last executing test programs: 4m7.96451266s ago: executing program 32 (id=434): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) readlink(0x0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000200)={0x8, 0xeeee8000, 0x2, 0xffffffffffffffff, 0xf}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000400)="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", 0x1f000) 2m7.68147934s ago: executing program 0 (id=2011): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0x7fffffff, 0xfff, 0x4, 0x5, 0x7, "da3cd760c823b17db54aa1eca45baf6be445f2"}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000080)={0x0, 0x8, 0x5, 0x1}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000480)={0x0, 0x0, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000880)={0xe, 0x2, {0x7, @struct={0x6}, 0x0, 0x8, 0xda3, 0x0, 0x1b0, 0x3, 0x92, @struct={0x6, 0x5}, 0x5, 0x7fff, [0x514, 0x5561f60d, 0x0, 0x9, 0x80, 0x81]}, {0x0, @struct={0x9, 0x8}, r1, 0x2, 0x8, 0x9, 0x9, 0x776, 0x10, @usage=0x4, 0x8, 0x92, [0x1, 0x9, 0x6, 0xb8, 0x9b2a, 0x79]}, {0x4a72c5ff, @struct={0x5, 0x8001}, r2, 0x9, 0x81, 0x8, 0x99d7, 0xff, 0x40, @usage=0x1000, 0x97, 0x78, [0xcb, 0x6, 0x7fff, 0xfffffffffffffffc, 0xfa73, 0x7]}, {0x6, 0x3, 0x52}}) (async) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000702, 0xee00, &(0x7f0000000c80)) (async) r3 = socket(0x11, 0x2, 0x4) (async) r4 = openat(0xffffffffffffffff, &(0x7f0000000d00)='./file0\x00', 0x20040, 0x40) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d80), r3) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000e80)={0x9, 0xb}) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r6, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) (async) r9 = dup(r0) flock(r9, 0xf) (async) socket(0xa, 0x1, 0x10000) (async) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000001040)=0xfa5) readahead(r9, 0x8, 0x18) (async) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000010c0), r6) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x30, r10, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x14000}, 0x4000840) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000011c0)=0xd) (async) socket$key(0xf, 0x3, 0x2) (async) r11 = socket(0x10, 0x5, 0x9) (async) r12 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r12, &(0x7f0000001200)={0x28, 0x0, 0x1}, 0x10) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(r11, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x40, 0x2, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfffffff9}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f00000015c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x28, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000}, 0x1) 2m7.615763322s ago: executing program 0 (id=2016): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$BLKCRYPTOGENERATEKEY(r0, 0xc030128a, &(0x7f0000000080)={&(0x7f0000000000)=""/121, 0x79}) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000240)=@v3={0x3000000, [{0x0, 0xffffffff}, {0xf, 0x4}], r1}, 0x18, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/72, 0x48}, {0x0}], 0x1000000000000129) 2m7.580033352s ago: executing program 0 (id=2017): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad00020000", 0x2b}], 0x1) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) (rerun: 32) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000180)={0xfffffffe, {{0xa, 0x4e24, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e23, 0x4000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffe01}}}, 0x108) socketpair(0x2, 0xa, 0x8, &(0x7f0000000300)) (async) getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000080)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) (async) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0]) 2m7.506616153s ago: executing program 0 (id=2021): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setrlimit(0xd, &(0x7f0000000000)={0x66e, 0x96ed}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415603, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000540)=[@enter_looper], 0x50, 0x0, &(0x7f0000000600)="8dcdbd6d42ccdb4d556e7c2df713f0976fa3babb5f759be053e97109c9075d28dd5945ae6cb4e4d7866fe0493fb5c9157fdee7247f8cbf6c4e75526dc08c3ae8609b8760a00535639755c0fd5010ceba"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000180)=[@request_death], 0xfffffffffffffe6a, 0x0, 0x0}) 2m7.493100714s ago: executing program 0 (id=2022): r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e, 0x400) recvmmsg$unix(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000000c0)=""/2, 0x2}, {&(0x7f0000000100)=""/128, 0x80}, {&(0x7f0000000180)=""/133, 0x85}, {&(0x7f0000000240)=""/154, 0x9a}, {&(0x7f0000000300)=""/118, 0x76}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x6, &(0x7f0000001400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x108}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001540)=""/110, 0x6e}, {&(0x7f00000015c0)=""/8, 0x8}, {&(0x7f0000001600)=""/226, 0xe2}, {&(0x7f0000001700)=""/212, 0xd4}, {&(0x7f0000001800)=""/102, 0x66}], 0x5, &(0x7f0000001900)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x60}}, {{&(0x7f0000001980)=@abs, 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000001a00)=""/82, 0x52}, {&(0x7f0000001a80)=""/7, 0x7}], 0x2, &(0x7f0000001b00)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x30}}], 0x3, 0x40000001, &(0x7f0000001c00)={0x0, 0x3938700}) connect$inet6(r4, &(0x7f0000001c40)={0xa, 0x4e23, 0x6, @remote, 0xe}, 0x1c) ioctl$int_out(r3, 0x4, &(0x7f0000001c80)) recvmmsg$unix(r2, &(0x7f0000002000)=[{{&(0x7f0000001cc0)=@abs, 0x6e, &(0x7f0000001e80)=[{&(0x7f0000001d40)=""/1, 0x1}, {&(0x7f0000001d80)=""/147, 0x93}, {&(0x7f0000001e40)=""/38, 0x26}], 0x3, &(0x7f0000001ec0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x108}}], 0x1, 0x40000000, &(0x7f0000002040)) recvmsg$can_raw(r24, &(0x7f0000002600)={&(0x7f0000002080)=@un=@abs, 0x80, &(0x7f0000002480)=[{&(0x7f0000002100)=""/219, 0xdb}, {&(0x7f0000002200)=""/44, 0x2c}, {&(0x7f0000002240)=""/148, 0x94}, {&(0x7f0000002300)=""/106, 0x6a}, {&(0x7f0000002380)=""/127, 0x7f}, {&(0x7f0000002400)=""/87, 0x57}], 0x6, &(0x7f0000002500)=""/221, 0xdd}, 0x40000000) getsockname$unix(r11, &(0x7f0000002640), &(0x7f00000026c0)=0x6e) sendmmsg$inet6(r7, &(0x7f0000003ac0)=[{{&(0x7f0000002700)={0xa, 0x4e24, 0x0, @remote, 0x1}, 0x1c, &(0x7f0000002a00)=[{&(0x7f0000002740)="8845f720dd27090dd53cc4730ca739871bf1fd30017b479571c6fa0a9aec1f", 0x1f}, {&(0x7f0000002780)="289fb6da93bfbc9ffac738d9bba4a95c734e47aa4edbf0b4b4e6ea8dff4813defa898da28f4655172c6f55f46a0c7a888d07ed4bddb71dd7adf117645e5dd011520b6b8956be380d010dbd4ef0c7841b572fddcc021bb8b9571e6b90f5105bf354e0c7855f00ccd3a0e8fafc739eec5dfab4f7b337", 0x75}, {&(0x7f0000002800)="0e76480393f87ff7ac1bc87bb48fe6f75bccf65090ec4d08c3d343507bafc048116065fd832e7107c38b62480b7341a546b5ad5b795551f7d52f152c1e79", 0x3e}, {&(0x7f0000002840)="8f29ff9b5146c15d1404b0d6385b00e868afe42e2f2dde817e4167f4f2eef15c07bf8d9b2c0e616b433e4b8762de4efaf5a3b8026578ed2a78eb3b7ee3b6fe49b6d79fc6d7c03cf0de812424b3963dd9ea6b89a65a175871a40d5e1649c1a9cb7a1c205e669f430547c53ebf1a8bbf39666962982a788c8a101df5280b3ce45d32fd6963898c832dcceae58bb2eaa93d5f", 0x91}, {&(0x7f0000002900)="1ac90ebbd5abd2c328008bd7a015c2f25bb02e1dadc85863514720f3eace549bd7eb073a031a1d21a36d761c7e6a7417f78a4e024bc5e60745e86cc363da9910853e3a0b1b04c123eaf056ebf13a06aa31fda37c61b8e2f19207b30dd1ee18f30b843de851eb01704bf415c2eee4aed036e8090bfc367b7ee42bf773077d9e2c5fde0333c88c1d9ef470c7c2a22318b7fd500ebdeb470c5448dc79c7ebe33d9fc7d0aff5420ea9b92ce1a7835199a3c1e08d3c2abc9e580bfa734f6b6e18317e1fcd70a72056bfc881f377363b8cfedebc3acec19522ad11f67ace3dfa5db472a5ae6e1a94eae4862300df225aea1682207070ad68372703", 0xf8}], 0x5, &(0x7f0000002a80)=[@dstopts_2292={{0x1028, 0x29, 0x4, {0x3a, 0x201, '\x00', [@enc_lim={0x4, 0x1, 0xe}, @generic={0xff, 0x1000, "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"}, @enc_lim={0x4, 0x1, 0x3}, @pad1]}}}], 0x1028}}], 0x1, 0x2404c814) recvfrom(r23, &(0x7f0000003b00)=""/224, 0xe0, 0x435b802fa89a4b91, &(0x7f0000003c00)=@in6={0xa, 0x4e22, 0x7945, @remote, 0xfffffff8}, 0x80) fcntl$lock(r7, 0x7, &(0x7f0000003c80)={0x2, 0x4, 0x8, 0x6603, r12}) openat$fuse(0xffffffffffffff9c, &(0x7f0000003cc0), 0x2, 0x0) timer_create(0x2, &(0x7f0000003d00)={0x0, 0x25, 0x0, @tid=r15}, &(0x7f0000003d40)=0x0) clock_gettime(0x0, &(0x7f0000003d80)={0x0, 0x0}) timer_settime(r27, 0x1, &(0x7f0000003dc0)={{r28, r29+10000000}}, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r30 = openat$cgroup_ro(r5, &(0x7f0000003e00)='cgroup.freeze\x00', 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r30, 0x4068aea3, &(0x7f0000003e40)) accept4$vsock_stream(r6, &(0x7f0000003ec0)={0x28, 0x0, 0x0, @local}, 0x10, 0x800) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r22, 0x8008f511, &(0x7f0000003f00)) socket$inet6_icmp(0xa, 0x2, 0x3a) prctl$PR_SET_FPEMU(0xa, 0x3) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000003f40)=0x2) lchown(&(0x7f0000003f80)='./file0\x00', r9, r16) r31 = pidfd_getfd(r20, r26, 0x0) write$selinux_create(r31, &(0x7f0000003fc0)=@access={'system_u:object_r:hald_cache_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x1ff}, 0x65) r32 = getegid() fstat(r10, &(0x7f0000006500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r25, &(0x7f0000004040)="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", 0x2000, &(0x7f0000006880)={&(0x7f0000006040)={0x50, 0x0, 0x6, {0x7, 0x2b, 0x100, 0x4224110a, 0x8000, 0x5, 0x2800, 0x7, 0x0, 0x0, 0x2, 0xc}}, &(0x7f00000060c0)={0x18, 0xfffffffffffffff5, 0x2, {0x5}}, &(0x7f0000006100)={0x18, 0xfffffffffffffffe, 0x8, {0xc}}, &(0x7f0000006140)={0x18, 0xffffffffffffffda, 0x4, {0xf}}, &(0x7f0000006180)={0x18, 0x0, 0x80}, &(0x7f00000061c0)={0x28, 0xfffffffffffffff5, 0x3, {{0x9b4, 0x7fff, 0x0, r18}}}, &(0x7f0000006200)={0x60, 0xfffffffffffffffe, 0x3ff, {{0x9, 0x0, 0x9, 0x0, 0x7, 0x7, 0x4, 0x4}}}, &(0x7f0000006280)={0x18, 0x0, 0x5, {0x55}}, &(0x7f00000062c0)={0x1a, 0x0, 0xffffffffffff8000, {'/dev/fuse\x00'}}, &(0x7f0000006300)={0x20, 0x0, 0x5, {0x0, 0x4}}, &(0x7f0000006340)={0x78, 0x0, 0x8, {0x6, 0x4, 0x0, {0x2, 0x1, 0x9, 0x8000000000000001, 0x7fff, 0xfffffffffffffffa, 0xaeb, 0x1, 0x5, 0x1000, 0x9, 0xee01, r32, 0x9, 0x3}}}, &(0x7f00000063c0)={0x90, 0x0, 0x922, {0x4, 0x3, 0x3, 0x5, 0x3, 0x2, {0x4, 0x2, 0x1000, 0x5, 0x5, 0x1, 0x5, 0x1, 0x4, 0xa000, 0x1d, r14, r19, 0x1ff, 0x4}}}, &(0x7f0000006480)={0x78, 0x0, 0x2, [{0x2, 0x1, 0x1, 0x8, ']'}, {0x4, 0x8000, 0xe, 0xcaa, 'cgroup.freeze\x00'}, {0x5, 0x5, 0x1, 0x7, '\x00'}]}, &(0x7f0000006580)={0xb0, 0x0, 0x7, [{{0x1, 0x0, 0x8, 0x5, 0x6, 0x9, {0x5, 0x5, 0x2, 0x4, 0x1, 0x3, 0x800, 0x1, 0x1ff, 0xa000, 0x4, r21, r33, 0x7fff, 0x1}}, {0x5, 0x2, 0x1, 0x401, '\x00'}}]}, &(0x7f0000006640)={0xa0, 0x0, 0x9, {{0x2, 0x2, 0x9, 0x4, 0x401, 0x3, {0x5, 0xc4ac, 0x5, 0x3, 0x101, 0x0, 0x9, 0x0, 0x7fff, 0xc000, 0x4, r13, r17, 0xe, 0x7}}, {0x0, 0x12}}}, &(0x7f0000006700)={0x20, 0x0, 0x7, {0x8, 0x4, 0x5, 0x2}}, &(0x7f0000006740)={0x130, 0x0, 0x0, {0x100000001, 0x6, 0x0, '\x00', {0x8, 0x80000001, 0x5, 0x400, r13, r1, 0x6000, '\x00', 0x0, 0x7, 0x1000, 0x1, {0x864, 0x280}, {0x3ff00000000000, 0x5}, {0x9, 0x80000000}, {0xd, 0x4}, 0x8, 0x5, 0xd, 0x100}}}}) prctl$PR_SET_FPEMU(0xa, 0x2) bind$inet6(r2, &(0x7f0000006940)={0xa, 0x4e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c) 2m7.471474844s ago: executing program 0 (id=2023): sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x18000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x8000}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x40, 0x1, 0x21, {0x21, 0x31, "378f3c71a315db604725869acb7740711ca221cea9e0246e8ffbbfb99d47f1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, &(0x7f0000000100)={0x20, 0xe, 0xb3, {0xb3, 0x6, "3cb90ec048f0985a5cf8afc7c8728aadb931519830287930064d71cdddb25f4e8b2211a6ba73e5031084fd26043bd7290b57a9d7a6d6091ec5e8866f5e21007a74bde6b8f74bf70b0717e977eadaa22e7d22c8898ab28c3be1e0610bbac7a04f28562a6a205cb534a9572b44506e397d6f7d0baeb6af64d9228705c4f428af1975ce7bba57ee8bf44c504b2d2e9008ca08796ea9551f8b61ee1728816b50f179f7a43168c2aa274e26bcfb313239c1583f"}}, &(0x7f0000000380)={0x0, 0x3, 0xb4, @string={0xb4, 0x3, "7688c9a07fefee99369de07ea1b03f2679a0470de646eba4d8edd0bd77479d70550fee7e8621c54c80b3d905af8311a2a8cc98d2516e96618e52637d840f33ddc4fb573e5556c975dca2f93a7896fe1a06ce97bee348167155c7280d1790c96057c28712fb8019aaa857ac75af24e1ed17abfcc5930d83d0a77bb46bda5098ca98b9bd452500b16ece7012e64d41f4c2f154895d4dcc7ce459415ee406af567d7ca9253f5fee167f981fce1c5be5a77f9280"}}, &(0x7f0000000000)={0x0, 0x22, 0x11, {[@main=@item_4={0x3, 0x0, 0xb, "55668b53"}, @local=@item_4={0x3, 0x2, 0xa, "59e1f241"}, @main=@item_4={0x3, 0x0, 0x9aaa0023cf68052c, "38f49ddf"}, @global=@item_012={0x1, 0x1, 0xb, "1e"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x5b2}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000440)={0x20, 0x16, 0xd8, "dcb829608ca4ef3526b8b0eed56c2372b54607fe5fe179ec333806b0dae3edd23b03e69c85103cfba2e2b7a6abd2a6879c8d54682eb9a509d4c23ce73de6673895664d60183d8c6066e3c4c9f1eeadfadf73f70311f9c4bcf459858c92e3f7b7dbb5af8cb23bd35dd85340845ab263666177aa3d5136e2f8798bb47ddc6fecc6426345b750faa63b33b8d55a8b9a3863327550978ad92e96fa6ca44f9feed7d8a2d4072760a02c525120b48c0e20b098cd08c2ae5359b60a81fc0650c94c8f633feee9ce13100fea9f02b8991801841e0cbe936da2396f11"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000580)={0x20, 0x1, 0x1c, "33a73d9470fb60661ac896fbc76f1b5582fac67d457fe67c33e2b550"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0xc}}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) unshare(0x62040200) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r3, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m6.763744658s ago: executing program 1 (id=2030): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000000)="17000000020001000003d68c5ee1768812002b08020300ecff3f0002000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ab65761407a681f009cee4a5acb3da400001fb700674f39b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) r2 = getpgrp(0x0) fstat(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_clone3(&(0x7f0000000d40)={0x20118800, &(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0), {}, &(0x7f0000000c00)=""/60, 0x3c, &(0x7f0000000c40)=""/147, &(0x7f0000000d00)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x8}, 0x58) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f00000077c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0xfe05a, 0x5000, 0x0, 0x0, 0xc}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000009800)="8c22fafcfe3a869279bb40a3a35f36a0713e540b44d239155c277b2bfb98c7f5af7111b2c563e5481c9f0bccdb310c589231ab33eccdd49f17a091a4da3399ff19a2b28efc04de473d4f7a6520d6bdf2b2d5b1b724be630606ba97f43d6b141f0aab6090860b63849507b5c6f37ebcbc9c42484b4df0e18231f9773f475285614c585828d5e00672497736b89558e3042b9f75e9c9f09ce0bacc0908d090006bb52974e5f1c2ab355927e6cdc2b4e92cead5762d74a5e75822efde7e99e57b2346a605f0f7a5a2e27f05b108a10cdc1c5c34919214b92f40f691540baaf02db446e7a02e4db2bb9e8318c9c510b27ee1d9427ccae3c2acd8e1e78a7e2c42cd40670e88d4395da63c78584257504be2996c6ae50246f35d5f87f22955d7fc2b59240e9c0cbb03428b9a1fc408ec1d06d2d3c79f8eb6e82e49af89d1e82e9fe2b9dc1881084361650c976729c3837012a27f692c00f7aacffc939674a77fd8861955a730a7ad4e8d2244b8142b0c27cba87ce607a9a01dc6a3064c17fbd2276843ba97f7e4e3cb4cac814b4aeced312c86544d20db49b2d417602b6a21d1b8b9d7fcf27286ee3ae307f6b03e7c73cb2f5550ebe4c0cfdd554b6c8056f53682f797451fc7bdfbe352d7789ee8f157a41d097ae51bb4ce38e25cce7dbd8bbd437cbc3eb936124371394c00e80a4d7d6b587a2f13862d18b49bb80472e7568a8cc3bd73f2bd7d9a7c8dff58a82d9f5cafdaec6dd421594cfc16ad0f3a06c74ad52297cbcdb6e46cbcfad6b498fc7f0f2ff70000e9cd9263d09ccea8f4ecdade1015b05620401e54c01786bd2b5274f7efe636822eb56477040d3773695a06cfa90c9fc47a662b3b7e3d48b7d43a1707b678f758a9b3757ae763e949c0e30fc3d31d7a198e99cc0c8566e3421119f32cde80fa7566cae3b2b86a634c12ef25208630462906db1de027fa1267db918bf78fab6bacaea997455140eac18ea47ce887ea3900b17b6acb3361ea5222464974f23e94d98d6b15aedd6584d0f0dd2f43dc056a61d30ef194d4aa2bd4043653e3a048a85cb3a3ff02df51f31909f0dade7ed60da3a4f978efc3e9f4dfea40aa0b73b9ad92e91f312382d5b0ef3726c785d8d3209373c518feeede96b3c143a7d427f17ecb5c5fcb9e9bfdf06809a4a66f3de33de7a0171b451f6e1fe671b9fd8c5cf1eff3d3ea24e00098f86e48a97eb7c4304d450a02efc11e418690b6c1ab52b243780aa97dac1f99ddc43ae02a1214330f9d05f4b66e79bc72fe090ec8cf2dcaa6f142b91c50b43bce156c14fa48920e985d13f66e0e4417c501cb76d573953328b0af5607d3c8af238ea9db8311637ea90012dd5557e5d27484a2d6bab1a4b32f6720075a1b8891d767376a1d1971dd36f92bd0724fe0fa89e7cf1bddca61706359b782af57a369ec0b573e26080b9d77459ace399139e6e648a3588664a50dd327f88764c955440e567536e0772d020bfecd5aa71b14755a4e4ed7297d6ba3e14d06ae279351e14bad13704d00eb51e42f37026fa33cd7e8fed872572111c7b713516ecd2fd0e0d87292cec843894f1965e1b05085a16d00f1a19ce8052e91b19d2266644febd8cb51c1967e0b8075490e46c08ee9691970925d37603a410b330f87d3871a3f158a1af3f5e8a6e0427bfd1182d77010ccc18c40be88f13879451a8bc95be513524f396b257ca51da1d2ed2b1581425105f8db62e3f38bc7dc7601a9c552cf3e49bcbe4486e57d85c22d49f5bad467a0ee741979505d4af7f2d8ab5ff6b424084a5ed6f9bf40fe5192b68d5f93a08f7f9d7b54e7e8ca1e97b70824f444657ee279d0a8d648d46feb9047d4d874f22ffdb72e6178bb7f556a6c96e48c386f56f87afa2b3e2c076c5a710d4320149fbc68fc0d1fb14ac331a134f940e3da0171828dca0108c94d359fe8d55bb74be6bcf3b9d5b75dd278d3b742fdac4e01e27308761eef29c8646ede01b14410e77f633ec96e7f12043e523271f3156ba68c2c84660ad89b01ddcf7725491ab09eefcc39ad35708cadf37503d1326fd0fca7b871a9c530d4e93d3fb668c68a258eb81d0354d8dfef2dd0cf57601add97a8c1a0dc2fca32bc8df607bed67a7bf65f34cc8cb147c6cc0d5613482bb36f02110a88a26f03e02d7499f058904feba2ce05f83bcd4c294ccf32d6317a4365e36666683fa32b24306af92e9d41b71a014a9b4b5156fe737e90f978231bf768db33907ac1d41e65cb96d4f132a065c2b5fe884f508161c9461cf768ddbecbc5c5cf6b43255508645ed853cfce1979940e1d6b3b5769d56e598f2df3437310cee31c143b0002104aee3e49a6d6c341ca06f61cf7e962c56cc75246cf11bf4fb8f2387bd044897682f05f0529a316a12b17da49c8046c65e24bf223ef972f389a887ecebfac111fc83e55f07cc51c36132021824826719b67ccbcef6cd16705e9f189dea3f5cfa599766d385044a16f619e26922bb94cc1276a1dc73713f1e6014f7d7973e216cc3abbb5b33656c329c5f2da821b5564fb449fb666d1699eaadab4fdb4184a8b06b84ec974507804676e7a64a9b76d387e8e0823f6c00a134261e0541ada940d1543fa640e7e3a5064ec23b09b306935ee98b629e0cce30b4cc5b96923909aaf585b89871a48fb934b2a58665feae1a1aaf04d28f7ea87d63d6ed9749b4eb52812acb62dfe19838a47e942d54c11f22f6389066d93b4126da8cd03754c1471e38e0498cebfa0411f0270cc92f4e4cd51a928ccb490a65d9c568406194ccb56ce6d6dac9928c3d76d8bf0e56e3ac17982c97d9bb729a8bfc2c8851402948bbf4460c42f302bce6d83ab16d170ec1d6d634fb79eb4bf6bc238b7db072a531692c3255d2847ed3f5d5c0b96a03e4ab321188758e7ae2bb6088832f9c19992f3c41b95d02eddf61c393028d0696c1bb86c226af5e51f99ccb192e1fe173c0586e7386a3b1cfe2bb497858e38c11520a68bdcd3e150507856aaeec067fe2d393ea06c161c0c4f19395c32f6ee93be625e5ee6d9a42abc5d4bc23ef82f91bece9f8d0dc6da5a4656942b3ef13eb875bfeda5b49b903db0a621347bf3231cd2500de511942f1fdb5fc65478305dcc8cc49d96d3add4208f379c5f0ce4c83f37d51a3ad6b607011f845ec0d73165a17255a4352c3dc7fcd98c6b36e73b6e0dfaaa3bc489ccb7bbe55dff6c008dce7b30f97eee84b0281675003c8dbc3b9e4f4c4031a6e4e64016a3de62826463cfb550f35783f7a670504c36846f96f794146efdf7c541e0c6add82bf0d33f9c521a44e2b8645f82618c1d49c7833f191a594710108812bce1621e70de6e20f37f25a968bfd2a85fd458e3363fa67d86deb63b8903bd57178f970487ce19d3b3b34181498ea29bb0b6d2732083d7070daaec47d6acea649e286e9f0cd55029ac73933b763cd70c9bcffe500761a76ea0d292d24f53fabaf796f54c2fe072996816d3b803b943d4a94a59ffa742d1a03de9c7ef1d5e4dee2e365c3ad8322fab373c2e9f22b6bce4c6032ff80a0b34fd460ad93dc00bcc47d9f3f4fbf210f67dd07d44590c9c6a2812d2254f99706d14ce9043c8456b627c8949f7d516425c902c073043310e83500cb3f4a74a3bffd9e96ae8021c4926f1645209780f0ef2fa86dc034f3077798ebe7b7dd681eab29bc4b054afcfa2fcc523b292b8ecb74a2f56ea8a46647d74d7c95a952289331625fbfbaa78c0fa83f706881c4523939cb214271c00efaa1b44b0ff3ec2ba90564ccd754dd4750daa376bde93c98f5ab300d7761707ff43cf555a8447076cbd683128c4b099c15d744248b8ce29059ee636a661e7b379db30ce9c48e76da3d9cf320067440cf6a32559f0b69973390475c88fd1a8294e7b45269359f3b9869a7128dac9fbfd3eafc382be204a868d364a263cfe7f982a66bf68d816a49a1c278be9a1ed509466f2adff5832ae8416ede89d729a1c0865db3f1051a9d92e72754e40596c3f055d6be439570ed378050a13303e8bdc3ea6517563b8612c96e346f52d6994d7ad8bf50046467a60dbd6edea3f6a40e14e2dbd27aded3a2893f4797485cda537cb780b615a17e0fe73840c977af4b14b9dcf44f12a6856d553ca9229934629961af7b4ebfb0a5ed86ab38ecff29ee7b92f8dd96c2c99f8fcdd901299cc1a31be271887558c36bda2b8e5dade5cb14e6e18589406d417a09b0569ab1c6d145c9d70b63633475e344c6e3bbdad82e542e88d9b993fd610c229baf6100c82727c197fd638e0e44e01f9ff8ed6c41d9c6d04713915bc5f52bc7151e734a5eaf8ced1ceec2521b6fece63d37b8fc0f40074a6544da9c65749b13155c7e88e26873a8a3967b3ca6e47ade4b161a120857c870c61bc1a4faa3d8707de833a085a3b18c89d4972984e57ad5c1fa6d9c4c6abadede349f61d13186bc9fa4b4302b8d0ae0827ba9039b0f7e4103ed55109a08dfde968d9fb5c6e0e0c8749af84e580e4ddb367e6f635567c72cee461bc8db0704979c6917042aa7788355a54662a93a3f39688d1899f90df2cb0e894db42f0b7a47823a48d5f1fe7cbdf2cebfcffda575bc62f13db8c0c5d33e6bf99055d3195315c8c1bd17ae3469cf707ff92097af732165d9a45d1abb5a48cb915a911e3f9898419c2a68d3b68960965bdf708ede24c07c6cfae57041721e677f0ce6a4b4cdf824aaa1cf4befee53b06ac4ac1c05b44819df77303b60ee3256b5a3cb01df82f63d8b5add95dc73a666b4cd2cafa4f78854a117f9d0dcb870d9415cd604458bab0f30308db7065fb48794631c365b4fb4154d5f7f57545c6efe0e734e17453ecb76e02f9a08a5ad01382b42491620dcc0346d4bd35b37ce1848d53c3b5230bc01b5ab85c5aeeb7a908b22a56eaf64547f605bb92b68924d8640c483fa694d48542c445f9378dcb07c0a56208610f95ee6ff02f05e877ffe53f64388276f38ba2f896730406f4623286b151c398a45b2b4b544006cd85421f07aa95ce84a762b062a33707726ba4b2811cccaf762b15b8b09ca11832c3f80b4eef3f9b53b93b5065605ad6836fa5b3264f220d3c7fa8e9503881dd6452f24b5477c35acda70343d21c3737491479389e1c7b66bf239a12ae3a119591275fc039f54210f0666853e9bf60cddeefca3dd9f4c8bab859132a899d1925bfd93ec9cec4080626c3da5a4f8ffe9b4f3f27771cb6c8765a68aedd261e21cc67e7373e817524d5aa0eea192ec0602368723a84bf08c75c1df03bd45e65cc51abb29c14c8ae8cee1d95a4322a40fbd9a5cff4eed2b04f4af87643ddacfc547ea92e72db4696f66ca9ee0d7e5749ec8b74f683872eeee91d035bd13f0adf8ca95b83673116e76edf7408edd4f1ddc583b0450e77795b10bf62289bf839342dd6985198559b16f80e9f2dd08ddc55290137198fd83839eb3e75aa150180783be7e2e0a28c72c054803fd1b005766b0afbc1abefe952530acdd5c5da19a16d6108e3feb805f1b3c58c4ab8ad1e2c71e09ed0fabd6826f7ec4afed3b3701ab96db8d2f611b0b4cac333060438957533ba0de3bebf7acf7b0ecac781085bf7470202515d224ce277f37894539812b6dbcbfb2a2f219ea9cd48eed0f98670643f3ffe3133fa4818d4d628a076abecc8626ea7c211ade48d0fe04f54d191e687ff38f14feb96e4cebae431bf4b63fa4baff5f50903fe855dfabb88cfb7bb11c52b07213ff1d7081482b19e410f1cec99c33ce698132c70e3413e58d5b94fe4d9ad6f7c0cd51e7383c19bb65436adddbd7e2d6464635859fbfd1e591d351c407e0b5b117837ffce3c70bc6232014d0e98f37d42dc4512293dc483ed249afcfc59b672d88103caf693e7218f7437763cbdd875d37488b13a22be623cb85f715ebbcd891262c9060b5765924004392419d0758ff12777a937ffd7d8ffb2aeee89cdf6111e5fd60913f293d6dc71cac5da772e7f4b16ca96c1685edeb29c2e65464cc7715d2289f05b93ebde3954394d702fc40d1eedfb71d43de08f8f81b3a0348ae1872e8101da7ca8961607132e2ce175859a87307663b39b97303f9a6d2989196d7c5ddc404280fb81d06597bad1e9d1264f6f947a759710dcdecf8e7de37a526614e7993427f51f70305cee7aec7a25d587154b01c3f023d30b932c971359d912fdd793d63f9eeff269c8482bb473896a96cf08fcbf2dbd258ebfbd034057ed249dd8c543762911aba3f7f6126feed91f3a231e907b4352a4a683b71030af71ebaf0d250ddd4c501acc026a89ed4db3e5cfc12cf2a13e4543a407ea193ba4920c5c72d1ca031bf7545817d062b464f5d8f2d2ca4fc05b66fc60aca14ce46647d937634acecf88742eeb296b494d91b72d664158e0f116528036dd0c08a9682a9d7ddf15feac269e00149593ba48166844ef6bec407baaf8b760dd881b8923297787ece552c3462b8e10c4933280df65e568a68cfddeec4e446fa15f1d2a3528112480a38fc28d6ce7057e453969acdcc00ed7f94618b50400bf842e7f6073795dc6d601e2e592ab0805cadf90915f09cf0706db925c9c99aa7a397f033c7a9f908cd5c1df04d3b06ec4d0ced9f0da1a290b35ebf1b35a6b500479b045f6499c499b47f83c03ff04ed5afaba64edee2e9f5014717d66d8496f74e93786ca6b580ef747f92bc0ddaf01a5d7093728d3980f4e38b7e4f341df7b427db1cd5f0e1b67b174d694455443888cd5e31888a23fbcadacebfc09f146d76ba488dca7085f4140c90a5eec497ce4c03a16302179ddb98ea456be36abfd7600c6448243160c79634e41f6536e3dcf94d1a84ef50052a9c39db77b142ca40940acf2f878cda7d6428b307c5972d82d7dc4daac8e59fa3530127c1463ff6efb768732e66ef48d64ee8fd8d3c3c14b1b07d2b25a61d5f814e4f64c64968029db479f380819abcd852ce3461d12571e6a1012f351ec0ea0ee00214f367714b08e3e524db25443402f11a46a13e7d3cb9bacf2f39dc01b1e235fe748bc2c26d310808692cdbec7002b76e3eab01c55cbb338bc15ecfa53d6efdeff44b8587d033dc063db498f15f835e8137c2e0e05ed8372388f20bb382d568acf0451d797f8e90c43e514c7fa8defcad2b9c848590c12d9d52d762a5bee2f036cbbab9c318c21ecab5452d5b3863a2c5f6e5ada2e00568dd029f8e738effe4c2d9d0251ba6b9d7b361d8cb43dda8a0c0e6c8704885b8f32acf5408a30fa0d189a6b2292abf30e0a8acc8415b8f677144511283a020082900a417bfcd7387dd0dbd0547dbc79abf88fee3b7e8a4d8001ca4910aac10e3aa0dbd1b8e87f90352cb9e12509619c8e0b6f2f1e86141fc56fa3b112c4e3fcb60d838cb75e31034e060aeb83c8ecd38b1fda7253103a79e4f960c92d4fd72fd8da6016232dc89707315175464db60046edb7bf51669ae463c59fdf488c09ecc70e8f3dcc24a93f046bd30430897955f1fc237e866a5782c89d830b0850dc8452e4c6a8d302f599dd033b501fa191c980fc115cf7e2826ae577fc977c894b3232f8f6e37c266dc3d472e344629bb9a942d33f9e880603a0a07222c2e3569442f7735e4ea62ef4fa8736f80a75784a60c733bb899d49ea723ad622f9576b0f90b44921bbeefef272841c6b0348d438780049d48c859109509ccb12d123c2bb8b0d7da0dde33cd134101db8455d3d4ecb4fe693d34a858f55d2c15c353a98e18e1a53e51cbe77814a4fd8ecb7141232df723d406afbabec96f2dededeaf441307da5ed235d329084f5ddb46c460ad79b37677136930cefa4dc3eb786f879e6b201058e008ab5f0788e48515d6565d3c972a1a5b41910f64d851a9d5e6ec03541502e3f0c03ea2887be1afe640382f23ec05d97694679a022110c0eeec6c756c45013c11fd574bb97248e5bbb4f0fa8d89f395d44072921ea3abe7ef125267893d1c7b626059c133592b6f77739a7b4e7e4e3b587315a1bbe4c459f0c052cf855d399c6132b3f8371975a792ce9589f8307d609e7390a1842c9ee48bc6de76d58e06d173cd74be81089cca691423de2e5906439b2d9221175b411f8a3f4ae698defefcdcd35e7b809c6e6d2d7ec8e68cf098a41f6a31766ef95e95ea14f11612b56f7c7fbb67d2e46966cdae325c6bbdbfff6a4c0db35e7688502724566f22bcb3535148cb51b05f307a7ccc9e79e83bfa2b7f88fe8fbf7fcdf88836279a3a59f2a5aea713a0c313b3df5c9458afd8d6df34dd5644d1781b6d7441791390105efcc765f09ac12f310a52623535392375b232b9fb6263f1301c38e8c50341f9e7549783d2a0641bd2230e7fec1f9cccbc7a3940f9e9cab143fcf7ae7b7fc476ffa06215e42b750b3b99e800aa1062e49805594bf9591435621d90723e0e58e1bb2a2973431b9afe64589f8228ed62981f1761466ffbd3775f217bbe8c4d6ab82026cc6591425c871b9e92392900b894465f12ba85791c49edba73906685ead7774039ba5f0e6823e8f315ca9932e9298f13ff4409044c70238135789fd2f518f6ca3da048304a859287a6096d8294beed0c99e6259351e10631f1d6b207365b77554d119c4676110acfa5e43f4a39cd19cc30e519a2bf8c590592bd3b449dc3dfb13d0712296dd9c77948bb06dac109c3d573dace2169bb7df5f5cbd2bdd4a543860a13c2a7c26b7a15a24dbf1c607e91126ff3c564b0c9f424cce366d822f1e1be5e2900378b532c25acddefb3aee8630579d9a94bc6782c4b59d6ec1785cf2a9a426a4950a4cda8ab034c272f09e56bafbffdb3b5adb9a110408e947b54ebd53b92c4a7c9bd07d18a91f23227c8b8366f6125d8a7e3186cdff882fa7ccf3df180fc73ec387254636362055ffc0ee208f5a1d82df0afec5087d7a09077a8beb796e572117ec3cd79bf4b9f8cc2b02471fd0ed8cedb5161e0d4a63148b7682c9dec0876b9840ed17e749f1f557beec34c10f96d7bcdbde40a68648ff931614c828949afa08075a4f6c0d341f097af5a82df1c8a15c688e36218a16d1176fc7dbc1727bca620d1c8ebf772c2694ba60f9f6f06931251664138729dd8755956ba7137c016076527c37dd380613c15b0f9d1169bb46ed1b0a6c0a16625f17fc30ce42b6a69736b7bf8827fae8f0b253afb825c533ecdac42d4eae093c84f6829f03a0332929e18d180dcaf8f2cae314811660f7b8cad717b0104c8390c72f79dc858998545514eb21eb154dfa2925c6168434bcbf6cd006ed472f4d6a114b7deca0d3169e4f3c8ef1445f009008ef30fc8d619dc546ee5f523eff47ed8ecf67ad14a3d629f1a2a636c00730dcf31014cae8cafa68defd6cefc8cf10506a44053660485ca597be4f1a6d72033fdc1e25af15f81ce53b4edf198252b387213e6afa625c07f64ba5f4b1b6b09210fefa634ea8956fd4c4ff701d7faddce24caa0a71d64ed81a2d988637010dd56dc23af277086a11cd9b9c6f281c90f91bba5d9d98faa0e1daededbab7820085c6dffb28987e15806398adc26f8ed774a804ddfcb7e828d6f15e59018bce98c2e52e4b0e6ba02a9f6f7f64ee1c6a4a893f505d02229d0c4387cc438c5a726b0a628bf20e001cdd2732e9117c6df6a0b2bccb9182c8b0286b6144771cd167f7540fdd01d9d4979cd2f1d9aa0819024857f9e7ce3dee40369dd831e2bedc7ad80e6b1ffb4aeb141ac633b46fd43cf4bf8f5074c003e3e2e892392c5612b315feef76402b2225b5ba55df84a2bd1412dafc1c47569a1128744f4e0d178bb6a5870cbc534c40b21a334984d400bc12cef113a69c757d2d1d692ccb7d15dc97f4c99fc249fb863f32e5d5afd6f966d6dd9756d500d85fbaafacf50bd5a2e6ae8419c50825354345c6ec699327466bf0e90c1756ee3fc30469e0914ac595ca512f06039b4ccf3ef6aee882082674cd2502e8765a3ac3b6a57f1c3c0fe5d1d115e9a2509d00bb6caf3406c79a74e74df85498dd697a8832dc52d383be6990c10495e189a37f2f414aee855c484c18946b8f7133d9066f90dd74cac5fcd356b215d40b3b22dcfc4f444f37ff58af5992df290e68d59a99d7c074bc6f2b48af91cf4242b9b8864ad698289fa7ff09233369d25368f0b1ce07c308dc48950c0393f163236b04fb78531772b649962c6c79baa5ed749b7bbaf96555f06d3b278a377c19ffce16b6a13065f817c1fbc8e9f595571519fa164f21e6779f8b7d5e1603c458e0d732e3368765b2cc92205ab4bc68f14790e646903fb5a1cee2b5392c0822a17b1d0651417e6ba9c9c5563a45b339ff0be850354731153576f2af90acabde32e85638952d3abf1f80e9d79c44f9eda6e2be1afaae44575025d1a5882faecff8ea5fad549310a0f1d3371c6c3c004fec1a898e817bd72963c586ba914d9453045256622404db4108043a4551b1632c506d4a9b8fef1eec5092cfcb9c3bb4153a2360f4c7a899f49d9bef584cc51d886004ff855a190396b09400fc662604ab61365336028b92af6fdbce224f141c9649cb2d52c32966a35e109e7b88db48e482b4588486c6a61d702c2421ab0bb73c3ba95042d6ca95235e8a50fe41eb9d0b94468b6a253874e7a0dd7f00100b2a26af44fd2e898d47bfda020aaf47d66b51f00df3e432974249e8eb43c6b5e53ec713b521b97bce7e9bc4c695427c16dda8039ede324bcb86640b1b26d9a90773897589bd5710e4e7ea6c149cbf7a72f38df77bfae3403de40b43c9b908fbf42097dc00314ddd27a77a91832e0cb2269d3f55efb5c65dc0628601e5cdad2f6e62a74b7aac8135daba4a6d4414101722d75ccea10a4b46ec8e52e3183d34b2ea2408ae078ceb8d0a74fcc8215a58f90dc9a369f9a87ea49b53f21c1cdc4d04fa81941c951f59a5a369177a35c8a178f129f0a174fdfa4f027db5eb5d794dd51baa61e2fb89e32e6e871ad9df576cc13cdb097ef551e68dbd52cdc2f6895a2185457f6efd474d383d0b7db3f9628b03b40c9d5a1a49f8a6eca4ca7613a8270bb181114f64997faf3bfca83a56267b50fd6158c6e1cbd86abc3466b396b26e2c71ac34cd1d88e4717db20e03868884ffacdbdc6a4ccca08da84aaaa6fe44e77436ebf4c5985231738fe395ca367ee224f416c202f916928f5b83414456e9684265608c4b3e3feb1d8ee5980d04956e49db3c958f91b341be7099c9db471ba06501107e3f8cbbf4e98b43ee78b4cdb56461ba2ce30db4e18eadab76dfff3dc694f95da5bdf38839ea8bb4b7b792c77d8aa95d85e66307336e70f4712bb47b1a52ec2d8a6dec007de96dfece58bb2915898930e48553f0518bc85324b6c9279421eec54b0e7e7aabff91441351c3e2ef802620a6a5c23349c8cadc6b49821ba19f205a4668776d1d220d8002db049f310244a613d597e9203645596cc46e87c18708299cf22724a2a30fdf82f104950449c98d407b5887be2ce66562db7286989029d37b11677b563dd55824bca19d8cbddf88ec02c97c94d8b5d9dc710dfd34d753cb3a8724b28250fdf75807e999657f201d642b19608bb693f2e0a323ee3e65cd54a22f3cf8c426a65af5ee78069623688f17ea2", 