last executing test programs: 2m2.772515154s ago: executing program 0 (id=514): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs2/binder1\x00', 0x1002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x12002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$unix(0x1, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) bind$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\x01\x00\x00\x00;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xff\xfe\xff\xff\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\x948P\xe4\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x9) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000004c0)="1ed8b7f9d457", 0x6}], 0x2, &(0x7f0000000100)=ANY=[], 0x40}, 0x20000000) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x128) r6 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @ipv4={'\x00', '\xff\xff', @empty}, 0x2}, 0x1c) r7 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r7, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) r8 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) r9 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000002c0)=ANY=[]) ioctl$KVM_X86_SET_MCE(r9, 0x4040ae9e, &(0x7f0000000100)={0x9d00000000000000, 0x8000000, 0x0, 0x8, 0x1b}) pread64(r3, &(0x7f0000000480)=""/177, 0xb1, 0xe0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r9, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x9, 0xfc, 0xe4, 0x40, 0xf, 0x0, 0x2e, 0x19}, {0x5000, 0xeeee6001, 0x8, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0x3}, {0xeeef0000, 0x0, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0x3000, 0x1, 0x9, 0x3, 0x4, 0x42, 0xb, 0xff, 0xa, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xb, 0x3, 0x15, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x0, 0xc, 0xa0, 0xaf, 0xa, 0x3, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8000000, 0x4, 0x5, 0x4, 0x5, 0x7, 0x3, 0x5, 0x81, 0xff, 0x70}, {0xf000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x4, 0x34, 0x2, 0xb, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x6000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0xff]}) 2m2.648223127s ago: executing program 0 (id=516): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r1, 0x4068aea3, &(0x7f0000000500)={0xd4, 0x0, 0x5}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x1000, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000240), 0xd3f57e99a1fc4cc2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0015000008"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000086) r6 = socket$inet6(0xa, 0x2, 0xffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r7, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000340)={0xffffdffffffffffb, 0xfffffffffffffffd}, 0x0) pipe(&(0x7f0000000000)) brk(0x689d80000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r9 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r9, 0x800448d2, &(0x7f0000000080)={0x0, 0x0}) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, r10, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xefc}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x36ee}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000040)={0x2}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x1, 0x9000, 0x1}) 2m2.587698677s ago: executing program 0 (id=520): mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup/file0\x00', &(0x7f0000000080)='vfat\x00', 0x84a485, 0x0) 2m2.532315049s ago: executing program 0 (id=521): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) fchown(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe74e) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0x2, &(0x7f0000000100)={0x20, 0x7, 0x5}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0xd0, 0x13, 0x100, 0x70bd2d, 0x25dfdbfe, {0xf}, [@typed={0x97, 0x2f, 0x0, 0x0, @binary="8b05d26b9811b9f4917f7cb679a2461537b57a4f25a654d2858f44999509043534539090382c544984d3c6bc3a5e0f7d6bd8bc5087478ac2a9b4663609ec86a99dd79291bcbf99a3065efd57f4451cde5a100c812c04badacd78aebf50edc813f67dc8eca99b4e315715b5e8a6e4dc67774c2eb8daca8c6844132904085fa52c6b19876d9130a63ad213d426510add4689eedf"}, @typed={0x4, 0x13c}, @typed={0x8, 0xb1, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x14f, 0x0, 0x0, @str='!<.\''}, @typed={0x8, 0xd6, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x66, 0x0, 0x0, @pid=r3}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40001}, 0x20040880) close_range(r0, 0xffffffffffffffff, 0x0) 2m2.518271039s ago: executing program 0 (id=523): keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={0x0, 0x1000, 0xa9}, &(0x7f0000000040)={'enc=', 'pkcs1', ' hash=', {'sha3-512-ce\x00'}}, &(0x7f00000000c0)="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", &(0x7f00000010c0)="4b3c7c22ce45c18b661d332cfe93c2b029ddd9a234236b093790f9c28cc47b9898022eafe1db6798fd7990410cef03d1e0c44594220feac0e2a522e606cdea5f1b86ea87ebbbe4e3a5a0698dbe44302e526c8b40b32b7f977d4c46db8151378cc4d87b0ef17eada32aae910c959d42812c1d85bb3c475cf5aa5ef15c12f955b394f36a4ec3bafe5a54f3927e008685daa0803607a2d87540bd3449f608e05b5b63aa9b56a6849082a5") (async) r0 = add_key$fscrypt_provisioning(&(0x7f0000001180), &(0x7f00000011c0)={'syz', 0x2}, &(0x7f0000001200)={0x2, 0x0, @d}, 0x18, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000001240)='sha3-512-ce\x00', &(0x7f0000001280)) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f00000012c0)='pkcs1', &(0x7f0000001300)) (async) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000001340)={r0, 0x66, 0x1000}, &(0x7f0000001380)={'enc=', 'raw', ' hash=', {'sha1-avx2\x00'}}, &(0x7f0000001400)="8f5c480c36dec099354e21194871935f0f00da0f4692065c4819c96041cb3f839549d536291ca867b00b52c912ef9c6298ebbdafee31a6c7d20faee656b74213e53d2f0869f3648ef383f6bb15d48fa81a9f84ce478a302e0a253ac6e7850ee368636a0b21df", &(0x7f0000001480)=""/4096) (async) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000002480)={r0, 0xed, 0xa9}, &(0x7f00000024c0)={'enc=', 'pkcs1', ' hash=', {'hmac(sha256-neon)\x00'}}, &(0x7f0000002540)="1f64912ade74191af5734bcb948a07c78142ca6cc23e53f6b0b1df169910efea20455e0faaa8e3369203bec117b3287324af0380d7e2117a2cb8dd55892e0f1185c335126a55f5900c8fe6b65cffe9d543e85c8cbce298dbc02a36da52b5b55d1e3b7c6e5c58bd4f725a6bc0919220485d74db60d095f461ea39eb5a0d99d30408c616d4fb2da0f6d8abad8f41a18a4637ab5e19cf36f7147e23e397ad27a38fed7f3012e617d8ee5fb7a320ce41b5da94bc53798433b9e3b200b740469481c0451c4a74f4b1adadddae02f45cf9c618e3a04263ae01d824220938d0321b3bd248147036e274c36d7c4a93ae91", &(0x7f0000002640)=""/169) (async) r1 = add_key$keyring(&(0x7f0000002700), &(0x7f0000002740)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$negate(0xd, r0, 0x2, r1) (async, rerun: 64) r2 = add_key(&(0x7f0000002780)='trusted\x00', &(0x7f00000027c0)={'syz', 0x1}, &(0x7f0000002800)="9884232d03448d214e83601944f81ca319ba", 0x12, 0xfffffffffffffffd) (rerun: 64) keyctl$reject(0x13, r2, 0x77ee, 0xd, r1) (async) r3 = add_key$user(&(0x7f0000002840), &(0x7f0000002880)={'syz', 0x2}, &(0x7f00000028c0)="f65dd15847e347733f3fd72fc0521e80752789db2c91dd50206108c0d89aad60467eebd9c7e6e853f8df4a59022a999f19441cb95d1da38c75fcf26746af9450f3bb3f2d7dd90d1f59dea9474cdc9d06163795dff6864a82e5a29b55fa6f75ba8896249844646731aada44bea2966866842fed0e20e7d0efbfeed333cf96077fbfa6fbb4fe25d62fdffe1bd864862a8d518655a4f5b0a5d7d812dbbb1b", 0x9d, 0xfffffffffffffffc) keyctl$instantiate(0xc, r3, &(0x7f0000002980)=@encrypted_update={'update ', 'default', 0x20, 'user:', '){:\xeds+\xe7.{}#&:\\%'}, 0x24, 0xfffffffffffffff8) keyctl$reject(0x13, r1, 0x71, 0x100, r1) (async) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000002e00)={0x0, &(0x7f00000029c0)=[@wr_crn={0x46, 0x20, {0x3, 0xa}}, @cpuid={0x14, 0x18, {0x1000}}, @code={0xa, 0x44, {"450f30f2640f32660f01da652e420f3808c666ba4000ed66b8d5008ed8480fc7af97f7c32fc402b59314e4673e0f01c80f01c8"}}, @code={0xa, 0x58, {"0f011a2e0f73d60966baf80cb85092578aef66bafc0c66ed67643e0f01c80f2058670f01cab98b0300000f3266410fc7b4e6be140000c461ea5ea48b0038000066b8a7000f00d8"}}, @code={0xa, 0x49, {"b9d60800000f3266baa100b8f2ffffffef470f1f00c4c1a0594d96b91f0900000f32470f01dfc4827d19924ca800000f01f83eaf410f22c3"}}, @cpuid={0x14, 0x18, {0x7ff, 0xffffffb2}}, @wrmsr={0x1e, 0x20, {0x3ab, 0x9}}, @wr_crn={0x46, 0x20, {0x4, 0xffffffff}}, @cpuid={0x14, 0x18, {0xfffffff6, 0xffffffff}}, @wr_crn={0x46, 0x20, {0x0, 0x7f}}, @rdmsr={0x32, 0x18, {0x8e5}}, @wr_crn={0x46, 0x20, {0x4, 0x858}}, @uexit={0x0, 0x18, 0x2c4}, @wrmsr={0x1e, 0x20, {0x848, 0x9a6}}, @code={0xa, 0x4c, {"66b874000f00d8f4c4c2ed025a590f01780066b81c000f00d8480fae4fba2e2ef30f2d5120c4c20dad1437c4e10f5c9b5700000065f32e460f2287"}}, @cpuid={0x14, 0x18, {0x5, 0x97d8}}, @wr_crn={0x46, 0x20, {0x2, 0x2}}, @wrmsr={0x1e, 0x20, {0xa17, 0x2}}, @rdmsr={0x32, 0x18, {0x400000b6}}, @cpuid={0x14, 0x18, {0xbdc, 0xa859}}, @code={0xa, 0x5e, {"268772cf440f20c0350a000000440f22c06e660f5eecb8010000000f01c166440f3880816110000048b855000000000000000f23c00f21f835030000000f23f840d9e9f3470f01df45da644c08"}}, @rdmsr={0x32, 0x18, {0x3a8}}, @uexit={0x0, 0x18, 0x8000000000000001}, @wrmsr={0x1e, 0x20, {0x36e, 0x2}}, @wrmsr={0x1e, 0x20, {0xa1a, 0x1}}, @cpuid={0x14, 0x18, {0x3, 0x7fff}}, @uexit={0x0, 0x18, 0x1000}, @uexit={0x0, 0x18, 0x8}], 0x407}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000002e40), r5) (async, rerun: 64) r6 = add_key$fscrypt_v1(&(0x7f0000002e80), &(0x7f0000002ec0)={'fscrypt:', @desc3}, &(0x7f0000002f00)={0x0, "5287518d32dc8e4419c0c58e34e2c05f643806fc8029be9b49a55d7f424bfb26c3f0db35ecd79fa7bb72582377249eb9b453f0648aa3f0414404287c647ffc1e", 0x2f}, 0x48, r2) (rerun: 64) keyctl$KEYCTL_MOVE(0x1e, r6, r2, r2, 0x1) (async) r7 = request_key(&(0x7f0000002f80)='encrypted\x00', &(0x7f0000002fc0)={'syz', 0x3}, &(0x7f0000003000)=']\x00', r2) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000003040)={r7, 0xf4, 0x44}, &(0x7f0000003080)={'enc=', 'oaep', ' hash=', {'tgr160-generic\x00'}}, &(0x7f0000003100)="45ec03bf81732d4df9871fedba9d3dea4f13a2ad2bbfdcb95a854c32a872bb4c5d3f3e20479fffb5baf5846640e0e151e195078eb26b4e7ad86b653a1b81d4800592c3039ad2d3371e5a970e67fcc4194685353697c1f01366c64a724fe459569b6a44e1fd032fdefd5a12802e9fb6dbd9434dd8bba3aa6e24e6f54762bf2430646ad3ae7c6695aa86bc21eede2218afdc56bd5a04e711965bcc612e9ef44c6dfd185ee5f88f25e3b0a4e99901441da756f975544585449537f60c4ecc8ef4d40a61d3af01e7c98008bc4bcd05573b62b3a029233eca3e3528e8e5c817710724b754f30393020328961d3bf8a160c95e4f80ef18", &(0x7f0000003200)="6657913083e4ae5562f661b7c689e4492c6327287da496139a57b3cdc1034f9081600a01e782b25eb2a487b7062a34d6758284d6dea9b26e8b711d7fe58c4f9a5342c9e5") (async) sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f0000003340)={&(0x7f0000003280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003300)={&(0x7f00000032c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x24}}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000033c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000003480)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003440)={&(0x7f0000003400)={0x24, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x67}, @val={0x8, 0x3, r8}, @void}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x800) keyctl$invalidate(0x15, r2) (async, rerun: 32) keyctl$dh_compute(0x17, &(0x7f00000034c0)={r2, r3, r6}, &(0x7f0000003500)=""/150, 0x96, 0x0) (async, rerun: 32) r9 = request_key(&(0x7f00000035c0)='pkcs7_test\x00', &(0x7f0000003600)={'syz', 0x1}, &(0x7f0000003640)='+%\x00', r1) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000003680)={r9, 0x30, 0x28}, &(0x7f00000036c0)={'enc=', 'pkcs1', ' hash=', {'sha1-ce\x00'}}, &(0x7f0000003740)="f828c73d6b015467985fb9375220f03aceca248c446ed37aa2d36ac0b4c601a37378f128bf2a9cab574ca879b03cf6fc", &(0x7f0000003780)=""/40) (async, rerun: 32) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003800), r5) (rerun: 32) sendmsg$NL80211_CMD_DISCONNECT(r5, &(0x7f00000038c0)={&(0x7f00000037c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003880)={&(0x7f0000003840)={0x24, r10, 0x300, 0x2, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1c}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 2m2.412329431s ago: executing program 0 (id=525): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/157, 0x9d}, {&(0x7f0000000200)=""/45, 0x2d}, {&(0x7f0000002bc0)=""/108, 0x6c}, {&(0x7f0000000100)=""/149, 0x95}, {&(0x7f0000002f00)=""/268, 0x10c}, {&(0x7f0000002d00)=""/118, 0x76}], 0x9}, 0x10}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x1008}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3}], 0x7, 0x0, 0x0) (async) preadv2(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/129, 0x81}, {0x0}], 0x2, 0xffffffff, 0x8, 0xd) 2m2.332688703s ago: executing program 32 (id=525): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000280)={0x1, &(0x7f0000000100)=[{0x6, 0xfc, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000000240)=""/207, 0xcf}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/157, 0x9d}, {&(0x7f0000000200)=""/45, 0x2d}, {&(0x7f0000002bc0)=""/108, 0x6c}, {&(0x7f0000000100)=""/149, 0x95}, {&(0x7f0000002f00)=""/268, 0x10c}, {&(0x7f0000002d00)=""/118, 0x76}], 0x9}, 0x10}, {{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x81}, {{0x0, 0x0, 0x0}, 0x1008}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3}], 0x7, 0x0, 0x0) (async) preadv2(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/129, 0x81}, {0x0}], 0x2, 0xffffffff, 0x8, 0xd) 2m1.975738199s ago: executing program 2 (id=534): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000280)={0x10201, 0x5, 0x1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x8000000000000001}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDDELIO(r3, 0x4b35, 0xfff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x7, 0x4, 0x22, @local, @private0, 0x20, 0x7800, 0x7f, 0x4}}) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@delsa={0x158, 0x11, 0x100, 0x70bd26, 0x25dfdbfd, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0xa, 0xff}, [@XFRMA_SET_MARK={0x8, 0x1d, 0x6}, @algo_comp={0xef, 0x3, {{'lzjh\x00'}, 0x538, "1fdad344abfd7a39618b16d683abaf1d9c54f56f5edad7c2d66a30daa0f3eaef3e47f62a4974f1602be422834370f6bedabf26046a66b60243f594080d71fe5b6463a22971f84ea580783521d7b60e40c41b0529dcec35bb3d15732e75e3e9e2219748a9edf529eac9646a329ca0bc75e7e2f548041ca25b2f91f78ab40e7c051c1c247fbcd0e530b7bc58644f5d324a0cedc663df4f96928852a3ee6965c81b6fb44c71741abc"}}, @migrate={0x44}, @offload={0xc, 0x1c, {r5, 0x1}}, @srcaddr={0x14, 0xd, @in6=@mcast1}, @mark={0xc, 0x15, {0x35075a, 0x400}}, @extra_flags={0x8, 0x18, 0x2}]}, 0x158}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0xa8, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff67, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x8}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@handle={0x73682a85, 0x0, 0x3}, @fd, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x3}, @request_death], 0x0, 0x0, 0x0}) r6 = syz_usb_connect$lan78xx(0x3, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_disconnect(r6) 1m53.887095275s ago: executing program 2 (id=550): openat$procfs(0xffffffffffffff9c, &(0x7f00000023c0)='/proc/cgroups\x00', 0x0, 0x0) (async, rerun: 32) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) (async, rerun: 32) unshare(0x26020480) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x60000, 0x41) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904"], 0x0) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f00)={0x6a8, r2, 0xc4fc9e906872338b, 0x24, 0x25dfdbff, {{0x15}, {@void, @val={0xc, 0x99, {0xa, 0x2}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x2d8, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x63}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb8}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1e}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa0}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfd}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x158, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x148, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x100, 0x1, 0xfffa, 0x2, 0xe096, 0x7, 0x117c]}}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x7, 0x9}, {0x5, 0x9}, {0x3, 0x6}, {0x1, 0x6}, {0x4}, {0x7, 0x3}, {0x0, 0x3}, {0x7, 0xa}, {}, {0x5, 0xa}, {0x0, 0x9}, {0x3, 0xa}]}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x7, 0x1}, {0x5, 0x5}, {0x3, 0xa}, {0x0, 0x7}, {0x1, 0x7}, {0x3, 0x5}, {0x0, 0x1}, {0x0, 0xa}, {0x2}, {0x1, 0x5}, {0x4, 0x6}, {0x3, 0x3}, {0x1, 0x4}, {0x5, 0x8}, {0x3, 0xa}, {0x3, 0x9}, {0x2, 0x4}, {0x7, 0x8}, {0x0, 0x6}, {0x3, 0xa}, {0x7, 0xa}, {0x6, 0x7}, {0x0, 0x4}, {0x7, 0x5}, {0x0, 0x5}, {0x4, 0x6}, {0x1, 0x2}, {0x7, 0x8}, {0x7, 0xa}, {0x7, 0x9}, {0x1, 0x9}, {0x1, 0x3}, {0x6, 0x2}, {0x3, 0x3}, {0x5, 0xa}, {0x7, 0x3}, {0x0, 0x4}, {0x6, 0x8}, {0x2, 0x4}, {0x6, 0x3}, {0x7, 0x9}, {0x2, 0x8}, {0x1, 0x2}, {0x7, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x4}]}, @NL80211_BAND_2GHZ={0x4}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x46, 0x7fff, 0x9, 0x6, 0x10, 0x5, 0x5]}}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x9c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x3, 0x9}, {0x6, 0x8}, {0x5, 0x2}, {0x7, 0x1}, {0x5, 0x3}, {0x3, 0x6}, {0x2, 0x9}, {}, {0x5, 0x2}, {0x2, 0x7}, {0x2, 0xa}, {0x7, 0x6}, {0x0, 0x8}, {0x6, 0x8}, {0x5, 0x1}, {0x6, 0x8}, {0x6, 0x1}, {0x4, 0x6}, {0x1, 0x4}, {0x2}, {0x2, 0x2}, {0x4, 0x2}, {0x6}, {0x5, 0x3}, {0x6, 0x1}, {0x6, 0x1}, {0x7, 0x6}, {0x4, 0x8}, {0x7}, {0x5, 0x1}, {0x6, 0x2}, {0x7, 0x4}, {0x3, 0x9}, {0x4, 0x3}, {0x3, 0x6}, {0x7}, {0x4, 0xa}, {0x0, 0x8}, {0x2}, {0x4, 0x9}, {0x5, 0x4}, {0x2, 0x3}, {0x5, 0x9}, {0x5, 0x7}, {0x7, 0x2}, {0x3, 0x6}, {0x4, 0x5}, {0x3, 0x9}, {0x3, 0x9}, {0x6, 0x8}, {0x0, 0xa}, {0x1, 0x6}, {0x5, 0x1}, {0x6, 0x5}, {0x1, 0x2}, {0x7, 0x3}, {0x4, 0x7}, {}, {0x1, 0x4}, {0x1, 0x7}, {0x6, 0xa}, {0x5, 0x4}, {0x7, 0x3}, {0x1, 0x1}, {0x6, 0x4}, {0x3, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x7, 0xedfd, 0x4bfa, 0x7, 0x9, 0x9, 0xb]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0xc10, 0x3, 0x8, 0x8d2, 0xd90, 0x7ff]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}, {0xc8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf3}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb3}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xadca}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x8c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0x16, 0x36, 0x0, 0x36, 0x2, 0x48, 0x6, 0x0, 0x24, 0x4, 0x16]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x8, 0x0, 0x1, 0xcc, 0x3, 0x8, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3a, 0x2, [{0x3, 0x3}, {0x6, 0x4}, {0x6, 0x5}, {0x6, 0x8}, {0x1}, {0x5, 0x8}, {0x0, 0x8}, {0x2, 0x5}, {0x7, 0x1}, {0x5, 0x4}, {0x2, 0x9}, {0x1}, {0x7}, {0x5}, {0x5}, {0x0, 0x9}, {0x3, 0x1}, {0x0, 0x6}, {0x0, 0x9}, {0x6, 0x2}, {0x1, 0x5}, {0x2, 0x6}, {0x2, 0x9}, {0x2, 0x3}, {0x3, 0x5}, {0x4, 0xa}, {0x3, 0xa}, {0x6, 0x9}, {0x2, 0x6}, {0x3, 0x3}, {0x3, 0x7}, {0x2, 0x6}, {0x1, 0x4}, {0x2, 0x3}, {0x4, 0x6}, {0x7}, {0x2, 0x2}, {0x0, 0x8}, {0x2, 0x2}, {0x0, 0x7}, {0x4, 0x2}, {0x3, 0x7}, {0x2, 0x7}, {0x2, 0x5}, {0x1, 0x4}, {0x1, 0x2}, {0x1, 0x6}, {0x4, 0x2}, {0x6, 0x4}, {0x3, 0x5}, {0x4, 0xa}, {0x0, 0x1}, {0x4, 0x6}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x2ec, 0x11d, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x30, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x11, 0x2, [{0x2, 0x7}, {0x4, 0xa}, {0x2, 0x1}, {0x4, 0x2}, {0x2, 0x8}, {0x1}, {0x1, 0x3}, {0x2, 0x6}, {0x0, 0x4}, {0x0, 0x4}, {0x2, 0x9}, {0x3, 0x8}, {0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x1, 0x80, 0x2, 0x8, 0x0, 0x81, 0xd4]}}]}]}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xc05}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x4a}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3f62}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x74}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x35}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffa}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x200, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x168, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x140, 0x6, 0x945, 0x6, 0x3, 0x10, 0x2, 0x209a]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1f, 0x8, 0x7a3, 0x5, 0xd, 0x10e7, 0x6, 0x7]}}]}, @NL80211_BAND_60GHZ={0x8c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4d, 0x2, [{0x7}, {0x6, 0xa}, {0x2, 0x6}, {0x3, 0x1}, {0x3, 0xa}, {0x7}, {0x4, 0xa}, {0x1, 0x5}, {0x1, 0x4}, {0x0, 0x9}, {0x4, 0x7}, {0x4, 0x1}, {0x3}, {0x6, 0x7}, {0x5, 0x1}, {0x7, 0x8}, {0x0, 0x3}, {0x5, 0x2}, {0x6, 0x1}, {0x6, 0x6}, {0x3, 0x9}, {0x0, 0x1}, {0x2, 0x6}, {0x1, 0x8}, {0x1, 0x9}, {0x0, 0x1}, {0x6, 0x9}, {0x1, 0x3}, {0x5, 0xa}, {0x6, 0x7}, {0x7, 0x3}, {0x3}, {0x1, 0x6}, {0x3}, {0x2, 0xa}, {0x3, 0x1}, {0x6, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x4, 0x5}, {0x1, 0x8}, {0x2, 0x4}, {0x4, 0xa}, {0x4, 0x9}, {0x1, 0x7}, {0x3, 0x7}, {0x0, 0x2}, {0x1, 0x1}, {0x7, 0x5}, {0x0, 0x9}, {0x5, 0xa}, {0x5, 0xa}, {0x7, 0x2}, {0x5, 0x6}, {0x7}, {0x5, 0x8}, {0x3, 0x6}, {0x0, 0x2}, {0x6, 0xa}, {0x1, 0x5}, {0x7, 0x4}, {0x0, 0x8}, {0x6, 0x6}, {0x5}, {0x6, 0xa}, {0x0, 0x3}, {0x7, 0x7}, {0x7, 0x7}, {0x4}, {0x0, 0x2}, {0x6, 0x6}, {0x3}, {0x2, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xff81, 0x4, 0x7, 0xffff, 0x7, 0xffff, 0x6f]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x6, 0x200, 0xfc8b, 0x9, 0xd, 0x1, 0x6]}}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x98, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x680, 0x2, 0xd, 0x3, 0xd1d, 0xff81, 0x9]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x36, 0x6, 0x9, 0x6c, 0x12, 0x4, 0x48, 0x36, 0x2, 0x29]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x9}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0xf9ec, 0x0, 0xcc, 0xfff, 0x0, 0x5696]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x3, 0x4}, {0x4, 