memory state around the buggy address: [ 257.129393][ T366] ffff88810b269580: 05 fc fc fc fa fc fc fc fa fc fc fc fa fc fc fc [ 257.137448][ T366] ffff88810b269600: fa fc fc fc fa fc fc fc fa fc fc fc 05 fc fc fc [ 257.145505][ T366] >ffff88810b269680: 05 fc fc fc 05 fc fc fc fa fc fc fc 07 fc fc fc [ 257.153565][ T366] ^ [ 257.160758][ T366] ffff88810b269700: 05 fc fc fc fa fc fc fc fa fc fc fc 05 fc fc fc [ 257.168815][ T366] ffff88810b269780: fa fc fc fc 05 fc fc fc fa fc fc fc 05 fc fc fc [ 257.176866][ T366] ================================================================== [ 257.184920][ T366] Disabling lock debugging due to kernel taint [ 257.203867][ T8643] tap0: tun_chr_ioctl cmd 1074025675 [ 257.209199][ T8643] tap0: persist enabled [ 257.215338][ T366] microsoft 0003:045E:07DA.0014: No inputs registered, leaving [ 257.237680][ T366] microsoft 0003:045E:07DA.0014: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 257.255669][ T329] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 257.266377][ T366] microsoft 0003:045E:07DA.0014: no inputs found [ 257.283539][ T366] microsoft 0003:045E:07DA.0014: could not initialize ff, continuing anyway [ 257.333111][ T366] usb 8-1: USB disconnect, device number 33 [ 257.395206][ T8680] fido_id[8680]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 257.409576][ T329] usb 6-1: device descriptor read/64, error -71 [ 257.661913][ T329] usb 6-1: device descriptor read/64, error -71 [ 257.756403][ T620] usb 3-1: USB disconnect, device number 58 [ 257.918645][ T329] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 258.057481][ T329] usb 6-1: device descriptor read/64, error -71 [ 258.314027][ T329] usb 6-1: device descriptor read/64, error -71 [ 258.432326][ T329] usb usb6-port1: attempt power cycle [ 258.731461][ T36] kauditd_printk_skb: 421 callbacks suppressed [ 258.731480][ T36] audit: type=1400 audit(1753709653.656:25806): avc: denied { ioctl } for pid=8674 comm="syz.5.2650" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 258.795153][ T329] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 258.817028][ T36] audit: type=1400 audit(1753709653.740:25807): avc: denied { ioctl } for pid=8674 comm="syz.5.2650" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 258.819862][ T329] usb 6-1: device descriptor read/8, error -71 [ 258.842542][ T36] audit: type=1400 audit(1753709653.740:25808): avc: denied { ioctl } for pid=8674 comm="syz.5.2650" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 258.873318][ T36] audit: type=1400 audit(1753709653.740:25809): avc: denied { ioctl } for pid=8674 comm="syz.5.2650" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 258.898315][ T36] audit: type=1400 audit(1753709653.740:25810): avc: denied { ioctl } for pid=8674 comm="syz.5.2650" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 258.923320][ T36] audit: type=1400 audit(1753709653.740:25811): avc: denied { ioctl } for pid=8674 comm="syz.5.2650" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 258.948395][ T36] audit: type=1400 audit(1753709653.768:25812): avc: denied { ioctl } for pid=8674 comm="syz.5.2650" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 258.992860][ T36] audit: type=1400 audit(1753709653.899:25813): avc: denied { read write } for pid=8368 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 259.018468][ T36] audit: type=1400 audit(1753709653.899:25814): avc: denied { read write open } for pid=8368 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 259.020174][ T329] usb 6-1: device descriptor read/8, error -71 [ 259.043863][ T36] audit: type=1400 audit(1753709653.899:25815): avc: denied { ioctl } for pid=8368 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1