0x2000, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x78, 0x0, 0x0, {0x8000, 0x6, 0x0, {0x0, 0x8000000000000001, 0x4, 0x8, 0x9, 0x4, 0x7, 0x9, 0x1000, 0x8000, 0xa52, r9, 0x0, 0x6, 0x9}}}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0xfffffffffffffffe, 0x4, {0x800, 0x0, 0x4, 0x8000}}, 0x0}) r10 = creat(&(0x7f0000000dc0)='./file0\x00', 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000e00)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000e40)={0x0, 0x0}, &(0x7f0000000e80)=0xc) r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r13}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r13, &(0x7f0000004280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r13, &(0x7f0000004200)={0x50, 0x0, r14, {0x7, 0x1f, 0x0, 0x0, 0x0, 0xfffc}}, 0x50) syz_fuse_handle_req(r13, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x1000000000008, {0x1, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffc, 0x400000000002, 0xfffffffffffffff9, 0x0, 0xbf57, 0x7, 0x0, 0xc000, 0x1, 0x0, r15, 0x0, 0x7fffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000000f40)=[{{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f00000000c0)="a9c33b1b", 0x4}], 0x1, &(0x7f0000000680)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r1, r1, 0xffffffffffffffff, r1, r0]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x24, 0x1, 0x1, [r1, r0, r1, r0, r1]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r1]}}], 0xf8, 0x20000092}}, {{&(0x7f0000000780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000800)="832312dda4aa393ff3abb1c0648d246bd741202c43f2b6518bf7bb233bed8c380854e8631dbccae9f5cdff321bbbb2c5448c03783acd9449e6499f0f30e7e9372d47ef4a650f2f6e8ae363d4a1597b4f7302257d42da72340caac16baaaf49504495afa42cadc2b8aa4831bf39aea60dceb2b359620456ed315f6e667f8c5217b794f32ef02e1d6e021502be", 0x8c}, {&(0x7f00000008c0)="e9ed33e23559ba0d1e1b56447704bd1873990ba19c99dca3212d8b3d1d0b537196ccf3dc8535194b7e68add9b6505640c52497cbecc51c5adb8f99cd1b10c0e2714fef202c590bbaa21c215511ae490ecc85b50ae136ea11c28936d7791596910e34e2f235061550540d269bf59c970ee622112c8bc93e9947e59ff4181a1253c1120c68882e1c352941e782fd973b8cc3a0d1d876c465bd9eaa3674ae624c64f88b7a969a9e4d09ca0a845149a07bda9cd8621599123058415ce7a35477dac9cae8e30af84c6f88037bc7acda18a6ca14c903e643d8f71a55fae63ed61c81fe1b2bc5320942d086f8113a14266a5606b0c21a76aa0bf974", 0xf8}, {&(0x7f00000009c0)="f4b31b8a6264407133f1256c255b61c56be9c44092b133be37a3652eae3c513c06a9ac67b37468e8039cfb12678f80882aa38ca1b9b58715b72311e50582bff76423adf72b045c0b0676f6f4767dd8a2e69a1cbaaf8ed1404616bb966aec19827321b452acea28478834be8f5edc80b7023259e81e9f80eda3f48c13e46ae432e063bb9297055662bb969d3857a5e1ad68e72276e071dcfa5ccffea0d31dc03402e97a03894352c4ed930254335ffd9556229356f8c666c6e0a7ed0d978bb97d792a7fbe568bfc291a41064c9f0b8b3a71e44973674c", 0xd6}], 0x3, &(0x7f0000000ec0)=[@rights={{0x18, 0x1, 0x1, [r0, r5]}}, @cred={{0x1c, 0x1, 0x2, {r6, r9, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r0, r1, r1, r10]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r15}}}], 0x80, 0x20008000}}], 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0xfffffffe, 0x930}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001600010000000000040000000a40"], 0x20}}, 0x0) r16 = userfaultfd(0x801) ioctl$UFFDIO_API(r16, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r16, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r17 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8940, 0x0) readv(r17, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2) 2m6.747100358s ago: executing program 1 (id=2031): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x5) (async) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) (async) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000040)={0x2, r1, 0x1}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) (rerun: 32) write(r3, &(0x7f0000000480)="4d4287ac770767f7429748", 0xb) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl(r4, 0x5451, 0x0) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r6) (async) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)={0x30, r5, 0x701, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0xa}, @val={0x8}, @val={0xc, 0x99, {0x9, 0x58}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x40840) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xea200, 0x0) (async, rerun: 64) r8 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) (async) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r10, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) (async) dup2(r7, r10) (async) ioctl$BLKRRPART(r2, 0x125f, 0x0) 2m6.718649088s ago: executing program 1 (id=2032): syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xd7, 0x56a, 0xc6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfb, 0x40, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x6, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0x846}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0xf5, 0x7b}}}}}]}}]}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xffffffffffffffff) (async) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x3ec0) (async, rerun: 32) sendto(r0, 0x0, 0x0, 0x4, 0x0, 0x0) (rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0xbf}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 2m6.151922999s ago: executing program 1 (id=2034): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @empty, 0x2}, 0x1c) r2 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001480)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r4, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) lseek(r1, 0x4, 0x0) splice(r8, 0x0, r6, 0x0, 0xf3a, 0x0) write$binfmt_elf64(r7, &(0x7f0000000380)=ANY=[], 0x18c6) inotify_rm_watch(0xffffffffffffffff, 0x0) read$FUSE(r5, &(0x7f00000021c0)={0x2020}, 0x2020) r9 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000000c0)={'wg1\x00', &(0x7f0000000000)=@ethtool_cmd={0x2, 0x2, 0x3, 0x3ff, 0x3f, 0x7, 0x1, 0x3, 0x6, 0x3, 0x101, 0x142f, 0x8, 0x3, 0xfc, 0xa, [0x4000000, 0xff]}}) write$cgroup_int(r3, &(0x7f0000001500)=0xffffffffffffffff, 0x12) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r11, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty=0x2000000}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x9) 2m6.09080245s ago: executing program 1 (id=2035): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x501701, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x7) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r2) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc20e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x40, 0x30, 0x6, [{{0x9, 0x4, 0x0, 0x6c, 0x2, 0x3, 0x1, 0x0, 0x4, {0x9, 0x21, 0x9, 0x9, 0x1, {0x22, 0xb36}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x7, 0x1, 0x8}}}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r2, 0x83c0550b, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x3ffffffffffffe, 0xe}, @flat=@binder={0x73622a85, 0x200, 0x8000000002}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x2f}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"}) 2m5.370498594s ago: executing program 1 (id=2039): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022f7"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x9f, &(0x7f0000003380)="b9425b44651dd232419635990000dbaf0000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf969890522c80157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e6fd66e3f2c7807e8773eed7b94fa099ab84fea") syz_usb_connect$printer(0x0, 0xfffffffffffffef6, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x7, 0x1, 0x3, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x20, 0xf, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0xd5, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x9, 0x80, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0x5, 0x3}}]}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) sync() sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in6=@mcast1, @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@private=0xa010102, @in6=@private0, @in6=@remote, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2) 1m58.123974761s ago: executing program 33 (id=1918): r0 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) sendmsg(r4, &(0x7f0000002740)={0x0, 0x0, 0x0}, 0x24044044) r5 = dup(r2) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) read$FUSE(r0, &(0x7f0000000600)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='4\t\x00\x00\x00\x00\x00\x00', @ANYRES64=r6, @ANYBLOB="0600000000000000060000000000000001000000feffffff23000000000000000100000000000000040000000000000003000000050000007d5d2d0000000000"], 0x50) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@aname={'aname', 0x3d, '!%()-\\)*'}}, {@debug={'debug', 0x3d, 0x4}}]}}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') ioctl$KVM_SET_GUEST_DEBUG(r7, 0x4048ae9b, &(0x7f0000000140)={0x10000, 0x0, [0xe00000000, 0x0, 0xffffffffffff0000, 0x8, 0x27b2baa9, 0x6bf6, 0x6, 0x20000000000000]}) read$FUSE(r7, &(0x7f00000029c0)={0x2020}, 0x2020) 1m52.35992419s ago: executing program 34 (id=2023): sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x18000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x8000}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x40, 0x1, 0x21, {0x21, 0x31, "378f3c71a315db604725869acb7740711ca221cea9e0246e8ffbbfb99d47f1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, &(0x7f0000000100)={0x20, 0xe, 0xb3, {0xb3, 0x6, "3cb90ec048f0985a5cf8afc7c8728aadb931519830287930064d71cdddb25f4e8b2211a6ba73e5031084fd26043bd7290b57a9d7a6d6091ec5e8866f5e21007a74bde6b8f74bf70b0717e977eadaa22e7d22c8898ab28c3be1e0610bbac7a04f28562a6a205cb534a9572b44506e397d6f7d0baeb6af64d9228705c4f428af1975ce7bba57ee8bf44c504b2d2e9008ca08796ea9551f8b61ee1728816b50f179f7a43168c2aa274e26bcfb313239c1583f"}}, &(0x7f0000000380)={0x0, 0x3, 0xb4, @string={0xb4, 0x3, "7688c9a07fefee99369de07ea1b03f2679a0470de646eba4d8edd0bd77479d70550fee7e8621c54c80b3d905af8311a2a8cc98d2516e96618e52637d840f33ddc4fb573e5556c975dca2f93a7896fe1a06ce97bee348167155c7280d1790c96057c28712fb8019aaa857ac75af24e1ed17abfcc5930d83d0a77bb46bda5098ca98b9bd452500b16ece7012e64d41f4c2f154895d4dcc7ce459415ee406af567d7ca9253f5fee167f981fce1c5be5a77f9280"}}, &(0x7f0000000000)={0x0, 0x22, 0x11, {[@main=@item_4={0x3, 0x0, 0xb, "55668b53"}, @local=@item_4={0x3, 0x2, 0xa, "59e1f241"}, @main=@item_4={0x3, 0x0, 0x9aaa0023cf68052c, "38f49ddf"}, @global=@item_012={0x1, 0x1, 0xb, "1e"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x5b2}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000440)={0x20, 0x16, 0xd8, "dcb829608ca4ef3526b8b0eed56c2372b54607fe5fe179ec333806b0dae3edd23b03e69c85103cfba2e2b7a6abd2a6879c8d54682eb9a509d4c23ce73de6673895664d60183d8c6066e3c4c9f1eeadfadf73f70311f9c4bcf459858c92e3f7b7dbb5af8cb23bd35dd85340845ab263666177aa3d5136e2f8798bb47ddc6fecc6426345b750faa63b33b8d55a8b9a3863327550978ad92e96fa6ca44f9feed7d8a2d4072760a02c525120b48c0e20b098cd08c2ae5359b60a81fc0650c94c8f633feee9ce13100fea9f02b8991801841e0cbe936da2396f11"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x80}, &(0x7f0000000580)={0x20, 0x1, 0x1c, "33a73d9470fb60661ac896fbc76f1b5582fac67d457fe67c33e2b550"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0xc}}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) unshare(0x62040200) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r3, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m50.352146028s ago: executing program 35 (id=2039): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0022f7"], 0x0}, 0x0) syz_usb_ep_write(r1, 0x81, 0x9f, &(0x7f0000003380)="b9425b44651dd232419635990000dbaf0000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf969890522c80157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e6fd66e3f2c7807e8773eed7b94fa099ab84fea") syz_usb_connect$printer(0x0, 0xfffffffffffffef6, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x7, 0x1, 0x3, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x20, 0xf, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0xd5, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x9, 0x80, 0x1}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x5, 0x5, 0x3}}]}}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) sync() sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in6=@mcast1, @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@private=0xa010102, @in6=@private0, @in6=@remote, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0x2, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{0x0}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2) 1m7.465126767s ago: executing program 6 (id=2706): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f00000007c0)={0x65, {{0x29, 0x0, 0x8000000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0x3}}}, 0x88) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') read$FUSE(r3, &(0x7f0000004180)={0x2020}, 0x2020) openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r4) capset(&(0x7f0000000100)={0x20080522, r4}, &(0x7f0000000180)={0x4, 0x7, 0x8124, 0x7, 0x904, 0xf83c}) ptrace$peeksig(0x4209, r4, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m6.559552734s ago: executing program 6 (id=2717): r0 = inotify_init1(0x80800) fsetxattr$security_evm(r0, &(0x7f0000000000), &(0x7f0000000040)=@ng={0x4, 0x7, "22ca67"}, 0x5, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xec, r2, 0x20, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x42}}}}, [@NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x17f}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xf8}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x7}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x77}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0xfffffffe}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x2d83}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x4bb7}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x10}]}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x245}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0xf53820fb9e816df9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}], @NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x1}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xa}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x6}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x1c}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x1}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x20}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x20000000}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x85}, 0x40004) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r2, 0x0, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x43}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x8080) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r1, &(0x7f0000001480)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001440)={&(0x7f0000000440)={0xffc, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xfffffff8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PEER_MEASUREMENTS={0x44c, 0x111, 0x0, 0x1, {0x448, 0x5, 0x0, 0x1, [{0x434, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x1e4, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x98, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x64, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8a21}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xdc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x1ec, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xec, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xe8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x17}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x401}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x43}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0x170, 0x111, 0x0, 0x1, {0x16c, 0x5, 0x0, 0x1, [{0x158, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x3c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffa}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xc}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1c6}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c0}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x74, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10001}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0xa08, 0x111, 0x0, 0x1, {0xa04, 0x5, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x274, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x264, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x90, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x200}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xac, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x178, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x30f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x31}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x140, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x94}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x44, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xb6d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x54, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}]}]}]}, {0x5f4, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x54, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x800}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x334, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x100, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8000}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x4c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x14}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x11}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xf800}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfe}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x78}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x10c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7a}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfe}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x150, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xd8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xfb}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xff}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xff}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0xc0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x70, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x53cc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}]}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x8000}]}, 0xffc}, 0x1, 0x0, 0x0, 0x24040041}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x30, r2, 0x2, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x33}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x44008800}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000015c0), r4) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000001600), 0x200, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r5, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x78, r2, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x68}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x8080) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x40010, r4, 0xf0984000) statx(r4, &(0x7f0000001780)='./file0\x00', 0x1000, 0x8, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f0000001900), r4) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001940)={'team0\x00', 0x0}) getsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000001980)={@empty, 0x0}, &(0x7f00000019c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001a00)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001a40)={'veth0_virt_wifi\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000001a80)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001c00)={'tunl0\x00', &(0x7f0000001ac0)={'syztnl2\x00', 0x0, 0x8001, 0x700, 0xcb3, 0x6, {{0x39, 0x4, 0x2, 0x0, 0xe4, 0x68, 0x0, 0x8, 0x4, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x2c, 0xd8, 0x1, 0x1, [{@multicast1, 0x47}, {@multicast1, 0x8}, {@multicast1, 0x1}, {@multicast1, 0xffffffff}, {@broadcast, 0x401}]}, @timestamp={0x44, 0x14, 0xb9, 0x0, 0x3, [0x8, 0x400, 0x100, 0xca88]}, @timestamp_addr={0x44, 0x4c, 0x91, 0x1, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000}, {@multicast2, 0x81}, {@multicast2, 0x5}, {@private=0xa010102, 0x4}, {@empty, 0x43e392bf}, {@multicast1, 0xaf}, {@empty}, {@loopback, 0x6cd6}, {@remote, 0xffff42fd}]}, @timestamp={0x44, 0x14, 0x40, 0x0, 0x7, [0x5, 0x9a9, 0x7fff, 0x101]}, @end, @generic={0x138, 0xd, "85e5c7bcd089271da1afa1"}, @timestamp_prespec={0x44, 0x14, 0xe8, 0x3, 0xf, [{@multicast2, 0x4}, {@broadcast, 0x6}]}, @generic={0x86, 0xd, "0af3774600cb4acdae9e7e"}]}}}}}) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000001c40)={@local, @local, 0x0}, &(0x7f0000001c80)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001cc0)={'nr0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000001d80)={'syztnl1\x00', &(0x7f0000001d00)={'syztnl2\x00', 0x0, 0x29, 0x4, 0x9, 0x1, 0x44, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x61, 0x20, 0x0, 0x6}}) getsockopt$inet_mreqn(r5, 0x0, 0x47, &(0x7f0000001dc0)={@dev, @rand_addr, 0x0}, &(0x7f0000001e00)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r7, &(0x7f0000002800)={&(0x7f00000018c0), 0xc, &(0x7f00000027c0)={&(0x7f0000002140)={0x670, r8, 0x2, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xab2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x618}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x130, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r15}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r16}, {0x1d8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x94a}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x79}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1ad4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r18}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x670}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) 1m6.447978576s ago: executing program 6 (id=2720): mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='zonefs\x00', 0x32ca867, 0x0) 1m6.377831987s ago: executing program 6 (id=2723): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000000100)=[@increfs_done={0x40106308, 0x1}, @increfs={0x40046304, 0x2}, @register_looper, @release={0x40046306, 0x2}, @acquire={0x40046305, 0x2}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x1, 0x2, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/49, 0x31, 0x0, 0x28}, @flat=@weak_binder={0x77622a85, 0x100b, 0x2}}, &(0x7f00000000c0)={0x0, 0x20, 0x48}}, 0x1000}, @decrefs, @acquire_done={0x40106309, 0x2}], 0x1000, 0x0, &(0x7f0000000440)="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"}) 1m6.23204536s ago: executing program 6 (id=2726): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f0000000040)=[@release={0x40046306, 0x2}], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) 1m6.159132732s ago: executing program 6 (id=2728): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) (async) creat(&(0x7f00000000c0)='./file0\x00', 0x43) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r1, 0x3) (async) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x38, 0x3d, 0x13, 0x40, 0x411, 0x12, 0x552b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x0, 0x8d, 0x8a, 0x32, 0x40}}]}}]}}, 0x0) (async, rerun: 64) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000000)) (rerun: 64) syz_open_dev$loop(&(0x7f0000006200), 0xb3, 0x82403) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x22, 0x0, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) clock_settime(0x6, &(0x7f0000000040)={0x0, 0x3938700}) 1m2.319794244s ago: executing program 5 (id=2782): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x2c0, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x274, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x188, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x140, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x4}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000100)={0x8000801, 0x1}, 0x8) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r8, 0x29, 0x41, &(0x7f0000002b00)={'security\x00', 0x1000000000000083}, 0x56) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x9, 0x4, 0x4}]}, 0x6) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000200)={0x14, 