0x2}, {0x2, 0x3}, {0x1, 0x7}, {0x7}, {0x7, 0xa}, {0x3}, {0x4, 0x2}, {0x3, 0x4}, {0x6, 0x9}, {0x6, 0x5}, {0x0, 0x3}, {0x6, 0xa}, {0x0, 0x5}, {0x5, 0x6}, {0x1, 0x3}, {0x5, 0x5}, {0x1, 0x7}, {0x6}, {0x7, 0x5}, {0x7, 0x6}, {0x2, 0x1}, {0x4}, {0x7, 0x5}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6c, 0x12, 0x12, 0x3, 0x16, 0x1b, 0x16, 0x6c, 0x0, 0x5, 0x36, 0x2, 0x4, 0x5, 0x18, 0x48, 0x60, 0x60, 0x1, 0x48, 0x30, 0x60, 0x6c, 0x36, 0x1, 0x12, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x70, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x2, 0x0, 0x1b, 0x48, 0x6c, 0xc, 0x1, 0x2, 0x48, 0x30, 0xc, 0x5, 0xc, 0x6, 0x30, 0x5, 0x0, 0x30, 0x2, 0xc, 0x4, 0x35, 0xb, 0x3, 0x4, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x0, 0x78, 0x4, 0xc, 0xf2, 0x101, 0xfd1e]}}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x2, 0x30, 0x6c, 0x4, 0x16, 0xb, 0x18, 0x2a, 0x1b, 0x6, 0x60, 0x36, 0x0, 0xc21cf66fbd1d4498, 0x27b275fd0b1c0278, 0x3, 0x4, 0xc, 0x16, 0x18, 0x18, 0xb, 0x6, 0x5, 0xc, 0x2, 0x12, 0x30, 0x6c]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa5}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0xb4, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xbf}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xdc}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x3c}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1305}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}]}, 0x6a8}}, 0x0) (async) r3 = socket$inet6(0xa, 0x3, 0x7) getsockopt(r3, 0xff, 0x22, 0x0, &(0x7f00000002c0)) (async) sendfile(r0, r0, 0x0, 0x6) 1m53.838272926s ago: executing program 2 (id=552): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) fstat(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x300, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r7, 0x65, 0x8, 0x0, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCXONC(r8, 0x540a, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) setreuid(0x0, r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x100404, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@loose}, {@cache_loose}, {@privport}, {@cache_mmap}, {@cache_fscache}, {@mmap}], [{@fsmagic={'fsmagic', 0x3d, 0x4}}, {@audit}, {@subj_role={'subj_role', 0x3d, '#${^$'}}, {@fowner_lt={'fowner<', r5}}]}}) 1m53.578280021s ago: executing program 2 (id=561): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async, rerun: 32) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (rerun: 32) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async, rerun: 64) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (rerun: 64) unshare(0x22020600) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) (async) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) (async, rerun: 64) syz_clone(0x80004000, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880)=0xffffffffffffffff, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x8) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r3, 0xc018620b, &(0x7f0000000040)) syncfs(r2) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x110, r2, 0x11cee000) 1m53.496400043s ago: executing program 2 (id=563): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000180)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005280)=[{{&(0x7f00000011c0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}}], 0x1, 0x4008000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wake_unlock', 0x42002, 0x1e3) sendfile(r1, r1, 0x0, 0x1200000000000) ioctl$BLKRRPART(r0, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m53.493286213s ago: executing program 2 (id=564): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280459fbb3d3f1ce0f206d189862c960274aea6eee76c0fce18291fd64b9803b85fb76f3c2d34233072ff8ddc0cb2e6a04f9589c0c951bff11c57b7daed47233aee4d5ff313e0acaa5ec769ec84bb3bb33663ffe0bb58625e9f39685a1d80d0ea5059d904fd7341056cd1d49d4ee14c0b1580cce09534d07638dbcd09d830159e4bfcc75cadbb7ed2467feeec03287b0ba6379b42bf0a5d1ed90399dbf41d2f23c1bada9ea5d3005843fd2ce5cab608d9cf536a6ce5dbb447d1e2f6876", @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf2501000000100002800c000180080001000400000004000180"], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000a97000/0x1000)=nil, 0x1000}}) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06d29f3d9e234b30c50997d3bef409ff21e70c7f3f800b2f7b6aa54cc50aff7f00", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x2) 1m53.450965154s ago: executing program 33 (id=564): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280459fbb3d3f1ce0f206d189862c960274aea6eee76c0fce18291fd64b9803b85fb76f3c2d34233072ff8ddc0cb2e6a04f9589c0c951bff11c57b7daed47233aee4d5ff313e0acaa5ec769ec84bb3bb33663ffe0bb58625e9f39685a1d80d0ea5059d904fd7341056cd1d49d4ee14c0b1580cce09534d07638dbcd09d830159e4bfcc75cadbb7ed2467feeec03287b0ba6379b42bf0a5d1ed90399dbf41d2f23c1bada9ea5d3005843fd2ce5cab608d9cf536a6ce5dbb447d1e2f6876", @ANYRES16=r2, @ANYBLOB="01002cbd7000fbdbdf2501000000100002800c000180080001000400000004000180"], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000a97000/0x1000)=nil, 0x1000}}) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06d29f3d9e234b30c50997d3bef409ff21e70c7f3f800b2f7b6aa54cc50aff7f00", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x2) 1m18.285616222s ago: executing program 4 (id=1190): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) r1 = syz_usb_connect$hid(0x1, 0x7, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x9}]}}, 0x0}, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffdff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000140)=@req3={0x6, 0x0, 0x4, 0x6, 0x5, 0xfffffff7, 0xd88f}, 0x1c) setuid(0xee00) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) tkill(r3, 0x3c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x8, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}]}]}, 0x6c}}, 0x0) lseek(r0, 0x46, 0x1) 1m15.24498512s ago: executing program 4 (id=1228): r0 = open(&(0x7f0000000040)='./file0\x00', 0x648c42, 0x8) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000129bd7000fbdbdf252b0000000c009900050000004c0000000a00cf3693baec7e64e5000008000c00939164000000040046001e001f001c0c04000000000000000004000100060000000008090000000000000c00238005000e000100000004003c000400cc0004004600"], 0x70}, 0x1, 0x0, 0x0, 0x20040010}, 0x40000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) fgetxattr(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='securidy.\x00'], &(0x7f00000001c0)=""/113, 0x71) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) chmod(&(0x7f0000000280)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat$incfs(0xffffffffffffff9c, &(0x7f00000002c0)='.log\x00', 0x20202, 0x84) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0x32, 0xf7, 0x3, 0x80, 0x7, 0xc3, 0xc, 0x66, 0x4, [0x20040, 0x9, 0x10, 0x40, 0x44b4eba3, 0x8, 0xfffffeff, 0x2174]}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'tunl0\x00'}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_linger(r5, 0x1, 0x45, &(0x7f0000000180), 0x8) sendfile(r2, r2, 0x0, 0x1000007fd) 1m14.342672827s ago: executing program 4 (id=1262): sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a804800030001"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r1 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000002c0)='\x16([%\x8e\x00\x106\xcd\xe7|\x94\x01bW\xe4\n\xea\x01\x8b\x86-\xa6\x15]\xec\x8bT\x1c\xe84\xb9\xa7&Q\xf6eC/\"\xd6\xa2\xd5\xcd\x9a\xa0\x80\xa0\fW\xb7\xf8\x95:\x91Q^\x9e\x8f\x0f\xf0RE~QT\x95\xcf@\x88', &(0x7f0000000180)='\x11\x84\xf2L%\xcf\x8b\x93\xfd2\xd5J\xaa\xaa3\x1c\x1b\x8d\x11\x87\x16A\x12_>\xa9\xa7Yt`K\xe7\x8e\x0e\xde\x1a%LSY\xc25,\x90\x88hT\xd7E\xc4\xcc\xbbh\x81\x9by&\xd9h\x98Gf\t\x90d\xca\xa3\x973]!G\x06\xea\xa8\x83\"l', 0x0) r2 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) write(r2, &(0x7f0000000040)="f8153432e717eb1e9cde98eec4cdab6012a127ee8f702d3dde01b6ddd185ab109b451b9d6a589c014b81865706c60cdf25c5a448c2bef2ef82", 0x39) r3 = memfd_create(&(0x7f00000006c0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-\xeb\xe7\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}, 0x2020) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) openat$cgroup_int(r5, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, r3, {0x7, 0x2b, 0x7, 0x80000, 0xf801, 0x6, 0x3, 0xbd, 0x0, 0x0, 0x1, 0xa}}, 0x50) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, 0x3000, 0x1}) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000840)=""/4098, 0xff39}, {0x0}, {&(0x7f0000000180)=""/177}, {&(0x7f0000000240)=""/201}], 0x2) 1m13.823289157s ago: executing program 34 (id=1279): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x82c1, 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000800)="b5", 0x1}, {0x0}], 0x2, 0x7fffffffffffffff, 0x0) linkat(r1, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000380)='./file0\x00', 0x1400) creat(&(0x7f0000000000)='./file0\x00', 0x60) r2 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r2, 0x400, 0x1) bind$pptp(r1, &(0x7f0000000100)={0x18, 0x2, {0x2, @local}}, 0x1e) read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020, 0x0, 0x0}, 0x2020) r4 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) openat$cgroup_int(r5, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, r3, {0x7, 0x2b, 0x7, 0x80000, 0xf801, 0x6, 0x3, 0xbd, 0x0, 0x0, 0x1, 0xa}}, 0x50) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r7 = userfaultfd(0x80801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, 0x3000, 0x1}) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000840)=""/4098, 0xff39}, {0x0}, {&(0x7f0000000180)=""/177}, {&(0x7f0000000240)=""/201}], 0x2) 52.203632934s ago: executing program 1 (id=1771): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x3, 0x0, 0x0) (async) syz_clone(0x822000, &(0x7f0000000040)="78ace73611875ea58056590303ec48d9561e1558d9f8df08ca8c", 0x1a, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)="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") (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)) (async) r3 = syz_open_pts(r2, 0x101000) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x11) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000)=@ccm_128={{0x304}, "b2365b83bdc57eec", "717ec7522156f3b3d26285826367963e", "c79c8b57", "a29ad4c3e6d07b53"}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89b0, &(0x7f0000000340)={'vlan0\x00', @random="00009e0c1100"}) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x1000) 51.790154112s ago: executing program 1 (id=1772): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1406ffffffff0a000603"], 0x14}}, 0x0) fchown(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe74e) syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x180) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x402000b, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) ioctl$KVM_RUN(r3, 0xae80, 0x0) listen(r4, 0x1) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000c40)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x5b05b05b05b070b, [{{0x9, 0x2, 0x2d}}]}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) close_range(r0, 0xffffffffffffffff, 0x0) 48.645961283s ago: executing program 1 (id=1827): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r2 = syz_io_uring_setup(0x7e4c, &(0x7f0000000180)={0x0, 0x31ae, 0x400, 0x2, 0x138}, &(0x7f0000000080), &(0x7f0000000100)) syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0xf2d8, 0x8000, 0x0, 0x382, 0x0, r2}, 0x0, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r4, &(0x7f00000000c0)=ANY=[], 0xffffff6a) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x0, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x5, 0x4, 0x3c5b, 0x1, 0x1ff, 0x9, 0x1, 0x1f461e2c, 0x4, 0xe661, 0x7fff, 0x100000b, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0x1, 0xa, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x4007, 0x7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff5, 0x129432e6, 0xcb, 0xf9, 0xf, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x80, 0x2f, 0x3, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x6, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x4, 0x3, 0x9, 0xffffffff, 0x7, 0x6, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1006, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8005, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x3, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0xa, 0xbb31, 0x7, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x1003, 0x80ce7, 0x1ff, 0x3, 0x100, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x1, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x0, 0x1, 0x10080, 0x6, 0x5, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req={0x2, 0x80000001, 0xd, 0x5}, 0x10) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$unix(r6, &(0x7f0000000c40)=@abs={0x1}, 0x6e) connect$unix(r5, &(0x7f000057eff8)=@abs={0x1}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r10, 0xa02000000000000, 0x60, &(0x7f0000000640)={'filter\x00', 0xb001, 0x4, 0x430, 0x0, 0x130, 0x0, 0x348, 0x348, 0x348, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x3f5e, 0x4, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x10, {@empty, {[0xff]}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10001, 'syz0\x00', {0x7b}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @local, @broadcast, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x480) mmap(&(0x7f00004cd000/0x1000)=nil, 0x1000, 0x558af6cc015a28aa, 0x12, r9, 0x5bc7000) 48.384328317s ago: executing program 1 (id=1833): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) clock_adjtime(0x0, &(0x7f0000000200)={0x1000000000d1, 0x8000000000000001, 0x80004001, 0xd6, 0x9c7, 0xfff, 0x100, 0x1000000000c5e3, 0x7, 0x8000, 0x3, 0x7, 0xf2e9, 0x8000000000000001, 0x6, 0x2, 0x6, 0x9, 0x81, 0x6, 0x2, 0x4d9, 0x8, 0x1fe, 0x8005, 0x4}) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="e99428bd7000fcdbdf2546000000080001"], 0x50}}, 0xc000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005a00"], 0x1c}], 0x1}, 0x0) unshare(0x22020600) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@private1}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, 0x0) wait4(0x0, 0x0, 0x2, 0x0) mount$9p_unix(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240), 0x20000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/meminfo\x00', 0x0, 0x0) clock_adjtime(0x6, &(0x7f0000000400)={0x734e, 0x2, 0x7f, 0x877, 0x1, 0x2, 0x0, 0x489, 0xffffffffffffff79, 0xff, 0x8000, 0xe, 0x1, 0x0, 0x1, 0x1, 0x8, 0xca, 0x7, 0x9, 0x5, 0x6, 0x7257, 0x50, 0x1, 0x3}) read$FUSE(r1, &(0x7f0000002640)={0x2020}, 0xffffffffffffff6d) 48.382882527s ago: executing program 1 (id=1835): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x2c, 0x7, 'system_u:object_r:smartcard_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x19}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6erspan0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0xb4, r2, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:sendmail_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:ssh_agent_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0xb4}, 0x1, 0x0, 0x0, 0x11040}, 0x8000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48004}, 0x84) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x38, r4, 0x200, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1804}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x40, r5, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xfffffffffffe0306}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x24008080) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000780)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x100}, 0x4040004) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000940)={&(0x7f0000000880), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x44, 0x0, 0x0, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000010}, 0x10090) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x7c, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2a}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x11}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x1) r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000c00), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000c40)={[{0x71, 'devices'}, {0x2d, 'freezer'}, {0x2d, 'cpu'}, {0x0, 'net_cls'}]}, 0x20) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r1, 0x300, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004884}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x44, r3, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000ec0), 0xc, &(0x7f0000001140)={&(0x7f0000000f40)={0x1d0, r9, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7c}}}}, [@NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x70f, 0x2, 0x2, 0x1, 0x5, 0x6, 0x4, 0x7, 0x7ff, 0x6, 0x4, 0x8, 0xb, 0x8, 0x8, 0x7]}, @NL80211_ATTR_SSID={0x1d, 0x34, @random="0f0b0deb5626b87a1a8ff36e5660fd650bfb9865c103386346"}, @crypto_settings=[@NL80211_ATTR_PMK={0x5, 0xfe, "ce"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xe902}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CONTROL_PORT={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x106}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x20}], @NL80211_ATTR_FILS_NONCES={0x24, 0xf3, [0x7f, 0x2, 0x7, 0x358, 0x9, 0x5, 0x3a02, 0x7, 0x6, 0x8065, 0xffff, 0xf9, 0x3, 0xa, 0x398, 0x9]}, @NL80211_ATTR_IE={0x14, 0x2a, [@gcr_ga={0xbd, 0x6}, @mesh_chsw={0x76, 0x6, {0x9, 0x0, 0x1d, 0xffff}}]}, @NL80211_ATTR_DISABLE_VHT={0x4}, @crypto_settings=[@NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x3}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x9ab20b8256a9c25c}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_PMK={0x38, 0xfe, "ffeaa794beacd11ee5cf0a228c02078bb001f4e9f6a24c5c26aa9c5fb49649d7143c7d19e8a9aaf17ba81d9f9cc5ae013447e74a"}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x18, 0x49, [0xfac0d, 0xfac02, 0xfac04, 0xfac05, 0xfac06]}, @NL80211_ATTR_SAE_PASSWORD={0x68, 0x115, "9eba1df0ba26124ee1e406d187a2ff543da63e2a06ede2f4358b462e9f6494500fdf007992024e0212187ee0681c5cc754373e2a2806dd3fc7ec1f30fc6cd9b45fd38774f38f8e2ecc07acf06000f239ba840168ff6efb2822c17ff53e27eced07f73764"}], @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000011c0)='./cgroup/syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r10, &(0x7f0000001200)='syz1\x00', 0x1ff) syz_genetlink_get_family_id$nfc(&(0x7f0000001240), r7) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x30, r11, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000000}, 0x4c080) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001400), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f0000001700)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001440)={0x248, r12, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x1bc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xd0, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x100000}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x96}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a989edb80c354ce8137c806ccf999cc3d5c61119f4995cef8203d9a492dc1c7e"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "5f5c3043b7b2de8788d00d6dd2ea80e8"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xb}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x62}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x100}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "cff5d54f9287de43049e28afc5aa3ac5"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c3fed8609be2c138a5403fc9846241a0"}, @NL802154_KEY_ATTR_ID={0x34, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "5045d342cfd4b686387fba70f91bb16fc568bbe6a8f3e87e41e7c858b0109f2a"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x38, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e98ad14090160821f186cd7a18b0f194"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1b5ac70e274d07f1884cc1c82ea5b347"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x248}, 0x1, 0x0, 0x0, 0x8c0}, 0x4004) 48.342823128s ago: executing program 1 (id=1837): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212"], 0x0) clock_gettime(0x0, &(0x7f0000000240)) (async) syz_usb_connect$cdc_ecm(0x1, 0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003020000202505a1a4c0e471f6dff0b240000102030109024000010104900509040001020206000005240600000524006bff0d240f010f00000004000200ab052415d5000905820200021f00ff0905"], &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x6, 0x0, 0x7, 0xff, 0x3}, 0x0, 0x0}) (async) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) r4 = socket$netlink(0x10, 0x3, 0x9) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, 0x13, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c005}, 0x20004010) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x44) setgroups(0x1, &(0x7f00000001c0)=[r9]) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r10 = open(&(0x7f0000000140)='./file0\x00', 0x80002, 0x8) getsockopt$bt_BT_VOICE(r10, 0x112, 0xb, &(0x7f0000000180)=0x1, &(0x7f0000000200)=0x2) (async) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/config\x00') dup(r3) (async) preadv(r11, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) (async) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r14, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000009b000040"]) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, 0x0}) 31.999081384s ago: executing program 35 (id=1837): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212"], 0x0) clock_gettime(0x0, &(0x7f0000000240)) (async) syz_usb_connect$cdc_ecm(0x1, 0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003020000202505a1a4c0e471f6dff0b240000102030109024000010104900509040001020206000005240600000524006bff0d240f010f00000004000200ab052415d5000905820200021f00ff0905"], &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x6, 0x0, 0x7, 0xff, 0x3}, 0x0, 0x0}) (async) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) r4 = socket$netlink(0x10, 0x3, 0x9) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, 0x13, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c005}, 0x20004010) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x44) setgroups(0x1, &(0x7f00000001c0)=[r9]) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) r10 = open(&(0x7f0000000140)='./file0\x00', 0x80002, 0x8) getsockopt$bt_BT_VOICE(r10, 0x112, 0xb, &(0x7f0000000180)=0x1, &(0x7f0000000200)=0x2) (async) r11 = syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/config\x00') dup(r3) (async) preadv(r11, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) (async) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x5) ioctl$KVM_SET_MSRS(r14, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000000000009b000040"]) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x0, 0x0, 0x0}) 23.177633913s ago: executing program 7 (id=2028): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f00000001c0)=0x5, 0x4) getsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, 0x0, &(0x7f0000001640)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000002c0)={[{0xfffffc00, 0x2, 0x7, 0x2, 0x6, 0xa0, 0x8, 0x3, 0xc5, 0x2, 0x81, 0x1, 0x1}, {0xfffffeff, 0x6, 0xff, 0x1, 0x6, 0xef, 0x2, 0x0, 0x10, 0x1, 0x6, 0x1, 0x8001}, {0x4, 0x4, 0x2, 0x0, 0x6, 0x4, 0x4, 0x6, 0x1, 0xc, 0x4, 0x7, 0x80000000}], 0x4}) r3 = socket(0x28, 0x5, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x1) getsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000240), &(0x7f0000000280)=0x4) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ASSERT(r5, 0x29, 0xcf, &(0x7f0000000040), 0x4) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x60540, 0x0) r7 = dup(r6) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xd1) sendmsg$IPCTNL_MSG_CT_GET_STATS(r7, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) readv(r4, &(0x7f0000000140)=[{0x0}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2) 23.063304636s ago: executing program 7 (id=2030): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20802, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) utimensat(0xffffffffffffff9c, 0x0, &(0x7f00000002c0), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000180)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x2000, 0xab00, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x20, 0x0, 0x2b, 0x2f, 0x0, @empty=0x2f, @multicast1}}}}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000080)="4d01000000000000002f00e50414090b00920000", 0x14, 0x81, &(0x7f0000000340)={0x11, 0x0, r6, 0x1, 0xe, 0x6, @multicast}, 0x14) getpeername$packet(r1, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000a40)=0x14) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)=[{{&(0x7f0000000a80)={0x2, 0x4e22, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f00000002c0), 0x0, &(0x7f0000000300)}}, {{&(0x7f0000000380)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000940)=[{&(0x7f00000003c0)="d944443688c53aab5e2bdcfd477aa04dc0781abcddc7c533df28e7adc42c4554c17e87b0d8f26de4d3b84bf412b458ba3c82cb9025783428e7e6e49d782424827cc0ce63012d181277cb708b6c8445cedb003ceccac15a2b721f78d241acb34a5bc7686bab8c18707aca2dc43d2c3cf05aa0556215336c7c9a09635c66ee3e563a585b88cc23d6ebcce88e7493ce4d066d2123c381f08fcd7206c76e", 0x9c}, {&(0x7f0000000480)="48638dbfd42f20580c4437392102b496a4401c8ea60816dc572af5c726c1d40e9e484d1cac4b0a8808b2eca22957f19992b11c00928c752fd16cfbfbde7f1936bfb62e793cb1a4c7acc5d5d894a3c835bc54ad13cb5e8654ff5b62a1bf237dbb83fa435717275808333589662260030e24", 0x71}, {&(0x7f0000000500)="fd0b686dc21c55d1e63d68b82fce443b69c10d718165deaa44b6f855882a6ebd9ee0d23579b166b61d26f32c74c47ef003bb7f857aa4cc7071f1fa3e745c4dcc13ddb61bd7524610937b4ac5898a36b317fe55487bfdbfd48e341fcfc12e823a87bfdb7498e289e11b6ae4906ff716669ae09caa3c74a3a568b7e7f7fa7f4498595f108cf0620557e88ea7efe1450be0a27bade4186c1c733c0797a3d6f4b87a0348", 0xa2}, {&(0x7f00000005c0)="5057805e0ad57e04f68b72d9ae840dbe08d65c72e2dd1481e8bd8afb7fa06504f9aceaf124ac00a6ea8be06efcd690c4b3dcb482139b4c9718a17d3dcdf079a211b4ca30387911e5db94bf4b67407c03aa09a1bedb37f0d81d5fe2a8b8a072b578cb929510755bedd273ed1c7fc2fa0fb71a40a47082ec93d8eeca9360c1ba1066dedad804eefd91950cf2dcfef65a6d91253446680061c55c4f527706122bca0340ddca36309717b8a18355d9", 0xad}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000000680)="126978d0656e6caffcbcf66c502167ea4a202464632c46e38a5ff5638955011efcf4b0a09e41fb8684deacb4599c98d13f2cce890b4cad6bfb6733c76722ecd3a18c0d12e9a7b2755fc628ff136d2059bf680a3661fccbbfbf1832ca7321cb4b60d9e3d468d7bdef6663a512f0f176bae8dae1607aefa0a81017d3a163a986fe77d517a29c5b9d76fb6a0a11e2ce56bb718f37dcba2330368db4115094304e97411a4f18a6c4a2bd4562d0bf1984671c72e6fbb224f12d0067a90da7585edc483aa2a703fc9778ab6bfa09b27de8e48d7b7ad982a200cd2df1d32f8b2bbe126bbabd390c", 0xe4}, {&(0x7f0000000780)="c7174777e13d2a16e0cb48830c52cda43a92c7aaad76e6c897c756d837c8bf822a3e27d4f2b7792911a3", 0x2a}, {&(0x7f00000007c0)="44ff73d6c71abcc1e53120bf7c781a597d29acc9aa70bed55faea1789e1903860b2376aeb2861bc431888fbb7856c22f2dcfc0fa1b7c08bee28cdfaa50cb82161e54897f741a7140df6aa0a18aed0d9f7848dee79611a135a10dfdbd76f3569a828c1c", 0x63}, {&(0x7f0000000840)="52060edac4a286b809ef3c6c672096aca4fb3695254974215b707268e5cb5439a07b98337897243563ed3b869a33462bb002585968afc493d7a5f90aeb5614388f1d963ca8e3c16b5fdfe39d50f245e4a5d1b8724266c3e625b8741f465a09afb5df508a5114336252445d9fee6c1677f25f19e07dc841b4add320701b18dda7fa52191f00ca75409b89b069e8766cd93eacb043a8082b1fc91a084369e39c8dc515fde7145610b48aaa0d31ee31a14fddee2494f99f057410c077d5be08b9f6c4794710c1e3b74c374da0bd56a450950e7cd002a4a9832083a8650c8684b5aecfe7adfe70f113c99be8858b04853c6b86c2624754eac2af51", 0xf9}], 0x9, &(0x7f0000004200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100}}}, @ip_retopts={{0x44, 0x0, 0x7, {[@generic={0x83, 0x10, "8000"/14}, @timestamp={0x44, 0x24, 0xc2, 0x0, 0x0, [0x5, 0x80000000, 0x9, 0x6, 0x8, 0x200, 0x1, 0x6]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @rand_addr=0x64010100, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @broadcast, @multicast2}}}], 0x138}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000b40)="7985b15dac95715e62720c6a538ab9d5ed0fed9afee7183911ef3b960696f474cd024cad3f1d4dcf6e84dd74bd2cb368f59bffc36c0c7334a65ded2cce5815c5eb975b7d48ed7ed5c66ccfb872fb7a131e324f695bc2f58ac5cae7433bfcd67c7174722abe1ae99e87ba7fedd0b64992a6a0fa5f68fe31e6485d21a5dc6085cc729c7f070d0b91459277e9f374666044157c4ed2233dd1475c4a11812159c238e41bdc9e47854af35f33ec98f1ea13b37645a8b67edea5d68b6f96e3982f59c0deeff409a931be42ddc147bb3d4a9eb661d79017fc83758df2a61eb2ca176abc8bab884e9a26", 0xe6}, {&(0x7f0000004340)="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", 0x1000}, {&(0x7f0000000c40)="0b078b17688699420e041d3eb18d5ac16d", 0x11}, {&(0x7f0000000c80)="ff082fadd810438e6ea52e1ecad7eb9ea154278ce1a4d01ba4031a4a0fc0df65b392f993579ce67f9a3630e58ad1456b0dca1e8cbe04537829ed0fb1fd8c26f8bd02cdc9c3dd20545dc6e1f34e9e6376460808cd06e71aa6e4cf8130273c748e74d89ced4c3565af3de92ab74dd2ed5d0741e85a2499af651d8899029dba6ccc7678c2cf453d4784243ae298", 0x8c}, {&(0x7f0000000d40)="8dc0b187394a283ad667d873f08e0add6b9d0141b583622438", 0x19}, {&(0x7f0000000d80)="508d", 0x2}, {&(0x7f0000003200)="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", 0x1000}, {&(0x7f0000000dc0)="f1304b24681ab351d822e05fd218dd96e3a67fc81814258717d2322415114d3b0b3530d9c713c64c96c84ccdae412a132ee0adbb0c21556492035ae549d65f27904603e7a98c0732e47f0e7e34f80bed6027b32ed682069c4afebbf79907cd8215fb61ed7043f5339f8a18cedcda96d5f39dacaf7cedc56cdb935e60224c62c0181bf37322b709ba6bafc06d9b50297c24db3b0f09bc8c26e5e8f2b6e2cefdd1f8c9bdf202b7a160a5a780ce2552a62ff384d8c75a636b78281eda30f420fab034a7f0a7e14a04", 0xc7}, {&(0x7f0000000ec0)="a86d8711e7da975b66b8011acd125907221d794dea24a98d1f092c3f8127a68345cf2ec9f1e4d3181b1ecbc2b5c6606282844b34114fe7d51ce30bd6423320", 0x3f}], 0x9}}], 0x4, 0x4008000) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000000)) ioctl$BLKRRPART(r0, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 22.86061408s ago: executing program 7 (id=2039): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001d002100000000000000000007"], 0x34}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c010000100013070000000000000000ac1e0101000000000011c60d4f9b203f238000000000000000000000000000bb00000000020000000000000032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000004d532000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000110000"], 0x13c}}, 0x0) listen(r2, 0xfffffff2) bind$bt_l2cap(r0, &(0x7f00000021c0)={0x1f, 0x0, @none, 0xffff, 0x2}, 0xe) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r5, 0xa0e4f000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 22.629450764s ago: executing program 7 (id=2045): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x64, 0x0, 0x0, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000180)={'xfrm0\x00', @random="9b6be7bcb31f"}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x40, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) (async) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xa05084, 0x0) umount2(&(0x7f0000000200)='./file0/file0\x00', 0xb) (async) umount2(&(0x7f0000000200)='./file0/file0\x00', 0xb) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x0, &(0x7f0000002c40)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x6}, @fda={0x66646185, 0x2, 0x0, 0x10}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1002, 0x37}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x0, &(0x7f0000002c40)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x6}, @fda={0x66646185, 0x2, 0x0, 0x10}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1002, 0x37}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 22.510415137s ago: executing program 7 (id=2046): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) socket(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0xa6001, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000000140)={'bond_slave_1\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r5, 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f00"], 0x18) r8 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r9, 0x29, 0x1c, 0x0, 0x14) syz_usb_disconnect(r8) r10 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_ep_write$ath9k_ep1(r10, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) close_range(r0, 0xffffffffffffffff, 0x0) 22.507767127s ago: executing program 7 (id=2047): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x20042, 0x0) io_setup(0x7ff, &(0x7f0000000100)=0x0) r2 = eventfd2(0x8, 0x0) io_submit(r1, 0x1, &(0x7f0000004500)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x1, r2, 0x0}]) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) write$eventfd(r2, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) read(r2, &(0x7f0000000180)=""/78, 0xfffffeab) close_range(r0, 0xffffffffffffffff, 0x0) 22.397865769s ago: executing program 36 (id=2047): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x20042, 0x0) io_setup(0x7ff, &(0x7f0000000100)=0x0) r2 = eventfd2(0x8, 0x0) io_submit(r1, 0x1, &(0x7f0000004500)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x1, r2, 0x0}]) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) write$eventfd(r2, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) read(r2, &(0x7f0000000180)=""/78, 0xfffffeab) close_range(r0, 0xffffffffffffffff, 0x0) 2.172648729s ago: executing program 6 (id=2488): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x51, 0x0, &(0x7f0000000400)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e7094"}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) r2 = getpid() r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @multicast1}, &(0x7f0000000300)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', r4, 0x29, 0x1, 0x7, 0x6, 0x4e, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x7, 0x8, 0x2}}) r5 = syz_pidfd_open(r2, 0x0) r6 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x8001a0ffffffff]}, 0x8) ioctl$int_in(r7, 0x5452, &(0x7f0000000080)=0xffffffffffffffff) fcntl$setsig(r7, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r8, 0x1000}], 0x1, 0x0, 0x0, 0x0) dup2(r7, r8) fcntl$setown(r8, 0x8, r6) tkill(r6, 0x13) setns(r5, 0x24020000) r9 = syz_open_procfs(0x0, &(0x7f0000002e00)='setgroups\x00') write$eventfd(r9, 0x0, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r0, 0xc0389424, &(0x7f00000001c0)={0x6a9e, 0x30, '\x00', 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r10 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_pidfd_open(r10, 0x0) setns(r11, 0x10000000) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 1.378037343s ago: executing program 6 (id=2497): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xfffffffd) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f00000000c0)={0x18, 0x1, 0x5}) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f000063c000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x79, &(0x7f00000003c0)=[@flags={0x3, 0x4}], 0x1) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000140)={0xe200000000000000, 0x3000, 0xfffffffffffffffd, 0x2, 0x2}) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = syz_open_dev$evdev(&(0x7f0000001f80), 0x34, 0x181002) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x10002, 0x3, 0x2, 0x2000, &(0x7f0000279000/0x2000)=nil}) write$evdev(r5, &(0x7f0000000380)=[{{0x0, 0x2710}, 0x14, 0x4, 0xdeda}], 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)={0x60000016}) epoll_pwait(r8, &(0x7f00000000c0)=[{}], 0x1, 0xfff, 0x0, 0x0) close(r6) sendmsg$inet(0xffffffffffffffff, 0x0, 0x8c0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='aufs\x00', 0x80444, 0x0) r9 = socket(0x23, 0x5, 0x0) recvfrom$unix(r9, 0x0, 0x0, 0x101, 0x0, 0x0) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 957.984972ms ago: executing program 3 (id=2509): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0x7706, 0x2) 811.242205ms ago: executing program 6 (id=2511): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000800001f000006060400180000008cdb25", 0x39}], 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x46}) ioctl$UI_DEV_CREATE(r2, 0x5501) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0x0, 0x2, 0x0, {0x0, 0x4000000, 0x0, 0x100, 0x0, 0x0, 0x8000000, 0x8000, 0x200, 0x8000, 0x0, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r3) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) ioctl$TIOCSISO7816(r6, 0xc0285443, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="a90303000000000000003200000008004001"], 0x1c}}, 0x4004050) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="1417919b", @ANYRES16=r8, @ANYBLOB="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"], 0x1714}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) close_range(r1, 0xffffffffffffffff, 0x0) 480.445451ms ago: executing program 5 (id=2515): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) (async) r5 = syz_clone(0xa00200, 0x0, 0xfffffffffffffef2, 0x0, 0x0, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, 0x0, 0x0) syz_open_procfs(0x0, 0x0) (async) syz_open_procfs(r5, 0x0) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1000, 0x5, 0x1}, 0x20) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) (async) recvmmsg(r8, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) (async) sendmsg$AUDIT_USER_TTY(r8, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)={0xac, 0x464, 0x300, 0x70bd2a, 0x25dfdbff, "f10daa0b64e8798647c06c9574a0018ed626808cceeb9f5c26a828b86677c5eba53c3898334a2472dc795e4bdb7aa2429c6df46084bcd609078c6862bccd3fccff1736a5762415fb68a79926f5b0f27e5c68bb5a92591d87b6c8511f36abfad9ff38d3c0bc36689937b3fd12a9f10a3c20c40541b3339e0d26210cc9d13627fcec3e0c85bbbbbefd99a706248364ac62bfdd77275f7a76ae9391", ["", "", ""]}, 0xac}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) syz_kvm_setup_cpu$x86(r3, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000001c0)={{0xeeee0000, 0xdddd0000, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0x5000, 0x2, 0x3, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0xa, 0x7, 0x4, 0x1, 0xc, 0x0, 0x2, 0x5}, {0x7f778000, 0x2000, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0x9, 0x6, 0x5, 0x4, 0x9, 0x4b}, {0x2, 0xd000, 0x0, 0x48, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0x9d, 0x3, 0x6, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0x2, 0x9, 0x54, 0xc, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x2, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f00000003c0)=ANY=[@ANYBLOB="4000000000800a00300800"]) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) (async) fsmount(0xffffffffffffffff, 0x0, 0x70) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) (async) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) (async) socket$nl_generic(0x10, 0x3, 0x10) 479.302251ms ago: executing program 5 (id=2516): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x11) ioctl$TCFLSH(r3, 0x8924, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = epoll_create(0x9) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x1, 0x0, 0xd6c6, 0x7}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x1, 0xe, 0x2}, 0x14) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x303}, "5ac5a9c5f0617295", "01ea8b275be257b91fca01d113de6db0", "33915b02", "b3f5d686491c5629"}, 0x28) close_range(r0, 0xffffffffffffffff, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r1, &(0x7f0000000080), 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) fcntl$dupfd(r1, 0x0, r1) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x11) (async) ioctl$TCFLSH(r3, 0x8924, 0x0) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) epoll_create(0x9) (async) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x1, 0x0, 0xd6c6, 0x7}) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0x0, 0x1, 0xe, 0x2}, 0x14) (async) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x303}, "5ac5a9c5f0617295", "01ea8b275be257b91fca01d113de6db0", "33915b02", "b3f5d686491c5629"}, 0x28) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 444.138132ms ago: executing program 5 (id=2517): r0 = fsmount(0xffffffffffffffff, 0x1, 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0xa5) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0xee01, &(0x7f0000000040)={0xffffffff, 0x9, 0x0, 0x1}) faccessat(r0, &(0x7f0000000080)='./file0\x00', 0x1) getpeername(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000140)=0x80) timer_create(0x0, &(0x7f0000000280)={0x0, 0x36, 0x4, @thr={&(0x7f0000000180)="a008d49254b8b02e5b4663838319d13f28d4a43c250bf62c6ff71104c735519796afba13b4dc8a8794f1e626cbcd0bd62671db18ae87ca98fb8b45aca2c3195b51ff4b76a37c0e5123d00dec1e2363e10f59567f7bdd7efb53020a6aa5e8a6b741eb99b39a0e4c6886999f4a2bd6d439f13eae3683d927f57875451cfd43cd6c7f4bcca3ae108593e7c4a6e77eb7e2eede778641e01b848ae0f44f0aabe0bd4e19887365", &(0x7f0000000240)="ab59"}}, &(0x7f00000002c0)=0x0) timer_settime(r2, 0x0, &(0x7f0000000300), &(0x7f0000000340)) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48001}, 0x20040000) close_range(r0, r0, 0x0) recvfrom$inet6(r0, &(0x7f0000000500)=""/47, 0x2f, 0x2, &(0x7f0000000540)={0xa, 0x4e23, 0x5, @mcast1, 0x101}, 0x1c) timer_getoverrun(r2) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000580), 0x8000, 0x0) ioctl$BLKCRYPTOGENERATEKEY(r5, 0xc030128a, &(0x7f0000000640)={&(0x7f00000005c0)=""/72, 0x48}) socket$inet6(0xa, 0x1, 0xb55) fstatfs(r0, &(0x7f0000000680)=""/255) read$watch_queue(r0, &(0x7f0000000780)=""/250, 0xfa) r6 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) readv(r6, &(0x7f0000000940)=[{&(0x7f00000008c0)=""/28, 0x1c}, {&(0x7f0000000900)=""/6, 0x6}], 0x2) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000ac0)={&(0x7f0000000980), 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x9c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'dummy0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bond\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20008891}, 0x4000) syz_genetlink_get_family_id$team(&(0x7f0000000b00), r3) rename(&(0x7f0000000b40)='.