0x0, &(0x7f0000000180)=[@dead_binder_done, @decrefs={0x40046307, 0x2}], 0xf, 0x0, &(0x7f00000001c0)="1b69b9465d7e904b18a1287cda3e97"}) r10 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x9, 0x50000}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m2.319191874s ago: executing program 5 (id=2783): r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)={0x0, 0x0, @a}, 0x48, 0xffffffffffffffff) r1 = add_key(&(0x7f0000000100)='.dead\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000000180)="a415ace45ec27acd66e5ac23134786758e7da53ac909317477e71e1d163f91ecf66bb1cd4d541095e9abd7573867114b1efa8d9cb3008cfc85274667a5657ca14f984ea1a74e8fb902fca3da3eef8c385d403c79228e5d4f8f0ca268a95598d67cd0da8ea37bfbe2b015f9a8f11838682f6faa76026958dec9f66c38f1a467ad23c17db997735eb7783400208b95a35c0d3e615630dd6da63c97f9ad900d73fbd4ddc80353ffb0fba2cd77db5659111b427f6eaee257b7597cdb8610941cf2562d6d2827bb9ea1aabe39", 0xca, 0xfffffffffffffffa) (async) timer_create(0x9, &(0x7f0000002c00)={0x0, 0x25, 0x1}, &(0x7f0000002c40)=0x0) (async) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timer_settime(r2, 0x1, &(0x7f0000000140)={{0x0, 0x3938700}, {r3, r4+60000000}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000000180)={{0x77359400}}, &(0x7f00000001c0)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) setsockopt$inet6_int(r5, 0x29, 0x10, &(0x7f0000000000)=0x3, 0x4) (async) sendto$inet6(r5, &(0x7f0000000380)="e8", 0xfffffffffffffe98, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffffffd, @empty}, 0x1c) (async) fcntl$setstatus(r5, 0x4, 0x0) (async) keyctl$link(0x8, r0, r1) (async) keyctl$revoke(0x3, r1) 1m2.309747054s ago: executing program 5 (id=2784): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmmsg$sock(r5, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x80, 0x80000) ioctl$USBDEVFS_RESET(r6, 0x5514) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xc}, @flat=@handle={0x73682a85, 0x101}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 1m2.284241164s ago: executing program 5 (id=2785): sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x18000}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x8000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (rerun: 64) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r4}, 0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x6, 0x4e, 0x62, @empty, @loopback, 0x8, 0x8056, 0xfffffff7, 0x5}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x4, 0x9, 0x7, 0x8, 0x12, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x700, 0x8, 0x2}}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) (async) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x4}, 0x1c) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', 0x0}) sendto$packet(r10, &(0x7f00000005c0)="46b83076ca", 0x5, 0x0, &(0x7f0000000200)={0x11, 0x8100, r11, 0x1, 0xe0}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000640)={'batadv0\x00', 0x0}) (async, rerun: 64) r14 = socket$can_raw(0x1d, 0x3, 0x1) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r15, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bind$can_raw(r14, &(0x7f0000000000)={0x1d, r16}, 0x10) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f0000000680)={0x368, 0x0, 0xa20, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0x88, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r5}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff949a}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1a3}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}]}}]}, 0x368}, 0x1, 0x0, 0x0, 0x4c044}, 0x14) (async, rerun: 64) r17 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) (rerun: 64) unshare(0x62040200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fc00002}]}) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xf, [0x10010001, 0x4, 0x4, 0x4, 0x7, 0x9, 0x57e, 0x8, 0x2, 0x28e8, 0x7, 0x9, 0xff, 0x7ffc, 0x805, 0x74a, 0x80000001, 0x7, 0x0, 0x800, 0xfffffffc, 0x2, 0x1, 0xffff8000, 0x91, 0xffffffff, 0x1, 0x400, 0x2, 0x3, 0x8, 0x8, 0xa2, 0x3, 0x7, 0xfff, 0x4, 0xffffffff, 0x4e6, 0xb13, 0xff, 0x1a5a, 0x10, 0x0, 0x4, 0x4, 0x8b, 0xffffff00, 0x8, 0x224, 0xa, 0x6, 0x9, 0x98f, 0x3d, 0x80000001, 0xfffffff8, 0x2b6395a6, 0x5510, 0x4, 0x9, 0x5, 0x7, 0x7f, 0x5, 0x4008000, 0x0, 0x1, 0x3ff, 0x5, 0x9dc, 0x0, 0x80b1, 0x80, 0x80000001, 0x9, 0x7, 0x3, 0x4, 0x9, 0x1, 0xd640, 0x7, 0x8, 0x3, 0x1, 0x11, 0x9, 0x401, 0x4, 0x9, 0x5, 0x1, 0xc9, 0x1ff, 0x7, 0x1, 0x4, 0x7fff, 0x8, 0x3, 0x400d07, 0x3, 0x6, 0x2000009, 0xfffffffc, 0x7, 0x140000, 0x9, 0x2, 0xfffffff9, 0x0, 0x350d, 0x4, 0x7fff, 0x80, 0x103, 0x80000000, 0x7, 0x5, 0x2, 0x9, 0x3, 0x3ff, 0x3, 0x1, 0x3, 0x7]}}) close_range(r17, 0xffffffffffffffff, 0x0) 1m2.220050156s ago: executing program 5 (id=2786): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x4010, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) write(r0, &(0x7f0000000400)="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", 0x1f000) 1m2.218757946s ago: executing program 5 (id=2787): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) (async) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) (async, rerun: 64) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005640)='ns/cgroup\x00') (rerun: 64) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) (async, rerun: 64) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_seqnum', 0x82802, 0xf) (rerun: 64) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ff9, 0x0, 0x5, 0x1000001a, 0x3d, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06d29f3d9e234b30c50997d3bef409ff21e70c7f3f800b2f7b6aa54cc50aff7f00", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x7, 0x7]}}) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x5, 0xd, 0x0, "1761de9c9d9947229f8bd645c8ffc49724fd4efc0e0e57fe76cd8da1328862c65c4203b7b9df553bc1023662eeb37816ba93e1c7c8c098b828ae0b9c8028dfd2", "88b436fe4ec08d8860d8bf62baa038a3dbf87348deebb40eed301a3fd0fc0db95e566432959e61fbadfe97600c917c85213d7b8ed9970341c3cee62886c8903e", "dddd2b7f726bcedd533b048e3ae600eac3badc0944207efe14c42d9b1c6c707c", [0x1]}) (async, rerun: 32) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newsa={0x114, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0xee00}, {@in6=@remote, 0x0, 0x2b}, @in6=@local, {0x0, 0x0, 0x2, 0x0, 0x8}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @replay_val={0x10, 0xa, {0x70bd2a, 0x70bd2c, 0x3}}]}, 0x114}}, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) (async) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x2) 1m1.193142975s ago: executing program 7 (id=2793): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x108000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) syz_usb_connect(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f0700000000000905830300e4"], 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') read$FUSE(r3, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capget(&(0x7f0000000240)={0x20071026, r4}, &(0x7f0000000440)={0x54e, 0x2, 0x10, 0xe, 0x2000000, 0x2}) ioprio_set$pid(0x0, r4, 0x2000) ioprio_get$pid(0x2, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) close_range(r0, 0xffffffffffffffff, 0x0) 1m0.617836036s ago: executing program 7 (id=2794): mprotect(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x3000009) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) r0 = open(&(0x7f0000000080)='./file1\x00', 0xc8141, 0x5) fcntl$setlease(r0, 0x400, 0x0) fcntl$getflags(r0, 0x401) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x23, 0x0, &(0x7f0000000280)) dup(r1) unshare(0x62040200) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f00000001c0)=0xffffffff, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000140)={'veth0_macvtap\x00', 0x8000}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2000084, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000100)='./file0\x00') r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000041c0)=[{0x6}]}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r4) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) pidfd_send_signal(r5, 0x33, &(0x7f0000000000)={0x33, 0x4, 0x2}, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) 1m0.516024118s ago: executing program 7 (id=2795): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c", @ANYRES64=r1], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@uname={'uname', 0x3d, '#-\xb1@\'['}}, {@ignoreqv}, {@access_user}]}}) r3 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000140)={0xb7, 0x3, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x7ffd, 0x0, 0x0, 0x7f, 0x11, 0x4, 0x44, 0x28}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r4, &(0x7f00000029c0)={0x2020}, 0x2020) 1m0.500522748s ago: executing program 7 (id=2796): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced641571c, 0x2}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r1) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000280)={@loopback}, &(0x7f0000000380)=0x14) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r2, &(0x7f0000000240)="c62e", 0x2, 0x8040, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 59.645822765s ago: executing program 7 (id=2798): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x1002, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='openpromfs\x00', 0x808081, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001002bbd70000400000000000000000000000000ffffac1414aa6401010200000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000040000002000000000000000002000000000ffffffffffffffff00006400000000000000000000000000000000000000000000000a000000000000fe"], 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x0) pivot_root(&(0x7f0000000140)='\x00', &(0x7f0000000180)='./cgroup\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000240)="baf80c66b8f22f508366efbafc0cb80040ef0f01cabaf80c66b8d23fee8166efbafc0ced65f30f53823f00bad10466b83afe000066ef3e67d8e7260fc79a7772baf80c66b89ea6ea8466efbafc0cec66b98809000066b80b00000066ba000000000f30260fc71d", 0x67}], 0x1, 0x43, 0x0, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vfat\x00', 0x20c00a, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x4) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009104"]) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000000)="baa100ecb8e5008ed8643ef367640f09ba400066ed67ad640f350fae56e40fc76df70fc775bcb818008ee0", 0x2b}], 0x1, 0x0, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCFLSH(r6, 0x8924, 0x0) r7 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r7) socket$xdp(0x2c, 0x3, 0x0) r8 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000080)='rooncontuxt', &(0x7f00000000c0)='--\xf6\x19D\x8b', 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r7, 0x6, 0x15, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000300)={0x1, 0x0, @pic={0xa, 0x3, 0x3, 0x2, 0xf, 0x4, 0x0, 0x4, 0xf7, 0x8, 0x6, 0x14, 0x7, 0x7f, 0x9, 0x1}}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGARP(r9, 0x8954, &(0x7f0000000000)={{0x2, 0x4e21, @private=0xa010102}, {0x306, @remote}, 0x2, {0x2, 0x4e22, @remote}, 'macvlan1\x00'}) 59.427862989s ago: executing program 7 (id=2799): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)=0x10) syz_clone3(&(0x7f0000000380)={0x80005000, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000200), {0x25}, &(0x7f0000000240)=""/229, 0xe5, &(0x7f0000000340), 0xfffffffffffffffd, 0x0, {r3}}, 0x58) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='e\x00+\x88\xfe\xf7\x01') r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x0, 0x1, 0x1}}, 0x26) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140)=0x4) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f00000004c0)) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f0000005280)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r10 = openat$incfs(r9, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r10, 0xc058671e, &(0x7f00000000c0)) 50.780901862s ago: executing program 36 (id=2728): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) (async) creat(&(0x7f00000000c0)='./file0\x00', 0x43) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r1, 0x3) (async) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x38, 0x3d, 0x13, 0x40, 0x411, 0x12, 0x552b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x0, 0x8d, 0x8a, 0x32, 0x40}}]}}]}}, 0x0) (async, rerun: 64) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000000)) (rerun: 64) syz_open_dev$loop(&(0x7f0000006200), 0xb3, 0x82403) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x22, 0x0, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) clock_settime(0x6, &(0x7f0000000040)={0x0, 0x3938700}) 47.18885387s ago: executing program 37 (id=2787): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) (async) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) (async, rerun: 64) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000005640)='ns/cgroup\x00') (rerun: 64) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) (async, rerun: 64) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/uevent_seqnum', 0x82802, 0xf) (rerun: 64) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ff9, 0x0, 0x5, 0x1000001a, 0x3d, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06d29f3d9e234b30c50997d3bef409ff21e70c7f3f800b2f7b6aa54cc50aff7f00", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x7, 0x7]}}) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x5, 0xd, 0x0, "1761de9c9d9947229f8bd645c8ffc49724fd4efc0e0e57fe76cd8da1328862c65c4203b7b9df553bc1023662eeb37816ba93e1c7c8c098b828ae0b9c8028dfd2", "88b436fe4ec08d8860d8bf62baa038a3dbf87348deebb40eed301a3fd0fc0db95e566432959e61fbadfe97600c917c85213d7b8ed9970341c3cee62886c8903e", "dddd2b7f726bcedd533b048e3ae600eac3badc0944207efe14c42d9b1c6c707c", [0x1]}) (async, rerun: 32) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newsa={0x114, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0xee00}, {@in6=@remote, 0x0, 0x2b}, @in6=@local, {0x0, 0x0, 0x2, 0x0, 0x8}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @replay_val={0x10, 0xa, {0x70bd2a, 0x70bd2c, 0x3}}]}, 0x114}}, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) (async) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x2) 44.325399204s ago: executing program 38 (id=2799): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)=0x10) syz_clone3(&(0x7f0000000380)={0x80005000, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000200), {0x25}, &(0x7f0000000240)=""/229, 0xe5, &(0x7f0000000340), 0xfffffffffffffffd, 0x0, {r3}}, 0x58) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='e\x00+\x88\xfe\xf7\x01') r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x0, 0x1, 0x1}}, 0x26) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000140)=0x4) ioctl$PPPIOCSMAXCID(r8, 0x40047451, &(0x7f00000004c0)) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f0000005280)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c) r10 = openat$incfs(r9, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$TIOCL_GETKMSGREDIRECT(r10, 0xc058671e, &(0x7f00000000c0)) 11.367996416s ago: executing program 4 (id=3214): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c6", 0x1, 0x8040, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0xff0f) 11.333124347s ago: executing program 4 (id=3216): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000380)) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x16, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0x5000, 0xeeee6001, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x6, 0x3}, {0xeeef0000, 0x5000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0x3000, 0x1, 0x9, 0x3, 0x4, 0x42, 0xb, 0xff, 0xa, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xb, 0x3, 0x15, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x0, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x4000, 0x8000000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0xff, 0x70}, {0x100000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xb, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x6000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0xff]}) close_range(r0, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x49, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x44805}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BEACON(r5, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x44, r6, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7, 0x20000025}}}}, [@NL80211_ATTR_IE={0x1a, 0x2a, [@random={0x4, 0xc, "a5403c7e68f956339ecb1bf4"}, @gcr_ga={0xbd, 0x6, @device_b}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x83) 11.14031756s ago: executing program 4 (id=3218): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06d29f3d9e234b30c50997d3bef409ff21e70c7f3f800b2f7b6aa54cc50aff7f00", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x2) connect$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) 11.065869362s ago: executing program 4 (id=3220): ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x108) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000800)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x100000001, 0x123100) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f00000007c0)=0xa) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000280)='/dev/ashmem\x00') syz_usb_connect(0x4, 0x478, &(0x7f00000002c0)={{0x12, 0x1, 0x110, 0xd1, 0xcd, 0x76, 0x20, 0x54c, 0x6d, 0x2447, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x466, 0x1, 0x0, 0x4, 0x20, 0x3, [{{0x9, 0x4, 0xd1, 0x1, 0xd, 0x9b, 0xee, 0x30, 0xdc, [@generic={0x31, 0x3, "f0574684a190651b5bdb49f8c6e56cd6e5ed00d82fe04369b707a3dddfb9cf6fea3fa75136b4c6501bebca0253ffa0"}, @uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x0, 0x3, 0x6, 0x7, "c7c961"}, @as_header={0x7, 0x24, 0x1, 0x4, 0x0, 0x2}]}], [{{0x9, 0x5, 0xd, 0x0, 0x10, 0x18, 0x39, 0x8, [@generic={0x62, 0x7, "cc92e6ae4d1b70f62840838bac0190fe9ab3c00a8ddf6b3a39da20814ee9adac1c23dd0bff37368dca30d1cbcbafd5a8bda4a0554aa36b57006aac4aecf8e7bd171d3aa72f8486986b7e05383431bfd80fd86f6970e6dbbc3a0c598db2a5d0b6"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x0, 0x4, 0x5}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x3, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x6}]}}, {{0x9, 0x5, 0x7, 0x0, 0x0, 0x3, 0x4, 0x9}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0xf1, 0xd, 0xa, [@generic={0x55, 0x9, "e81fcb6c27eb22e2f432c4026f83ec58c162e90aa9d800533a8f96b09c013ec895f026757f5de93ba45d445e7b4c552461a43e331b86b2abca326600135f14c898395cacc3cc0c72bdeb25ad868e6eab9cb4ca"}, @generic={0x98, 0x6, "a93059c9dfce7abdedc6ccc660654be528fab67f234d2cb190b42f94593378283ce596b46feef01d98e8b687cd9a1367f5b0ef4d8b3905f419a5c587599a97a10c7698894c2a8c2a0f1125e1689d538624b09141fab5760ef501cd65de10d951cc1048868a8dcdb8d2ff580894620f1b9d22ec5805a63f84ffe9ce5c96e4b3b582e59f5f16fcc8be647183589128c9962111e87156f9"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0xf9, 0x10, 0x37}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x90, 0x1b, 0x10, [@generic={0x38, 0x23, "27a6c2985d99bba034d5c021da03d9ed4e9124654c15a42d2924cc9133cb025ab1d36cc654fc504a36c64661cbf7ac6a0b1fd64edda9"}, @generic={0xf, 0x24, "2df83293761627754c8daf3d3c"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x7b, 0x1, 0x2, [@generic={0xbc, 0x4, "e14c953975fb0a0d9f7fba8e2e543418da66347c4729338d3eede948ba3df62343c49a264685a429bf9a9c1e0ed800fb8906ae625cd1554fe21077bc62180fe9e48b7ee7a4d5ed600dcd5c915034cad74de4ea097ca1362b2c277152300a50170ef311caecca511ae23d459a7129fd0957083cfbe3eee37cb60baf085077063c685040b87f4467499c3c42895d0d01e69d94a31ad2fd68861344eef314b344fd5ac28eb967bc885e66af08ee9788f0f03534709a500fee7428fd"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xd, 0xffff}]}}, {{0x9, 0x5, 0x80, 0x4, 0x8, 0xf1, 0x4, 0x6}}, {{0x9, 0x5, 0xa, 0x2, 0x40, 0x18, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0xfff}]}}, {{0x9, 0x5, 0xd, 0x2, 0x400, 0x5, 0x6, 0x1, [@generic={0x8a, 0xf, "71b68ef9cab756fe60548141e276c58dc3f3df0b4907153c05793e627891daa5dcace4c944d2e57cf159e2bc5e8202af968d3ce4b24a7a6169c132eef0d61c39310fa429039df87165d2649b467e57e0ba22767677a1d8463834c5c3fa87abcf2dd04fd372d130df5c123f93be60764a8c3e7badc930c51d6d4b772a942e4518f2c7a0deb252d820"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x400, 0x4, 0xd0, 0x1, [@generic={0xab, 0x21, "e30cc6e7bb06603e219c7251bfb62dca5a5908732778ae5e986c1df8599f0b48a4f3b75401e5365181a8f049f0f353e00fdb45811ae061405c82c37586b62301e29f65baad5dbe89c728b2a7da4dfd83a8a9aa2b8903d856d6b9ef82d576fa502bc23f3a093ed64603264e347b599cd59f3f03f26a6e6d927f190f67babc5a0b085ef9e90d3a022d8ad825234afdd9bba8b718b47a1763aac6cef62398651ecb3ccac39e18ada3ce00"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x3ff, 0x4f, 0x29, 0x7}}]}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x2, 0x9, 0x81, 0xff, 0xfe}, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="05ffff00040a10030004000001ff030a1003020f00be0708000b100102120007870300081c100a070400000080f70600c03f0000000000000f0000000000ff00"], 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x380a}}, {0x28, &(0x7f0000000240)=@string={0x28, 0x3, "4f37050e2bab8f2faacee81fc2e0d379f7eddd62eeb8724ac6c201ec0a09a6c706b3e2eb9377"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x3409}}]}) 10.493783833s ago: executing program 4 (id=3224): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x8fe, 0x12) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_debug_messages', 0x0, 0x80) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7) 10.143032129s ago: executing program 4 (id=3229): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x40, 0x700, 0x5, 0x5, {{0x21, 0x4, 0x2, 0x14, 0x84, 0x67, 0x0, 0xc, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0x98, 0x3, 0x8, [{@multicast2, 0x64}, {@local, 0x24}]}, @rr={0x7, 0x1b, 0x8b, [@remote, @broadcast, @local, @private=0xa010100, @rand_addr=0x64010102, @rand_addr=0x64010100]}, @lsrr={0x83, 0x27, 0x61, [@multicast1, @broadcast, @broadcast, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @loopback, @empty]}, @noop, @ssrr={0x89, 0x13, 0xd3, [@local, @private=0xa010100, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b40)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000480)="a269a9f37daaf9d42e19b56bd205811322518e3d4b5e2b6d6dae900de5fd4812398016fc2a2dd24053fb86a57370678fcf31cb76429561a464f1ae1f444c9942206c0c717457b98aba3b72cf932ec4cc24c1d10a7e40fee58c7bce1fe5c2b31fb57e18bfe8f87a5f824359f890f7b595836c1f4b47504ae72851504a7949ad9b9a44823a08c2821dff94a269bd70d5326da406c2b432998218faed14a3fece132fc8479d1d079bc68025d8e0f4a7346a8dc2e6c1a62ecdbb5858fd94de10fb60b743a9a7e2e6c97c6b1c9459", 0xcc}, {&(0x7f0000000100)="c0f553cd8803f1d6c59f3b03b6d71cd1f46ee51b9ff75cc94fe2512dbec576e331136df1a4efb340db4fa7cc75b58730f549f4bfeb", 0x35}, {&(0x7f0000000140)="5be0253004f16bcf795b82f5a8544cd24407e0b82b72d2bf3bc7399f21df695ebdec4c35fbacc4e4d18103f97932e270", 0x30}], 0x3, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x22}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x70}}, {{&(0x7f0000000400)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000640)="ce05400c94c2af0201da0f9cb18fa2f818e6453339e581b4f7e92810dea9e72f98ebe6cce175af6c2be908f76bb8df36be2427bce2999f996ac780282c2b3e434fba32451cb0092718e7873d322c630c81e0b1dfa9879df8a637ba23a52408fc566fd47b8d9d99ae1fee8050ab9f0df30d1b6ea254b5dcfbe01f76c02813d122d679292b26c766443f300d895d60f28d61", 0x91}, {&(0x7f0000000780)="d5a0ab9f767fca09e739fa755e5078d620ac718da6011cc23dcc5bf0a493d5ffcab22a8dd5ecb25f40e295e3d13c6c0b6a7ac63d5c3cff485b226ae12df57caeb43f404f36", 0x45}, {&(0x7f0000000700)="22c70a2a400c8a4217d374ee692d991c5c1874eb4b6a0f8e1dba7dc82aafed90dcf6153346576b3fc1a20c83aa6ba66260efff2214", 0x35}, {&(0x7f0000000800)="596706b6e2ba05816f70cb6a32b807259d97a36e012ce5d4d5c27b6932916518af512951b3661d120a130fce5c3312979a5195c2c041b6f4231b919a91dfa5fa20ef972ecbe39395cc09f3ba146abb6bf2f0cff613d0191bf89b3cdee5f82377eba5cdfc11a3e9d1a1122c66a48868a69e892ef55cc5fe09bc4cf67fe2a73e20aa93a4dbfce934751f46210034c2501efd41ca143a", 0x95}, {&(0x7f00000008c0)="f22e11518af1e49b104c88071466b5073aad6d5613ff9741f59d41f9b91ccb1895c8738cd2f4a0b053b02555e228298a087ae04bb4be9883d63b", 0x3a}, {&(0x7f0000000900)="9cf61d1c69", 0x5}, {&(0x7f0000000940)="f9259bed24", 0x5}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="cbdbe8f49a44e14872918c169620c2bee378193db1472c2c1e9be30470c656cf48df03a59278c8214b5e66536e6620dfaa85c1770a95cfeeb2476cc2e348c96d9f6441f875dd", 0x46}, {&(0x7f0000001a00)="063ea8e09739cfc97589a443c07a0582404517d589de3bebb821471ddb6134a642c39f782b58ff17955473fd4b681bbf61e2", 0x32}], 0xa, &(0x7f0000001b00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @rand_addr=0x64010100}}}], 0x20}}], 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r6, &(0x7f00000002c0)="240000001a005f0214f9f407000904001f0000010000000000000200000000000000830000", 0x25) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x34, 0x8a, 0x83, 0xff}, {0x6, 0x9, 0x81, 0x5}]}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r7, &(0x7f00000046c0)=""/4096, 0x1000) r8 = openat$kvm(0x0, &(0x7f00000002c0), 0x102, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001c00), 0x2000, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000001, 0x4010, r10, 0x7fda2000) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) getdents64(r7, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000)) mkdir(&(0x7f0000001bc0)='./file0\x00', 0x4) 10.026023291s ago: executing program 39 (id=3229): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x40, 0x700, 0x5, 0x5, {{0x21, 0x4, 0x2, 0x14, 0x84, 0x67, 0x0, 0xc, 0x2f, 0x0, @private=0xa010100, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0x98, 0x3, 0x8, [{@multicast2, 0x64}, {@local, 0x24}]}, @rr={0x7, 0x1b, 0x8b, [@remote, @broadcast, @local, @private=0xa010100, @rand_addr=0x64010102, @rand_addr=0x64010100]}, @lsrr={0x83, 0x27, 0x61, [@multicast1, @broadcast, @broadcast, @local, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @loopback, @empty]}, @noop, @ssrr={0x89, 0x13, 0xd3, [@local, @private=0xa010100, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b40)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000480)="a269a9f37daaf9d42e19b56bd205811322518e3d4b5e2b6d6dae900de5fd4812398016fc2a2dd24053fb86a57370678fcf31cb76429561a464f1ae1f444c9942206c0c717457b98aba3b72cf932ec4cc24c1d10a7e40fee58c7bce1fe5c2b31fb57e18bfe8f87a5f824359f890f7b595836c1f4b47504ae72851504a7949ad9b9a44823a08c2821dff94a269bd70d5326da406c2b432998218faed14a3fece132fc8479d1d079bc68025d8e0f4a7346a8dc2e6c1a62ecdbb5858fd94de10fb60b743a9a7e2e6c97c6b1c9459", 0xcc}, {&(0x7f0000000100)="c0f553cd8803f1d6c59f3b03b6d71cd1f46ee51b9ff75cc94fe2512dbec576e331136df1a4efb340db4fa7cc75b58730f549f4bfeb", 0x35}, {&(0x7f0000000140)="5be0253004f16bcf795b82f5a8544cd24407e0b82b72d2bf3bc7399f21df695ebdec4c35fbacc4e4d18103f97932e270", 0x30}], 0x3, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x22}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x70}}, {{&(0x7f0000000400)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000001a40)=[{&(0x7f0000000640)="ce05400c94c2af0201da0f9cb18fa2f818e6453339e581b4f7e92810dea9e72f98ebe6cce175af6c2be908f76bb8df36be2427bce2999f996ac780282c2b3e434fba32451cb0092718e7873d322c630c81e0b1dfa9879df8a637ba23a52408fc566fd47b8d9d99ae1fee8050ab9f0df30d1b6ea254b5dcfbe01f76c02813d122d679292b26c766443f300d895d60f28d61", 0x91}, {&(0x7f0000000780)="d5a0ab9f767fca09e739fa755e5078d620ac718da6011cc23dcc5bf0a493d5ffcab22a8dd5ecb25f40e295e3d13c6c0b6a7ac63d5c3cff485b226ae12df57caeb43f404f36", 0x45}, {&(0x7f0000000700)="22c70a2a400c8a4217d374ee692d991c5c1874eb4b6a0f8e1dba7dc82aafed90dcf6153346576b3fc1a20c83aa6ba66260efff2214", 0x35}, {&(0x7f0000000800)="596706b6e2ba05816f70cb6a32b807259d97a36e012ce5d4d5c27b6932916518af512951b3661d120a130fce5c3312979a5195c2c041b6f4231b919a91dfa5fa20ef972ecbe39395cc09f3ba146abb6bf2f0cff613d0191bf89b3cdee5f82377eba5cdfc11a3e9d1a1122c66a48868a69e892ef55cc5fe09bc4cf67fe2a73e20aa93a4dbfce934751f46210034c2501efd41ca143a", 0x95}, {&(0x7f00000008c0)="f22e11518af1e49b104c88071466b5073aad6d5613ff9741f59d41f9b91ccb1895c8738cd2f4a0b053b02555e228298a087ae04bb4be9883d63b", 0x3a}, {&(0x7f0000000900)="9cf61d1c69", 0x5}, {&(0x7f0000000940)="f9259bed24", 0x5}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="cbdbe8f49a44e14872918c169620c2bee378193db1472c2c1e9be30470c656cf48df03a59278c8214b5e66536e6620dfaa85c1770a95cfeeb2476cc2e348c96d9f6441f875dd", 0x46}, {&(0x7f0000001a00)="063ea8e09739cfc97589a443c07a0582404517d589de3bebb821471ddb6134a642c39f782b58ff17955473fd4b681bbf61e2", 0x32}], 0xa, &(0x7f0000001b00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @rand_addr=0x64010100}}}], 0x20}}], 0x2, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r6, &(0x7f00000002c0)="240000001a005f0214f9f407000904001f0000010000000000000200000000000000830000", 0x25) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x34, 0x8a, 0x83, 0xff}, {0x6, 0x9, 0x81, 0x5}]}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00') getdents64(r7, &(0x7f00000046c0)=""/4096, 0x1000) r8 = openat$kvm(0x0, &(0x7f00000002c0), 0x102, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = openat$urandom(0xffffffffffffff9c, &(0x7f0000001c00), 0x2000, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000001, 0x4010, r10, 0x7fda2000) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) ioctl$KVM_CAP_SPLIT_IRQCHIP(r9, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) getdents64(r7, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000)) mkdir(&(0x7f0000001bc0)='./file0\x00', 0x4) 3.570934963s ago: executing program 2 (id=3330): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000150001c0"]) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d40)=ANY=[@ANYBLOB="2c0000001900150000000000fffffffe0a0000000202000000000000100004"], 0x2c}], 0x1}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x290620, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) ioctl$ASHMEM_GET_NAME(r5, 0x40087708, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x100c0, 0x20, 0x34}, 0x18) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x27, 0xc0, 0x2a, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0xff, 0x83, 0x9, 0x90, 0x5, 0x9, 0x7f}}) ioctl$KVM_CREATE_VCPU(r5, 0x7706, 0xfffffffffffffffc) r8 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x1, 0x1) fchdir(r9) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x7b) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r12 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r12, &(0x7f00000006c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffc}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="aa", 0x2f}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="307ddfb8", 0x4}, {&(0x7f0000000340)="ced98c1a5f5a93258dfa9a8c31878af8d7be921a531da9e6c50efdba96722424d55ce610a4d9b534b3aa09618dfc04f5504e30a263ad3fedf0a7381a8a", 0x3d}], 0x2}}], 0x3, 0x2000c8c0) sendmmsg$inet6(r12, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)="93503d", 0x3}], 0x1}}], 0x1, 0x40) recvmmsg(r11, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000780)=""/115, 0x73}, {0x0}], 0x2}, 0x2}], 0x1, 0x100, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.456672785s ago: executing program 8 (id=3332): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) r1 = getpgid(0xffffffffffffffff) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = epoll_create1(0x80000) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'ip6gretap0\x00', &(0x7f0000000000)=@ethtool_cmd={0x49, 0x2, 0x2, 0x37f, 0x3f, 0x7, 0x1, 0x3, 0x6, 0x7, 0x101, 0x142f, 0x8, 0x1, 0x0, 0xa, [0x4000000, 0xff]}}) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000140)={r3, r4}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0']) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_mr_vif\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, &(0x7f0000000100)) read$FUSE(r5, &(0x7f0000000980)={0x2020}, 0x2020) 3.079820912s ago: executing program 8 (id=3337): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) setgroups(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)={0x30, 0x0, 0x301, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x14}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x30}}, 0x44) (async, rerun: 64) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000018000000000000000000000005000600000000000a004e2400000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000200120002000200000000000000000006002b00020000000000000000000000fe880000000000000000000000000001fc010000020000000000000000000000040004"], 0xc0}}, 0x0) (async) getsockopt$sock_buf(r3, 0x1, 0x3b, 0x0, &(0x7f0000000040)) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) (async) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8008}, 0x10) (async) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x2000000, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000080), 0x10) getsockopt$inet_int(r6, 0x0, 0x7, 0x0, &(0x7f0000000500)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r5, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) (async) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3.078838352s ago: executing program 2 (id=3339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010a26bd70000000000011000000140009800800020002000000070002"], 0x28}, 0x1, 0x0, 0x0, 0x24008090}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r2, &(0x7f0000000240)="c6", 0x1, 0x8040, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.841195597s ago: executing program 2 (id=3340): mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='hostfs\x00', 0x2208008, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000000)={0x3, 0x0, [{0x48d, 0x0, 0x8}, {0x267, 0x0, 0x5}, {0x660, 0x0, 0xffffffffffffff1a}]}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r3 = getuid() quotactl_fd$Q_SETINFO(r1, 0xffffffff80000601, r3, &(0x7f00000003c0)={0x80000001, 0x1, 0x1, 0x7}) mount$fuse(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0, @ANYRESOCT=r1, @ANYRES32=r0, @ANYBLOB="072cd89c11bdc67a58f0079d60cddc20afcd6f86325f0cb9ba15efb215189a8440c39d257001d58114d253a01ebe43b1a5e188ee5ed1fd54408e2d6408b7f98950d5b2a7a1c860a94cc1db9b92dd13b8e7450305d81691a688ca50c565326506f11b1c95c3fc607037ae26e06c778627537e632db835803d39cbdb202d43517211e165b174a966b5806e8de76203118a5809f462c2139740edac5b362b0b5f60776801624e1ef3d47c0920acd28cb605251c51705571143a8aafa43d107dddae06083cad53", @ANYRES32=r2]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$lock(r2, 0x6, &(0x7f0000000200)={0x2, 0x2, 0x2, 0x7, r5}) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040110200000000050005000000cc580a"], 0x80}}, 0x24000000) ioctl$AUTOFS_IOC_SETTIMEOUT(r7, 0x80049367, &(0x7f0000000380)=0x3) write$tun(r6, 0x0, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') lsetxattr$security_selinux(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:dpkg_lock_t:s0\x00', 0x21, 0x2) 2.799820198s ago: executing program 8 (id=3341): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0xf}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000100)) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20102, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x25) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "8fe21def"}]}}, 0x0}, 0x0) getsockname(r1, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @remote}}, &(0x7f0000000080)=0x80) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0xf}) (async) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000100)) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20102, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x25) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "8fe21def"}]}}, 0x0}, 0x0) (async) getsockname(r1, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @remote}}, &(0x7f0000000080)=0x80) (async) 1.902115844s ago: executing program 2 (id=3345): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c6", 0x1, 0x8040, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x100000000000000) 1.811991806s ago: executing program 2 (id=3346): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="390000001000034700bb5be1c3e4feff06000000012778010000190004000400ad003e34d61c00000000313200"/57, 0x39}], 0x1) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r3, 0x802c550a, &(0x7f0000000200)=@urb_type_control={0x2, {0x1, 0x1}, 0x148, 0x1, &(0x7f0000000040)={0x0, 0x15, 0x1000, 0x8, 0xc}, 0x8, 0x1, 0xa, 0x0, 0xfffffffa, 0x0, &(0x7f0000000440)="9cb5ae70a6fc7538176ae528480be919172a56ae47acd535e7ef6317cba79d23c4b3247995d2ab156c1e9fc1b9beb7b01193c66dc683ae2523e3b6228e0101781e15d07ab61372d437fb6f6d38789584cac04400875bb1ec0cc9f63ee6db65f6c03de6a800ae4cfd7d7e73975fc3dce6ff1bb2af1dbfc2185023d524ac0258dde5912304f3aacb1277b2119bf06411c4d2c90f24ba9829c257eb87732a4f0e1c898167ce2c757d66321defb8eaab20635512b3de69102b7751e0a7ef"}) syz_usb_connect$cdc_ncm(0x0, 0x9f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102020000082505a1a440000102030109028d0002010940090904000001020d00000624060001740524000c000d240f01dff000004d940800e806241a04000a0c241b020002000102090008072414bcc632ff05241c"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000280)='/dev/ashmem\x00') r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r4, 0x1, 0x4d, 0x0, &(0x7f0000000680)) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) 1.61612499s ago: executing program 8 (id=3347): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000280)) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c40)={0x2c, r2, 0x1, 0x70bd2c, 0x3, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x2c}}, 0x0) syz_usb_connect(0x5, 0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100335fe6510ca1a8eb232920102030109023200010d019002090432a70201030508061000060408072501"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x400c6314, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) times(&(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r4, 0x44da1000) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000005600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c14}, 0x24004884) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1401, 0x0) ioctl$TIOCSLCKTRMIOS(r7, 0x5457, 0x0) r8 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) mount(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000380)='erofs\x00', 0xa0c000, &(0x7f0000000180)='dax=always') listen(r8, 0x0) r9 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r9, &(0x7f0000000080), 0x10) sendmmsg(r9, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008014) r10 = accept4$unix(r8, 0x0, 0x0, 0x0) recvfrom$unix(r10, &(0x7f0000000140)=""/238, 0xee, 0x10120, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x1) 807.932015ms ago: executing program 3 (id=3349): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) r1 = mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x1) r2 = mmap$binder(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1, 0x11, r0, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x90, 0x0, &(0x7f00000001c0)=[@increfs={0x40046304, 0x3}, @decrefs, @register_looper, @enter_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xa, 0x1, 0x1c}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x8, 0x0, 0x35}}, &(0x7f0000000180)={0x0, 0x20, 0x38}}}, @enter_looper, @acquire_done={0x40106309, 0x3}, @free_buffer={0x40086303, r1}, @register_looper, @free_buffer={0x40086303, r2}], 0x23, 0x0, &(0x7f0000000280)="39f43269df7c2c3ef05d0189f3c74939191a58f687ec44507301570ba5a771c65bd2f5"}) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, &(0x7f0000000140)=""/237, &(0x7f0000000080)=0xed) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000002c0)=@ethtool_ringparam={0x10, 0x9, 0x100, 0x8003, 0x6, 0x200, 0x1, 0x800, 0x4}}) fstat(r0, &(0x7f0000000000)) 789.751105ms ago: executing program 3 (id=3350): rt_sigprocmask(0x1, &(0x7f0000000040)={[0x800000003]}, 0x0, 0x6) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000100)={{0x0, 0x989680}, {r1, r2+10000000}}, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0xe6042, 0x0) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)="ffb2ed3971091e40da02d65ce728962eb14702ea816bb9c0d9f139ee7043924fd48d99a653a7430aaa5475bc6e1e1744fb35f4fdd2c5787e2c261c7f116ab39c05916977f6dd77a52f1742269300f49598088870bd81427ffb1c8cb0d1b6e2b68f5dc12bdb8e58d82b836e3ad0026549c27f8434add9655a5085d681e3d7249494b1451e85e256eadb577552db845e4144b059cf", 0x94, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r5, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000040)={0x0, 0x0, 0x98, &(0x7f00000001c0)={0x46, 0xfffffffffffff985, 0x14}}) syz_open_dev$usbfs(&(0x7f0000000040), 0x62, 0x62100) readv(r3, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x2) rt_sigprocmask(0x1, &(0x7f0000000040)={[0x800000003]}, 0x0, 0x6) (async) timer_create(0x3, 0x0, &(0x7f0000044000)) (async) clock_gettime(0x0, &(0x7f00000000c0)) (async) timer_settime(r0, 0x1, &(0x7f0000000100)={{0x0, 0x989680}, {r1, r2+10000000}}, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0xe6042, 0x0) (async) add_key$user(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)="ffb2ed3971091e40da02d65ce728962eb14702ea816bb9c0d9f139ee7043924fd48d99a653a7430aaa5475bc6e1e1744fb35f4fdd2c5787e2c261c7f116ab39c05916977f6dd77a52f1742269300f49598088870bd81427ffb1c8cb0d1b6e2b68f5dc12bdb8e58d82b836e3ad0026549c27f8434add9655a5085d681e3d7249494b1451e85e256eadb577552db845e4144b059cf", 0x94, 0xffffffffffffffff) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) (async) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r5, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000040)={0x0, 0x0, 0x98, &(0x7f00000001c0)={0x46, 0xfffffffffffff985, 0x14}}) (async) syz_open_dev$usbfs(&(0x7f0000000040), 0x62, 0x62100) (async) readv(r3, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x2) (async) 697.484087ms ago: executing program 3 (id=3351): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000540)={@val={0xa, 0x88a8}, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x5, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @rand_addr=0x64010102, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x1, 0x8001, 0x0, 0x2}}}}}}}, 0x3a) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x28141, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000180)={'vlan0\x00', @broadcast}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r5, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close_range(r0, 0xffffffffffffffff, 0x0) 507.451561ms ago: executing program 2 (id=3353): ppoll(0x0, 0x0, &(0x7f0000001a00), &(0x7f0000001a40)={[0x1a1e]}, 0x8) ftruncate(0xffffffffffffffff, 0x398a0bdb) add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) write(r0, &(0x7f0000000280)="240000001e005f0214fefffffffffff8074000001d00000004000000080009000d1b0000", 0x24) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_io_uring_setup(0x0, &(0x7f0000003400)={0x0, 0x6460, 0x800, 0x0, 0x1d3}, &(0x7f0000003480), &(0x7f00000034c0)) r1 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r1, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r3 = socket(0x1e, 0x4, 0x0) r4 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d0001000060020904001005030001000921000036012205000905810300000c"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000380)={0x18, &(0x7f0000000100)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000300)={0x24, &(0x7f0000000940)={0x0, 0x10, 0x5, {0x5, 0xe, "751cd0"}}, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xfe, 0x1, {0x22, 0x5f4}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x5}}) syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0}) setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0) socket(0x1e, 0x4, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xe00, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffff20}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x250840, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION2(r6, 0x40a0ae49, &(0x7f0000000280)={0x10201, 0x5, 0x1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x8000000000000001}) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000001c0)={'lo\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0x4, 0xffffff7f, 0xffff7fff, 0x0, 0x1ff, 0xfff, 0x1273, 0x9}}) close_range(r2, 0xffffffffffffffff, 0x0) 399.875823ms ago: executing program 3 (id=3355): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}, 0x4}}, 0xb8}}, 0x4048840) r2 = dup(r0) ioctl$sock_netdev_private(r1, 0x89fb, &(0x7f00000001c0)="b8c49adf09731351360c15d885e6ba8a852624d9f5a7bb3a820d4a515ac76324b8764fad7f3e2395e8c132cb38ca47fdf97276a404144507e2be64e8578620a96f10b31778cc427cc6d86c13e16095c41f6aa5ad2e96425ab02af66f0acbef6dd0ad5ba2fd86a2560b3fe83237429f59eb0f1b526b16d952e1bb26061d6ccf88d603261f46b832b52058c3ef50cdb232a0e4") setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x3c006, &(0x7f00000000c0)=ANY=[@ANYBLOB="4f770658c403000000bfbca7b742268d65389de480bb56ce7b68019ebe5558fb5bae00"/45]) 359.630744ms ago: executing program 9 (id=3357): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000200)={0xafbcb7ab, {{0x2, 0x4e22, @empty}}}, 0x88) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004000)={0x24, 0x49, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@nested={0x10, 0xd7, 0x0, 0x1, [@nested={0xc, 0xbe, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @pid}]}]}]}, 0x24}}, 0x4008000) writev(r3, &(0x7f00000003c0), 0x0) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 329.771554ms ago: executing program 3 (id=3358): unshare(0x62040200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000002bbbbbbbbbbbbaaaaaaaaaa0a0806000500000604"], 0x2e) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)=ANY=[@ANYBLOB='max=0000R000000000000000000,\x00']) 255.994466ms ago: executing program 9 (id=3359): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x442, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r3, 0x4018aee2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) (async) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x10000, 0x0) (async) getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000000)=""/4091, &(0x7f0000001000)=0xffb) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) (async) ioctl$KVM_CAP_DISABLE_QUIRKS2(r4, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0xbf}) (async) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_NMI(r5, 0xae9a) close_range(r0, 0xffffffffffffffff, 0x0) 255.576066ms ago: executing program 9 (id=3360): r0 = epoll_create1(0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000b, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) openat$cgroup_ro(r2, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 243.498165ms ago: executing program 9 (id=3361): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a2401"], 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000ec0)='\x00\x000\x10\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a2401"], 0x0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') (async) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) (async) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000ec0)='\x00\x000\x10\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00') (async) 222.146016ms ago: executing program 9 (id=3362): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) write(r1, &(0x7f0000000400)="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", 0x1f000) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) 148.008408ms ago: executing program 3 (id=3363): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) fsetxattr$trusted_overlay_nlink(r1, &(0x7f0000000080), &(0x7f0000000100)={'U-', 0x4}, 0x16, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r2 = userfaultfd(0x80801) r3 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff0005008005090581030002000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, 0x3000, 0x1}) ioctl$PPPIOCGIDLE(0xffffffffffffffff, 0x8010743f, &(0x7f00000001c0)) r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, '\xa0S', 0x3a, '{\x00\x00\x00\x00\x00\x00\x80\x00\xc99\xcc\xd2X\xcdz\x89\x89s\x8d2\xb7\x95f\x1d7j!}\x9b3\x00M\x89N\xa2y\xe18\x02c\x1f\xaf I5\xfd\xba\x82\xfb\x1a?W\x8b\x90\xf0\xda\\v\xfbG\xa5\x81^\x87\x95\x88\x1d\\\x97\xf6\xd1\x19s\xf2J\xab;\x0f\x82\a\xa2\x03cio\xc6\xcd_\xe1|uU\xc3\r\x88H\xf8\xc1\xc2\x1c\x9b\xf0k\\Tw\xd3\xc9\xb3\xe0\xf7W\xc6\n\x1f\xe8\xb1\x13\xa9R|\xbc\xa6k\xe7\xf6\xfb4\xe9\xc6\xc0j\xcd\xd3\xe3\'?\xb7\x1e\x17\xa6a\x01\x03\xec\xdc\x97Xn(\x8f\x18\xeeRfU\a\xf6', 0x3a, './file0'}, 0xc8) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 147.135448ms ago: executing program 8 (id=3364): r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x600, 0x0) readv(r1, 0x0, 0xffffffffffffffec) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0xa) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r3, 0xfffffffffffffffd, 0xbb) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max']) 61.034669ms ago: executing program 8 (id=3365): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3}) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0xa2}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000180)=[@register_looper], 0x50, 0x0, &(0x7f0000000400)="b9d787b3af89a5d99a5a970a084485fae40e5ad0c55c8de8677cb6d6c24e611e69b8982fd15313e6a00abff49a2b981f3f98967aff7a8c71c6ae7fbe95c5a960489eaa8e65f3104c316074bb009024bd"}) (async) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$tcp_mem(r4, &(0x7f0000000500)={0x9, 0x20, 0x3f519662, 0x20, 0x1}, 0x48) write$cgroup_subtree(r4, 0x0, 0x9) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (rerun: 32) 0s ago: executing program 9 (id=3366): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) sendto$inet6(r0, &(0x7f0000000240)="c6", 0x1, 0x8040, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x400000000000000) kernel console output (not intermixed with test programs): 8 comm=syz.5.2561 [ 230.889004][ T336] usb 7-1: new low-speed USB device number 22 using dummy_hcd [ 230.913332][ T336] usb 7-1: device descriptor read/8, error -71 [ 230.930782][ T8046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=8046 comm=syz.5.2564 [ 230.973150][ T8050] can: request_module (can-proto-0) failed. [ 230.980330][ T8050] 9pnet_virtio: no channels available for device [ 231.051542][ T336] usb 7-1: device descriptor read/8, error -71 [ 231.159117][ T336] usb usb7-port1: unable to enumerate USB device [ 231.256061][ T335] usb 5-1: USB disconnect, device number 9 [ 231.311757][ T8055] pim6reg1: entered promiscuous mode [ 231.317177][ T8055] pim6reg1: entered allmulticast mode [ 232.221525][ T8101] overlayfs: failed to clone upperpath [ 232.333599][ T8108] incfs: Options parsing error. -22 [ 232.338880][ T8108] incfs: mount failed -22 [ 232.375956][ T8108] tap0: tun_chr_ioctl cmd 1074025675 [ 232.388671][ T8108] tap0: persist enabled [ 232.394358][ T8108] tap0: tun_chr_ioctl cmd 1074025675 [ 232.400644][ T8108] tap0: persist disabled [ 232.411568][ T8108] tap0: tun_chr_ioctl cmd 1074025675 [ 232.421520][ T8108] tap0: persist disabled [ 232.691367][ T36] kauditd_printk_skb: 467 callbacks suppressed [ 232.691384][ T36] audit: type=1400 audit(1757394112.716:46075): avc: denied { create } for pid=8121 comm="syz.7.2594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 232.739091][ T36] audit: type=1400 audit(1757394112.756:46076): avc: denied { setopt } for pid=8121 comm="syz.7.2594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 232.775964][ T36] audit: type=1400 audit(1757394112.756:46077): avc: denied { setopt } for pid=8121 comm="syz.7.2594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 232.844020][ T36] audit: type=1400 audit(1757394112.756:46078): avc: denied { read } for pid=8118 comm="syz.4.2592" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 232.871551][ T36] audit: type=1400 audit(1757394112.756:46079): avc: denied { read open } for pid=8118 comm="syz.4.2592" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 232.897483][ T36] audit: type=1400 audit(1757394112.756:46080): avc: denied { create } for pid=8121 comm="syz.7.2594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 232.918118][ T36] audit: type=1400 audit(1757394112.756:46081): avc: denied { ioctl } for pid=8121 comm="syz.7.2594" path="socket:[33072]" dev="sockfs" ino=33072 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 232.943116][ T36] audit: type=1400 audit(1757394112.756:46082): avc: denied { write } for pid=8121 comm="syz.7.2594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 232.963742][ T36] audit: type=1400 audit(1757394112.786:46083): avc: denied { read write } for pid=7346 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 232.987965][ T36] audit: type=1400 audit(1757394112.786:46084): avc: denied { read write open } for pid=7346 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 233.018719][ T8143] 9pnet_fd: Insufficient options for proto=fd [ 233.078979][ T64] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 233.250348][ T64] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.260664][ T64] usb 5-1: config 0 has no interfaces? [ 233.266168][ T64] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 233.275893][ T64] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.287671][ T64] usb 5-1: config 0 descriptor?? [ 233.413820][ T8169] overlayfs: failed to clone upperpath [ 233.518023][ T8134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.524412][ T8172] netlink: 'syz.6.2611': attribute type 4 has an invalid length. [ 233.534347][ T8172] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.2611'. [ 233.539149][ T8134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.593165][ T8174] binder: Unknown parameter '00000000000000000000000' [ 233.640870][ T8176] loop2: detected capacity change from 0 to 7 [ 233.860807][ T8187] rust_binder: Failed to allocate buffer. len:1120, is_oneway:true [ 234.159002][ T64] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 234.299003][ T64] usb 7-1: device descriptor read/64, error -71 [ 234.538991][ T64] usb 7-1: device descriptor read/64, error -71 [ 234.779109][ T64] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 234.919006][ T64] usb 7-1: device descriptor read/64, error -71 [ 235.158983][ T64] usb 7-1: device descriptor read/64, error -71 [ 235.269257][ T64] usb usb7-port1: attempt power cycle [ 235.619014][ T64] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 235.641074][ T64] usb 7-1: device descriptor read/8, error -71 [ 235.771602][ T64] usb 7-1: device descriptor read/8, error -71 [ 235.812378][ T336] usb 5-1: USB disconnect, device number 10 [ 236.009396][ T64] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 236.040940][ T64] usb 7-1: device descriptor read/8, error -71 [ 236.092406][ T8257] 9pnet_fd: Insufficient options for proto=fd [ 236.170985][ T64] usb 7-1: device descriptor read/8, error -71 [ 236.229005][ T336] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 236.279081][ T64] usb usb7-port1: unable to enumerate USB device [ 236.379027][ T336] usb 5-1: Using ep0 maxpacket: 8 [ 236.389045][ T336] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 236.398110][ T336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.406127][ T336] usb 5-1: Product: syz [ 236.410463][ T336] usb 5-1: Manufacturer: syz [ 236.415100][ T336] usb 5-1: SerialNumber: syz [ 236.529249][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2642'. [ 236.626951][ T336] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 236.824730][ T336] usb 5-1: USB disconnect, device number 11 [ 236.832546][ T336] usblp0: removed [ 237.218821][ T8296] netlink: 'syz.7.2652': attribute type 12 has an invalid length. [ 237.256117][ T8298] tmpfs: Unknown parameter 'no' [ 237.289018][ T10] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 237.441816][ T8317] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2661'. [ 237.453864][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.466435][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 237.479799][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 237.490664][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 237.509702][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.528970][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.542690][ T10] usb 7-1: config 0 descriptor?? [ 237.578373][ T8323] tc_dump_action: action bad kind [ 237.580359][ T8321] virtiofs: Unknown parameter 'always' [ 237.593206][ T8321] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 237.714583][ T36] kauditd_printk_skb: 746 callbacks suppressed [ 237.714604][ T36] audit: type=1400 audit(1757394373.740:46831): avc: denied { mounton } for pid=8328 comm="syz.4.2665" path="/40/file0" dev="tmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 237.715887][ T8332] tmpfs: Unknown parameter 'no' [ 237.765068][ T36] audit: type=1400 audit(1757394373.790:46832): avc: denied { ioctl } for pid=8287 comm="syz.6.2649" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 237.790310][ T36] audit: type=1400 audit(1757394373.790:46833): avc: denied { ioctl } for pid=8287 comm="syz.6.2649" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 237.819020][ T36] audit: type=1400 audit(1757394629.854:46834): avc: denied { ioctl } for pid=8328 comm="syz.4.2665" path="/dev/binderfs/binder0" dev="binder" ino=4 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 237.874355][ T36] audit: type=1400 audit(1757394629.904:46835): avc: denied { read write } for pid=7346 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 237.923078][ T36] audit: type=1400 audit(1757394629.904:46836): avc: denied { read write open } for pid=7346 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 237.949543][ T36] audit: type=1400 audit(1757394629.904:46837): avc: denied { ioctl } for pid=7346 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 237.977053][ T36] audit: type=1400 audit(1757394629.924:46838): avc: denied { read } for pid=8335 comm="syz.4.2666" dev="nsfs" ino=4026533323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 237.982473][ T10] plantronics 0003:047F:FFFF.000A: global environment stack underflow [ 238.000542][ T36] audit: type=1400 audit(1757394629.924:46839): avc: denied { read open } for pid=8335 comm="syz.4.2666" path="net:[4026533323]" dev="nsfs" ino=4026533323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 238.018343][ T10] plantronics 0003:047F:FFFF.000A: item 0 0 1 11 parsing failed [ 238.040262][ T10] plantronics 0003:047F:FFFF.000A: parse failed [ 238.046945][ T10] plantronics 0003:047F:FFFF.000A: probe with driver plantronics failed with error -22 [ 238.085457][ T36] audit: type=1400 audit(1757394629.924:46840): avc: denied { create } for pid=8335 comm="syz.4.