\x00', &(0x7f0000000b80)='./file0\x00') r7 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x41, &(0x7f0000000bc0)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000e80)={'\x00', 0x6, 0x401, 0x1, 0x9, 0xa8, 0xffffffffffffffff}) stat(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = gettid() read$FUSE(r0, &(0x7f0000000fc0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(r5, &(0x7f0000004e80)=[{{&(0x7f0000000c40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000cc0)="cd6f7e80af7d82fb745acb816247a6eb", 0x10}, {&(0x7f0000000d00)="9e88667c8f02eb9e1f9300089d1c6ac63089b306417996adfdd3f093d7215a9fbd9e942471b52b6d9887918a15e3dba27710fcc9134c56248e3fe0c7f97b044d451c6749fbb500478d3afbaf15b267d1eed579d4a197b72f430d94ad6c9097885f0852b756be25f5331c0c317205929c88b3b7f2634d985f63bf08229d113cddfb0fa4192d9c617566fdb3c4eab29712e338eee4f4a22f8790a01b34824ba62a91455f48dda10414e083805ceaa4067acc545b5329e3e8019a31d9103c8b4e4fc07f924bf3eca932c28561e4a292c7", 0xcf}, {&(0x7f0000000e00)="b20987438eb81cad0d9d7b0f7ab6", 0xe}], 0x3, &(0x7f0000003000)=[@cred={{0x1c, 0x1, 0x2, {r8, 0xee01, r9}}}, @rights={{0x1c, 0x1, 0x1, [r1, r1, r5]}}, @cred={{0x1c, 0x1, 0x2, {r10, r11, 0xee01}}}], 0x60, 0x240488c1}}, {{&(0x7f0000003080)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000003200)=[{&(0x7f0000003100)="8ced0b11fc7ef10b384856bb009d2aafaa7e7ea254db7b40691a9affe28cd6e3ed4650c2c1d655dc459cbe4486eb800738cad34980b08039791b1e5b6be75f6cb92abcb637700eacb7a1649cfc037657aa9b36e0247fa31d82df6c587914e7dc1dc0d47c17a1c47cde65059d8e9743f9aa8261f8bde396096ef4fadbec3f48e94f2efd53b0c76c24d9dd5e5e3cbec8c164585db31253906e2f73e46a3d6716cfc697f012e7d2573ab3551120bf0421e27ddc8f83013f5b06fe16eebbf4cae818f451aec1c8689a79fd1bfc137e0374e7e5557577b6f3a2dbd6b3bb5ecc1c29dfeb57009628d012c6dea861b09fb1ca7f4999", 0xf2}], 0x1, 0x0, 0x0, 0x81}}, {{&(0x7f0000003240)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000003600)=[{&(0x7f00000032c0)="3aa4715f3df92ed65a9299fbaccec9d81be018bad82f0453cd3112c6c4c4c8e2e9804a52767011c7e7646e1831df4f156cd85d6133009663c025d5373cbabfe20ea5b7d1a1e7bdf42cb3ebbc8308a39d87df12e7040501247234a53f2399e5a4036235334fd119597580533235fcbb3545975653c3fa5b0c0d8a8245a627bd28164e0a11f0aa8822f3deafd7e19778ed266a246e83604f1754d10928fc1110ebd39446c21092af9ecc578c4d5395e781c5061ed4f35be10dac53345bc774f3ea1e22941e0e670aebd9392dc3e4d1d13e9c47a4dd7c2b5ce32084ec366731cd129fb359627bcabb94a23548ce27659536", 0xf0}, {&(0x7f00000033c0)="deb4962f422369f1c9c00e5431dca9fb55446dcb07db86a1a1dc5e9006829e066c6ef83a8755319f119d09185eb95eb7e3e96cde4e218f26183bbd2edf7befc91785d83d2083788a77fc5cfa128e0a2203ffc0f6417c", 0x56}, {&(0x7f0000003440)="29c9a7cbf40a23a9dcda3013af2c50156b2d872240dcba8e276e209c2455c07b2210e03567c5388a10946dd79dfc6bd4396dc78f7ec647d68c3c157a687872e1b15f517ade4dbf18bea74cecbeefe1262f8c32afcd4be9c88b0640bb6fcde5f10419d1e468eb360a3eeef8b53c5beecf46fe18487a82e9b5de624fdce999927d4416a3f0", 0x84}, {&(0x7f0000003500)="0042e844684a15f7f585492a2ff2ae9a354bac9f414e5deb02052ec9bd248785b19c2e20cdb5613a69b1a44125b9ef83b1e4b3ad1efe1734d9e2b46002f2a51296cf4289c71b5a891588c1b4067d3992a94844abf5e6224ec9f1896019f4e12fc9a9c7153fffc141f198855730ad4537207967a79ac7c968bad397ded4fbfddc89b6cfbff07e32b8a8eb0eb9e26f656a61a30ab18ba64828fde33505a302589693bd2cc1edce361b843febf2cab5b117affb225c543b0c149db389833367dc287bd7239fd59f3dafaf9b7142601f961e61007b9b799fa9ab642fd229ba8fe032eecd8d2bb2ef140c09", 0xe9}], 0x4, 0x0, 0x0, 0x48000}}, {{&(0x7f0000003640)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004940)=[{&(0x7f00000036c0)="023eb93f47e0d9abcb0a3747faecd98cfd36509a171d1e959ac3f3125786e81316199d526b4995434ccded2541af8eff9826072bd8c4760dc5c15a713373fb4ed59f7f2486c420fdd92e6201481d6ee75a00504d22160ed4a428cc7ad258b6fabe9b00cc4e43aa94655bb775478f68572ebc44730323ecb7a8a9ca03b89229c827c8ba7ef75321f681d69b761fd395067b143b8176d2d959dd9207bc455ac606fc93bf02", 0xa4}, {&(0x7f0000003780)="ff9b7be37df54e57416dca6eb97fc89d883842e0cdc68411faae9c123e8ae0283ccd641ccd2cc2d978433d366b4240fb3b308f4ba6f0bf1792b6f46a96496f5a5cee2a4f07af8f2f196b1f259b8027301a492fe569a163c6919491b12427a662e9c4b4d7d4da4c9098f67c1d06ff609f80f8b7c92628201c65bfac049c83df", 0x7f}, {&(0x7f0000003800)="5632c0f8488b02e5fb8188887588843b0109481311f58d17e0a089158da2d95ca2aaf304b0b812f1c6dc4e0d87060842427877f83ea2b71189f3ffe85762ba73e6762a65d55ee4c47bc0875100e0d8b5331119afb1400d99537534f6b5089f64c7a7e2389274de292abb60908d22637f49f2f500355c56ba82927513201a1e05d3782a0b0e4b50671688a13184e54714db7aa5bee7e6dc989e77b3f0a042042fd20aa9358057a8d882970f1a1396f7fcbee34e86d4aee83226ad9cd5a4e306edbb3594cfeea34c985af6c32ddd2d871edbf8852334", 0xd5}, {&(0x7f0000003900)="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", 0x1000}, {&(0x7f0000004900)="6568d907d405d2", 0x7}], 0x5, &(0x7f0000004e00)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}], 0x60, 0x4}}], 0x4, 0x22000000) 443.739032ms ago: executing program 5 (id=2518): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r0, 0x800, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004c810}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x40000071, 0x0, 0xffffffffffffff00}]}) 442.858931ms ago: executing program 5 (id=2519): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0x10, 0x3, 0x0) fadvise64(0xffffffffffffffff, 0x8, 0x2, 0x5) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24) write(r2, &(0x7f0000000100)="240000001a007f0214f9f407000904f702000000000000000002000008000f40fe00000e31", 0x25) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000280)=ANY=[@ANYBLOB="08406dab6623"]) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) readv(r4, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 398.613962ms ago: executing program 8 (id=2520): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x42145) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) cachestat(r0, &(0x7f0000000000)={0xfffffffffffffff8, 0x1}, &(0x7f0000000040), 0x0) write$binfmt_register(r1, &(0x7f0000000080)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x10, 0x3a, 'cgroup.max.descendants\x00', 0x3a, 'cgroup.max.descendants\x00', 0x3a, './file0', 0x3a, [0x46, 0x4f, 0x4f, 0x43, 0x4f, 0x1f]}, 0x5b) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x6fd5239, 0x0, 0x0, 0xb, 0x0, "fee8a2ab78fc979fd1e00d96072000001ea89de2c100000000000000025d96000100000000000000000000000000000800000000000000efffffffffffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x3, 0x9]}}) r2 = socket$inet6(0xa, 0x80001, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @mcast2, 0x3ff}, 0x1c) arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x6) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x12, 0x1, 0x4, "6a4a42aba98b2f07359d3272d6e8ce294686c732c24a39cc509c79ad4bf6de70b02c91ffbe04916d065f1681d04be078c2e4c1014ec966a8158d76d7aa63c0d9", "ce5862f532d5bff5ff013807abc3406dfe731e87f50cd5bb091fff519936869fd5295ddc045503fe0b01150b5b5ebf1561daa3dc633d717f3f7a3d1f1edac2f2", "c0c045fd3dfd710ca2562c2d8e828bb61dea84761cff87e28f9c8a246fa4f376", [0x8, 0xa]}) 398.069263ms ago: executing program 5 (id=2521): fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)={'U-', 0x80000001}, 0x16, 0x1) r0 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000bff000/0x400000)=nil) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x2000000, &(0x7f0000000140)=')[\'{\x00') ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000180)={0x2, 0x0, [{0xbda, 0x0, 0x5}, {0x0, 0x0, 0x8000000000000001}]}) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/160) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f00000002c0)=0xc) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000300)={0x1, 0x8, 0x4, 0x940b, 0x7df}) ioctl$TIOCCBRK(r0, 0x5428) exit(0x80000000) r1 = creat(&(0x7f0000000340)='./file0\x00', 0x90) r2 = fsmount(r1, 0x1, 0x78) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x3f7, 0x0, 0x70bd29, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8840}, 0x80) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000480)={0x1, 0x1, 0x2, 0x0, 0x9}) r3 = signalfd4(r0, &(0x7f00000004c0)={[0xa]}, 0x8, 0x80800) r4 = geteuid() lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000500)='./file0\x00', r4, r5) write(r1, &(0x7f0000000600)="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", 0xfb) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000700), 0x10802, 0x0) ioctl$TIOCGWINSZ(r6, 0x5413, &(0x7f0000000740)) ioctl$TIOCCONS(r6, 0x541d) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)) ppoll(&(0x7f0000000840)=[{r2, 0xc1}, {r3, 0xc4c0}, {r0, 0x8320}, {r6, 0x180}], 0x4, &(0x7f0000000880), &(0x7f00000008c0)={[0xfe]}, 0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x4100, 0x0) ioctl$TIOCNOTTY(r3, 0x5422) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000940)) ioctl$TIOCMGET(r1, 0x5415, &(0x7f0000000980)) syz_genetlink_get_family_id$l2tp(&(0x7f00000009c0), r0) 395.573153ms ago: executing program 8 (id=2522): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0xbf}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0xe5441000) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e22, 0xff, @mcast1, 0xe3}, {0xa, 0x4e22, 0x9, @private0, 0x7}, 0x1, {[0x1, 0x7fffffff, 0x8, 0x9a, 0x1, 0x6, 0x7, 0x94c0]}}, 0x5c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x1, 0x1, 0x101, 0x0, 0x0, {0x5}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'sip-20000\x00'}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000044}, 0x40000) 393.205203ms ago: executing program 8 (id=2523): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc000000190001000000000000000000000000000010000000000000e016b37ed8d3b65f40000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000020000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa000000000400"/180], 0xfc}, 0x1, 0x0, 0x0, 0xc800}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f00000002c0)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000740)='bridge0\x00', 0x10) connect$inet(r1, &(0x7f0000000140)={0x2, 0xc000, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0), 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x917, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x20000080, &(0x7f0000000080)={0x11, 0xf6, r3, 0x1, 0x1, 0x6, @random="008500"}, 0x14) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) r6 = open(&(0x7f0000000180)='./file0\x00', 0x20000, 0x158) bind$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty, 0x5}, 0x1c) unshare(0x62040200) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x7f) 196.205967ms ago: executing program 6 (id=2524): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./file1/file0\x00', 0x100) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="28000000100001002bbd7000fbdb040000004f8004007180100348ad000000000000"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000006c0)="f3440fc7b729000000f20f5f0d00000080460f5ba4b07a000000470f38c9403736460fc7b10f240000660f3881078fa9189021da820001c0fef3440f0966b881000f00d8", 0x44}], 0xaaaabbc, 0x74, 0x0, 0x0) unshare(0x8040600) r4 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000002200)=0xc0100100) recvmmsg(0xffffffffffffffff, &(0x7f00000026c0)=[{{0x0, 0x0, 0x0}, 0xffffffc0}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000002680)}, 0x2}], 0x8, 0x100, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f000000a000/0x400000)=nil) r6 = syz_open_dev$evdev(&(0x7f0000000280), 0x1, 0x80000) ioctl(r6, 0x8000451c, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000001c40)=0x1) ioctl$PPPIOCGIDLE32(r7, 0x8008743f, &(0x7f0000000040)) syz_kvm_add_vcpu$x86(r5, &(0x7f0000000000)={0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14d05278e2f2716651000000000000000400000013010879460000000000000020000000000000000000000000000000090000000000000046000000000000002000000000002000000000000000000000000000000000001410000000000000180000004c3500000400000003000000"], 0x70}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000000c0)="650f78309a0f000000ad000f01d10f5abff5b65d6466baf80cb8aa82c380ef66bafc0c66ed0f015d05b805000000b9ba0000000f01d9b9800000c00f3235004000000f3065660fd6b93b6800009a00100000ed00", 0x54}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r8, &(0x7f0000003480)={0x2020}, 0x2020) 195.922266ms ago: executing program 6 (id=2525): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)=""/203, 0xcb) 195.551976ms ago: executing program 6 (id=2526): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) syz_io_uring_setup(0xed9, &(0x7f0000000280)={0x0, 0x0, 0x1000, 0x3, 0x36b}, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @empty, 0x65}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x26, 0x4, 0x8) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000180)="28c029fc57b029013d3db1898346c281", 0x10) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="200000005f000101000000000000000008004100", @ANYRES32=0x0, @ANYBLOB="040485721c000000cbb49425f1fb3a73e7f318ec17a86521b25d94f284f3b9846f5d2363b4180bc66e4e43d7ac02cd7c7ce4326a5501a08ee992c6b136171ceb27221f5c3131cf5eca74816458d5f4b4a8a0fdec708027e2a02b524481692d208ed1157ec1a885dd58c68bbfbe6f5c2e8296a2a634df09e9f93aa00ddaf2aa29ba0f0687dd6cffae7525bcb57446f0617a7a20"], 0x20}], 0x1}, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000300), &(0x7f0000000340)=0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x3}) r8 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000000)={r8}) ioctl$KVM_IRQFD(r7, 0x4020ae76, &(0x7f0000000100)={r8, 0xfffffff9, 0x1, r8}) close_range(r0, 0xffffffffffffffff, 0x0) 184.889497ms ago: executing program 8 (id=2527): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b0f, &(0x7f0000000000)={'wg1\x00'}) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{0x100, 0x75, 0xb, 0x3}, 'syz0\x00', 0x40}) 162.369177ms ago: executing program 8 (id=2528): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket(0x6, 0x5, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @empty, 0x2}, 0x1c) r2 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000100)) 120.227768ms ago: executing program 8 (id=2529): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x13, 0x0, 0x0}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000940)={@private2, 0x4, 0x0, 0x1, 0x9, 0x81, 0x8}, &(0x7f0000000980)=0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x400, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 119.538098ms ago: executing program 3 (id=2530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x2, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4812) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x1, 0x4, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xf9f2}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x800}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x2}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xa800000}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x14}, @NFULA_CFG_NLBUFSIZ={0x8}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x44040}, 0x48000) (async) pread64(0xffffffffffffffff, &(0x7f0000000240)=""/68, 0x44, 0x101) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, 0x1, 0x4, 0x801, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFULA_CFG_MODE={0xa, 0x2, {0x10001, 0x1}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x80000001}, @NFULA_CFG_MODE={0xa, 0x2, {0xb}}, @NFULA_CFG_NLBUFSIZ={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x91) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) (rerun: 32) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80808}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), r1) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000740)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x150, r4, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xdba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_BEARER={0x104, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x541}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x86c0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x101}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @private0, 0x6}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'batadv_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x2000c1e0) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x24, 0x1, 0x4, 0xa00, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3a54}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x24}}, 0x24000081) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x24, r2, 0x228, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x9a}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000a40)={'vxcan0\x00', 0x0}) sendto(r1, &(0x7f0000000980)="c57f88afbc89f3ea8c96fab92a8eee9d725c3339d1687f7e9ad4a27fe594dd5e3cb380c6cfcfc96bcb901534c5573fcee4f9a73d8d5b497ee2c4ea8644e1956b215a45bd85afaf728b10c8c82aaffee3106c04ef3b21a4cb016ea51ebaf3e0036c402328b58798ac55dc576dd7d0c2aaf3e8aaa17dcb5a4042b4e2d03e51e32d300e16575dc7b2a2b701898b6a0f42cba1314e7c9c26faf93b5d83c96d38", 0x9e, 0x20000004, &(0x7f0000000a80)=@can={0x1d, r5}, 0x80) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) stat(&(0x7f0000002440)='./file0\x00', &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000002500)={0x0, 0x0}) (async, rerun: 64) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000025c0)={{{@in=@loopback, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f00000026c0)=0xe8) (rerun: 64) sendmsg$netlink(r0, &(0x7f0000002a00)={&(0x7f0000000b80)=@kern={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002940)=[{&(0x7f0000000bc0)={0xd4, 0x2c, 0x318, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x14, 0xa6, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}}, @nested={0xad, 0x60, 0x0, 0x1, [@generic="4f0439634b9f039d80c2baa05c5049ed808cbedf5541430399413a335b3cef7ec80f2fb04c51bbcd4509433ef5f8fca9fb691f70e837951f50bc8509f327f8bcb20586416cbf70ad31c163b8104564df68ea917e4ca95bf09073c76349eaf1470f0334fe7ebc378876c4ec3b506e66fe54471d9f05d44279769c7ea17bcaddf0ae187807b7fd489d4554709706c53fae2648d3a6ecf001e4725d557dad", @nested={0x4, 0x14e}, @nested={0x4, 0xa8}, @nested={0x4, 0x88}]}]}, 0xd4}, {&(0x7f0000000cc0)={0x5bc, 0x1e, 0x20, 0x70bd2d, 0x25dfdbfb, "", [@generic="14cff299e04074f9d308fe299d3c4f96546e8092f23aba15a65563c65d600dd0ef9ea4f4992d7433a95b5957a9d3788b1092df06609819c52b835fddf0ff8c8d2cc6ca55f51a0db7ada20c808b8c35c587de139877e13dd8c75c2469fe64ef1927519a085cbd13f1d46b3a14fcfd097b40467dfacba8c1fe56b3d89267e09f40e6537311b31bf60ee6446b82ac73a91b90eeaaf68c21f1354a89df28fdf8010f48d37dd338b5c070c26bf0629fc668a094b34be8957eff097504b403475eac25000c7f3716e9cb65642fe51b98a6f6ca8c", @generic="b4a6434ff214eab4b7758fd4f6dbf54038f66518b0cda3495211fd4d1077b00c0b57c1f8743690c0e22d445286da3ab364ae1c5fcc8c2f2689724a027b7bb9a6e5ac443977260210c5006d8d699e86d85b64ef5e2f3cf539b1f391552e56807729ce1f9704295240cca1664381a12cdc31a3b4a1332455f5580d3c2477209398bfa619773e2453085aa3252cfde5088791755752ec6fa049c4a4ab924093a39ca6acc24c55200a3eb17dbfc41b9c96c7e84b357fddacf41c950122da73419063907b", @generic="32962650f17ced5986e6a69f878a11a533c075474db486193cfb758febbb47b12f2b600fd087cc59a4f8afc8fe699188c2ad0ff3d8d274894af7707e25ecff64e2ec1da30e6ae205dd9a3cc108ed60eff7e92c2d2d120e7571a5d330e60fdd1f67cbebe797666ee5163cf0bb329f949e602692a5548b99d03364b86f8747aa1499a739f558063b7bba65f2b16a73ac1c4c46d058db83aac966e836e2d5c8492985a0ef50eb10c0b2386a90940b44c87764273214469d7f6cdc45c0c00a39ab", @typed={0xc, 0x134, 0x0, 0x0, @u64=0x3d3}, @nested={0x152, 0x3c, 0x0, 0x1, [@generic="36fea9d1759a31e5883cca1adf6ca7af77b4122a08d056fba2f75f021160033d89e51c218e4ea13e96867d9e33d8c8ccb321b385b604cc6c1e5e88dd60526dca9cbfd93766dcd7b3445833a2dd8fb3eb", @nested={0x4, 0xad}, @nested={0x4, 0xf2}, @nested={0x4, 0xb8}, @nested={0x4, 0x89}, @generic="242e3d5be2f244de89f156d2480fc96ab14f38fa2130ffd26ebb3b159852636ef1517a8ca64f6a7aa23aedabdaf9b53fe0eb229267517c1998f4ba65c10600fd46e8b07a85bfa6212d47ed7916cccff3014e392037624476e75503b8ff0825095f5899245aa690a96fdc6a063706c9280c3b5b5accad119f211e6e1714824d14f0b238a2182257d35fb1aaba3b9d8ae8f13a27a3f0b15cb10be9b2e395faef4356796e897182d8d49a14a345855832e2f25946066e34d7562c971571fc1bd40dc4d8b2b4e9d4f4afd3df2f4cc20e13606385c9a7707b4fea04f5ef33afbe2af5a51ede6864a8", @nested={0x4, 0xbe}, @nested={0x4, 0x64}]}, @nested={0x1f8, 0x145, 0x0, 0x1, [@generic="c4e36baa446834d9b55697de68d3ca44390701736fd93b391b919f1ae0c8d0d84dc4d746625746c3c503d69dc0e9a08e3a518dc617584e4bce2870018d3d228654a95daa332e2a58f626eb2b93d7073d250ce0e2b8b68b67bc1e377352ffa886eaa119269aca5eebf26a57bf5f0031b6867e9fdf40bf811276d714319fc20a94ca8a635a52a5f0745c010900593aa828fbd340dc8ddad301fadadb5b41f0bd4fb12948bc2d038af4f9da66b64398dfd3c07ae824f2233bd1aa3a7028a9b08bcc8595ae4a0b1ab8fe514d3362cfb6fa5eded79df80dbd32d81ffa8cf8b81905e46296e226723c20ad", @typed={0x8, 0x45, 0x0, 0x0, @u32=0xfffffdbf}, @typed={0x100, 0x67, 0x0, 0x0, @binary="a93a421107f09f14de500e3b32ae08691e9f9bb58d09db369b76a7d4ecf3459bcdf387012e683fdf3952cd9992252b5b52ea5e7b8e0031474c5dd5617e21f260a7a678469ed84427ebf05fbe3d797e91575d67b4d918300a1cc95e0f6e1caa4d6a06c361de4f3745c1bbe49b82f47d948b1cd87798bac23a013b1e626078541f20aaa3a5dd28914b38b6c4fa8b906357988da0eee2c1b022868296a1129f0fcf8e280d22313d20d12945c008b1326ec68c5c24185381f760b2744ad9f881b24dfe5f972c76e782c8cacff9e49917fb5efcccf0a06a708b352f68a418197527e0fff75a7c10ace8aac302b7c8f791d26ac8b58e3760b73cdb3a122e67"}, @nested={0x4, 0x1e}]}]}, 0x5bc}, {&(0x7f0000001280)={0x28, 0x40, 0x1, 0x70bd2c, 0x25dfdbff, "", [@typed={0x8, 0x102, 0x0, 0x0, @u32=0x6}, @nested={0x10, 0xc1, 0x0, 0x1, [@nested={0x4, 0x115}, @typed={0x8, 0xa3, 0x0, 0x0, @pid=0xffffffffffffffff}]}]}, 0x28}, {&(0x7f00000012c0)={0x1178, 0x18, 0x200, 0x70bd29, 