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 238.204802][ T8288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.220191][ T8288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.234225][ T64] usb 7-1: USB disconnect, device number 27 [ 238.253117][ T8354] overlay: Bad value for 'nfs_export' [ 238.885160][ T8367] tmpfs: Unknown parameter 'no' [ 239.752685][ T8403] 9pnet_fd: Insufficient options for proto=fd [ 239.805468][ T8407] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2688'. [ 240.239492][ T334] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 240.401871][ T334] usb 5-1: config 0 has an invalid interface number: 190 but max is 0 [ 240.410654][ T334] usb 5-1: config 0 has no interface number 0 [ 240.416787][ T334] usb 5-1: New USB device found, idVendor=19d2, idProduct=1111, bcdDevice= 7.75 [ 240.426131][ T334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.436814][ T334] usb 5-1: config 0 descriptor?? [ 240.461559][ T8442] __vm_enough_memory: pid: 8442, comm: syz.6.2703, bytes: 18014402804453376 not enough memory for the allocation [ 240.646535][ T334] usb 5-1: string descriptor 0 read error: -71 [ 240.653733][ T334] usb 5-1: bad CDC descriptors [ 240.659485][ T334] usb 5-1: USB disconnect, device number 12 [ 240.727413][ T8455] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 240.734650][ T8455] rust_binder: Write failure EINVAL in pid:328 [ 241.519465][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2716'. [ 241.660165][ T8493] No source specified [ 241.731738][ T8500] rust_binder: 336: no such ref 2 [ 241.741505][ T8500] rust_binder: 336: no such ref 2 [ 241.746588][ T8500] rust_binder: 336: no such ref 2 [ 241.754722][ T8502] 9pnet_fd: Insufficient options for proto=fd [ 241.768188][ T8500] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:336 [ 241.870174][ T8509] rust_binder: 338: no such ref 2 [ 241.888980][ T8509] rust_binder: Read failure Err(EAGAIN) in pid:338 [ 242.041965][ T8521] tipc: Enabling of bearer rejected, failed to enable media [ 242.058098][ T8521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=8521 comm=syz.4.2730 [ 242.309105][ T563] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 242.458976][ T563] usb 5-1: Using ep0 maxpacket: 32 [ 242.466870][ T563] usb 5-1: config 1 has an invalid interface number: 137 but max is 0 [ 242.475252][ T563] usb 5-1: config 1 has no interface number 0 [ 242.481501][ T563] usb 5-1: config 1 interface 137 altsetting 4 bulk endpoint 0x6 has invalid maxpacket 545 [ 242.492126][ T563] usb 5-1: config 1 interface 137 altsetting 4 endpoint 0x82 has invalid wMaxPacketSize 0 [ 242.502054][ T563] usb 5-1: config 1 interface 137 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 0 [ 242.512020][ T563] usb 5-1: config 1 interface 137 has no altsetting 0 [ 242.521848][ T563] usb 5-1: New USB device found, idVendor=0557, idProduct=2021, bcdDevice=74.1a [ 242.531003][ T563] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.539024][ T563] usb 5-1: Product: syz [ 242.543290][ T563] usb 5-1: Manufacturer: syz [ 242.547892][ T563] usb 5-1: SerialNumber: syz [ 242.556403][ T8521] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 242.759918][ T36] kauditd_printk_skb: 561 callbacks suppressed [ 242.759938][ T36] audit: type=1400 audit(1757394890.791:47402): avc: denied { mounton } for pid=8529 comm="syz.5.2734" path="/146/file0" dev="tmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 242.764646][ T8530] overlayfs: failed to clone upperpath [ 242.766180][ T36] audit: type=1400 audit(1757394890.791:47403): avc: denied { remount } for pid=8529 comm="syz.5.2734" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 242.814880][ T36] audit: type=1400 audit(1757394890.791:47404): avc: denied { create } for pid=8529 comm="syz.5.2734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 242.824203][ T8531] /dev/sr0: Can't lookup blockdev [ 242.836416][ T36] audit: type=1400 audit(1757394890.791:47405): avc: denied { mounton } for pid=8529 comm="syz.5.2734" path="/146/bus" dev="tmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 242.866012][ T36] audit: type=1400 audit(1757394890.821:47406): avc: denied { mount } for pid=8520 comm="syz.4.2730" name="/" dev="ramfs" ino=33581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 242.867999][ T8530] netlink: 'syz.5.2734': attribute type 4 has an invalid length. [ 242.889268][ T563] pl2303 5-1:1.137: required interrupt-in endpoint missing [ 242.908693][ T563] usb 5-1: USB disconnect, device number 13 [ 242.919849][ T36] audit: type=1400 audit(1757394890.821:47407): avc: denied { mounton } for pid=8520 comm="syz.4.2730" path="/file0" dev="ramfs" ino=33582 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 242.959180][ T36] audit: type=1400 audit(1757394890.821:47408): avc: denied { mount } for pid=8520 comm="syz.4.2730" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 242.986468][ T36] audit: type=1400 audit(1757394890.821:47409): avc: denied { create } for pid=8520 comm="syz.4.2730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 243.029000][ T36] audit: type=1400 audit(1757394890.821:47410): avc: denied { write } for pid=8520 comm="syz.4.2730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 243.051113][ T36] audit: type=1400 audit(1757394890.821:47411): avc: denied { read } for pid=8520 comm="syz.4.2730" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 243.222711][ T8553] netlink: 'syz.7.2743': attribute type 4 has an invalid length. [ 243.246892][ T8553] netlink: 'syz.7.2743': attribute type 4 has an invalid length. [ 243.819026][ T334] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 243.971537][ T334] usb 5-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 243.988974][ T334] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.000821][ T334] usb 5-1: config 1 interface 1 has no altsetting 0 [ 244.011003][ T334] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 244.020222][ T334] usb 5-1: New USB device strings: Mfr=199, Product=2, SerialNumber=3 [ 244.028456][ T334] usb 5-1: Product: syz [ 244.033295][ T334] usb 5-1: Manufacturer: syz [ 244.037911][ T334] usb 5-1: SerialNumber: syz [ 244.052411][ T334] cdc_ncm 5-1:1.0: skipping garbage [ 244.057690][ T334] cdc_ncm 5-1:1.0: NCM or ECM functional descriptors missing [ 244.076983][ T334] cdc_ncm 5-1:1.0: bind() failure [ 244.257066][ T334] usb 5-1: USB disconnect, device number 14 [ 244.859974][ T8612] netlink: 'syz.7.2763': attribute type 27 has an invalid length. [ 244.893807][ T8614] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 244.990968][ T328] syzkaller0: tun_net_xmit 76 [ 244.995879][ T328] syzkaller0: tun_net_xmit 48 [ 245.000007][ T8618] syzkaller0: create flow: hash 4217406396 index 1 [ 245.008487][ T8618] syzkaller0: delete flow: hash 4217406396 index 1 [ 245.491250][ T8643] netlink: 'syz.5.2774': attribute type 6 has an invalid length. [ 245.499238][ T8643] IPv6: NLM_F_CREATE should be specified when creating new route [ 246.253985][ T5191] Bluetooth: hci0: Frame reassembly failed (-84) [ 246.260469][ T5191] Bluetooth: hci0: Frame reassembly failed (-84) [ 247.469802][ T8705] tipc: Trying to set illegal importance in message [ 247.481491][ T8705] overlay: ./file1 is not a directory [ 248.309073][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 248.309082][ T784] Bluetooth: hci0: command 0x1003 tx timeout [ 248.337735][ T36] kauditd_printk_skb: 783 callbacks suppressed [ 248.337752][ T36] audit: type=1400 audit(1757394896.361:48195): avc: denied { read write } for pid=7346 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 248.368480][ T36] audit: type=1400 audit(1757394896.361:48196): avc: denied { read write open } for pid=7346 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 248.401164][ T36] audit: type=1400 audit(1757394896.361:48197): avc: denied { ioctl } for pid=7346 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 248.426806][ T36] audit: type=1400 audit(1757394896.431:48198): avc: denied { read write } for pid=8711 comm="syz.4.2797" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 248.450215][ T36] audit: type=1400 audit(1757394896.431:48199): avc: denied { read open } for pid=8711 comm="syz.4.2797" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 248.478424][ T36] audit: type=1400 audit(1757394896.441:48200): avc: denied { read } for pid=8711 comm="syz.4.2797" dev="nsfs" ino=4026533323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 248.500712][ T36] audit: type=1400 audit(1757394896.441:48201): avc: denied { read open } for pid=8711 comm="syz.4.2797" path="net:[4026533323]" dev="nsfs" ino=4026533323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 248.524594][ T36] audit: type=1400 audit(1757394896.441:48202): avc: denied { create } for pid=8711 comm="syz.4.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 248.544827][ T36] audit: type=1400 audit(1757394896.441:48203): avc: denied { create } for pid=8711 comm="syz.4.2797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 248.571937][ T8714] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 248.588961][ T36] audit: type=1400 audit(1757394896.451:48204): avc: denied { write } for pid=8711 comm="syz.4.2797" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 248.747681][ T8720] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 248.747712][ T8720] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:229 [ 248.846450][ T8725] rust_binder: 8724 RLIMIT_NICE not set [ 248.860040][ T335] rust_binder: 8723: removing orphan mapping 0:4248 [ 249.513613][ T8733] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 249.513648][ T8733] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:241 [ 249.662075][ T8740] Restarting kernel threads ... done. [ 250.294460][ T8744] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:252 [ 250.299320][ T8745] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 250.944938][ T8754] rust_binder: inc_ref_done called when no active inc_refs [ 251.047830][ T8757] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 251.062356][ T8757] rust_binder: 264: no such ref 2 [ 251.068414][ T8757] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 251.989709][ T8773] netlink: 'syz.4.2817': attribute type 4 has an invalid length. [ 252.044138][ T8778] rust_binder: 285: no such ref 3 [ 252.049354][ T8778] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 252.056489][ T8778] rust_binder: inc_ref_done called when no active inc_refs [ 252.108785][ T8780] /dev/rnullb0: Can't open blockdev [ 252.158580][ T8783] rust_binder: Write failure EFAULT in pid:290 [ 252.297275][ T8788] netlink: 'syz.4.2821': attribute type 4 has an invalid length. [ 253.350154][ T36] kauditd_printk_skb: 385 callbacks suppressed [ 253.350171][ T36] audit: type=1400 audit(1757394901.381:48590): avc: denied { read write } for pid=7346 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.386859][ T36] audit: type=1400 audit(1757394901.381:48591): avc: denied { read write open } for pid=7346 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.412962][ T36] audit: type=1400 audit(1757394901.381:48592): avc: denied { ioctl } for pid=7346 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.440668][ T36] audit: type=1400 audit(1757394901.441:48593): avc: denied { read } for pid=8803 comm="syz.4.2827" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 253.469665][ T36] audit: type=1400 audit(1757394901.441:48594): avc: denied { read open } for pid=8803 comm="syz.4.2827" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 253.506371][ T36] audit: type=1400 audit(1757394901.451:48595): avc: denied { read write } for pid=7346 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.524936][ T8809] audit: audit_backlog=65 > audit_backlog_limit=64 [ 253.532161][ T36] audit: type=1400 audit(1757394901.451:48596): avc: denied { read write open } for pid=7346 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.537893][ T8809] audit: audit_lost=40 audit_rate_limit=0 audit_backlog_limit=64 [ 253.564128][ T36] audit: type=1400 audit(1757394901.451:48597): avc: denied { ioctl } for pid=7346 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 253.849047][ T336] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 253.999031][ T336] usb 5-1: Using ep0 maxpacket: 8 [ 254.006277][ T336] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 254.014621][ T336] usb 5-1: config 179 has no interface number 0 [ 254.020924][ T336] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 254.032311][ T336] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 254.043934][ T336] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 254.055270][ T336] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 254.065400][ T336] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 254.078946][ T336] usb 5-1: config 179 interface 65 has no altsetting 0 [ 254.085848][ T336] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 254.094936][ T336] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.111224][ T336] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input17 [ 254.468313][ T336] usb 5-1: USB disconnect, device number 16 [ 254.475089][ T336] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 254.869566][ T8815] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2830'. [ 255.539084][ T335] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 255.689033][ T335] usb 5-1: Using ep0 maxpacket: 32 [ 255.696379][ T335] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 255.704800][ T335] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 255.713465][ T335] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 255.722487][ T335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 255.732147][ T335] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 255.741914][ T335] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 255.755009][ T335] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 255.764581][ T335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.773886][ T335] usb 5-1: config 0 descriptor?? [ 256.008572][ T335] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 256.024859][ T335] usb 5-1: USB disconnect, device number 17 [ 256.033510][ T335] usblp0: removed [ 256.439049][ T335] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 256.589053][ T335] usb 5-1: Using ep0 maxpacket: 32 [ 256.596138][ T335] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 256.604653][ T335] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 256.613321][ T335] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 256.622312][ T335] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 256.632009][ T335] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 256.641806][ T335] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 256.654839][ T335] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 256.663936][ T335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.673236][ T335] usb 5-1: config 0 descriptor?? [ 257.143337][ T335] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 257.158697][ T335] usb 5-1: USB disconnect, device number 18 [ 257.166435][ T335] usblp0: removed [ 257.401020][ T8838] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.408168][ T8838] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.415358][ T8838] bridge_slave_0: entered allmulticast mode [ 257.421682][ T8838] bridge_slave_0: entered promiscuous mode [ 257.429053][ T8838] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.436106][ T8838] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.443220][ T8838] bridge_slave_1: entered allmulticast mode [ 257.449555][ T8838] bridge_slave_1: entered promiscuous mode [ 257.519172][ T8838] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.526248][ T8838] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.533553][ T8838] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.540616][ T8838] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.582383][ T5173] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.589946][ T5173] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.603794][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.610871][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.621634][ T5173] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.628694][ T5173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.731743][ T8838] veth0_vlan: entered promiscuous mode [ 257.744895][ T8849] rust_binder: Write failure EINVAL in pid:346 [ 257.780134][ T8838] veth1_macvtap: entered promiscuous mode [ 258.018117][ T8858] SELinux: failed to load policy [ 258.378335][ T36] kauditd_printk_skb: 413 callbacks suppressed [ 258.378353][ T36] audit: type=1400 audit(1757394906.401:48995): avc: denied { read write } for pid=7346 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.417139][ T36] audit: type=1400 audit(1757394906.401:48996): avc: denied { read write open } for pid=7346 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.443446][ T36] audit: type=1400 audit(1757394906.401:48997): avc: denied { ioctl } for pid=7346 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 258.470506][ T36] audit: type=1400 audit(1757394906.441:48998): avc: denied { create } for pid=8866 comm="syz.4.2841" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 258.493642][ T36] audit: type=1400 audit(1757394906.461:48999): avc: denied { ioctl } for pid=8866 comm="syz.4.2841" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=35659 ioctlcmd=0x9435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 258.521056][ T36] audit: type=1400 audit(1757394906.461:49000): avc: denied { ioctl } for pid=8866 comm="syz.4.2841" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=35659 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 258.549378][ T36] audit: type=1400 audit(1757394906.461:49001): avc: denied { ioctl } for pid=8866 comm="syz.4.2841" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=35659 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 258.576587][ T36] audit: type=1400 audit(1757394906.461:49002): avc: denied { ioctl } for pid=8866 comm="syz.4.2841" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=35659 ioctlcmd=0xaa06 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 258.604824][ T36] audit: type=1400 audit(1757394906.471:49003): avc: denied { read } for pid=8866 comm="syz.4.2841" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 258.629117][ T36] audit: type=1400 audit(1757394906.471:49004): avc: denied { read open } for pid=8866 comm="syz.4.2841" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 258.736468][ T8876] /dev/rnullb0: Can't open blockdev [ 258.779820][ T8879] netlink: 'syz.4.2844': attribute type 1 has an invalid length. [ 258.831825][ T8881] rust_binder: 373: no such ref 0 [ 258.837474][ T8881] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 258.846144][ T8881] rust_binder: 373: no such ref 0 [ 259.215955][ T8900] rust_binder: 389: no such ref 0 [ 259.221765][ T8900] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 536870912 [ 259.231064][ T8900] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:389 [ 259.272862][ T8902] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 259.282197][ T8902] rust_binder: Read failure Err(EFAULT) in pid:391 [ 259.420056][ T8905] overlayfs: failed to clone upperpath [ 260.109065][ T334] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 260.259004][ T334] usb 9-1: Using ep0 maxpacket: 8 [ 260.266290][ T334] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 260.274628][ T334] usb 9-1: config 179 has no interface number 0 [ 260.281039][ T334] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 260.292181][ T334] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 260.303599][ T334] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 260.315064][ T334] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 260.326514][ T334] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 260.339931][ T334] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 260.349018][ T334] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.360076][ T8914] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 260.819295][ T8930] rust_binder: Error while translating object. [ 260.819342][ T8930] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 260.825769][ T8930] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:417 [ 260.836770][ T8930] rust_binder: 417: no such ref 1 [ 260.851113][ T8930] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 260.975694][ T8933] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 261.105883][ T8934] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.113265][ T8934] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.121976][ T8934] bridge_slave_0: entered allmulticast mode [ 261.129471][ T8934] bridge_slave_0: entered promiscuous mode [ 261.140112][ T8934] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.156004][ T8934] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.163307][ T8934] bridge_slave_1: entered allmulticast mode [ 261.169972][ T8934] bridge_slave_1: entered promiscuous mode [ 261.324684][ T8934] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.331808][ T8934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.339860][ T8934] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.347055][ T8934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.412804][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.420707][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.436569][ T5191] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.443666][ T5191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.455292][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.462407][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.546015][ T8934] veth0_vlan: entered promiscuous mode [ 261.585454][ T8934] veth1_macvtap: entered promiscuous mode [ 261.697117][ T8955] !@: renamed from xfrm0 (while UP) [ 261.773025][ T8957] /dev/rnullb0: Can't open blockdev [ 262.179083][ T64] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 262.226227][ T8969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=8969 comm=syz.4.2876 [ 262.341732][ T64] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 262.351015][ T64] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.369053][ T64] usb 10-1: config 0 descriptor?? [ 262.426753][ T8972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=8972 comm=syz.4.2877 [ 262.562974][ T8974] rust_binder: 8973 RLIMIT_NICE not set [ 262.882660][ T335] usb 9-1: USB disconnect, device number 2 [ 262.882684][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 263.257670][ T335] rust_binder: 8971: removing orphan mapping 0:4248 [ 263.312510][ T8981] fuse: Unknown parameter 'Yroa00000000000000000000' [ 263.372972][ T8989] syzkaller0: entered allmulticast mode [ 263.380661][ T36] kauditd_printk_skb: 714 callbacks suppressed [ 263.380680][ T36] audit: type=1400 audit(1757394911.411:49719): avc: denied { setopt } for pid=8984 comm="syz.4.2881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 263.384395][ T8989] syzkaller0: entered promiscuous mode [ 263.399464][ T36] audit: type=1400 audit(1757394911.411:49720): avc: denied { write } for pid=8990 comm="syz.8.2882" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 263.435553][ T36] audit: type=1400 audit(1757394911.411:49721): avc: denied { write } for pid=8990 comm="syz.8.2882" path="/dev/bus/usb/009/001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 263.435877][ T8989] syzkaller0 (unregistering): left promiscuous mode [ 263.461103][ T36] audit: type=1400 audit(1757394911.421:49722): avc: denied { ioctl } for pid=8964 comm="syz.9.2874" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 263.475591][ T8989] syzkaller0 (unregistering): left allmulticast mode [ 263.493594][ T36] audit: type=1400 audit(1757394911.421:49723): avc: denied { ioctl } for pid=8964 comm="syz.9.2874" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 263.524445][ T36] audit: type=1400 audit(1757394911.431:49724): avc: denied { create } for pid=8984 comm="syz.4.2881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 263.545712][ T36] audit: type=1400 audit(1757394911.431:49725): avc: denied { ioctl } for pid=8984 comm="syz.4.2881" path="socket:[37024]" dev="sockfs" ino=37024 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 263.571440][ T36] audit: type=1400 audit(1757394911.441:49726): avc: denied { create } for pid=8990 comm="syz.8.2882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 263.595439][ T36] audit: type=1400 audit(1757394911.441:49727): avc: denied { write } for pid=8990 comm="syz.8.2882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 263.610608][ T64] usb 10-1: Cannot set autoneg [ 263.616190][ T36] audit: type=1400 audit(1757394911.441:49728): avc: denied { read } for pid=8990 comm="syz.8.2882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 263.622405][ T64] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 263.680811][ T64] usb 10-1: USB disconnect, device number 2 [ 263.977141][ T8998] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.984312][ T8998] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.991617][ T8998] bridge_slave_0: entered allmulticast mode [ 263.998125][ T8998] bridge_slave_0: entered promiscuous mode [ 264.007516][ T8998] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.015018][ T8998] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.022199][ T8998] bridge_slave_1: entered allmulticast mode [ 264.028697][ T8998] bridge_slave_1: entered promiscuous mode [ 264.126151][ T8998] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.133273][ T8998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.140592][ T8998] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.147677][ T8998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.159629][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.167376][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.308632][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.315743][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.336491][ T9013] rust_binder: 18: no such ref 0 [ 264.354184][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.361314][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.381227][ T9014] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.381529][ T9014] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.388268][ T9014] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.412754][ T9014] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.413149][ T9014] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.420651][ T9014] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.427523][ T9014] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.434964][ T9014] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.442571][ T9014] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 264.575602][ T8998] veth0_vlan: entered promiscuous mode [ 264.653793][ T9023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:29 [ 264.660304][ T64] rust_binder: 9019: removing orphan mapping 0:4224 [ 264.675330][ T8998] veth1_macvtap: entered promiscuous mode [ 264.812249][ T9035] rust_binder: 25: no such ref 0 [ 264.818989][ T9039] rust_binder: 452: no such ref 3 [ 264.833345][ T9035] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 264.952735][ T9048] tipc: Started in network mode [ 264.957896][ T9048] tipc: Node identity 100, cluster identity 4711 [ 264.976272][ T9048] tipc: Node number set to 256 [ 265.210432][ T9057] rust_binder: 9056 RLIMIT_NICE not set [ 265.248990][ T563] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 265.411074][ T563] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 265.419441][ T563] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 265.428285][ T563] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 265.438596][ T563] usb 5-1: config 220 has no interface number 2 [ 265.444991][ T563] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 265.458216][ T563] usb 5-1: config 220 interface 0 has no altsetting 0 [ 265.465151][ T563] usb 5-1: config 220 interface 76 has no altsetting 0 [ 265.472095][ T563] usb 5-1: config 220 interface 1 has no altsetting 0 [ 265.482354][ T563] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 265.491546][ T563] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.499592][ T563] usb 5-1: Product: syz [ 265.503771][ T563] usb 5-1: Manufacturer: syz [ 265.508364][ T563] usb 5-1: SerialNumber: syz [ 265.727376][ T9046] rust_binder: Error while translating object. [ 265.727433][ T9046] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 265.739531][ T9046] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:457 [ 265.762535][ T563] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 265.792834][ T563] usb 5-1: No valid video chain found. [ 265.802169][ T563] usb 5-1: selecting invalid altsetting 0 [ 265.812857][ T563] usb 5-1: USB disconnect, device number 19 [ 266.027133][ T9074] Invalid ELF header type: 2 != 1 [ 266.027628][ T9075] Invalid ELF header type: 3 != 1 [ 266.168102][ T9080] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2905'. [ 266.196968][ T9080] kvm: kvm [9078]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000041) [ 266.260815][ T9090] tap0: tun_chr_ioctl cmd 1074025673 [ 266.266359][ T9089] tap0: tun_chr_ioctl cmd 1074025688 [ 266.579027][ T334] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 266.728981][ T334] usb 4-1: Using ep0 maxpacket: 16 [ 266.736320][ T334] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.748181][ T334] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.758074][ T334] usb 4-1: config 0 interface 0 has no altsetting 0 [ 266.764863][ T334] usb 4-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 266.773916][ T334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.783570][ T334] usb 4-1: config 0 descriptor?? [ 267.180338][ T9099] syz.4.2911 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 267.200050][ T334] zeroplus 0003:0C12:0005.000B: unbalanced delimiter at end of report description [ 267.225083][ T334] zeroplus 0003:0C12:0005.000B: parse failed [ 267.236288][ T334] zeroplus 0003:0C12:0005.000B: probe with driver zeroplus failed with error -22 [ 267.278989][ T335] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 267.405991][ T1262] usb 4-1: USB disconnect, device number 8 [ 267.436432][ T335] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 267.449971][ T64] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 267.458396][ T335] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 267.470258][ T335] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 267.480150][ T335] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 267.493232][ T335] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 267.502407][ T335] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.512187][ T335] usb 10-1: config 0 descriptor?? [ 267.621350][ T64] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 267.634381][ T64] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 267.643596][ T64] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.652010][ T64] usb 5-1: Product: syz [ 267.656228][ T64] usb 5-1: Manufacturer: syz [ 267.660864][ T64] usb 5-1: SerialNumber: syz [ 267.667328][ T64] usb 5-1: config 0 descriptor?? [ 267.726780][ T335] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 267.762053][ T335] plantronics 0003:047F:FFFF.000C: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 267.800369][ T335] usb 10-1: USB disconnect, device number 3 [ 267.901196][ T64] usb 5-1: USB disconnect, device number 20 [ 267.942522][ T9105] fido_id[9105]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 268.079383][ T6618] udevd[6618]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 268.149469][ T9114] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 268.337354][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 268.404202][ T36] kauditd_printk_skb: 610 callbacks suppressed [ 268.404219][ T36] audit: type=1400 audit(1757394916.431:50339): avc: denied { read write } for pid=7346 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 268.441671][ T36] audit: type=1400 audit(1757394916.431:50340): avc: denied { read write open } for pid=7346 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 268.467676][ T36] audit: type=1400 audit(1757394916.431:50341): avc: denied { ioctl } for pid=7346 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 268.493617][ T36] audit: type=1400 audit(1757394916.481:50342): avc: denied { read write } for pid=9121 comm="syz.4.2918" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 268.516911][ T36] audit: type=1400 audit(1757394916.481:50343): avc: denied { read write open } for pid=9121 comm="syz.4.2918" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 268.541278][ T36] audit: type=1400 audit(1757394916.481:50344): avc: denied { map } for pid=9121 comm="syz.4.2918" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 268.564668][ T36] audit: type=1400 audit(1757394916.481:50345): avc: denied { read write } for pid=9121 comm="syz.4.2918" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 268.588433][ T36] audit: type=1400 audit(1757394916.481:50346): avc: denied { create } for pid=9121 comm="syz.4.2918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 268.609043][ T36] audit: type=1400 audit(1757394916.491:50347): avc: denied { ioctl } for pid=9121 comm="syz.4.2918" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 268.633734][ T36] audit: type=1400 audit(1757394916.501:50348): avc: denied { read write } for pid=9121 comm="syz.4.2918" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 269.122629][ T9137] /dev/sr0: Can't lookup blockdev [ 269.250161][ T9139] rust_binder: 50: no such ref 3 [ 269.328970][ T336] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 269.340028][ T9144] rust_binder: 53: no such ref 3 [ 269.469002][ T334] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 269.488984][ T336] usb 5-1: Using ep0 maxpacket: 8 [ 269.497684][ T336] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.508278][ T336] usb 5-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 269.522210][ T336] usb 5-1: config 1 interface 0 has no altsetting 0 [ 269.532837][ T336] usb 5-1: New USB device found, idVendor=056e, idProduct=00fc, bcdDevice= 0.40 [ 269.542027][ T336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.550270][ T336] usb 5-1: Product: syz [ 269.554442][ T336] usb 5-1: Manufacturer: syz [ 269.559074][ T336] usb 5-1: SerialNumber: syz [ 269.629042][ T334] usb 4-1: Using ep0 maxpacket: 16 [ 269.636578][ T334] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 269.644802][ T334] usb 4-1: config 0 has no interface number 0 [ 269.651021][ T334] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 269.660867][ T334] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 269.671278][ T334] usb 4-1: config 0 interface 41 has no altsetting 0 [ 269.681727][ T334] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 269.690987][ T334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.699939][ T334] usb 4-1: Product: syz [ 269.704121][ T334] usb 4-1: Manufacturer: syz [ 269.708719][ T334] usb 4-1: SerialNumber: syz [ 269.715201][ T334] usb 4-1: config 0 descriptor?? [ 269.722082][ T9141] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 269.729739][ T9141] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 269.781726][ T336] usbhid 5-1:1.0: can't add hid device: -71 [ 269.787873][ T336] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 269.796898][ T336] usb 5-1: USB disconnect, device number 21 [ 269.941526][ T9141] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 269.949199][ T9141] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 270.305462][ T9150] 9pnet_fd: Insufficient options for proto=fd [ 270.389153][ T784] Bluetooth: hci0: command 0x1003 tx timeout [ 270.389171][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 270.562812][ T334] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 270.608947][ T335] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 270.657110][ T9169] binder: Bad value for 'max' [ 270.768948][ T335] usb 9-1: device descriptor read/64, error -71 [ 270.827777][ T9172] SELinux: Context system_u:object_r:file_context_t:s0 is not valid (left unmapped). [ 271.018977][ T335] usb 9-1: device descriptor read/64, error -71 [ 271.198982][ T1262] usb 10-1: new low-speed USB device number 4 using dummy_hcd [ 271.258969][ T335] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 271.338989][ T1262] usb 10-1: device descriptor read/64, error -71 [ 271.388974][ T335] usb 9-1: device descriptor read/64, error -71 [ 271.578950][ T1262] usb 10-1: device descriptor read/64, error -71 [ 271.628977][ T335] usb 9-1: device descriptor read/64, error -71 [ 271.670798][ T9187] devpts: called with bogus options [ 271.749045][ T335] usb usb9-port1: attempt power cycle [ 271.783247][ T9189] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:487 [ 271.818970][ T1262] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 271.836970][ T334] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 271.857092][ T334] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 271.868592][ T334] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 271.877858][ T334] usb 4-1: USB disconnect, device number 9 [ 271.969018][ T1262] usb 10-1: device descriptor read/64, error -71 [ 272.058994][ T400] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 272.099012][ T335] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 272.121031][ T335] usb 9-1: device descriptor read/8, error -71 [ 272.208979][ T1262] usb 10-1: device descriptor read/64, error -71 [ 272.211670][ T400] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 272.226569][ T400] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 272.238473][ T400] usb 5-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 272.247734][ T400] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.257272][ T400] usb 5-1: config 0 descriptor?? [ 272.264616][ T335] usb 9-1: device descriptor read/8, error -71 [ 272.271382][ T9191] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 272.319534][ T1262] usb usb10-port1: attempt power cycle [ 272.432345][ T9193] incfs: mount failed -22 [ 272.518959][ T335] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 272.549343][ T335] usb 9-1: device descriptor read/8, error -71 [ 272.565627][ T9199] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 272.659032][ T1262] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 272.681813][ T335] usb 9-1: device descriptor read/8, error -71 [ 272.691692][ T1262] usb 10-1: device descriptor read/8, error -71 [ 272.789049][ T335] usb usb9-port1: unable to enumerate USB device [ 272.821614][ T1262] usb 10-1: device descriptor read/8, error -71 [ 272.893518][ T9191] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:489 [ 272.894366][ T400] usbhid 5-1:0.0: can't add hid device: -71 [ 272.912613][ T400] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 272.921546][ T400] usb 5-1: USB disconnect, device number 22 [ 273.059020][ T1262] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 273.081275][ T1262] usb 10-1: device descriptor read/8, error -71 [ 273.211392][ T1262] usb 10-1: device descriptor read/8, error -71 [ 273.319093][ T1262] usb usb10-port1: unable to enumerate USB device [ 273.406314][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2948'. [ 273.432417][ T36] kauditd_printk_skb: 651 callbacks suppressed [ 273.432437][ T36] audit: type=1400 audit(1757394921.461:51000): avc: denied { read write } for pid=7346 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 273.489569][ T9209] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 273.494558][ T36] audit: type=1400 audit(1757394921.461:51001): avc: denied { read write open } for pid=7346 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 273.557177][ T36] audit: type=1400 audit(1757394921.461:51002): avc: denied { ioctl } for pid=7346 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=53 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 273.588325][ T36] audit: type=1400 audit(1757394921.461:51003): avc: denied { read write } for pid=9205 comm="syz.4.2949" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 273.612449][ T36] audit: type=1400 audit(1757394921.461:51004): avc: denied { read write open } for pid=9205 comm="syz.4.2949" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 273.638135][ T36] audit: type=1400 audit(1757394921.461:51005): avc: denied { read write } for pid=9205 comm="syz.4.2949" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.662100][ T36] audit: type=1400 audit(1757394921.461:51006): avc: denied { read write open } for pid=9205 comm="syz.4.2949" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.686789][ T36] audit: type=1400 audit(1757394921.461:51007): avc: denied { ioctl } for pid=9205 comm="syz.4.2949" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.711998][ T1262] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 273.712027][ T36] audit: type=1400 audit(1757394921.461:51008): avc: denied { ioctl } for pid=9205 comm="syz.4.2949" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.744830][ T36] audit: type=1400 audit(1757394921.461:51009): avc: denied { ioctl } for pid=9205 comm="syz.4.2949" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 273.829022][ T334] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 273.869989][ T1262] usb 5-1: no configurations [ 273.874673][ T1262] usb 5-1: can't read configurations, error -22 [ 273.989184][ T334] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 274.003347][ T334] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 274.015511][ T1262] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 274.017284][ T334] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 274.035770][ T9215] /dev/rnullb0: Can't open blockdev [ 274.041144][ T334] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 274.053069][ T334] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 274.066872][ T334] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 274.077298][ T334] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.094959][ T334] usb 9-1: config 0 descriptor?? [ 274.105135][ T9213] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 274.127946][ T9217] fuse: Bad value for 'fd' [ 274.179795][ T1262] usb 5-1: no configurations [ 274.184900][ T1262] usb 5-1: can't read configurations, error -22 [ 274.192891][ T1262] usb usb5-port1: attempt power cycle [ 274.327427][ T9219] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 274.327464][ T9219] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:83 [ 274.519666][ T9227] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2957'. [ 274.539824][ T334] plantronics 0003:047F:FFFF.000D: unknown main item tag 0xd [ 274.541028][ T1262] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 274.547249][ T334] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 274.563424][ T334] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 274.571924][ T334] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 274.574745][ T9227] option changes via remount are deprecated (pid=9226 comm=syz.9.2957) [ 274.609046][ T334] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 274.622928][ T1262] usb 5-1: no configurations [ 274.627567][ T1262] usb 5-1: can't read configurations, error -22 [ 274.769034][ T1262] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 274.792755][ T1262] usb 5-1: no configurations [ 274.808949][ T1262] usb 5-1: can't read configurations, error -22 [ 274.818617][ T1262] usb usb5-port1: unable to enumerate USB device [ 274.856355][ T334] usb 9-1: USB disconnect, device number 7 [ 275.842521][ T9269] binder: Unknown parameter 'defcontext' [ 275.958982][ T1262] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 275.991561][ T9276] syzkaller0: entered promiscuous mode [ 275.997088][ T9276] syzkaller0: entered allmulticast mode [ 276.128946][ T1262] usb 9-1: Using ep0 maxpacket: 32 [ 276.162560][ T1262] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.193401][ T1262] usb 9-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 276.207934][ T1262] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.216716][ T1262] usb 9-1: Product: syz [ 276.221666][ T1262] usb 9-1: Manufacturer: syz [ 276.226283][ T1262] usb 9-1: SerialNumber: syz [ 276.235548][ T1262] usb 9-1: config 0 descriptor?? [ 276.260803][ T1262] cdc_ether 9-1:0.0: skipping garbage [ 276.266245][ T1262] usb 9-1: bad CDC descriptors [ 276.272419][ T1262] usb 9-1: unsupported MDLM descriptors [ 276.337716][ T9292] loop0: detected capacity change from 0 to 7 [ 276.348982][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 276.358278][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 276.368925][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 276.378205][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 276.386185][ T9292] loop0: unable to read partition table [ 276.392803][ T9292] loop_reread_partitions: partition scan of loop0 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 276.406457][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 276.415626][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 276.424841][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 276.434055][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 276.442375][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 276.451545][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 276.459505][ T9295] loop0: unable to read partition table [ 276.478517][ T1262] usb 9-1: USB disconnect, device number 8 [ 276.500370][ T9292] Invalid logical block size (7) [ 276.509548][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 276.527234][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 276.536463][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 276.554197][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 276.563403][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 276.572058][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 276.581271][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 276.583705][ T9304] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 276.618255][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 276.635489][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 276.675959][ T9310] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=9310 comm=syz.3.2983 [ 276.896975][ T9319] kvm: pic: non byte write [ 276.907115][ T9323] overlayfs: failed to clone upperpath [ 277.098949][ T334] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 277.261337][ T334] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.271595][ T334] usb 4-1: config 0 has no interfaces? [ 277.277104][ T334] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 277.286156][ T334] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.295659][ T334] usb 4-1: config 0 descriptor?? [ 277.509447][ T9321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.534436][ T9321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.621907][ T10] usb 4-1: USB disconnect, device number 10 [ 277.731014][ T9351] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2999'. [ 277.754294][ T9351] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2999'. [ 277.778491][ T9351] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2999'. [ 277.795105][ T9351] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2999'. [ 277.810659][ T9351] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2999'. [ 277.820863][ T9351] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2999'. [ 277.831422][ T9351] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2999'. [ 277.841507][ T9351] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2999'. [ 277.850765][ T9356] netlink: 'syz.4.3000': attribute type 4 has an invalid length. [ 277.961115][ T9359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.982285][ T9359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.108958][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 278.188957][ T335] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 278.249003][ T10] usb 4-1: device descriptor read/64, error -71 [ 278.338944][ T335] usb 5-1: Using ep0 maxpacket: 32 [ 278.357934][ T335] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 278.371898][ T335] usb 5-1: config 0 has no interface number 0 [ 278.395736][ T335] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 278.417114][ T335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.425212][ T335] usb 5-1: Product: syz [ 278.429410][ T335] usb 5-1: Manufacturer: syz [ 278.434028][ T335] usb 5-1: SerialNumber: syz [ 278.440364][ T335] usb 5-1: config 0 descriptor?? [ 278.446089][ T36] kauditd_printk_skb: 755 callbacks suppressed [ 278.446109][ T36] audit: type=1400 audit(1757394926.471:51765): avc: denied { ioctl } for pid=9357 comm="syz.4.3001" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 278.448012][ T335] smsc95xx v2.0.0 [ 278.453478][ T36] audit: type=1400 audit(1757394926.471:51766): avc: denied { ioctl } for pid=9357 comm="syz.4.3001" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 278.505998][ T10] usb 4-1: device descriptor read/64, error -71 [ 278.506047][ T36] audit: type=1400 audit(1757394926.471:51767): avc: denied { ioctl } for pid=9357 comm="syz.4.3001" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 278.537336][ T36] audit: type=1400 audit(1757394926.471:51768): avc: denied { ioctl } for pid=9357 comm="syz.4.3001" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 278.562484][ T36] audit: type=1400 audit(1757394926.471:51769): avc: denied { ioctl } for pid=9357 comm="syz.4.3001" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 278.587592][ T36] audit: type=1400 audit(1757394926.531:51770): avc: denied { ioctl } for pid=9386 comm="syz.8.3011" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 278.613711][ T36] audit: type=1400 audit(1757394926.641:51771): avc: denied { ioctl } for pid=9386 comm="syz.8.3011" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 278.640494][ T36] audit: type=1400 audit(1757394926.651:51772): avc: denied { ioctl } for pid=9347 comm="syz.3.2997" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 278.665722][ T36] audit: type=1400 audit(1757394926.651:51773): avc: denied { ioctl } for pid=9347 comm="syz.3.2997" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 278.707978][ T335] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 278.718122][ T1262] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 278.725721][ T36] audit: type=1400 audit(1757394926.721:51774): avc: denied { ioctl } for pid=9347 comm="syz.3.2997" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 278.748953][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 278.753382][ T335] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 278.800250][ T335] usb 5-1: USB disconnect, device number 27 [ 278.899012][ T10] usb 4-1: device descriptor read/64, error -71 [ 278.929011][ T1262] usb 9-1: Using ep0 maxpacket: 32 [ 278.936375][ T1262] usb 9-1: config 0 has an invalid interface number: 74 but max is 1 [ 278.944529][ T1262] usb 9-1: config 0 has no interface number 1 [ 278.953266][ T1262] usb 9-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 278.962386][ T1262] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.970620][ T1262] usb 9-1: Product: syz [ 278.974800][ T1262] usb 9-1: Manufacturer: syz [ 278.979463][ T1262] usb 9-1: SerialNumber: syz [ 278.985315][ T1262] usb 9-1: config 0 descriptor?? [ 278.996660][ T1262] snd-usb-audio 9-1:0.74: probe with driver snd-usb-audio failed with error -22 [ 279.045920][ T6429] udevd[6429]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.74/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 279.139007][ T10] usb 4-1: device descriptor read/64, error -71 [ 279.199993][ T9387] fuse: Unknown parameter '$CNbO? 7fd' [ 279.210094][ T9387] cgroup: Need name or subsystem set [ 279.215925][ T1262] usb 9-1: USB disconnect, device number 9 [ 279.252935][ T10] usb usb4-port1: attempt power cycle [ 279.431854][ T9406] overlayfs: failed to clone upperpath [ 279.518963][ T335] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 279.608996][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 279.631032][ T10] usb 4-1: device descriptor read/8, error -71 [ 279.671079][ T335] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 279.681953][ T335] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 279.693056][ T335] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 279.708591][ T335] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 279.717722][ T335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.725783][ T335] usb 5-1: Product: syz [ 279.729966][ T335] usb 5-1: Manufacturer: syz [ 279.734587][ T335] usb 5-1: SerialNumber: syz [ 279.740720][ T335] usb 5-1: config 0 descriptor?? [ 279.776969][ T10] usb 4-1: device descriptor read/8, error -71 [ 279.951065][ T400] usb 5-1: USB disconnect, device number 28 [ 280.049037][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 280.071054][ T10] usb 4-1: device descriptor read/8, error -71 [ 280.158982][ T335] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 280.200903][ T10] usb 4-1: device descriptor read/8, error -71 [ 280.309099][ T10] usb usb4-port1: unable to enumerate USB device [ 280.311866][ T335] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.326449][ T335] usb 9-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 280.335537][ T335] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.344906][ T335] usb 9-1: config 0 descriptor?? [ 280.777399][ T335] kye 0003:0458:501B.000E: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 280.790682][ T335] kye 0003:0458:501B.000E: hidraw0: USB HID v0.00 Device [HID 0458:501b] on usb-dummy_hcd.8-1/input0 [ 280.801774][ T335] kye 0003:0458:501B.000E: tablet-enabling feature report not found [ 280.810734][ T335] kye 0003:0458:501B.000E: tablet enabling failed [ 280.927752][ T335] usb 9-1: USB disconnect, device number 10 [ 281.098983][ T400] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 281.229019][ T400] usb 4-1: device descriptor read/64, error -71 [ 281.395335][ T9445] kvm: kvm [9444]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x80fe [ 281.468973][ T400] usb 4-1: device descriptor read/64, error -71 [ 281.527672][ T9455] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 281.527706][ T9455] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:120 [ 281.596936][ T9459] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 281.645132][ T9459] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 281.721448][ T400] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 281.798836][ T9468] __nla_validate_parse: 29 callbacks suppressed [ 281.798859][ T9468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3041'. [ 281.888948][ T400] usb 4-1: device descriptor read/64, error -71 [ 281.968943][ T335] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 281.968976][ T9480] rust_binder: Failed copying into alloc: EFAULT [ 281.976798][ T9480] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 281.984590][ T9480] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 281.994559][ T9480] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:529 [ 282.048863][ T9486] rust_binder: Failed to allocate buffer. len:128, is_oneway:true [ 282.076132][ T9490] netlink: 'syz.9.3047': attribute type 11 has an invalid length. [ 282.113139][ T9492] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 282.128956][ T400] usb 4-1: device descriptor read/64, error -71 [ 282.134793][ T335] usb 9-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 282.150529][ T335] usb 9-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 282.161797][ T335] usb 9-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 282.176586][ T335] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 282.185678][ T335] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 282.193681][ T335] usb 9-1: SerialNumber: syz [ 282.249451][ T400] usb usb4-port1: attempt power cycle [ 282.359034][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 282.481130][ T335] rndis_host 9-1:253.0: RNDIS init failed, -71 [ 282.487877][ T335] rndis_host 9-1:253.0: probe with driver rndis_host failed with error -71 [ 282.499513][ T335] usb 9-1: USB disconnect, device number 11 [ 282.508948][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 282.518437][ T10] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 282.527916][ T10] usb 5-1: config 0 has no interface number 0 [ 282.535218][ T10] usb 5-1: config 0 interface 214 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16 [ 282.546011][ T10] usb 5-1: config 0 interface 214 has no altsetting 0 [ 282.558176][ T10] usb 5-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 282.567286][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.575329][ T10] usb 5-1: Product: syz [ 282.579793][ T10] usb 5-1: Manufacturer: syz [ 282.584387][ T10] usb 5-1: SerialNumber: syz [ 282.589036][ T400] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 282.599619][ T10] usb 5-1: config 0 descriptor?? [ 282.606599][ T9492] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 282.617024][ T400] usb 4-1: device descriptor read/8, error -71 [ 282.751226][ T400] usb 4-1: device descriptor read/8, error -71 [ 282.817782][ T9492] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 282.988940][ T400] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 283.034943][ T400] usb 4-1: device descriptor read/8, error -71 [ 283.107691][ T9515] rust_binder: 9515 RLIMIT_NICE not set [ 283.182054][ T400] usb 4-1: device descriptor read/8, error -71 [ 283.320601][ T400] usb usb4-port1: unable to enumerate USB device [ 283.336596][ T400] rust_binder: 9513: removing orphan mapping 0:1192 [ 283.451390][ T36] kauditd_printk_skb: 687 callbacks suppressed [ 283.451409][ T36] audit: type=1400 audit(1757394931.481:52462): avc: denied { name_bind } for pid=9539 comm="syz.9.3067" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 283.485875][ T36] audit: type=1400 audit(1757394931.511:52463): avc: denied { read } for pid=9541 comm="syz.8.3066" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 283.508631][ T36] audit: type=1400 audit(1757394931.511:52464): avc: denied { read open } for pid=9541 comm="syz.8.3066" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 283.533117][ T36] audit: type=1400 audit(1757394931.511:52465): avc: denied { create } for pid=9541 comm="syz.8.3066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 283.548697][ T9542] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:143 [ 283.552875][ T36] audit: type=1400 audit(1757394931.511:52466): avc: denied { read } for pid=9541 comm="syz.8.3066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 283.583864][ T36] audit: type=1400 audit(1757394931.561:52467): avc: denied { name_bind } for pid=9539 comm="syz.9.3067" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 283.623177][ T36] audit: type=1400 audit(1757394931.561:52468): avc: denied { node_bind } for pid=9539 comm="syz.9.3067" saddr=::ffff:172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 283.689007][ T36] audit: type=1400 audit(1757394931.561:52469): avc: denied { bind } for pid=9541 comm="syz.8.3066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 283.726588][ T36] audit: type=1400 audit(1757394931.561:52470): avc: denied { name_bind } for pid=9541 comm="syz.8.3066" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 283.755123][ T36] audit: type=1400 audit(1757394931.561:52471): avc: denied { node_bind } for pid=9541 comm="syz.8.3066" saddr=::1 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 283.859253][ T9563] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3073'. [ 283.885959][ T9564] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3073'. [ 283.989181][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 284.029442][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 284.067474][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 284.091861][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 284.125448][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 284.166910][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 284.178934][ T1262] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 284.185701][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 284.202193][ T9576] pim6reg1: entered promiscuous mode [ 284.207581][ T9576] pim6reg1: entered allmulticast mode [ 284.214703][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 284.230286][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 284.248997][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 284.264581][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 284.285808][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 284.317589][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 284.348797][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 284.369634][ T1262] usb 4-1: Using ep0 maxpacket: 32 [ 284.370685][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 284.387214][ T1262] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 284.405960][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 284.408190][ T1262] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 284.418243][ T9591] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 284.425978][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 284.433955][ T1262] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 284.455901][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 284.472695][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 284.498942][ T1262] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 284.501768][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 284.516214][ T1262] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 284.532595][ T1262] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 284.559446][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 284.577004][ T1262] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 284.588951][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 284.592413][ T1262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.626815][ T1262] usb 4-1: config 0 descriptor?? [ 284.638969][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 284.679148][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 284.717551][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 284.759465][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 284.788958][ T10] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 284.829297][ T10] ax88179_178a 5-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.4-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, e2:9a:d9:97:c1:61 [ 284.860912][ T1262] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 284.903020][ T1262] usb 4-1: USB disconnect, device number 19 [ 284.906132][ T10] usb 5-1: USB disconnect, device number 29 [ 284.918393][ T10] ax88179_178a 5-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.4-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 284.922394][ T1262] usblp0: removed [ 284.963024][ T9619] rust_binder: 557: no such ref 1 [ 285.215029][ T9623] loop4: detected capacity change from 0 to 8388608 [ 285.429117][ T1262] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 285.578951][ T1262] usb 4-1: Using ep0 maxpacket: 32 [ 285.588361][ T1262] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 285.598928][ T1262] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 285.607733][ T1262] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 285.618765][ T1262] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 285.629045][ T10] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 285.639569][ T1262] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 285.658931][ T1262] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 285.673132][ T1262] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 285.682408][ T1262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.699010][ T1262] usb 4-1: config 0 descriptor?? [ 285.768970][ T10] usb 9-1: device descriptor read/64, error -71 [ 286.011326][ T10] usb 9-1: device descriptor read/64, error -71 [ 286.219361][ T1262] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 286.243994][ T1262] usb 4-1: USB disconnect, device number 20 [ 286.254308][ T1262] usblp0: removed [ 286.258937][ T10] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 286.398948][ T10] usb 9-1: device descriptor read/64, error -71 [ 286.638965][ T10] usb 9-1: device descriptor read/64, error -71 [ 286.749351][ T10] usb usb9-port1: attempt power cycle [ 287.088954][ T10] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 287.110939][ T10] usb 9-1: device descriptor read/8, error -71 [ 287.241887][ T10] usb 9-1: device descriptor read/8, error -71 [ 287.287629][ T9673] x_tables: unsorted entry at hook 2 [ 287.303176][ T9673] overlayfs: missing 'lowerdir' [ 287.451351][ T12] syzkaller0: tun_net_xmit 76 [ 287.456215][ T12] syzkaller0: tun_net_xmit 48 [ 287.463374][ T9682] syzkaller0: create flow: hash 4217406396 index 1 [ 287.472394][ T9685] syzkaller0: delete flow: hash 4217406396 index 1 [ 287.488948][ T10] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 287.511633][ T10] usb 9-1: device descriptor read/8, error -71 [ 287.556376][ T9691] incfs: Can't find or create .index dir in ./bus [ 287.563032][ T9691] incfs: mount failed -1 [ 287.569692][ T9691] incfs: Can't find or create .index dir in ./bus [ 287.578149][ T9691] incfs: mount failed -1 [ 287.651729][ T10] usb 9-1: device descriptor read/8, error -71 [ 287.779031][ T10] usb usb9-port1: unable to enumerate USB device [ 287.974053][ T9708] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:575 [ 287.980233][ T9707] rust_binder: Write failure EINVAL in pid:114 [ 288.013305][ T9708] kvm: emulating exchange as write [ 288.463002][ T9725] can0: slcan on ttyS3. [ 288.467233][ T36] kauditd_printk_skb: 925 callbacks suppressed [ 288.467250][ T36] audit: type=1400 audit(1757394936.491:53397): avc: denied { write } for pid=9712 comm="syz.3.3120" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 288.499051][ T9725] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:181 [ 288.531195][ T36] audit: type=1400 audit(1757394936.491:53398): avc: denied { write } for pid=9712 comm="syz.3.3120" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 288.561799][ T9713] audit: audit_backlog=65 > audit_backlog_limit=64 [ 288.570055][ T9713] audit: audit_lost=46 audit_rate_limit=0 audit_backlog_limit=64 [ 288.574794][ T148] audit: audit_backlog=65 > audit_backlog_limit=64 [ 288.590832][ T9713] audit: backlog limit exceeded [ 288.591122][ T9724] can0 (unregistered): slcan off ttyS3. [ 288.611506][ T9713] audit: audit_backlog=65 > audit_backlog_limit=64 [ 288.611553][ T148] audit: audit_lost=47 audit_rate_limit=0 audit_backlog_limit=64 [ 288.623588][ T9728] audit: audit_backlog=65 > audit_backlog_limit=64 [ 288.638642][ T36] audit: type=1400 audit(1757394936.491:53399): avc: denied { write } for pid=9712 comm="syz.3.3120" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 288.929044][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 289.009363][ T9737] netlink: 'syz.3.3128': attribute type 4 has an invalid length. [ 289.032483][ T9737] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 289.041996][ T9737] rust_binder: Write failure EINVAL in pid:119 [ 289.438835][ T9757] netlink: 76 bytes leftover after parsing attributes in process `syz.9.3137'. [ 289.457830][ T9757] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3137'. [ 289.555556][ T9767] netlink: 37 bytes leftover after parsing attributes in process `syz.4.3140'. [ 289.707767][ T9782] netlink: 'syz.9.3143': attribute type 6 has an invalid length. [ 289.723109][ T9784] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 289.723146][ T9784] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:604 [ 289.734612][ T9784] rust_binder: 604: no such ref 2 [ 289.749989][ T9784] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:604 [ 290.049695][ T9797] rust_binder: Write failure EFAULT in pid:614 [ 290.073617][ T9797] lo: entered allmulticast mode [ 290.102022][ T9797] lo: left allmulticast mode [ 290.448945][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 290.611546][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.631960][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 290.652938][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 290.672269][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 290.686466][ T10] usb 4-1: SerialNumber: syz [ 290.923538][ T10] usb 4-1: 0:2 : does not exist [ 290.928475][ T10] usb 4-1: unit 5: unexpected type 0x09 [ 290.944257][ T10] usb 4-1: USB disconnect, device number 21 [ 290.952879][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 290.958940][ T784] Bluetooth: hci0: command 0x1003 tx timeout [ 290.971150][ T9842] netlink: 'syz.4.3163': attribute type 27 has an invalid length. [ 291.067743][ T9616] udevd[9616]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 291.253501][ T9852] loop4: detected capacity change from 0 to 8388608 [ 291.376498][ T9859] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 291.688946][ T400] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 291.851602][ T400] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.868969][ T400] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 291.889736][ T400] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 291.898810][ T400] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 291.929328][ T400] usb 9-1: SerialNumber: syz [ 291.942395][ T400] usb 9-1: 0:2 : does not exist [ 292.409910][ T400] usb 9-1: USB disconnect, device number 16 [ 292.438937][ T1262] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 292.605334][ T1262] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 292.614630][ T1262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.624398][ T1262] usb 4-1: Product: syz [ 292.628752][ T1262] usb 4-1: Manufacturer: syz [ 292.634598][ T1262] usb 4-1: SerialNumber: syz [ 292.810937][ T9876] binder: Unknown parameter '/file0' [ 293.248682][ T9868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.257526][ T9868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.271021][ T9907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.279459][ T10] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 293.280035][ T9907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.328634][ T1262] rtl8150 4-1:1.0: couldn't reset the device [ 293.341569][ T1262] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 293.362952][ T1262] usb 4-1: USB disconnect, device number 22 [ 293.438937][ T10] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 293.470562][ T10] usb 9-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 293.487199][ T36] kauditd_printk_skb: 1268 callbacks suppressed [ 293.487220][ T36] audit: type=1400 audit(1757394941.511:54543): avc: denied { create } for pid=9913 comm="syz.3.3188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 293.490251][ T9914] binder: Bad value for 'defcontext' [ 293.498931][ T36] audit: type=1400 audit(1757394941.511:54544): avc: denied { write } for pid=9913 comm="syz.3.3188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 293.540220][ T10] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 293.540603][ T36] audit: type=1400 audit(1757394941.511:54545): avc: denied { read } for pid=9913 comm="syz.3.3188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 293.549314][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.553915][ T10] usb 9-1: invalid MIDI out EP 0 [ 293.571824][ T36] audit: type=1400 audit(1757394941.511:54546): avc: denied { mounton } for pid=9913 comm="syz.3.3188" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 293.597329][ T10] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 293.608958][ T36] audit: type=1400 audit(1757394941.581:54547): avc: denied { ioctl } for pid=9896 comm="syz.8.3182" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 293.642536][ T36] audit: type=1400 audit(1757394941.581:54548): avc: denied { ioctl } for pid=9896 comm="syz.8.3182" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 293.728949][ T36] audit: type=1400 audit(1757394941.581:54549): avc: denied { ioctl } for pid=9896 comm="syz.8.3182" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 293.783794][ T36] audit: type=1400 audit(1757394941.581:54550): avc: denied { ioctl } for pid=9896 comm="syz.8.3182" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 293.786417][ T9897] /dev/rnullb0: Can't open blockdev [ 293.809894][ T36] audit: type=1400 audit(1757394941.581:54551): avc: denied { ioctl } for pid=9896 comm="syz.8.3182" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 293.841677][ T1262] usb 9-1: USB disconnect, device number 17 [ 293.857129][ T36] audit: type=1400 audit(1757394941.671:54552): avc: denied { unmount } for pid=7346 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 293.912644][ T6618] udevd[6618]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 293.970657][ T9934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3193'. [ 294.071617][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 294.648516][ T9956] rust_binder: Error while translating object. [ 294.648565][ T9956] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 294.654908][ T10] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 294.656601][ T9956] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:148 [ 294.789104][ T10] usb 9-1: device descriptor read/64, error -71 [ 294.812953][ T9960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.822560][ T9960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.038964][ T10] usb 9-1: device descriptor read/64, error -71 [ 295.059007][ T1262] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 295.208996][ T1262] usb 4-1: Using ep0 maxpacket: 8 [ 295.217146][ T1262] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 295.224969][ T1262] usb 4-1: can't read configurations, error -61 [ 295.278968][ T10] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 295.358992][ T1262] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 295.420970][ T10] usb 9-1: device descriptor read/64, error -71 [ 295.476465][ T9966] fuse: Unknown parameter 'fSھfd' [ 295.519030][ T1262] usb 4-1: Using ep0 maxpacket: 8 [ 295.527384][ T1262] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 295.535217][ T1262] usb 4-1: can't read configurations, error -61 [ 295.541646][ T1262] usb usb4-port1: attempt power cycle [ 295.669164][ T10] usb 9-1: device descriptor read/64, error -71 [ 295.779070][ T10] usb usb9-port1: attempt power cycle [ 295.878980][ T1262] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 295.899833][ T1262] usb 4-1: Using ep0 maxpacket: 8 [ 295.907808][ T1262] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 295.916590][ T1262] usb 4-1: can't read configurations, error -61 [ 296.049051][ T1262] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 296.070126][ T1262] usb 4-1: Using ep0 maxpacket: 8 [ 296.078327][ T1262] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 296.086043][ T1262] usb 4-1: can't read configurations, error -61 [ 296.092478][ T1262] usb usb4-port1: unable to enumerate USB device [ 296.129000][ T10] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 296.148974][ T784] Bluetooth: hci0: command 0x1003 tx timeout [ 296.148997][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 296.170544][ T10] usb 9-1: device descriptor read/8, error -71 [ 296.310725][ T10] usb 9-1: device descriptor read/8, error -71 [ 296.377321][ T9979] ./file0: Can't lookup blockdev [ 296.552181][ T9987] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3211'. [ 296.561325][ T10] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 296.591794][ T10] usb 9-1: device descriptor read/8, error -71 [ 296.650753][ T9993] overlayfs: failed to clone upperpath [ 296.728518][ T10] usb 9-1: device descriptor read/8, error -71 [ 296.849707][ T10] usb usb9-port1: unable to enumerate USB device [ 296.852469][T10001] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3216'. [ 296.912910][T10007] loop2: detected capacity change from 0 to 7 [ 296.919721][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 296.929025][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 296.938656][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 296.947992][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 296.956111][T10007] loop2: unable to read partition table [ 296.961872][T10007] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 296.975447][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 296.984646][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 296.994901][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 297.004089][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 297.018912][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 297.028169][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 297.040162][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 297.049452][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 297.057950][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 297.067214][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 297.497269][T10017] /dev/rnullb0: Can't open blockdev [ 297.625072][T10021] loop7: detected capacity change from 0 to 16384 [ 297.791147][T10021] loop7: detected capacity change from 16384 to 0 [ 297.811636][ C1] I/O error, dev loop7, sector 6784 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0 [ 297.960846][ T12] bridge_slave_1: left allmulticast mode [ 297.966554][ T12] bridge_slave_1: left promiscuous mode [ 297.999009][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.016808][ T12] bridge_slave_0: left allmulticast mode [ 298.034552][ T12] bridge_slave_0: left promiscuous mode [ 298.045173][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.080102][T10034] loop2: detected capacity change from 0 to 7 [ 298.099370][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 298.108568][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 298.118754][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 298.127995][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 298.135986][T10034] loop2: unable to read partition table [ 298.157987][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 298.157986][T10034] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 298.212056][ T12] veth1_macvtap: left promiscuous mode [ 298.238484][ T12] veth0_vlan: left promiscuous mode [ 298.481539][T10039] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.488611][T10039] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.494932][ T36] kauditd_printk_skb: 1237 callbacks suppressed [ 298.494947][ T36] audit: type=1400 audit(1757394946.521:55790): avc: denied { mounton } for pid=10044 comm="syz.8.3234" path="/72/bus" dev="tmpfs" ino=413 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 298.497259][T10039] bridge_slave_0: entered allmulticast mode [ 298.508458][ T36] audit: type=1400 audit(1757394946.531:55791): avc: denied { unlink } for pid=10044 comm="syz.8.3234" name="#35" dev="tmpfs" ino=417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 298.525737][T10039] bridge_slave_0: entered promiscuous mode [ 298.547712][ T36] audit: type=1400 audit(1757394946.561:55792): avc: denied { mount } for pid=10044 comm="syz.8.3234" name="/" dev="overlay" ino=412 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 298.555705][T10039] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.588041][T10039] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.595307][T10039] bridge_slave_1: entered allmulticast mode [ 298.601817][T10039] bridge_slave_1: entered promiscuous mode [ 298.610945][ T36] audit: type=1400 audit(1757394946.641:55793): avc: denied { unmount } for pid=8838 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 298.645275][ T36] audit: type=1400 audit(1757394946.661:55794): avc: denied { sys_module } for pid=10039 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 298.668279][ T36] audit: type=1400 audit(1757394946.671:55795): avc: denied { sys_module } for pid=10039 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 298.690234][ T36] audit: type=1400 audit(1757394946.701:55796): avc: denied { read write } for pid=8838 comm="syz-executor" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 298.728477][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3235'. [ 298.743419][ T36] audit: type=1400 audit(1757394946.701:55797): avc: denied { read write open } for pid=8838 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 298.775856][T10053] netlink: 'syz.8.3235': attribute type 16 has an invalid length. [ 298.789387][T10053] netlink: 'syz.8.3235': attribute type 2 has an invalid length. [ 298.797260][T10053] netlink: 'syz.8.3235': attribute type 2 has an invalid length. [ 298.807383][ T36] audit: type=1400 audit(1757394946.701:55798): avc: denied { ioctl } for pid=8838 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=57 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 298.851819][T10053] netlink: 64066 bytes leftover after parsing attributes in process `syz.8.3235'. [ 298.865422][ T36] audit: type=1400 audit(1757394946.721:55799): avc: denied { sys_module } for pid=10039 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 298.933020][T10053] syzkaller0: create flow: hash 4217406396 index 1 [ 298.961485][T10053] syzkaller0: delete flow: hash 4217406396 index 1 [ 299.030569][T10068] syzkaller0: entered promiscuous mode [ 299.036139][T10068] syzkaller0: entered allmulticast mode [ 299.146318][T10075] loop2: detected capacity change from 0 to 7 [ 299.170382][T10075] loop2: unable to read partition table [ 299.178487][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.185596][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.189051][T10075] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 299.219544][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.226625][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.470088][T10039] veth0_vlan: entered promiscuous mode [ 299.528945][ T31] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 299.553777][T10039] veth1_macvtap: entered promiscuous mode [ 299.563927][T10089] tipc: Started in network mode [ 299.570858][T10089] tipc: Node identity 1ed314848fd9, cluster identity 4711 [ 299.578192][T10089] tipc: Enabled bearer , priority 0 [ 299.690000][ T31] usb 4-1: no configurations [ 299.700048][ T31] usb 4-1: can't read configurations, error -22 [ 299.804182][ T328] tipc: Resetting bearer [ 299.849213][ T31] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 299.880427][T10110] 9pnet_fd: Insufficient options for proto=fd [ 300.009734][ T31] usb 4-1: no configurations [ 300.014931][ T31] usb 4-1: can't read configurations, error -22 [ 300.029737][ T31] usb usb4-port1: attempt power cycle [ 300.246970][T10130] rust_binder: Error while translating object. [ 300.247010][T10130] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF } [ 300.255820][T10130] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:10 [ 300.335938][T10088] tipc: Resetting bearer [ 300.368945][ T31] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 300.384566][T10088] tipc: Disabling bearer [ 300.401139][ T31] usb 4-1: no configurations [ 300.406006][ T31] usb 4-1: can't read configurations, error -22 [ 300.407091][T10133] x_tables: duplicate underflow at hook 1 [ 300.422796][T10133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10133 comm=syz.9.3262 [ 300.538939][ T31] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 300.561950][ T31] usb 4-1: no configurations [ 300.567258][ T31] usb 4-1: can't read configurations, error -22 [ 300.582161][ T31] usb usb4-port1: unable to enumerate USB device [ 300.640517][T10149] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 300.648158][T10149] rust_binder: Error in use_page_slow: ESRCH [ 300.660542][T10148] rust_binder: Error in use_page_slow: ESRCH [ 300.662704][T10149] rust_binder: use_range failure ESRCH [ 300.666606][T10148] rust_binder: use_range failure ESRCH [ 300.678432][T10148] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 300.680457][T10149] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false [ 300.690131][T10148] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 300.693283][T10149] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 300.711001][T10149] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:257 [ 300.712664][T10148] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:257 [ 300.798055][T10157] syz.8.3270 (10157): attempted to duplicate a private mapping with mremap. This is not supported. [ 300.928228][T10161] binder: Binderfs stats mode cannot be changed during a remount [ 301.179072][ T334] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 301.338970][ T334] usb 9-1: Using ep0 maxpacket: 8 [ 301.347708][ T334] usb 9-1: unable to get BOS descriptor or descriptor too short [ 301.357404][ T334] usb 9-1: config 6 has an invalid interface number: 248 but max is 0 [ 301.365723][ T334] usb 9-1: config 6 has no interface number 0 [ 301.372433][ T334] usb 9-1: config 6 interface 248 has no altsetting 0 [ 301.385201][ T334] usb 9-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 301.395511][ T334] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.403620][ T334] usb 9-1: Product: syz [ 301.407839][ T334] usb 9-1: Manufacturer: syz [ 301.412474][ T334] usb 9-1: SerialNumber: syz [ 301.418967][ T31] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 301.571269][ T31] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 301.580523][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.591398][ T31] usb 3-1: config 0 descriptor?? [ 301.632991][ T334] ums-karma 9-1:6.248: USB Mass Storage device detected [ 301.709561][ T334] usb 9-1: USB disconnect, device number 22 [ 301.860728][T10198] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 302.050330][T10205] SELinux: security_context_str_to_sid () failed with errno=-22 [ 302.689001][ T1262] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 302.848951][ T1262] usb 4-1: Using ep0 maxpacket: 16 [ 302.858848][ T1262] usb 4-1: config 128 has an invalid interface number: 113 but max is 0 [ 302.869252][ T1262] usb 4-1: config 128 has no interface number 0 [ 302.875633][ T1262] usb 4-1: config 128 interface 113 has no altsetting 0 [ 302.893066][ T1262] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice=d5.9d [ 302.904871][ T1262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.918150][ T1262] usb 4-1: Product: syz [ 302.923710][ T1262] usb 4-1: Manufacturer: syz [ 302.928373][ T1262] usb 4-1: SerialNumber: syz [ 303.045870][ T31] usb 3-1: Cannot set autoneg [ 303.054642][ T31] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 303.067444][T10250] loop4: detected capacity change from 0 to 8388608 [ 303.102046][ T31] usb 3-1: USB disconnect, device number 15 [ 303.180976][T10210] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:169 [ 303.192820][ T1262] usb 4-1: unknown interface protocol 0x43, assuming v1 [ 303.242581][ T1262] usb 4-1: cannot find UAC_HEADER [ 303.261100][ T1262] snd-usb-audio 4-1:128.113: probe with driver snd-usb-audio failed with error -22 [ 303.311043][ T1262] usb 4-1: USB disconnect, device number 31 [ 303.320255][ T9616] udevd[9616]: setting mode of /dev/bus/usb/004/031 to 020664 failed: No such file or directory [ 303.352477][ T9616] udevd[9616]: setting owner of /dev/bus/usb/004/031 to uid=0, gid=0 failed: No such file or directory [ 303.436191][ T9616] udevd[9616]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.113/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 303.505694][ T36] kauditd_printk_skb: 683 callbacks suppressed [ 303.505712][ T36] audit: type=1400 audit(1757394951.531:56483): avc: denied { create } for pid=10269 comm="syz.8.3313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 303.587919][ T36] audit: type=1400 audit(1757394951.541:56484): avc: denied { setopt } for pid=10269 comm="syz.8.3313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 303.618972][ T36] audit: type=1400 audit(1757394951.541:56485): avc: denied { read } for pid=10269 comm="syz.8.3313" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 303.670326][ T36] audit: type=1400 audit(1757394951.541:56486): avc: denied { read open } for pid=10269 comm="syz.8.3313" path="/dev/binderfs/binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 303.739671][ T36] audit: type=1400 audit(1757394951.551:56487): avc: denied { read } for pid=10269 comm="syz.8.3313" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 303.798928][ T36] audit: type=1400 audit(1757394951.561:56488): avc: denied { read open } for pid=10269 comm="syz.8.3313" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 303.869546][ T36] audit: type=1400 audit(1757394951.561:56489): avc: denied { create } for pid=10269 comm="syz.8.3313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 303.928622][ T36] audit: type=1400 audit(1757394951.561:56490): avc: denied { setopt } for pid=10269 comm="syz.8.3313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 303.995243][ T36] audit: type=1400 audit(1757394951.561:56491): avc: denied { ioctl } for pid=10269 comm="syz.8.3313" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 304.068989][ T36] audit: type=1400 audit(1757394951.571:56492): avc: denied { execmem } for pid=10269 comm="syz.8.3313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 304.575301][T10323] rust_binder: Write failure EINVAL in pid:304 [ 304.640277][T10326] netlink: 'syz.2.3330': attribute type 4 has an invalid length. [ 304.878061][T10339] netlink: 'syz.9.3335': attribute type 16 has an invalid length. [ 304.903106][T10339] netlink: 64138 bytes leftover after parsing attributes in process `syz.9.3335'. [ 305.169751][ T5191] Bluetooth: hci0: Frame reassembly failed (-84) [ 305.183702][T10351] netlink: 'syz.2.3339': attribute type 2 has an invalid length. [ 305.371525][T10355] fuse: Unknown parameter '0x000000000000000001777777777777777777777' [ 305.461076][T10358] SELinux: Context system_u:object_r:dpkg_lock_t:s0 is not valid (left unmapped). [ 305.611005][ T334] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 305.768983][ T334] usb 9-1: Using ep0 maxpacket: 16 [ 305.776337][ T334] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.787374][ T334] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.797447][ T334] usb 9-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 305.806622][ T334] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.816064][ T334] usb 9-1: config 0 descriptor?? [ 306.230374][ T334] hid-multitouch 0003:1FD2:6007.000F: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.8-1/input0 [ 306.234958][T10370] netlink: 25 bytes leftover after parsing attributes in process `syz.2.3346'. [ 306.435170][ T563] usb 9-1: USB disconnect, device number 23 [ 306.498934][ T1262] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 306.658945][ T1262] usb 3-1: Using ep0 maxpacket: 8 [ 306.666612][ T1262] usb 3-1: unable to get BOS descriptor or descriptor too short [ 306.676054][ T1262] usb 3-1: config 1 has an invalid descriptor of length 94, skipping remainder of the config [ 306.686252][ T1262] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 306.695238][ T1262] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 306.710883][ T1262] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 306.720628][ T1262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.728647][ T1262] usb 3-1: Product: syz [ 306.732851][ T1262] usb 3-1: Manufacturer: syz [ 306.737456][ T1262] usb 3-1: SerialNumber: syz [ 306.778949][ T563] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 306.928931][ T563] usb 9-1: Using ep0 maxpacket: 16 [ 306.937055][ T563] usb 9-1: unable to get BOS descriptor or descriptor too short [ 306.948253][ T563] usb 9-1: config 13 has an invalid interface number: 50 but max is 0 [ 306.956656][ T563] usb 9-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 306.968163][ T1262] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 306.975192][ T563] usb 9-1: config 13 has no interface number 0 [ 306.981467][ T1262] cdc_ncm 3-1:1.0: bind() failure [ 306.987504][ T563] usb 9-1: config 13 interface 50 altsetting 167 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 307.000994][ T1262] usb 3-1: USB disconnect, device number 16 [ 307.013880][ T563] usb 9-1: config 13 interface 50 has no altsetting 0 [ 307.032620][ T563] usb 9-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 307.042136][ T563] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.050298][ T563] usb 9-1: Product: syz [ 307.054484][ T563] usb 9-1: Manufacturer: syz [ 307.059140][ T563] usb 9-1: SerialNumber: syz [ 307.189003][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 307.189003][ T784] Bluetooth: hci0: command 0x1003 tx timeout [ 307.248289][T10381] rust_binder: 181: no such ref 3 [ 307.253461][T10381] rust_binder: 181: no such ref 0 [ 307.258616][T10381] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:181 [ 307.274952][T10376] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 307.291390][T10376] rust_binder: Write failure EINVAL in pid:318 [ 307.303542][T10376] erofs: dax options not supported [ 307.337415][T10376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.346128][T10376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.361643][ T563] usb 9-1: MIDIStreaming interface descriptor not found [ 307.391188][ T563] usb 9-1: USB disconnect, device number 24 [ 307.419166][T10388] syzkaller0: entered promiscuous mode [ 307.431368][T10388] syzkaller0: entered allmulticast mode [ 307.514966][ T9065] udevd[9065]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:13.50/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 307.786655][T10405] binder: Bad value for 'max' [ 307.868958][ T563] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 308.038926][ T563] usb 3-1: Using ep0 maxpacket: 32 [ 308.057254][ T563] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.069038][ T37] INFO: task syz.1.2039:6377 blocked for more than 122 seconds. [ 308.076710][ T37] Not tainted syzkaller #0 [ 308.088963][ T563] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.097182][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 308.118973][ T563] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 308.122827][ T37] task:syz.1.2039 state:D stack:0 pid:6377 tgid:6376 ppid:288 flags:0x00004004 [ 308.151826][ T37] Call Trace: [ 308.155454][ T37] [ 308.156325][ T563] usb 3-1: config 0 interface 0 has no altsetting 0 [ 308.158691][ T37] __schedule+0x1322/0x1df0 [ 308.172562][ T37] ? __sched_text_start+0x10/0x10 [ 308.176378][ T563] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 308.190834][ T37] ? __kasan_check_write+0x18/0x20 [ 308.194656][ T563] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.200352][ T37] ? _raw_spin_lock_irq+0x8d/0x120 [ 308.209799][ T563] usb 3-1: config 0 descriptor?? [ 308.211322][ T37] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 308.222606][ T37] schedule+0xc6/0x240 [ 308.226804][ T37] schedule_preempt_disabled+0x14/0x30 [ 308.232344][ T37] rwsem_down_read_slowpath+0x6d1/0x1460 [ 308.238035][ T37] ? down_write_killable+0x2d0/0x2d0 [ 308.239047][ T400] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 308.243400][ T37] ? __kasan_check_write+0x18/0x20 [ 308.256156][ T37] ? downgrade_write+0x430/0x440 [ 308.261139][ T37] ? __kasan_check_write+0x18/0x20 [ 308.266283][ T37] ? mutex_unlock+0x8b/0x240 [ 308.270924][ T37] ? __cfi_mutex_unlock+0x10/0x10 [ 308.275966][ T37] down_read+0x8f/0xe0 [ 308.280063][ T37] ? __cfi_down_read+0x10/0x10 [ 308.284843][ T37] ? sync_inodes_sb+0x354/0x700 [ 308.289724][ T37] ? __queue_work+0xb5d/0x1120 [ 308.294509][ T37] super_lock+0x231/0x300 [ 308.298857][ T37] ? user_get_super+0x350/0x350 [ 308.303751][ T37] ? __kasan_check_write+0x18/0x20 [ 308.308904][ T37] ? _raw_spin_lock+0x8c/0x120 [ 308.313693][ T37] ? __cfi__raw_spin_lock+0x10/0x10 [ 308.318920][ T37] ? __kasan_check_write+0x18/0x20 [ 308.324427][ T37] iterate_supers+0x8a/0x560 [ 308.329096][ T37] ? __cfi_sync_inodes_one_sb+0x10/0x10 [ 308.334721][ T37] ksys_sync+0x95/0x160 [ 308.339047][ T37] ? __cfi_ksys_sync+0x10/0x10 [ 308.343830][ T37] ? switch_fpu_return+0x12/0x20 [ 308.348791][ T37] __ia32_sys_sync+0x12/0x20 [ 308.353431][ T37] x64_sys_call+0x2a58/0x2ee0 [ 308.358122][ T37] do_syscall_64+0x58/0xf0 [ 308.362567][ T37] ? clear_bhb_loop+0x50/0xa0 [ 308.367264][ T37] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 308.373240][ T37] RIP: 0033:0x7ff87c38ebe9 [ 308.377666][ T37] RSP: 002b:00007ff87d2cc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 308.386104][ T37] RAX: ffffffffffffffda RBX: 00007ff87c5c5fa0 RCX: 00007ff87c38ebe9 [ 308.394113][ T37] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 308.402105][ T37] RBP: 00007ff87c5c5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 308.410125][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.418107][ T37] R13: 00007ff87c5c6038 R14: 00007ff87c5c5fa0 R15: 00007ffd66778128 [ 308.426097][ T37] [ 308.431782][ T37] NMI backtrace for cpu 1 [ 308.431798][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 1976820a860199aae9d2abf4727fc3b97aa7bbea [ 308.431827][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 308.431841][ T37] Call Trace: [ 308.431848][ T37] [ 308.431855][ T37] __dump_stack+0x21/0x30 [ 308.431884][ T37] dump_stack_lvl+0x10c/0x190 [ 308.431908][ T37] ? __cfi_dump_stack_lvl+0x10/0x10 [ 308.431934][ T37] dump_stack+0x19/0x20 [ 308.431957][ T37] nmi_cpu_backtrace+0x2bf/0x2d0 [ 308.431985][ T37] ? rcu_read_unlock_special+0xab/0x480 [ 308.432009][ T37] ? __cfi_nmi_cpu_backtrace+0x10/0x10 [ 308.432033][ T37] ? sched_show_task+0x379/0x560 [ 308.432057][ T37] ? __rcu_read_unlock+0xc0/0xc0 [ 308.432078][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 308.432104][ T37] ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10 [ 308.432127][ T37] nmi_trigger_cpumask_backtrace+0x142/0x2c0 [ 308.432154][ T37] arch_trigger_cpumask_backtrace+0x14/0x20 [ 308.432177][ T37] watchdog+0xd8f/0xed0 [ 308.432203][ T37] ? __cfi_watchdog+0x10/0x10 [ 308.432229][ T37] ? __kasan_check_read+0x15/0x20 [ 308.432255][ T37] ? __kthread_parkme+0x138/0x180 [ 308.432273][ T37] ? schedule+0xc6/0x240 [ 308.432291][ T37] kthread+0x2c7/0x370 [ 308.432310][ T37] ? __cfi_watchdog+0x10/0x10 [ 308.432333][ T37] ? __cfi_kthread+0x10/0x10 [ 308.432353][ T37] ret_from_fork+0x64/0xa0 [ 308.432378][ T37] ? __cfi_kthread+0x10/0x10 [ 308.432397][ T37] ret_from_fork_asm+0x1a/0x30 [ 308.432425][ T37] [ 308.432447][ T37] Sending NMI from CPU 1 to CPUs 0: [ 308.529586][ T36] kauditd_printk_skb: 1357 callbacks suppressed [ 308.529603][ T36] audit: type=1400 audit(1757394956.561:57850): avc: denied { ioctl } for pid=10420 comm="syz.3.3363" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 308.532864][ C0] NMI backtrace for cpu 0 [ 308.532876][ C0] CPU: 0 UID: 0 PID: 36 Comm: kauditd Not tainted syzkaller #0 1976820a860199aae9d2abf4727fc3b97aa7bbea [ 308.532897][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 308.532907][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x35/0x90 [ 308.532933][ C0] Code: 08 65 48 8b 14 25 80 eb 04 00 65 8b 0d 5c 04 7f 7e 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba ec 0b 00 00 00 74 52 <8b> 8a c8 0b 00 00 83 f9 03 75 47 48 8b 8a d0 0b 00 00 44 8b 8a cc [ 308.532947][ C0] RSP: 0018:ffffc9000025f238 EFLAGS: 00000246 [ 308.532963][ C0] RAX: ffffffff8588c0ae RBX: 00000000000000fb RCX: 0000000000000000 [ 308.532981][ C0] RDX: ffff88810367a600 RSI: 00000000000000fb RDI: 00000000000000f6 [ 308.532994][ C0] RBP: ffffc9000025f238 R08: ffff88810367a600 R09: 0000000000000005 [ 308.533006][ C0] R10: 0000000000000030 R11: 0000000000000000 R12: 0000000000000000 [ 308.533024][ C0] R13: 1ffffffff0b923ec R14: ffffffff85c91f62 R15: 0000000000000035 [ 308.533036][ C0] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 308.533050][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 308.533062][ C0] CR2: 0000000000000000 CR3: 0000000134a54000 CR4: 00000000003526b0 [ 308.533077][ C0] Call Trace: [ 308.533083][ C0] [ 308.533090][ C0] format_decode+0x3ae/0x1600 [ 308.533114][ C0] vsnprintf+0xe6/0x1aa0 [ 308.533136][ C0] sprintf+0xda/0x120 [ 308.533155][ C0] ? desc_read+0x1ab/0x3e0 [ 308.533170][ C0] ? __cfi_sprintf+0x10/0x10 [ 308.533189][ C0] ? desc_read+0x202/0x3e0 [ 308.533203][ C0] info_print_prefix+0x183/0x480 [ 308.533223][ C0] ? trace_raw_output_console+0xf0/0xf0 [ 308.533242][ C0] ? _prb_read_valid+0xa7d/0xa90 [ 308.533257][ C0] record_print_text+0x155/0x430 [ 308.533277][ C0] ? prb_read_valid+0x80/0x80 [ 308.533290][ C0] ? printk_get_next_message+0x930/0x930 [ 308.533309][ C0] ? prb_read_valid+0x41/0x80 [ 308.533323][ C0] printk_get_next_message+0x273/0x930 [ 308.533341][ C0] ? __cfi_printk_get_next_message+0x10/0x10 [ 308.533359][ C0] ? prb_read_valid+0x80/0x80 [ 308.533374][ C0] ? __kasan_check_write+0x18/0x20 [ 308.533397][ C0] ? __kasan_check_read+0x15/0x20 [ 308.533418][ C0] ? __asan_memcpy+0x5a/0x80 [ 308.533438][ C0] console_flush_all+0x3a4/0xaa0 [ 308.533456][ C0] ? vprintk_store+0x9e9/0x10b0 [ 308.533473][ C0] ? __console_rewind_all+0x170/0x170 [ 308.533490][ C0] ? __kasan_check_read+0x15/0x20 [ 308.533510][ C0] ? is_printk_cpu_sync_owner+0x39/0x50 [ 308.533529][ C0] ? is_printk_legacy_deferred+0x5c/0x70 [ 308.533551][ C0] console_unlock+0xe9/0x270 [ 308.533566][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 308.533589][ C0] ? __cfi_console_unlock+0x10/0x10 [ 308.533605][ C0] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 308.533625][ C0] ? vprintk_emit+0x528/0x640 [ 308.533641][ C0] vprintk_emit+0x27c/0x640 [ 308.533657][ C0] ? __cfi_vprintk_emit+0x10/0x10 [ 308.533675][ C0] ? __cfi__printk_deferred+0x10/0x10 [ 308.533690][ C0] ? _raw_spin_trylock+0xaf/0x130 [ 308.533711][ C0] vprintk_default+0x2a/0x40 [ 308.533727][ C0] vprintk+0x93/0xa0 [ 308.533746][ C0] _printk+0xd0/0x120 [ 308.533760][ C0] ? __cfi__printk+0x10/0x10 [ 308.533775][ C0] ? __kasan_check_write+0x18/0x20 [ 308.533796][ C0] kauditd_hold_skb+0x1cc/0x230 [ 308.533817][ C0] ? __cfi_kauditd_send_multicast_skb+0x10/0x10 [ 308.533837][ C0] ? __cfi_kauditd_hold_skb+0x10/0x10 [ 308.533856][ C0] kauditd_send_queue+0x2c2/0x310 [ 308.533875][ C0] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 308.533896][ C0] ? __cfi_kauditd_hold_skb+0x10/0x10 [ 308.533914][ C0] ? __cfi_kauditd_send_multicast_skb+0x10/0x10 [ 308.533935][ C0] kauditd_thread+0x4f0/0x740 [ 308.533955][ C0] ? __kasan_check_write+0x18/0x20 [ 308.533976][ C0] ? __cfi_kauditd_thread+0x10/0x10 [ 308.533993][ C0] ? set_cpus_allowed_ptr+0x93/0xe0 [ 308.534016][ C0] ? __cfi_autoremove_wake_function+0x10/0x10 [ 308.534032][ C0] ? __kasan_check_read+0x15/0x20 [ 308.534052][ C0] ? schedule+0xc6/0x240 [ 308.534066][ C0] kthread+0x2c7/0x370 [ 308.534084][ C0] ? __cfi_kauditd_thread+0x10/0x10 [ 308.534102][ C0] ? __cfi_kthread+0x10/0x10 [ 308.534117][ C0] ret_from_fork+0x64/0xa0 [ 308.534136][ C0] ? __cfi_kthread+0x10/0x10 [ 308.534151][ C0] ret_from_fork_asm+0x1a/0x30 [ 308.534173][ C0] [ 308.750072][ T563] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0 [ 308.769769][ T36] audit: type=1400 audit(1757394956.571:57851): avc: denied { ioctl } for pid=10420 comm="syz.3.3363" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 308.771587][ T563] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0 [ 308.789409][ T36] audit: type=1400 audit(1757394956.571:57852): avc: denied { ioctl } for pid=10394 comm="syz.2.3353" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 308.792291][ T563] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0 [ 308.795511][ T400] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.802046][ T563] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0 [ 308.805180][ T400] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.812027][ T563] hid-thrustmaster 0003:044F:B65D.0010: unknown main item tag 0x0 [ 308.831723][ T400] usb 4-1: config 1 interface 1 has no altsetting 0 [ 308.859015][ T563] hid-thrustmaster 0003:044F:B65D.0010: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0 [ 308.872495][ T36] audit: type=1400 audit(1757394956.571:57853): avc: denied { ioctl } for pid=10394 comm="syz.2.3353" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 308.872532][ T36] audit: type=1400 audit(1757394956.771:57854): avc: denied { ioctl } for pid=10394 comm="syz.2.3353" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 308.898782][ T563] hid-thrustmaster 0003:044F:B65D.0010: Wrong number of endpoints? [ 308.905069][ T36] audit: type=1400 audit(1757394956.771:57855): avc: denied { ioctl } for pid=10394 comm="syz.2.3353" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 309.011037][ C1] hid-thrustmaster 0003:044F:B65D.0010: Unknown packet type 0x0, unable to proceed further with wheel init [ 309.013673][ T36] audit: type=1400 audit(1757394956.801:57856): avc: denied { ioctl } for pid=10420 comm="syz.3.3363" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 309.303805][ T36] audit: type=1400 audit(1757394956.821:57857): avc: denied { ioctl } for pid=10420 comm="syz.3.3363" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 309.329266][ T36] audit: type=1400 audit(1757394956.821:57858): avc: denied { ioctl } for pid=10420 comm="syz.3.3363" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 309.356772][ T36] audit: type=1400 audit(1757394956.831:57859): avc: denied { ioctl } for pid=10420 comm="syz.3.3363" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 309.356799][ T400] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 309.389075][ T1262] usb 3-1: USB disconnect, device number 17 [ 309.418160][ T400] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.432022][ T400] usb 4-1: Product: syz [ 309.436485][ T400] usb 4-1: Manufacturer: syz [ 309.441863][ T400] usb 4-1: SerialNumber: syz [ 309.451348][ T400] cdc_mbim 4-1:1.0: skipping garbage [ 309.653777][ T400] usb 4-1: selecting invalid altsetting 0 [ 309.659603][ T400] usb 4-1: selecting invalid altsetting 0 [ 309.665434][ T400] cdc_mbim 4-1:1.0: bind() failure [ 311.223270][ T1262] usb 4-1: USB disconnect, device number 32