0x25dfdbff, "", [@generic="7aabdb907570ef278fad6e6b78cc16dfb6cf6dbe0b6e5736c39282f184c6da0d548829c3a7a282f457c65af5e52b59a590207aaf306221d8cc3924784f8e7013e0f79169fac979d7c271ce11d56e40a88744d25f998347f36aa14e7029f2aa6bc9c5de58637858f50201b400f235586ceed86813b4e110b4bed5f5bcae699e17fbd4bb0dd3a94f98586e13e49d8c1bf8ec5372d8fa3579d68aae7fbfd43b2a5dab9a4a469c57f8f54e7f9ba6c364ce1ec172cb1ff4fcbdaa1d5a5aeeda06536c76045211b569c0fcec3c2116c566b505c53da8c6925b882055c1e22dc6e9eb67690d08e40fe7f13251dd8660e6a0c827ee1d7b7c35ee59567d5a7710a450bc40d86952e4349acd9e25a9bf39c970dc7f7dc609b0f1f492e2873754e6b217a45a07a1bfcd7d49e7d6c71befeaa55ddf0b17715188d315bf2d41c2cc1d57c37b90ea52db5e4bb2579e6d5755fdefe748324de132b0cb5b42cef7e31c72b7b397d1f4c0fb97592514ab4b022eef5e0bb35a8d504774fa751768c4902ac1232472793d171e281b66137f7a4b3219d502ea9577ae4805e7cb2a02e656cdab1014749dc1b6226cbd934d7535877b70603eabb593db02ef5fb6cd1fd64e77f622d310b6c8857583e7eb8d8f15e60fe9263abd8f47b117807829cf0ad5fe2f74c194a958ecd1b248911eda1ce71644cf24c1c4cfb651cc893f0c29b39b1f81efa20ba921ed2aafe156b9997791bf4648000927c308c830af8c3a6770b4970e17243e573c9deaca0279594daa8a73eb36e1796cd412dd757511a731a5bc8d4c02a8f116600febd353eee4f74bb1ca65ee7258bcab9001ece406be7cae7348a638da3d1dc2de2871a821bb82d27c654f953fcd924da0627e0605b15bd83dcdf4b2b5391908e2b613ee177d696f2e1f850fed7cc90299b8c64e8b3d3edfb89fc381a74515ca8d091743ce60a2ed73b568a31951bcfce19415bcf00487b71684f8a4620aa9747a72336567b8abcf218b4e692b7b3fff8f30982a64f89f4c650aa3be52c451b96403beea29c8c22778e9e3cc00dc8d95ab5faaad7e0af465cb66d5180a4e1f7069019869e13802783337c54453712a6a94b949a3dd1464b7d2ebae204f54769ec75ad9e5194c3753add6add37dda431d7a45b15c5d0179a36c6da0b21fcde0d6e11bc1845d02d9838343ed32a37018047e8b680842483b75a629da0a3e2e999514e3e5207ed35ca157338270a8b6bc9b89e8d9639db39e0a09d04c01ace42899ee6030fb4fed8723f32db89a1095443079333fe703d7aaab31fa3dddd2680db45575161201e2dcab370e9db369ef7862acc0bae29e102e9ad08f282057b022b1bcdd2b6fe105afd2ba457357b0166536c4c1e72dda7f2070604b4c728e9ef47d16ae59b49077771997972378c03d5ac967ac08a5b554caa87e4694f3e0747a4e4ccdcb6740cb7f29ec46d63556b604b34b6bf0f71fae58d8c6aa2de8176427f3ef0a3c318e6ba4799de1d5d45a0ce4be4fdfdb520fe8570c52dc4a6f68263230ee2d8d427b381e60b9b03dc574e49c9728aea4019186b674a20432903e4c92062f2d6cbec2dbc0cc34ec72db1466f1a15d4492715be6441138654aa6ae00f2598654ea52bceb5d297df5062e7a19b83b7664d641a3819244b03f2f618b26f6531c4c872dccfb235c7597e9b0368f139eb5415a1dd07e9050f4de4777f087b2568b1e68db9e21e2aa001f2467eee9fec3133be330203dddeca0aff72990c91e48edd8b0feab44ef4f8fe65b39ef58a08e35ddfde5f1cf5730b95b19cbbdd507e7d37eefd70658413e5ee7e9ae449d715ce2618abc6cc88396aee4eb3940ff2b7f257fd158b0ca7d7a63151459645763b7248834a1292db80984419f2799acc548c10ec9041bd110d0f635a94b4bf5bbdd8f99da0b4c6f9deac78ec8481493540698c117853a93ffe9ab6848860168b726c078d04ad3279392b8e20cc12f8a04b9fc372aabbd9239f1e8e639c780f21d6c9e37b14853368eca961ea725fb5bef9a5738e933447c0416879e72d2d2a42b74df8455c9760770c98550a228decf2427819a62d9f02d1fe883764ef02dac223c3e6481068e3c2bec7b4c21d14b1683ed244436331da760d119594908bed4f9987c2cbfb3d655ef214acdc32da2fc0df6044cefffc8cd7b8f3f560e83ba3538b3a78d618ee734f211cd8607405f674f2d390ed16bc11b9b3ddb213c9b50a536ef400cadabd7d03bddc5b087a3f758d47a667e3cc519a1474fa1a7b95f64f3762cf4c9b37f58e57a8f168a298ac0c54407ab5b011ad7cc998a309ec41ffe1847a07289b83633936cc594d95060eb295ca630fdaa5fb577a130738db767cd13495498d7893a94159f8bce3355a1eeb2230c9a2c792c807296487ad4e31b0998f21848fb3a7abafaf1a71aba2fb11f64ab5aa14b4318a536d4a5b5f72bb68ed071826c140cbebf353e584ece1cfdf02005a99029b63ef2ec65a9e1827a9cea0452fa51fb85dab5b0ec111149bad52fb52816e4035a8caff9b164b8337df9bdb59bc2375e69bf7d591e6f6d86cdff0a6d8cc3d11069ffafcadff331f2eef62a5d2b63681d3ef1a99e083bedd34bcc646eed23c8f00b58efc61fcac320ea76fb98e70a5763632e9471d101abbb7277356cda49abe4a0b9d79a23d97600386e283121276935176de35a63476f1cd8041f2a976c1f43e16801b10dd0dba832b4b74ee1802f659ed38d6d80257113b55014935c0a6262dca50ca5e595c1777fa197a990b2a57438c69b1d5c5dd7431df7af5e9e8bd96081750eb9e49d0f62413119d68b6cd37295173f38c88c87c2b85a41938a6db997c0ca50f826273f87959df00d8da4e042710a7480b7fcc789a775f7da9ea9333b2ec956b9c673af831c8c7a5b29079b3acdd0931fc236b45b5b5cc8e2dd1c5d9a375aec9d41a1e5bc76fbab2daacb285316f83cdbb75b3f52c43a0dae4a50a79f515c990970219536dc0aa05e076a5088a4e1addfe76a98874e8c73088eec5647632bfc0f001057ba3e2dad6d2082d60c7288eecaacf15f7e4197d5775e5b353aa1d9897e983e69abb728aa551ad879cdefb8393c8fd381624b290d8cc847fe6c2ab774d4bd22cd2b7319448ac051d415e1358a8634fc20ea023f67dbb13b0da78f0f9335a78dfc9b631c0ff6ff11159297b5087b7f787660c32c5a757dbb697dd14b8ee1693c193f2a856e8ae7234543d154dfef84f55b95288350131927d0596ef17c0ac831d1aaa4b10eeaf3e7a56db6e9c44861e02ede343bf125b5cb53df52730667c4782ddf11e92d3a6449316958f78f2bf68f6f02ba661cb1d63bf4de9108e4a18498ddbaeeae3e5fa89c4b2c79060d851b816b4f0b0bbfc874ec6daa1453db5f44a09d16800c420ecbc64bc007e0841a7e6e9725b9489b3a30f292400c2253cebddde44e746bf501dac778732c4a7791b98512b5771b979879e2c98525df7f590753f46bd947c1f59620ab629abe2846d569dd40a3a9861ed36b3574cfb9cfae5faafc58582a7089021b702514726af67d16a9d4a08246a7631e55f6fb9867154b5a21a9147a7b3cf6ac2007515eb90f06db50ce903e19ca94498622e8ddfac585456dda36bf2de1c5bf9b09200a0fd9689f75eea25410ac76cc4726e3c4a3a9e570436f0f4e117c91893de9f692accff34c3ae53a537db7a81ee0f133a9efb6533517059faa73a955b77d65e906899b9e4c21852fe689dd09dbd77af6d0bfd4f9ca0587dc8566e9cf10263b7ba8739d96f9fcf87249ee1f2b2961831af47ec6bc642b0d21657646055845a93848fd0a29fd30a88881193f518266c9d0c654e8b34ebceebf177a9e02c96b6e66d3be67c3a0da43f84c5050e2ed680e8d96ce29562d231b6e5016a6a1aa78a8fdbe847ba0bf293ef02ea2cfe5375612fe9ef00335e6c260fc4bd7607fdcec44af34d5f6e8cdbc6dd322074483f4184bbfc5337732d407c3e8d4c8d91b685f685773642ec1a5306f199e9adf1cd3662a19b33fb766653bd80ab14a0fbe8b5fdedceb3f22215cd0069c6ac48e38fa070f348473160b0d8c646ba8dd64dbee62b246139974abaeca3f89f0bd8dd12610eb57661052cd6ff7c6373dd07cc4ae498d63bb1820b528a83ac2cdab1cb423ef79ae820f3716c3d90de2a08353695c93ba7aa91f74562c66e5733d164d81f937d7b11dea82a307b71f56c7e0c2dc9dafdfcfde4c6f691e9ec8fa7fdfef8a70747fc24133020860b65b4f3b5b1b162dad6fef12b14c97ed52dd640a8a479833ea85ca518c4259840e9daae52f7d965dab825c762faa88479c397c93e45043496112242f8edd4adc3996b495179e642f56b209e70b09e00f14aa6c6ff39c4551dd2f212621c4d9befd889a8a289dfa8df97b9d83a9bcce0f39dc5a5059ad2e13815a7743008b7c4305e58117a6bb3b5902586dee947af15bdc1ca3857372ae61104a8f40d81eba188801ffb7d1834c6d3030f5663f79f2435e991a47ea47480cd52c520664fe91f897b889d3493da6f10ce50b5b51038450a913605f582c724a4ec7636a5f73aa6d31068fe7e76c04fe5f21dd3bb889cfc48ce705e0a4ea9eb317a5b08fb2453a6fa67a4d6068afffb1acef2735dfc9fb045929a43e5b874577b1c8636dd96db1c3fb7442db5090a0dedc22cec85bb640892c961ec42581fffd277c49b15ee3f944365b50f632e71aaeb7c8e5e396517d241f31e204e5f98bcc3de449d8106236042b83fb83159446bef9dbeda6a2c28402fceeb63c5a0dd5509ff7198d86dfa39070352732b1d98a1a58318f4d3ae85939b0d807885b2aaf53a4c11ea165c64ef91fc5f06b5f8edb0dc967bef36f99c3ea87a2a09a96ee57b29849e4351da5df2d1c684b6457a8d2a7eab1179229865a62ff33224d628138ad01416a7f715d1110b515bc3ec4331ad4fc95dafcde0b2174adbaf74d74b89315eab687ee8e86f8c68bc325d65c6998e8417b61c9b0676ee2a96848f97d1cd2ee2a5a71376df58dd5123cc92891c5e4d8312b7183e2309917a86fb15928d28ad8b68e40b84bfebdf7a8835eff86011eaeddf75a9520c801970c30da30e6bd578e2e790a19e69fb233806e6c3e20fb27393c2cf7fa25a85089e1908d86caaec73143c42c79e9fb46929fa6d4e6baf06b80d3fc6e48370f273fc9edc90b83f422ec2c7c601d2a84c592cf646d1e26bf590606aea92aaa46d663a48c34e307a4e0b83ceb8ee0b74858c172222cc837907c512d35cd8df2ebb5180a77b9a51285bc540262f5181ea5c95f47804bc9099dda3b066e2ffff963b9ed2c589a2fb072942a1f8cd5b21a9923aa76ac72c8d1c125c346e01cc76880ca5660a50b101da5756d159481c5c74260069b333c9137230edfd436b6c33bf14637e8739b2154030f329f9496d1f68c9eca1e385698c62cd0e9f993caf9411ac349dfad6303e925b536548d870cdb5a38a7125a9143e0e56e037e56aeeae2e2a30c5c24adc7c56572d801a09ad167d66b4cfd246bde176a8da454118d882f29847229be6afa67b9ed92fc1cadcd2b30545d9b1ae4fcf29da2d9b4125ff76fa7a9e4c3b2685218b28c97eb4f86ba8de14a01e6a00f4a774e63da942a9130a23b4a54af295f86d50ce11b4846c2546c967b264e31a96a7e9da0148591af2f0177df7a384e09a6f4b8f17ffc241095c5475cd8b31dc4fabe8c805d91dd7f444cdd83ab4c164608b62973bd0d2a153a6d47aee6bfac0a62b8ef4d601f2d26aa4c21a45f3abe819f136fd00f", @generic="27204c02fc4ca4b160546ed80cc7799175dc18014b851585cb505942bba08182587f3ae14f0d0484bf6c820df7b1b5563773493de2105a540e5fb3d4995eef8d1cdf6fb7b548264d3e8da93ea40473237c0100ed14bbaf7d93b0a143433394cad887ec202df587bef1fc8568ca8a56b1ce952dc8608e764acab94a2cd153bf2b459621db295330f0884e3fecc9c4e24aab63de6a2c917426d9f93f80a79ec0a37a2ce8ceeafb840f1977418db518b78ff96394d545", @typed={0x4, 0x40}, @typed={0xaa, 0xaf, 0x0, 0x0, @binary="4ebadc9cab0164e700cc9f9e44bd4920be378da49ff6cd78de7e99327aa1f2dab807252260b85d79511de875444fc2144544501681ebe085888a3ceeaad67e503eaf8ad93a2f54e7d462d2e998f7999d2cac0effc277f8f7dd578c761d889bbd49ead84a9142f51914a165e2f0228b337b1d7ad34fd9154dec8b326e92a9cf15b3c80e26a69f29e447a1429cdcdd399a451a099fcb0c4c124743c0818b3cd7fd8d0cf34b36ff"}]}, 0x1178}, {&(0x7f0000002580)={0x30, 0x38, 0x200, 0x70bd28, 0x25dfdbfe, "", [@typed={0x8, 0xfd, 0x0, 0x0, @uid=r7}, @typed={0x8, 0x63, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0x8, 0x2f, 0x0, 0x0, @pid=r8}, @typed={0x6, 0x4b, 0x0, 0x0, @str='ib'}]}, 0x30}, {&(0x7f0000002700)={0x22c, 0x1e, 0x10, 0x70bd26, 0x25dfdbfe, "", [@nested={0x21c, 0xd2, 0x0, 0x1, [@generic="a7fb8ee504f7e7b2ed4c19e192ee53472ad519e2788992aa0e8d3f00948000342ab2b0f7b632873050eeff7bcd91b2420f4fb1dec73f1e33899796ecfffb027eb2e8853cd3151022f344db449c101aa9a357ca1021320aeb5121d2de989d033c2cbe59550d46d59a43045f19f8", @generic="6d72ae49d6d666afe6350f2f19de84c0ad9ab41e897ddef0765e9b3f855f2c651c618cdbb5b36fe3e517ce9103df87ca16698305d0c0c4de517e68587bfc3b305ee0839319e9f21880e7aac2cd7af7d3cefd0b36743f5d87fffe52d046c4cfbcaa8d915ec4b906532f06c84e2bb79aaa179a8a557d4941c2f4d32f4676f51730667a77ae92b973e65cc62734437044551aaf8f4cf80dc6de6f5fa71a91cb02249a4d4949c1a1a2e817", @generic="80313310904a93506f1c288878876cbd99c7faa126056ab81dd9923f8dca3f1d6442d501052494f62fddc10a140e1f2028eea5d9fc032734c7ad4f3f77db183d1785a912424083761f21f581e349fe296b0fba8bd7e907442e57d7178f5d18017eda1a4634a0edccc3aa253fc433219b6188702d90c24d7d2caf247e195aa63d82223b0a9eb7a6a7e4547e7b30f75f1152846bc4a214f68ff81bf6c4baaa0a106e2db8f8886f4310bce7beccd4a0a1d572f5c8a2fad0a6195eae6c95d600f708bf07dcbe25084143e093e46fa32c590692b29b6f6344e35ef92ea4386c5a52a619dbc9a101", @typed={0x8, 0x1c, 0x0, 0x0, @uid=r9}, @generic="f76a9bf4c4471577a8a4862048", @nested={0x4, 0xf6}, @typed={0x4, 0x14d}]}]}, 0x22c}], 0x6, &(0x7f00000029c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r6, r6]}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x38, 0x20000000}, 0x80c4) (async) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000002a40)) sched_setscheduler(0x0, 0x1, &(0x7f0000002a80)=0x1) (async, rerun: 32) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000002ac0), 0x400000, 0x0) (rerun: 32) ioctl$SIOCSIFHWADDR(r10, 0x8924, &(0x7f0000002b00)={'tunl0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}) (async) r11 = accept4$inet6(0xffffffffffffffff, &(0x7f0000002b40)={0xa, 0x0, 0x0, @empty}, &(0x7f0000002b80)=0x1c, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000002bc0)={'wlan0\x00'}) (async) sched_getaffinity(r8, 0x8, &(0x7f0000002c00)) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r12, &(0x7f0000002d40)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002cc0)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48004}, 0x80) 64.342519ms ago: executing program 3 (id=2531): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000240)={'TPROXY\x00'}, &(0x7f0000000280)=0x1e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000300)=[@dead_binder_done, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/230, 0x0, 0x1, 0x32}, @flat=@weak_binder={0x77622a85, 0x10a}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000080)}, 0x40}], 0xfffffffffffffeeb, 0x0, 0x0}) 63.020709ms ago: executing program 3 (id=2532): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n [ 81.264925][ T2555] __dump_stack+0x21/0x30 [ 81.264962][ T2555] dump_stack_lvl+0x10c/0x190 [ 81.264992][ T2555] ? __cfi_dump_stack_lvl+0x10/0x10 [ 81.265021][ T2555] ? ___ratelimit+0x3f7/0x5a0 [ 81.265045][ T2555] dump_stack+0x19/0x20 [ 81.265073][ T2555] dump_header+0xd7/0x490 [ 81.265095][ T2555] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 81.265125][ T2555] oom_kill_process+0x4c0/0x7e0 [ 81.265159][ T2555] ? sched_clock_cpu+0x75/0x400 [ 81.265190][ T2555] out_of_memory+0x7ee/0xbd0 [ 81.265216][ T2555] ? __cfi_out_of_memory+0x10/0x10 [ 81.265240][ T2555] ? mutex_lock_killable+0x92/0x1c0 [ 81.265267][ T2555] ? __cfi_mutex_lock_killable+0x10/0x10 [ 81.265295][ T2555] mem_cgroup_out_of_memory+0x279/0x350 [ 81.265318][ T2555] ? drain_obj_stock+0xed0/0xed0 [ 81.265341][ T2555] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 81.265363][ T2555] try_charge_memcg+0x8f7/0xde0 [ 81.265392][ T2555] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 81.265425][ T2555] ? __cfi_try_charge_memcg+0x10/0x10 [ 81.265456][ T2555] ? __alloc_pages_noprof+0x31f/0x7b0 [ 81.265485][ T2555] __mem_cgroup_charge+0xf6/0x410 [ 81.265518][ T2555] ? filemap_get_entry+0x3fb/0x460 [ 81.265544][ T2555] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 81.265577][ T2555] ? _raw_spin_lock+0x8c/0x120 [ 81.265608][ T2555] filemap_add_folio+0x57/0x2d0 [ 81.265633][ T2555] __filemap_get_folio+0x597/0x9d0 [ 81.265661][ T2555] ? __vfs_getxattr+0xaf/0x450 [ 81.265691][ T2555] ? __cfi___filemap_get_folio+0x10/0x10 [ 81.265718][ T2555] ? inode_to_bdi+0x6d/0x100 [ 81.265748][ T2555] simple_write_begin+0x60/0x390 [ 81.265776][ T2555] generic_perform_write+0x32d/0x960 [ 81.265808][ T2555] ? __cfi_generic_perform_write+0x10/0x10 [ 81.265840][ T2555] ? generic_write_checks_count+0x429/0x540 [ 81.265867][ T2555] ? file_update_time+0xa3/0x220 [ 81.265898][ T2555] __generic_file_write_iter+0xcf/0x180 [ 81.265930][ T2555] generic_file_write_iter+0xb1/0x310 [ 81.265961][ T2555] ? __cfi_generic_file_write_iter+0x10/0x10 [ 81.265992][ T2555] __kernel_write_iter+0x395/0x830 [ 81.266013][ T2555] ? __cfi_generic_file_write_iter+0x10/0x10 [ 81.266045][ T2555] ? __cfi___kernel_write_iter+0x10/0x10 [ 81.266065][ T2555] ? get_dump_page+0x160/0x220 [ 81.266092][ T2555] ? __asan_memset+0x39/0x50 [ 81.266122][ T2555] ? iov_iter_bvec+0xc0/0x180 [ 81.266155][ T2555] dump_user_range+0xb06/0xdf0 [ 81.266178][ T2555] ? __cfi_dump_emit+0x10/0x10 [ 81.266211][ T2555] ? __cfi_dump_user_range+0x10/0x10 [ 81.266232][ T2555] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 81.266266][ T2555] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 81.266300][ T2555] elf_core_dump+0x2cd9/0x3810 [ 81.266330][ T2555] ? __cfi_elf_core_dump+0x10/0x10 [ 81.266363][ T2555] ? dump_interrupted+0xf0/0xf0 [ 81.266396][ T2555] ? filp_open+0x182/0x1d0 [ 81.266420][ T2555] ? 0xffffffffff600000 [ 81.266443][ T2555] do_coredump+0x1bfa/0x2bd0 [ 81.266479][ T2555] ? __cfi_do_coredump+0x10/0x10 [ 81.266509][ T2555] ? asm_exc_page_fault+0x2b/0x30 [ 81.266545][ T2555] ? __kasan_slab_free+0x6a/0x80 [ 81.266569][ T2555] ? kmem_cache_free+0x1c1/0x510 [ 81.266602][ T2555] ? get_signal+0xa75/0x14f0 [ 81.266630][ T2555] get_signal+0x11fd/0x14f0 [ 81.266660][ T2555] arch_do_signal_or_restart+0x96/0x720 [ 81.266692][ T2555] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 81.266743][ T2555] irqentry_exit_to_user_mode+0x4e/0xb0 [ 81.266772][ T2555] irqentry_exit+0x16/0x60 [ 81.266798][ T2555] exc_page_fault+0x66/0xc0 [ 81.266825][ T2555] asm_exc_page_fault+0x2b/0x30 [ 81.266851][ T2555] RIP: 0033:0x7fd89144f927 [ 81.266869][ T2555] Code: 88 15 d2 5d ea 00 88 05 cf 5d ea 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 81.266888][ T2555] RSP: 002b:00007fd8923cb120 EFLAGS: 00010202 [ 81.266914][ T2555] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fd89158ebe9 [ 81.266930][ T2555] RDX: 00007fd8923cb140 RSI: 00007fd8923cb270 RDI: 000000000000000b [ 81.266945][ T2555] RBP: 00007fd891611e19 R08: 0000000000000000 R09: 0000000000000000 [ 81.266958][ T2555] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 81.266977][ T2555] R13: 00007fd8917c6128 R14: 00007fd8917c6090 R15: 00007ffd007043a8 [ 81.266996][ T2555] [ 81.267083][ T2555] memory: usage 307200kB, limit 307200kB, failcnt 10826 [ 81.281435][ T2638] rust_binder: 140: no such ref 1 [ 81.289081][ T2555] memory+swap: usage 370040kB, limit 9007199254740988kB, failcnt 0 [ 81.292589][ T2638] rust_binder: 140: no such ref 2 [ 81.295295][ T2555] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 81.300549][ T2638] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:140 [ 81.305186][ T2555] Memory cgroup stats for /syz1: [ 81.771462][ T2555] cache 314572800 [ 81.780304][ T2555] rss 0 [ 81.783351][ T2555] rss_huge 0 [ 81.788089][ T2555] shmem 0 [ 81.791173][ T2555] mapped_file 0 [ 81.809750][ T2555] dirty 0 [ 81.815643][ T2555] writeback 0 [ 81.816056][ T2652] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 81.819775][ T2555] workingset_refault_anon 0 [ 81.819792][ T2555] workingset_refault_file 0 [ 81.819800][ T2555] swap 64348160 [ 81.819808][ T2555] swapcached 0 [ 81.819815][ T2555] pgpgin 172639 [ 81.819823][ T2555] pgpgout 95839 [ 81.829025][ T2652] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 81.836429][ T2555] pgfault 46643 [ 81.839983][ T2652] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 81.842290][ T2555] pgmajfault 7 [ 81.846356][ T2652] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 81.850294][ T2555] inactive_anon 0 [ 81.917133][ T2555] active_anon 0 [ 81.920923][ T2555] inactive_file 0 [ 81.925107][ T2555] active_file 0 [ 81.928856][ T2555] unevictable 314572800 [ 81.933148][ T2555] hierarchical_memory_limit 314572800 [ 81.939818][ T2555] hierarchical_memsw_limit 9223372036854771712 [ 81.952416][ T2555] total_cache 314572800 [ 81.957285][ T2555] total_rss 0 [ 81.962019][ T2555] total_rss_huge 0 [ 81.966764][ T2555] total_shmem 0 [ 81.970454][ T2555] total_mapped_file 0 [ 81.974807][ T2555] total_dirty 0 [ 81.978539][ T2555] total_writeback 0 [ 81.982476][ T2555] total_workingset_refault_anon 0 [ 81.988086][ T2555] total_workingset_refault_file 0 [ 82.004256][ T2555] total_swap 64348160 [ 82.012063][ T2555] total_swapcached 0 [ 82.016520][ T2555] total_pgpgin 172639 [ 82.021218][ T2555] total_pgpgout 95839 [ 82.025398][ T2555] total_pgfault 46643 [ 82.029412][ T2555] total_pgmajfault 7 [ 82.033539][ T2555] total_inactive_anon 0 [ 82.037898][ T2555] total_active_anon 0 [ 82.042138][ T2555] total_inactive_file 0 [ 82.047961][ T2555] total_active_file 0 [ 82.052205][ T2555] total_unevictable 314572800 [ 82.052785][ T2658] rust_binder: Error in use_page_slow: ESRCH [ 82.057260][ T2555] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 82.057620][ T2658] rust_binder: use_range failure ESRCH [ 82.063518][ T2555] ,cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.57,pid=537,uid=0 [ 82.087387][ T2555] Memory cgroup out of memory: Killed process 537 (syz.1.57) total-vm:93744kB, anon-rss:1032kB, file-rss:20736kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 82.087400][ T2658] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 82.087437][ T2658] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 82.112864][ T2552] syz.1.717 invoked oom-killer: gfp_mask=0x100cc2(GFP_HIGHUSER), order=0, oom_score_adj=0 [ 82.122836][ T2658] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:144 [ 82.139107][ T2552] CPU: 0 UID: 0 PID: 2552 Comm: syz.1.717 Not tainted syzkaller #0 1976820a860199aae9d2abf4727fc3b97aa7bbea [ 82.139143][ T2552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.139156][ T2552] Call Trace: [ 82.139163][ T2552] [ 82.139171][ T2552] __dump_stack+0x21/0x30 [ 82.139203][ T2552] dump_stack_lvl+0x10c/0x190 [ 82.139229][ T2552] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.139254][ T2552] ? ___ratelimit+0x3f7/0x5a0 [ 82.139277][ T2552] dump_stack+0x19/0x20 [ 82.139301][ T2552] dump_header+0xd7/0x490 [ 82.139320][ T2552] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 82.139346][ T2552] oom_kill_process+0x4c0/0x7e0 [ 82.139369][ T2552] ? sched_clock_cpu+0x75/0x400 [ 82.139396][ T2552] out_of_memory+0x7ee/0xbd0 [ 82.139418][ T2552] ? __cfi_out_of_memory+0x10/0x10 [ 82.139439][ T2552] ? mutex_lock_killable+0x104/0x1c0 [ 82.139463][ T2552] ? __cfi_mutex_lock_killable+0x10/0x10 [ 82.139487][ T2552] mem_cgroup_out_of_memory+0x279/0x350 [ 82.139508][ T2552] ? drain_obj_stock+0xed0/0xed0 [ 82.139527][ T2552] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 82.139546][ T2552] try_charge_memcg+0x8f7/0xde0 [ 82.139571][ T2552] ? gfp_to_alloc_flags_cma+0x90/0x1c0 [ 82.139619][ T2552] ? __cfi_try_charge_memcg+0x10/0x10 [ 82.139647][ T2552] ? __alloc_pages_noprof+0x31f/0x7b0 [ 82.139674][ T2552] __mem_cgroup_charge+0xf6/0x410 [ 82.139703][ T2552] ? filemap_get_entry+0x3fb/0x460 [ 82.139728][ T2552] ? __cfi___mem_cgroup_charge+0x10/0x10 [ 82.139761][ T2552] filemap_add_folio+0x57/0x2d0 [ 82.139783][ T2552] __filemap_get_folio+0x597/0x9d0 [ 82.139815][ T2552] ? __vfs_getxattr+0xaf/0x450 [ 82.139844][ T2552] ? __cfi___filemap_get_folio+0x10/0x10 [ 82.139870][ T2552] ? inode_to_bdi+0x6d/0x100 [ 82.139899][ T2552] simple_write_begin+0x60/0x390 [ 82.139922][ T2552] generic_perform_write+0x32d/0x960 [ 82.139953][ T2552] ? __cfi_generic_perform_write+0x10/0x10 [ 82.139982][ T2552] ? mnt_get_write_access_file+0x1af/0x3b0 [ 82.140009][ T2552] ? generic_write_checks_count+0x429/0x540 [ 82.140035][ T2552] ? file_update_time+0x1ef/0x220 [ 82.140064][ T2552] __generic_file_write_iter+0xcf/0x180 [ 82.140098][ T2552] generic_file_write_iter+0xb1/0x310 [ 82.140126][ T2552] ? __cfi_generic_file_write_iter+0x10/0x10 [ 82.140154][ T2552] __kernel_write_iter+0x395/0x830 [ 82.140174][ T2552] ? __cfi_generic_file_write_iter+0x10/0x10 [ 82.140205][ T2552] ? __cfi___kernel_write_iter+0x10/0x10 [ 82.140226][ T2552] ? __asan_memset+0x39/0x50 [ 82.140256][ T2552] ? iov_iter_bvec+0xc0/0x180 [ 82.140281][ T2552] dump_user_range+0xb06/0xdf0 [ 82.140303][ T2552] ? __cfi_dump_emit+0x10/0x10 [ 82.140334][ T2552] ? __cfi_dump_user_range+0x10/0x10 [ 82.140355][ T2552] ? elf_coredump_extra_notes_write+0x42f/0x4c0 [ 82.140387][ T2552] ? __cfi_elf_coredump_extra_notes_write+0x10/0x10 [ 82.140420][ T2552] elf_core_dump+0x2cd9/0x3810 [ 82.140449][ T2552] ? __cfi_elf_core_dump+0x10/0x10 [ 82.140482][ T2552] ? dump_interrupted+0xf0/0xf0 [ 82.140513][ T2552] ? filp_open+0x182/0x1d0 [ 82.140539][ T2552] ? 0xffffffffff600000 [ 82.140557][ T2552] do_coredump+0x1bfa/0x2bd0 [ 82.140592][ T2552] ? __cfi_do_coredump+0x10/0x10 [ 82.140621][ T2552] ? asm_exc_page_fault+0x2b/0x30 [ 82.140655][ T2552] ? __kasan_slab_free+0x6a/0x80 [ 82.140676][ T2552] ? kmem_cache_free+0x1c1/0x510 [ 82.140707][ T2552] ? get_signal+0xa75/0x14f0 [ 82.140733][ T2552] get_signal+0x11fd/0x14f0 [ 82.140762][ T2552] arch_do_signal_or_restart+0x96/0x720 [ 82.140795][ T2552] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 82.140839][ T2552] irqentry_exit_to_user_mode+0x4e/0xb0 [ 82.140881][ T2552] irqentry_exit+0x16/0x60 [ 82.140907][ T2552] exc_page_fault+0x66/0xc0 [ 82.140930][ T2552] asm_exc_page_fault+0x2b/0x30 [ 82.140954][ T2552] RIP: 0033:0x7fd89144f927 [ 82.140971][ T2552] Code: 88 15 d2 5d ea 00 88 05 cf 5d ea 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 82.140991][ T2552] RSP: 002b:00007fd8923cb120 EFLAGS: 00010202 [ 82.141011][ T2552] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fd89158ebe9 [ 82.141026][ T2552] RDX: 00007fd8923cb140 RSI: 00007fd8923cb270 RDI: 000000000000000b [ 82.141041][ T2552] RBP: 00007fd891611e19 R08: 0000000000000000 R09: 0000000000000000 [ 82.141071][ T2552] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 82.141086][ T2552] R13: 00007fd8917c6128 R14: 00007fd8917c6090 R15: 00007ffd007043a8 [ 82.141105][ T2552] [ 82.141113][ T2552] memory: usage 307200kB, limit 307200kB, failcnt 10857 [ 82.267468][ T2666] rust_binder: 2665 RLIMIT_NICE not set [ 82.271983][ T2552] memory+swap: usage 369988kB, limit 9007199254740988kB, failcnt 0 [ 82.613902][ T2552] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 82.620848][ T2552] Memory cgroup stats for /syz1: [ 82.620972][ T2552] cache 314572800 [ 82.629618][ T2552] rss 0 [ 82.632398][ T2552] rss_huge 0 [ 82.635644][ T2552] shmem 0 [ 82.638641][ T2552] mapped_file 0 [ 82.642131][ T2552] dirty 0 [ 82.645170][ T2552] writeback 0 [ 82.648473][ T2552] workingset_refault_anon 0 [ 82.652977][ T2552] workingset_refault_file 0 [ 82.657521][ T2552] swap 64348160 [ 82.660979][ T2552] swapcached 0 [ 82.664422][ T2552] pgpgin 172639 [ 82.667898][ T2552] pgpgout 95839 [ 82.671356][ T2552] pgfault 46643 [ 82.674916][ T2552] pgmajfault 7 [ 82.678337][ T2552] inactive_anon 0 [ 82.681996][ T2552] active_anon 0 [ 82.685709][ T2552] inactive_file 0 [ 82.689400][ T2552] active_file 0 [ 82.692949][ T2552] unevictable 314572800 [ 82.697883][ T2552] hierarchical_memory_limit 314572800 [ 82.703561][ T2552] hierarchical_memsw_limit 9223372036854771712 [ 82.710281][ T2552] total_cache 314572800 [ 82.714698][ T2552] total_rss 0 [ 82.718048][ T2552] total_rss_huge 0 [ 82.722038][ T2552] total_shmem 0 [ 82.725592][ T2552] total_mapped_file 0 [ 82.729610][ T2552] total_dirty 0 [ 82.733187][ T2552] total_writeback 0 [ 82.737355][ T2552] total_workingset_refault_anon 0 [ 82.742671][ T2552] total_workingset_refault_file 0 [ 82.748030][ T2552] total_swap 64348160 [ 82.752200][ T2552] total_swapcached 0 [ 82.756172][ T2552] total_pgpgin 172639 [ 82.760181][ T2552] total_pgpgout 95839 [ 82.764189][ T2552] total_pgfault 46643 [ 82.768358][ T2552] total_pgmajfault 7 [ 82.772277][ T2552] total_inactive_anon 0 [ 82.776602][ T2552] total_active_anon 0 [ 82.781051][ T2552] total_inactive_file 0 [ 82.785414][ T2552] total_active_file 0 [ 82.789415][ T2552] total_unevictable 314572800 [ 82.794090][ T2552] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.717,pid=2556,uid=0 [ 82.808997][ T2552] Memory cgroup out of memory: Killed process 2556 (syz.1.717) total-vm:90168kB, anon-rss:1020kB, file-rss:53708kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 82.834264][ T36] audit: type=1400 audit(1757400290.750:424): avc: denied { write } for pid=2669 comm="syz.5.750" path="socket:[13086]" dev="sockfs" ino=13086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 82.860872][ T291] syz-executor invoked oom-killer: gfp_mask=0x2100cca(GFP_HIGHUSER_MOVABLE|__GFP_CMA), order=0, oom_score_adj=0 [ 82.884302][ T291] CPU: 0 UID: 0 PID: 291 Comm: syz-executor Not tainted syzkaller #0 1976820a860199aae9d2abf4727fc3b97aa7bbea [ 82.884342][ T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 82.884356][ T291] Call Trace: [ 82.884364][ T291] [ 82.884372][ T291] __dump_stack+0x21/0x30 [ 82.884408][ T291] dump_stack_lvl+0x10c/0x190 [ 82.884436][ T291] ? __cfi_dump_stack_lvl+0x10/0x10 [ 82.884463][ T291] ? ___ratelimit+0x3f7/0x5a0 [ 82.884488][ T291] dump_stack+0x19/0x20 [ 82.884514][ T291] dump_header+0xd7/0x490 [ 82.884536][ T291] ? __cfi_mem_cgroup_get_max+0x10/0x10 [ 82.884565][ T291] oom_kill_process+0x4c0/0x7e0 [ 82.884590][ T291] ? sched_clock_cpu+0x75/0x400 [ 82.884620][ T291] out_of_memory+0x7ee/0xbd0 [ 82.884644][ T291] ? __cfi_out_of_memory+0x10/0x10 [ 82.884668][ T291] ? mutex_lock_killable+0x104/0x1c0 [ 82.884694][ T291] ? __cfi_mutex_lock_killable+0x10/0x10 [ 82.884721][ T291] mem_cgroup_out_of_memory+0x279/0x350 [ 82.884743][ T291] ? drain_obj_stock+0xed0/0xed0 [ 82.884765][ T291] ? memcg1_oom_prepare+0x2c6/0x3a0 [ 82.884794][ T291] try_charge_memcg+0x8f7/0xde0 [ 82.884825][ T291] ? __cfi_try_charge_memcg+0x10/0x10 [ 82.884853][ T291] ? xas_load+0x3a2/0x3d0 [ 82.884877][ T291] mem_cgroup_swapin_charge_folio+0x1b3/0x3e0 [ 82.884910][ T291] __read_swap_cache_async+0x34a/0x690 [ 82.884935][ T291] swap_cluster_readahead+0x2f7/0x530 [ 82.884957][ T291] ? xas_load+0x3a2/0x3d0 [ 82.884978][ T291] ? __cfi_swap_cluster_readahead+0x10/0x10 [ 82.885004][ T291] swapin_readahead+0xf2/0x820 [ 82.885026][ T291] ? __filemap_get_folio+0x97f/0x9d0 [ 82.885052][ T291] ? psi_group_change+0xb44/0x1130 [ 82.885081][ T291] ? __cfi_swapin_readahead+0x10/0x10 [ 82.885105][ T291] ? get_swap_device+0x10f/0x290 [ 82.885128][ T291] do_swap_page+0x43c/0x42f0 [ 82.885152][ T291] ? enqueue_hrtimer+0x12f/0x2e0 [ 82.885179][ T291] ? __cfi_do_swap_page+0x10/0x10 [ 82.885201][ T291] ? __kasan_check_write+0x18/0x20 [ 82.885233][ T291] ? _raw_spin_lock_irqsave+0xaf/0x150 [ 82.885265][ T291] ? __cfi_default_wake_function+0x10/0x10 [ 82.885293][ T291] ? hrtimer_try_to_cancel+0x3fe/0x6b0 [ 82.885317][ T291] ? __pte_offset_map+0x1b0/0x230 [ 82.885348][ T291] ? pte_offset_map_rw_nolock+0xba/0x110 [ 82.885379][ T291] handle_mm_fault+0x1205/0x1b90 [ 82.885413][ T291] ? __cfi_handle_mm_fault+0x10/0x10 [ 82.885435][ T291] ? lock_vma_under_rcu+0x49d/0x530 [ 82.885464][ T291] do_user_addr_fault+0x96c/0x1200 [ 82.885498][ T291] exc_page_fault+0x59/0xc0 [ 82.885524][ T291] asm_exc_page_fault+0x2b/0x30 [ 82.885549][ T291] RIP: 0033:0x7fd8915c1465 [ 82.885567][ T291] Code: 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d fe 70 1d 00 00 74 14 b8 e6 00 00 00 0f 05 f7 d8 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10 89 74 [ 82.885586][ T291] RSP: 002b:00007ffd007046e8 EFLAGS: 00010246 [ 82.885605][ T291] RAX: 0000000000000000 RBX: 00000000000002ee RCX: 00007fd8915c1463 [ 82.885620][ T291] RDX: 00007ffd00704700 RSI: 0000000000000000 RDI: 0000000000000000 [ 82.885634][ T291] RBP: 00007ffd0070476c R08: 000000000c120f79 R09: 0000000000000000 [ 82.885649][ T291] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 82.885663][ T291] R13: 00000000000927c0 R14: 000000000001391b R15: 00007ffd007047c0 [ 82.885680][ T291] [ 82.885689][ T291] memory: usage 303276kB, limit 307200kB, failcnt 10953 [ 83.114426][ T490] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 83.127187][ T291] memory+swap: usage 333792kB, limit 9007199254740988kB, failcnt 0 [ 83.200608][ T2677] netlink: 32 bytes leftover after parsing attributes in process `syz.4.752'. [ 83.204412][ T291] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 83.212827][ T2677] tipc: Invalid UDP bearer configuration [ 83.215510][ T291] Memory cgroup stats for [ 83.222941][ T2677] tipc: Enabling of bearer rejected, failed to enable media [ 83.230405][ T291] /syz1: [ 83.272906][ T291] cache 283033600 [ 83.279693][ T291] rss 172032 [ 83.282930][ T291] rss_huge 0 [ 83.286500][ T291] shmem 0 [ 83.289552][ T291] mapped_file 0 [ 83.293021][ T291] dirty 0 [ 83.296015][ T291] writeback 0 [ 83.299402][ T291] workingset_refault_anon 101 [ 83.304178][ T291] workingset_refault_file 0 [ 83.308805][ T291] swap 63754240 [ 83.312297][ T291] swapcached 180224 [ 83.315507][ T490] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 83.316526][ T291] pgpgin 177724 [ 83.325503][ T490] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.337350][ T291] pgpgout 108555 [ 83.339621][ T490] usb 6-1: config 0 descriptor?? [ 83.341026][ T291] pgfault 46827 [ 83.341038][ T291] pgmajfault 35 [ 83.341047][ T291] inactive_anon 0 [ 83.357158][ T291] active_anon 282624 [ 83.361275][ T291] inactive_file 0 [ 83.365065][ T291] active_file 0 [ 83.368935][ T291] unevictable 283033600 [ 83.374210][ T291] hierarchical_memory_limit 314572800 [ 83.379914][ T291] hierarchical_memsw_limit 9223372036854771712 [ 83.386429][ T291] total_cache 283033600 [ 83.390647][ T291] total_rss 172032 [ 83.395498][ T291] total_rss_huge 0 [ 83.399250][ T291] total_shmem 0 [ 83.402728][ T291] total_mapped_file 0 [ 83.406850][ T291] total_dirty 0 [ 83.410354][ T291] total_writeback 0 [ 83.414196][ T291] total_workingset_refault_anon 101 [ 83.419566][ T291] total_workingset_refault_file 0 [ 83.424839][ T291] total_swap 63754240 [ 83.429064][ T291] total_swapcached 180224 [ 83.433425][ T291] total_pgpgin 177724 [ 83.437596][ T291] total_pgpgout 108555 [ 83.441788][ T291] total_pgfault 46827 [ 83.445981][ T291] total_pgmajfault 35 [ 83.450268][ T291] total_inactive_anon 0 [ 83.460613][ T291] total_active_anon 282624 [ 83.465477][ T291] total_inactive_file 0 [ 83.469919][ T291] total_active_file 0 [ 83.474026][ T291] total_unevictable 283033600 [ 83.481149][ T291] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.717,pid=2552,uid=0 [ 83.496191][ T291] Memory cgroup out of memory: Killed process 2552 (syz.1.717) total-vm:90168kB, anon-rss:1148kB, file-rss:56024kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0 [ 83.555183][ T2681] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 83.562376][ T2681] rust_binder: Write failure EINVAL in pid:159 [ 83.735107][ T2687] binder: Unknown parameter 'lazytrme' [ 83.808912][ T2691] exFAT-fs (rnullb0): invalid boot record signature [ 83.816039][ T36] audit: type=1400 audit(1757400291.730:425): avc: denied { write } for pid=2690 comm="syz.4.757" name="/" dev="9p" ino=17889801302421081418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.844290][ T2691] exFAT-fs (rnullb0): failed to read boot sector [ 83.850781][ T2691] exFAT-fs (rnullb0): failed to recognize exfat type [ 84.174853][ T2698] overlayfs: failed to clone upperpath [ 84.184569][ T61] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 84.260357][ T2714] overlayfs: failed to clone upperpath [ 84.280410][ T2716] netlink: 'syz.1.766': attribute type 4 has an invalid length. [ 84.346926][ T61] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 84.358259][ T61] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 84.369502][ T61] usb 5-1: config 0 interface 0 has no altsetting 0 [ 84.376336][ T61] usb 5-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 84.386080][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.395329][ T61] usb 5-1: config 0 descriptor?? [ 84.400909][ T2694] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 84.559422][ T490] usb 6-1: Cannot set autoneg [ 84.564395][ T490] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 84.577046][ T490] usb 6-1: USB disconnect, device number 10 [ 84.613256][ T36] audit: type=1400 audit(1757400292.530:426): avc: denied { read } for pid=2693 comm="syz.4.758" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.626672][ T61] usb 5-1: string descriptor 0 read error: -71 [ 84.637567][ T36] audit: type=1400 audit(1757400292.530:427): avc: denied { open } for pid=2693 comm="syz.4.758" path="/54/file0/.pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.647225][ T61] usbhid 5-1:0.0: can't add hid device: -71 [ 84.673453][ T61] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 84.688682][ T61] usb 5-1: USB disconnect, device number 7 [ 84.850792][ T2728] netlink: 57 bytes leftover after parsing attributes in process `syz.1.771'. [ 84.888419][ T2730] IPv6: NLM_F_CREATE should be specified when creating new route [ 85.334268][ T364] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 85.506827][ T364] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.524547][ T364] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.535587][ T364] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 85.546395][ T364] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.565857][ T364] usb 6-1: config 0 descriptor?? [ 85.991137][ T364] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x2 [ 86.005999][ T364] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 86.324318][ T490] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 86.428116][ T364] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 86.445373][ T364] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 86.454519][ T364] pyra 0003:1E7D:2CF6.0004: probe with driver pyra failed with error -32 [ 86.480722][ T364] usb 6-1: USB disconnect, device number 11 [ 86.487392][ T490] usb 5-1: config 1 has an invalid descriptor of length 25, skipping remainder of the config [ 86.498558][ T490] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.520040][ T490] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 86.536068][ T490] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 86.548440][ T490] usb 5-1: SerialNumber: syz [ 86.741920][ T36] audit: type=1400 audit(1757400294.660:428): avc: denied { shutdown } for pid=2813 comm="syz.1.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 86.743366][ T2814] netlink: 44 bytes leftover after parsing attributes in process `syz.1.800'. [ 86.762956][ T36] audit: type=1400 audit(1757400294.690:429): avc: denied { create } for pid=2778 comm="syz.4.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 86.776637][ T490] usb 5-1: 0:2 : does not exist [ 86.795998][ T490] usb 5-1: unit 5 not found! [ 86.804572][ T490] usb 5-1: USB disconnect, device number 8 [ 86.818991][ T2386] udevd[2386]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 86.924387][ T364] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 87.076051][ T364] usb 6-1: unable to get BOS descriptor or descriptor too short [ 87.084565][ T364] usb 6-1: not running at top speed; connect to a high speed hub [ 87.095224][ T364] usb 6-1: config 12 has an invalid interface number: 131 but max is 0 [ 87.103951][ T364] usb 6-1: config 12 has no interface number 0 [ 87.110721][ T364] usb 6-1: config 12 interface 131 has no altsetting 0 [ 87.121016][ T364] usb 6-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=52.18 [ 87.130612][ T364] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.139120][ T364] usb 6-1: Product: syz [ 87.143486][ T364] usb 6-1: Manufacturer: syz [ 87.148615][ T364] usb 6-1: SerialNumber: syz [ 87.316347][ T2824] rust_binder: Write failure EFAULT in pid:176 [ 87.318574][ T2826] 9pnet_fd: Insufficient options for proto=fd [ 87.361171][ T364] rtl8150 6-1:12.131: couldn't find required endpoints [ 87.369601][ T364] rtl8150 6-1:12.131: probe with driver rtl8150 failed with error -5 [ 87.379963][ T364] usb 6-1: USB disconnect, device number 12 [ 87.574372][ T67] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 87.725918][ T67] usb 5-1: config 0 has no interfaces? [ 87.733569][ T67] usb 5-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 87.742749][ T67] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 87.751000][ T67] usb 5-1: SerialNumber: syz [ 87.756470][ T67] usb 5-1: config 0 descriptor?? [ 87.863717][ T2834] 9pnet_fd: Insufficient options for proto=fd [ 87.880645][ T2836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.809'. [ 87.900341][ T2841] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5167 sclass=netlink_route_socket pid=2841 comm=syz.1.810 [ 87.937883][ T2845] rust_binder: Error while translating object. [ 87.937944][ T2845] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 87.944791][ T2845] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:108 [ 88.009264][ T67] usb 5-1: USB disconnect, device number 9 [ 88.030085][ T2828] binder: Unknown parameter 'u/6zƛ00000000000000000000012' [ 88.804347][ T490] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 88.955718][ T490] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 88.964334][ T490] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 88.974763][ T490] usb 5-1: config 8 has no interface number 0 [ 88.980942][ T490] usb 5-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 88.998006][ T490] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 89.009063][ T490] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.011350][ T2879] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 89.017262][ T490] usb 5-1: Product: syz [ 89.027754][ T2879] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 89.030500][ T490] usb 5-1: Manufacturer: syz [ 89.040364][ T2879] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 89.044061][ T490] usb 5-1: SerialNumber: syz [ 89.145526][ T2888] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1176, size: 18446744073709551614) [ 89.145577][ T2888] rust_binder: Error while translating object. [ 89.158696][ T2888] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 89.165291][ T2888] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:126 [ 89.176367][ T2890] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.368933][ T490] usb 5-1: USB disconnect, device number 10 [ 89.842888][ T36] audit: type=1400 audit(1757400297.760:430): avc: denied { create } for pid=2907 comm="syz.3.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 89.863962][ T36] audit: type=1400 audit(1757400297.770:431): avc: denied { create } for pid=2907 comm="syz.3.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 89.949779][ T2923] overlayfs: failed to clone lowerpath [ 89.962075][ T2923] overlayfs: failed to clone upperpath [ 89.981679][ T2925] overlayfs: missing 'lowerdir' [ 89.990028][ T2925] overlayfs: missing 'lowerdir' [ 90.128685][ T36] audit: type=1326 audit(1757400298.050:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2955 comm="syz.1.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89158ebe9 code=0x7ffc0000 [ 90.182804][ T2964] 9pnet_fd: p9_fd_create_tcp (2964): problem connecting socket to 127.0.0.1 [ 90.198866][ T36] audit: type=1326 audit(1757400298.050:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2955 comm="syz.1.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89158ebe9 code=0x7ffc0000 [ 90.224449][ T36] audit: type=1326 audit(1757400298.050:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2955 comm="syz.1.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fd89158ebe9 code=0x7ffc0000 [ 90.249672][ T36] audit: type=1326 audit(1757400298.050:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2955 comm="syz.1.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89158ebe9 code=0x7ffc0000 [ 90.280684][ T36] audit: type=1326 audit(1757400298.050:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2955 comm="syz.1.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89158ebe9 code=0x7ffc0000 [ 90.324074][ T36] audit: type=1326 audit(1757400298.050:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2955 comm="syz.1.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd89158ebe9 code=0x7ffc0000 [ 90.357930][ T36] audit: type=1326 audit(1757400298.050:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2955 comm="syz.1.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89158ebe9 code=0x7ffc0000 [ 90.382946][ T2975] overlayfs: failed to clone upperpath [ 90.388703][ T36] audit: type=1326 audit(1757400298.050:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2955 comm="syz.1.852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89158ebe9 code=0x7ffc0000 [ 90.804343][ T490] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 90.955493][ T490] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.965667][ T490] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 90.975164][ T490] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.984152][ T490] usb 5-1: config 0 descriptor?? [ 91.366825][ T3043] cannot load conntrack support for proto=3 [ 91.398528][ T490] usbhid 5-1:0.0: can't add hid device: -71 [ 91.404827][ T490] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 91.416822][ T490] usb 5-1: USB disconnect, device number 11 [ 92.124881][ T3061] overlayfs: failed to clone upperpath [ 92.207777][ T3077] fuse: Unknown parameter 'fbf' [ 92.373314][ T3103] netlink: 8 bytes leftover after parsing attributes in process `syz.1.907'. [ 92.978475][ T3116] loop2: detected capacity change from 0 to 7 [ 92.985300][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 92.994484][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 93.002587][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.011915][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 93.020120][ T3116] loop2: unable to read partition table [ 93.026111][ T3116] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 93.027517][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.048966][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 93.057257][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.066497][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 93.075928][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.085170][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 93.093526][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.102787][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 93.109194][ T3124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.917'. [ 93.112033][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.128618][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 93.194452][ T3136] 9pnet_fd: Insufficient options for proto=fd [ 93.248157][ T3142] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:217 [ 93.260465][ T3146] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 93.514337][ T490] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 93.530810][ T3153] netlink: 'syz.5.929': attribute type 4 has an invalid length. [ 93.538543][ T3153] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.929'. [ 93.632805][ T3168] netlink: 'syz.5.935': attribute type 4 has an invalid length. [ 93.643158][ T3168] netlink: 'syz.5.935': attribute type 4 has an invalid length. [ 93.674282][ T490] usb 5-1: Using ep0 maxpacket: 16 [ 93.681102][ T490] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 93.690423][ T490] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 93.701055][ T490] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 93.711331][ T490] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 93.721142][ T490] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 93.730936][ T490] usb 5-1: config 1 interface 0 has no altsetting 0 [ 93.737593][ T490] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 93.746918][ T490] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.757297][ T490] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 93.957985][ T490] scsi host1: usb-storage 5-1:1.0 [ 94.439548][ T3200] fuse: Unknown parameter 'uid' [ 94.645714][ T3220] overlayfs: failed to clone upperpath [ 94.667436][ T3224] netlink: 16 bytes leftover after parsing attributes in process `syz.1.953'. [ 94.890778][ T36] kauditd_printk_skb: 25 callbacks suppressed [ 94.890797][ T36] audit: type=1326 audit(1757400302.810:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3263 comm="syz.1.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89158ebe9 code=0x7fc00000 [ 94.974832][ T330] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 95.165183][ T3312] netlink: 'syz.1.982': attribute type 2 has an invalid length. [ 95.696576][ T3190] sddr09: could not read card info [ 95.702315][ T67] usb 5-1: USB disconnect, device number 12 [ 95.744350][ T13] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 95.752381][ T13] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 95.758455][ T13] sd 1:0:0:0: [sdb] Write Protect is off [ 95.758640][ T3348] fuseblk: Bad value for 'user_id' [ 95.769467][ T13] sd 1:0:0:0: [sdb] Asking for cache data failed [ 95.774044][ T3348] fuseblk: Bad value for 'user_id' [ 95.776256][ T13] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 95.795273][ T13] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 95.827034][ T3354] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 95.827087][ T3354] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:231 [ 95.859205][ T2048] udevd[2048]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 95.862154][ T3360] FAT-fs (rnullb0): bogus number of reserved sectors [ 95.890584][ T3360] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 95.921288][ T2386] udevd[2386]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 95.939110][ T3365] netlink: 20 bytes leftover after parsing attributes in process `syz.1.996'. [ 96.005087][ T3368] netlink: 'syz.3.999': attribute type 15 has an invalid length. [ 96.015060][ T3368] overlay: Unknown parameter 'fowner' [ 96.224274][ T67] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 96.375463][ T67] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.385686][ T67] usb 5-1: config 0 has no interfaces? [ 96.391280][ T67] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 96.400503][ T67] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.409136][ T67] usb 5-1: config 0 descriptor?? [ 96.616649][ T3364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.625259][ T3364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.989695][ T3388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.998472][ T3388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.092047][ T36] audit: type=1400 audit(1757400305.010:466): avc: denied { watch_reads } for pid=3394 comm="syz.3.1008" path="/309/file0" dev="tmpfs" ino=1692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 97.382743][ T3443] 9pnet_fd: Insufficient options for proto=fd [ 97.490072][ T3461] tipc: Enabling of bearer rejected, media not registered [ 97.512700][ T36] audit: type=1400 audit(1757400305.430:467): avc: denied { shutdown } for pid=3467 comm="syz.3.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 97.583199][ T3475] overlayfs: failed to clone upperpath [ 97.713042][ T3481] 9pnet_fd: Insufficient options for proto=fd [ 97.866037][ T36] audit: type=1400 audit(1757400305.790:468): avc: denied { create } for pid=3462 comm="syz.5.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 98.876312][ T3511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=3511 comm=syz.1.1051 [ 98.929403][ T366] usb 5-1: USB disconnect, device number 13 [ 99.055325][ T36] audit: type=1400 audit(1757400306.980:469): avc: denied { mounton } for pid=3516 comm="syz.4.1054" path="mnt:[4026532296]" dev="nsfs" ino=4026532296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 99.774629][ T3523] 9pnet_fd: Insufficient options for proto=fd [ 99.810643][ T36] audit: type=1400 audit(1757400307.730:470): avc: denied { remount } for pid=3526 comm="syz.4.1056" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 99.837038][ T3531] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 99.874569][ T3540] tipc: Can't bind to reserved service type 1 [ 100.097497][ T36] audit: type=1400 audit(1757400308.020:471): avc: denied { ioctl } for pid=3571 comm="syz.4.1068" path="/86/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x671e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 100.123482][ T3572] incfs_lookup_dentry err:-13 [ 100.554268][ T61] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 100.681621][ T36] audit: type=1400 audit(1757400568.605:472): avc: denied { listen } for pid=3597 comm="syz.5.1077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 100.712377][ T61] usb 5-1: config 7 descriptor has 1 excess byte, ignoring [ 100.719762][ T61] usb 5-1: config 7 has 1 interface, different from the descriptor's value: 2 [ 100.730206][ T61] usb 5-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84 [ 100.739334][ T61] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.747385][ T61] usb 5-1: Product: syz [ 100.751624][ T61] usb 5-1: Manufacturer: syz [ 100.756268][ T61] usb 5-1: SerialNumber: syz [ 100.817565][ T36] audit: type=1400 audit(1757400568.745:473): avc: denied { accept } for pid=3610 comm="syz.3.1081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 100.965383][ T61] rndis_host 5-1:7.0: skipping garbage [ 100.970969][ T61] usb 5-1: bad CDC descriptors [ 100.977712][ T61] usb 5-1: USB disconnect, device number 14 [ 101.493901][ T3649] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 101.515781][ T3651] SELinux: Context KNDd5Q3Bkٔybӭs,~;c3poͺfPҸ62Ai] is not valid (left unmapped). [ 101.546085][ T3651] kvm: emulating exchange as write [ 101.968304][ T3661] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=36640 sclass=netlink_xfrm_socket pid=3661 comm=syz.5.1099 [ 101.982184][ T3661] netlink: 'syz.5.1099': attribute type 46 has an invalid length. [ 102.140924][ T3692] futex_wake_op: syz.4.1109 tries to shift op by 144; fix this program [ 102.149914][ T3692] loop2: detected capacity change from 0 to 7 [ 102.157391][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 102.166588][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 102.179916][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 102.189113][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 102.197074][ T2386] loop2: unable to read partition table [ 102.203172][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 102.212341][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 102.220367][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 102.229601][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 102.237501][ T3692] loop2: unable to read partition table [ 102.243393][ T3692] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 102.244157][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 102.266343][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 102.274585][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 102.283749][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 102.291945][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 102.301190][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 102.309211][ T3693] loop2: unable to read partition table [ 102.314441][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 102.324221][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 102.332688][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 102.334494][ T3695] rust_binder: Failed copying into alloc: EFAULT [ 102.341850][ T3695] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 102.341912][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 102.348304][ T3695] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 102.357251][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 102.367419][ T3695] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:282 [ 102.374004][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 102.441013][ T13] syzkaller0: tun_net_xmit 76 [ 102.445928][ T13] syzkaller0: tun_net_xmit 48 [ 102.452402][ T3703] syzkaller0: create flow: hash 2501481606 index 1 [ 102.460449][ T3703] syzkaller0: delete flow: hash 2501481606 index 1 [ 102.647014][ T36] audit: type=1400 audit(1757400570.576:474): avc: denied { read write } for pid=3706 comm="syz.4.1114" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 102.669748][ T36] audit: type=1400 audit(1757400570.576:475): avc: denied { open } for pid=3706 comm="syz.4.1114" path="/100/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 102.730725][ T3712] 9pnet_fd: Insufficient options for proto=fd [ 103.124423][ T3743] overlayfs: failed to resolve './file0': -2 [ 103.136747][ T36] audit: type=1400 audit(1757400571.066:476): avc: denied { append } for pid=3738 comm="syz.4.1123" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 103.172189][ T3752] overlayfs: failed to clone upperpath [ 103.240423][ T3757] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3757 comm=syz.3.1128 [ 103.337999][ T3778] loop2: detected capacity change from 0 to 7 [ 103.345311][ T3778] loop2: unable to read partition table [ 103.351511][ T3778] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 103.418144][ T3785] sit0: entered promiscuous mode [ 103.432673][ T3785] netlink: 'syz.4.1139': attribute type 1 has an invalid length. [ 103.450751][ T3785] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1139'. [ 103.515175][ T3794] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 103.526296][ T3794] kvm: pic: non byte read [ 103.581779][ T3804] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:337 [ 103.687489][ T36] audit: type=1400 audit(1757400571.616:477): avc: denied { unmount } for pid=3816 comm="syz.4.1151" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 103.795608][ T3826] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 103.795648][ T3826] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:350 [ 103.821875][ T3828] rust_binder: 352: no such ref 2 [ 103.837162][ T3828] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:352 [ 103.841200][ T3828] rust_binder: 352: no such ref 5 [ 103.861576][ T3828] rust_binder: Write failure EINVAL in pid:352 [ 103.996935][ T3840] overlayfs: failed to clone upperpath [ 104.142721][ T3854] veth1: entered allmulticast mode [ 104.149227][ T3853] veth1: left allmulticast mode [ 104.201820][ T36] audit: type=1400 audit(1757400572.126:478): avc: denied { create } for pid=3857 comm="syz.5.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 104.222560][ T36] audit: type=1326 audit(1757400572.126:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3857 comm="syz.5.1166" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9a978ebe9 code=0x0 [ 104.441958][ T3863] rust_binder: Error while translating object. [ 104.442027][ T3863] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 104.448457][ T3863] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:357 [ 104.460861][ T36] audit: type=1400 audit(1757400572.386:480): avc: denied { create } for pid=3861 comm="syz.3.1168" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 104.536160][ T3872] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1172'. [ 104.733830][ T364] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 104.821517][ T3910] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1184'. [ 104.883817][ T364] usb 5-1: Using ep0 maxpacket: 8 [ 104.890331][ T364] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 104.898793][ T364] usb 5-1: config 179 has no interface number 0 [ 104.905254][ T364] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 104.916602][ T364] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 104.928006][ T364] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 104.939224][ T364] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 104.950787][ T364] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 104.964081][ T364] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 104.973459][ T364] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.982915][ T3865] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 105.195029][ T3865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.203943][ T3865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.213238][ T61] usb 5-1: USB disconnect, device number 15 [ 105.213242][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 105.213276][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 105.733466][ T3920] rust_binder: Error while translating object. [ 105.733495][ T3920] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 105.739795][ T3920] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:361 [ 105.759958][ T3922] tipc: Enabling of bearer rejected, media not registered [ 105.788608][ T3927] FAT-fs (rnullb0): bogus number of reserved sectors [ 105.795381][ T3927] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 105.820229][ T36] kauditd_printk_skb: 3 callbacks suppressed [ 105.820247][ T36] audit: type=1326 audit(1757400573.746:484): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3928 comm="syz.4.1190" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe3bc18ebe9 code=0x0 [ 106.142632][ T3933] overlayfs: missing 'lowerdir' [ 106.620846][ T3946] overlayfs: failed to clone upperpath [ 106.649776][ T36] audit: type=1400 audit(1757400574.576:485): avc: denied { create } for pid=3948 comm="syz.1.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 106.916653][ T3951] overlayfs: failed to clone upperpath [ 107.814204][ T3987] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1209'. [ 107.862265][ T3996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1213'. [ 107.885382][ T36] audit: type=1400 audit(1757400575.816:486): avc: denied { relabelfrom } for pid=3999 comm="syz.3.1214" name="NETLINK" dev="sockfs" ino=17362 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 107.956085][ T36] audit: type=1400 audit(1757400575.886:487): avc: denied { getopt } for pid=4007 comm="syz.5.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 108.525692][ T36] audit: type=1326 audit(1757400576.456:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4022 comm="syz.5.1223" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe9a978ebe9 code=0x0 [ 108.600290][ T4024] tipc: Started in network mode [ 108.605262][ T4024] tipc: Node identity 1, cluster identity 4711 [ 108.611549][ T4024] tipc: Node number set to 1 [ 108.616353][ T4024] tipc: Cannot configure node identity twice [ 108.816630][ T4030] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 108.825525][ T4030] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 108.855019][ T36] audit: type=1400 audit(1757400576.786:489): avc: denied { getattr } for pid=4036 comm="syz.4.1228" name="/" dev="incremental-fs" ino=691 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 108.879608][ T36] audit: type=1400 audit(1757400576.806:490): avc: denied { read write } for pid=4036 comm="syz.4.1228" name=".log" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 108.904116][ T36] audit: type=1400 audit(1757400576.806:491): avc: denied { open } for pid=4036 comm="syz.4.1228" path="/125/bus/.log" dev="overlay" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 109.013505][ T4050] TCP: TCP_TX_DELAY enabled [ 109.155409][ T4072] netlink: 'syz.3.1241': attribute type 27 has an invalid length. [ 109.387980][ T4081] 9pnet_fd: p9_fd_create_unix (4081): problem connecting socket: ./file0: -111 [ 109.476210][ T4100] 9pnet_fd: Insufficient options for proto=fd [ 109.599411][ T4107] 9pnet_fd: Insufficient options for proto=fd [ 109.733955][ T4127] netlink: 'syz.4.1262': attribute type 16 has an invalid length. [ 109.743832][ T4127] netlink: 'syz.4.1262': attribute type 3 has an invalid length. [ 109.752598][ T4127] netlink: 64066 bytes leftover after parsing attributes in process `syz.4.1262'. [ 109.807078][ T36] audit: type=1400 audit(1757400577.737:492): avc: denied { ioctl } for pid=4130 comm="syz.3.1263" path="socket:[19614]" dev="sockfs" ino=19614 ioctlcmd=0x6629 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 109.857566][ T4134] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4134 comm=syz.3.1264 [ 109.870660][ T4134] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4134 comm=syz.3.1264 [ 109.883673][ T4135] 9pnet: Could not find request transport: fdR'"0x0000000000000004 [ 109.894146][ T4134] x_tables: unsorted underflow at hook 2 [ 109.978069][ T4145] netlink: 'syz.3.1267': attribute type 4 has an invalid length. [ 109.994311][ T4145] netlink: 'syz.3.1267': attribute type 4 has an invalid length. [ 110.203995][ T13] bridge_slave_1: left allmulticast mode [ 110.209842][ T13] bridge_slave_1: left promiscuous mode [ 110.223216][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.241189][ T13] bridge_slave_0: left allmulticast mode [ 110.250868][ T13] bridge_slave_0: left promiscuous mode [ 110.259320][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.382397][ T36] audit: type=1326 audit(1757400578.297:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4193 comm="syz.3.1284" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f04e5b8ebe9 code=0x0 [ 110.407874][ T13] veth1_macvtap: left promiscuous mode [ 110.413964][ T13] veth0_vlan: left promiscuous mode [ 110.428591][ T4200] netlink: 'syz.3.1284': attribute type 1 has an invalid length. [ 110.521535][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.528736][ T4198] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.536397][ T4198] bridge_slave_0: entered allmulticast mode [ 110.543663][ T4198] bridge_slave_0: entered promiscuous mode [ 110.550316][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.557756][ T4198] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.565057][ T4198] bridge_slave_1: entered allmulticast mode [ 110.571422][ T4198] bridge_slave_1: entered promiscuous mode [ 110.627804][ T4198] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.634902][ T4198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.642224][ T4198] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.649312][ T4198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.671222][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.678876][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.689074][ T1990] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.696212][ T1990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.706157][ T1990] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.713308][ T1990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.741629][ T4198] veth0_vlan: entered promiscuous mode [ 110.753517][ T4198] veth1_macvtap: entered promiscuous mode [ 110.982894][ T4240] fuse: Bad value for 'fd' [ 111.242088][ T4250] overlayfs: failed to clone lowerpath [ 111.246455][ T36] audit: type=1400 audit(1757400579.157:494): avc: denied { mounton } for pid=4249 comm="syz.3.1298" path="/file0" dev="ramfs" ino=18969 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 111.274573][ T36] audit: type=1400 audit(1757400579.197:495): avc: denied { remount } for pid=4249 comm="syz.3.1298" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 111.886324][ T4295] netlink: 'syz.5.1314': attribute type 4 has an invalid length. [ 112.086172][ T36] audit: type=1400 audit(1757400580.007:496): avc: denied { sqpoll } for pid=4307 comm="syz.1.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 112.086843][ T4309] tipc: Started in network mode [ 112.110719][ T4309] tipc: Node identity ac14140f, cluster identity 4711 [ 112.117809][ T4309] tipc: New replicast peer: 255.255.255.255 [ 112.118257][ T36] audit: type=1400 audit(1757400580.037:497): avc: denied { read } for pid=4307 comm="syz.1.1319" name="file0" dev="tmpfs" ino=2516 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 112.124102][ T4309] tipc: Enabled bearer , priority 10 [ 112.152407][ T4311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1318'. [ 112.161458][ T4311] tipc: Disabling bearer [ 112.281836][ T4315] 9pnet_fd: Insufficient options for proto=fd [ 112.909376][ T4337] overlayfs: failed to clone upperpath [ 113.012053][ T36] audit: type=1326 audit(1757400580.927:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4312 comm="syz.1.1320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd89158ebe9 code=0x7fc00000 [ 113.058357][ T36] audit: type=1400 audit(1757400580.977:499): avc: denied { map } for pid=4340 comm="syz.1.1332" path="socket:[20256]" dev="sockfs" ino=20256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.103987][ T36] audit: type=1400 audit(1757400581.027:500): avc: denied { create } for pid=4345 comm="syz.5.1334" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 113.135093][ T4348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1335'. [ 113.144967][ T4348] 9p: Unknown access argument 00000000000000000000 : -22 [ 113.449219][ T4354] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1338'. [ 113.458348][ T4354] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1338'. [ 113.467573][ T4354] netlink: 'syz.6.1338': attribute type 5 has an invalid length. [ 113.475688][ T4354] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1338'. [ 113.591355][ T4360] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=26 sclass=netlink_tcpdiag_socket pid=4360 comm=syz.1.1340 [ 114.142967][ T4371] overlayfs: failed to clone upperpath [ 114.217354][ T4389] fuse: Bad value for 'fd' [ 114.261359][ T4397] tmpfs: Bad value for 'size' [ 114.427111][ T4443] fuse: Bad value for 'fd' [ 114.803858][ T36] audit: type=1400 audit(1757400582.717:501): avc: denied { mount } for pid=4449 comm="syz.1.1372" name="/" dev="configfs" ino=1704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 114.826862][ T36] audit: type=1400 audit(1757400582.727:502): avc: denied { search } for pid=4449 comm="syz.1.1372" name="/" dev="configfs" ino=1704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 114.849945][ T36] audit: type=1400 audit(1757400582.727:503): avc: denied { read } for pid=4449 comm="syz.1.1372" name="/" dev="configfs" ino=1704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 114.876126][ T4473] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1377'. [ 115.517050][ T4511] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 115.525947][ T4511] 9pnet: Could not find request transport: xen [ 115.549162][ T4515] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1391'. [ 115.752096][ T4535] 9pnet_fd: Insufficient options for proto=fd [ 116.336193][ T4533] overlayfs: failed to resolve './file1': -2 [ 116.747188][ T4589] 9pnet_fd: Insufficient options for proto=fd [ 116.975346][ T4600] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1421'. [ 116.996471][ T4600] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1421'. [ 117.041891][ T4606] netlink: 'syz.1.1423': attribute type 20 has an invalid length. [ 117.157800][ T4614] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1426'. [ 117.169267][ T4614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=4614 comm=syz.1.1426 [ 117.342203][ T4626] overlayfs: failed to clone upperpath [ 117.721149][ T4641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4641 comm=syz.1.1437 [ 118.118716][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 118.118734][ T36] audit: type=1326 audit(1757400586.038:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4651 comm="syz.6.1440" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a4df8ebe9 code=0x0 [ 118.334291][ T4672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1447'. [ 118.389263][ T4678] x_tables: unsorted entry at hook 2 [ 118.395787][ T4679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1447'. [ 118.399848][ T4678] x_tables: unsorted entry at hook 2 [ 118.433558][ T4690] overlayfs: failed to clone upperpath [ 118.724492][ T4703] netlink: 'syz.3.1456': attribute type 15 has an invalid length. [ 118.732444][ T4703] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1456'. [ 118.986433][ T4716] tipc: Started in network mode [ 118.991427][ T4716] tipc: Node identity ac14142f, cluster identity 4711 [ 118.998422][ T4716] tipc: New replicast peer: 0.0.0.0 [ 119.003929][ T4716] tipc: Enabled bearer , priority 10 [ 119.587484][ T36] audit: type=1326 audit(1757400587.508:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4743 comm="syz.6.1470" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a4df8ebe9 code=0x0 [ 120.121970][ T364] tipc: Node number set to 2886997039 [ 120.225582][ T36] audit: type=1400 audit(1757400588.148:516): avc: denied { create } for pid=4767 comm="syz.3.1476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 120.422090][ T36] audit: type=1400 audit(1757400588.348:517): avc: denied { setopt } for pid=4775 comm="syz.1.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.442019][ T36] audit: type=1400 audit(1757400588.348:518): avc: denied { write } for pid=4775 comm="syz.1.1479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 120.545546][ T36] audit: type=1400 audit(1757400588.468:519): avc: denied { accept } for pid=4789 comm="syz.1.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 121.513055][ T36] audit: type=1400 audit(1757400589.438:520): avc: denied { listen } for pid=4816 comm="syz.3.1495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.539514][ T36] audit: type=1400 audit(1757400589.458:521): avc: denied { create } for pid=4818 comm="syz.3.1496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 121.547806][ T4819] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1496'. [ 121.568187][ T4819] tipc: Invalid UDP bearer configuration [ 121.568205][ T4819] tipc: Enabling of bearer rejected, failed to enable media [ 121.639162][ T4830] overlayfs: failed to clone upperpath [ 121.680663][ T4832] netlink: 'syz.5.1499': attribute type 11 has an invalid length. [ 121.729842][ T36] audit: type=1400 audit(1757400589.648:522): avc: denied { getattr } for pid=4826 comm="syz.5.1499" path="socket:[20962]" dev="sockfs" ino=20962 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 122.344625][ T4858] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1512'. [ 122.344639][ T36] audit: type=1400 audit(1757400590.268:523): avc: denied { nlmsg_read } for pid=4857 comm="syz.5.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 122.392346][ T4863] syz.5.1514 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 122.647396][ T4910] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 122.694830][ T4922] fuse: Bad value for 'user_id' [ 122.700003][ T4922] fuse: Bad value for 'user_id' [ 122.706154][ T4922] overlayfs: missing 'lowerdir' [ 122.985473][ T4963] overlayfs: failed to clone upperpath [ 123.609966][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 123.609985][ T36] audit: type=1400 audit(1757400591.528:526): avc: denied { bind } for pid=4983 comm="syz.1.1556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.063510][ T4991] 9pnet_fd: Insufficient options for proto=fd [ 124.264170][ T36] audit: type=1326 audit(1757400592.188:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5049 comm="syz.3.1579" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04e5b8ebe9 code=0x0 [ 124.300924][ T36] audit: type=1400 audit(1757400592.218:528): avc: denied { setopt } for pid=5044 comm="syz.5.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 124.339539][ T5057] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1581'. [ 124.479526][ T36] audit: type=1400 audit(1757400592.398:529): avc: denied { setopt } for pid=5068 comm="syz.1.1585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.879104][ T5105] overlayfs: missing 'lowerdir' [ 124.941024][ T5112] overlayfs: failed to resolve './file1': -2 [ 125.765126][ T36] audit: type=1326 audit(1757400593.688:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5108 comm="syz.5.1600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a978ebe9 code=0x7fc00000 [ 125.809994][ T5171] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1622'. [ 125.828726][ T5173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1623'. [ 126.149005][ T5195] netlink: 'syz.6.1630': attribute type 28 has an invalid length. [ 126.157070][ T5195] netlink: 176 bytes leftover after parsing attributes in process `syz.6.1630'. [ 126.910640][ T5221] 9pnet_fd: p9_fd_create_tcp (5221): problem connecting socket to 127.0.0.1 [ 126.942381][ T5226] bridge0: port 3(macsec0) entered blocking state [ 126.948931][ T5226] bridge0: port 3(macsec0) entered disabled state [ 126.955566][ T5226] macsec0: entered allmulticast mode [ 126.960991][ T5226] veth1_macvtap: entered allmulticast mode [ 126.967461][ T5226] macsec0: entered promiscuous mode [ 126.973902][ T5226] bridge0: port 3(macsec0) entered blocking state [ 126.980399][ T5226] bridge0: port 3(macsec0) entered forwarding state [ 126.989033][ T5226] overlayfs: failed to clone upperpath [ 127.098355][ T5250] overlayfs: failed to clone upperpath [ 127.131621][ T5257] overlayfs: failed to clone upperpath [ 127.137808][ T5253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5253 comm=syz.6.1645 [ 127.152925][ T5258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1653'. [ 127.185129][ T5264] netlink: 'syz.1.1651': attribute type 2 has an invalid length. [ 127.275846][ T5266] 9pnet_fd: Insufficient options for proto=fd [ 127.363021][ T5281] fuse: Bad value for 'rootmode' [ 128.065829][ T5301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1668'. [ 128.075078][ T5301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1668'. [ 128.095658][ T36] audit: type=1326 audit(1757400596.019:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5302 comm="syz.5.1669" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe9a978ebe9 code=0x0 [ 128.225124][ T36] audit: type=1400 audit(1757400596.149:532): avc: denied { create } for pid=5317 comm="syz.3.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 128.661343][ T5335] tmpfs: Unknown parameter '' [ 128.911025][ T5364] netlink: 316 bytes leftover after parsing attributes in process `syz.3.1691'. [ 128.920484][ T5364] netlink: 316 bytes leftover after parsing attributes in process `syz.3.1691'. [ 129.188716][ T5383] netlink: 'syz.6.1698': attribute type 4 has an invalid length. [ 129.196559][ T5383] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.1698'. [ 129.406944][ T5418] 9pnet_fd: Insufficient options for proto=fd [ 129.488138][ T5422] netlink: 'syz.1.1711': attribute type 63 has an invalid length. [ 129.496008][ T5422] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1711'. [ 129.505053][ T5422] gretap0: entered allmulticast mode [ 129.510588][ T5422] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 129.571712][ T5437] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1716'. [ 129.607548][ T5449] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1720'. [ 129.615377][ T5451] netlink: 'syz.5.1721': attribute type 3 has an invalid length. [ 129.624371][ T5451] netlink: 944 bytes leftover after parsing attributes in process `syz.5.1721'. [ 129.721247][ T5468] 9pnet_fd: Insufficient options for proto=fd [ 130.026829][ T36] audit: type=1400 audit(1757400597.949:533): avc: denied { create } for pid=5478 comm="syz.6.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 131.459798][ T36] audit: type=1326 audit(1757400599.379:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5554 comm="syz.3.1759" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04e5b8ebe9 code=0x0 [ 131.706070][ T36] audit: type=1400 audit(1757400599.629:535): avc: denied { create } for pid=5560 comm="syz.1.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 131.783026][ T5573] overlayfs: failed to clone upperpath [ 132.071337][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.078405][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.085671][ T5590] bridge_slave_0: entered allmulticast mode [ 132.093328][ T5590] bridge_slave_0: entered promiscuous mode [ 132.099937][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.107212][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.114786][ T5590] bridge_slave_1: entered allmulticast mode [ 132.121387][ T5590] bridge_slave_1: entered promiscuous mode [ 132.176422][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.183503][ T5590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.190850][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.197894][ T5590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.222732][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.233123][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.240232][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.268131][ T5590] veth0_vlan: entered promiscuous mode [ 132.279735][ T5590] veth1_macvtap: entered promiscuous mode [ 132.321416][ T36] audit: type=1400 audit(1757400600.249:536): avc: denied { listen } for pid=5601 comm="syz.1.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.570424][ T364] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 132.731180][ T364] usb 2-1: too many configurations: 11, using maximum allowed: 8 [ 132.748658][ T364] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 132.757957][ T364] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.766424][ T364] usb 2-1: Product: syz [ 132.770649][ T364] usb 2-1: Manufacturer: syz [ 132.775267][ T364] usb 2-1: SerialNumber: syz [ 133.041401][ T67] usb 2-1: USB disconnect, device number 5 [ 133.284865][ T5625] __nla_validate_parse: 3 callbacks suppressed [ 133.284882][ T5625] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1779'. [ 133.511625][ T5657] netlink: 'syz.5.1790': attribute type 27 has an invalid length. [ 133.636398][ T36] audit: type=1326 audit(1757400601.559:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5661 comm="syz.5.1791" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9a978ebe9 code=0x0 [ 134.164236][ T5672] 9pnet_fd: Insufficient options for proto=fd [ 134.713470][ T5698] netlink: 'syz.6.1805': attribute type 21 has an invalid length. [ 134.721474][ T5698] netlink: 388 bytes leftover after parsing attributes in process `syz.6.1805'. [ 134.731815][ T5698] overlayfs: failed to clone upperpath [ 134.815670][ T5702] overlayfs: failed to clone upperpath [ 134.845641][ T36] audit: type=1326 audit(1757400602.770:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5705 comm="syz.5.1809" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe9a978ebe9 code=0x0 [ 135.016532][ T5709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1810'. [ 135.041936][ T5711] sit0: entered promiscuous mode [ 135.048209][ T5711] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1811'. [ 135.089248][ T5719] netlink: 'syz.3.1813': attribute type 1 has an invalid length. [ 135.097065][ T5719] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1813'. [ 135.261654][ T5743] netlink: 'syz.3.1823': attribute type 2 has an invalid length. [ 135.302966][ T5752] overlayfs: failed to clone upperpath [ 135.737724][ T5798] netlink: 'syz.5.1836': attribute type 58 has an invalid length. [ 135.750155][ T13] bridge_slave_1: left allmulticast mode [ 135.767052][ T13] bridge_slave_1: left promiscuous mode [ 135.776321][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.793254][ T13] bridge_slave_0: left allmulticast mode [ 135.803964][ T13] bridge_slave_0: left promiscuous mode [ 135.809900][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.880336][ T5803] netlink: 'syz.5.1839': attribute type 2 has an invalid length. [ 135.914583][ T13] veth1_macvtap: left promiscuous mode [ 135.928304][ T13] veth0_vlan: left promiscuous mode [ 136.040683][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.047978][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.055126][ T5816] bridge_slave_0: entered allmulticast mode [ 136.061410][ T5816] bridge_slave_0: entered promiscuous mode [ 136.067812][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.074925][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.082057][ T5816] bridge_slave_1: entered allmulticast mode [ 136.088407][ T5816] bridge_slave_1: entered promiscuous mode [ 136.145628][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.152756][ T5816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.160071][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.167237][ T5816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.190171][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.197547][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.207366][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.214683][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.224565][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.231666][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.260765][ T5816] veth0_vlan: entered promiscuous mode [ 136.272598][ T5816] veth1_macvtap: entered promiscuous mode [ 152.103775][ T36] audit: type=1400 audit(1757400620.028:539): avc: denied { getopt } for pid=5832 comm="syz.7.1846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 152.128037][ T36] audit: type=1400 audit(1757400620.028:540): avc: denied { read write } for pid=5832 comm="syz.7.1846" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.159988][ T36] audit: type=1400 audit(1757400620.028:541): avc: denied { open } for pid=5832 comm="syz.7.1846" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.183587][ T36] audit: type=1400 audit(1757400620.028:542): avc: denied { ioctl } for pid=5832 comm="syz.7.1846" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 152.216603][ T36] audit: type=1400 audit(1757400620.138:543): avc: denied { mount } for pid=5851 comm="syz.5.1852" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 152.241577][ T36] audit: type=1400 audit(1757400620.158:544): avc: denied { search } for pid=5851 comm="syz.5.1852" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 152.342099][ T366] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 152.427260][ T5889] netlink: 'syz.3.1861': attribute type 4 has an invalid length. [ 152.493207][ T366] usb 8-1: config 1 has an invalid descriptor of length 163, skipping remainder of the config [ 152.504282][ T366] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 152.519486][ T366] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 152.531967][ T366] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.542684][ T366] usb 8-1: Product: ꯰뢁㜾皑೨횒鲸癹 [ 152.549497][ T366] usb 8-1: Manufacturer: 铱ꗷ웴ೌ矹꾈ِ吏ᡥᑃ漾㭜歃玗႕淂괲ො禯袂緹ꋈ劺↔җЪ뗦꾌梙쯂뎄⮙䚺鴙篸੾奵؃鶛໣뷟㭆禛⹻陘ᔋ굜ස묺驜瓪茶柚璌Ỗ㭞쓾⥬诰놡岴⿌摱敎〓ꌃ퓍씂憷撲歳⒪ 䅘蛩创䦠妴㙙ꆳㅺ憽Ļ샿頞貤ណ√ᒰ罞ᑼ龵心텟㷴ἐ옦ꯀ咰밈⮜伻婊긟ꮵ뺊蹘ǰ [ 152.584384][ T366] usb 8-1: SerialNumber: syz [ 152.855328][ T36] audit: type=1326 audit(1757400620.778:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5927 comm="syz.6.1875" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a4df8ebe9 code=0x0 [ 152.994342][ T366] usb 8-1: 0:2 : does not exist [ 153.015885][ T366] usb 8-1: USB disconnect, device number 2 [ 153.034076][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 153.589074][ T36] audit: type=1400 audit(1757400621.508:546): avc: denied { append } for pid=5939 comm="syz.7.1880" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.614179][ T36] audit: type=1400 audit(1757400621.538:547): avc: denied { map } for pid=5939 comm="syz.7.1880" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 153.706663][ T5948] pim6reg1: entered promiscuous mode [ 153.712201][ T5948] pim6reg1: entered allmulticast mode [ 154.538059][ T5970] syzkaller0: entered promiscuous mode [ 154.544542][ T5970] syzkaller0: entered allmulticast mode [ 154.550898][ T5972] 9pnet_fd: Insufficient options for proto=fd [ 154.685271][ T5981] rust_binder: Error while translating object. [ 154.685326][ T5981] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 154.691697][ T5981] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 154.905258][ T5986] netlink: 'syz.3.1897': attribute type 30 has an invalid length. [ 156.027964][ T36] audit: type=1400 audit(1757400623.947:548): avc: denied { append } for pid=6027 comm="syz.7.1910" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 156.619174][ T6073] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1924'. [ 156.654902][ T6082] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1927'. [ 156.680155][ T6086] new mount options do not match the existing superblock, will be ignored [ 156.689858][ T6086] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 156.694297][ T6086] devpts: called with bogus options [ 156.778060][ T6094] netlink: 'syz.3.1931': attribute type 1 has an invalid length. [ 156.800472][ T6094] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1931'. [ 157.311349][ T6100] SELinux: Context ϧ-):E2٭ؾ)đJu36ޢ{@m[ is not valid (left unmapped). [ 157.427687][ T6119] overlayfs: failed to clone upperpath [ 157.435068][ T36] audit: type=1400 audit(1757400625.357:549): avc: denied { mount } for pid=6118 comm="syz.6.1940" name="/" dev="ramfs" ino=25026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 157.475913][ T6121] 9pnet_fd: Insufficient options for proto=fd [ 157.667340][ T6152] overlayfs: failed to clone upperpath [ 157.674483][ T6152] netlink: 'syz.6.1951': attribute type 1 has an invalid length. [ 157.705526][ T36] audit: type=1326 audit(1757400625.627:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.6.1953" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a4df8ebe9 code=0x0 [ 157.757831][ T36] audit: type=1326 audit(1757400625.687:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6155 comm="syz.6.1953" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a4df8ebe9 code=0x0 [ 158.185142][ T6162] 9pnet_fd: Insufficient options for proto=fd [ 158.297627][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1964'. [ 158.306861][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1964'. [ 158.879262][ T6215] 9pnet_fd: Insufficient options for proto=fd [ 158.931327][ T6217] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1976'. [ 159.770551][ T6275] 8021q: VLANs not supported on ip_vti0 [ 159.812119][ T6283] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1999'. [ 160.483163][ T6340] overlayfs: missing 'lowerdir' [ 160.564874][ T6346] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 160.583133][ T6346] overlayfs: missing 'lowerdir' [ 160.656110][ T36] audit: type=1400 audit(1757400628.577:552): avc: denied { accept } for pid=6349 comm="syz.5.2022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 160.753939][ T6356] 9pnet_fd: Insufficient options for proto=fd [ 160.796388][ T6359] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2025'. [ 160.815888][ T6359] ip6tnl0: entered allmulticast mode [ 160.918849][ T36] audit: type=1400 audit(1757400628.837:553): avc: denied { setopt } for pid=6368 comm="syz.7.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 160.944133][ T36] audit: type=1400 audit(1757400628.867:554): avc: denied { getopt } for pid=6368 comm="syz.7.2028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 161.193126][ T6398] cgroup: Need name or subsystem set [ 161.249858][ T6400] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2039'. [ 161.349601][ T6406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6406 comm=syz.6.2042 [ 161.496705][ T6413] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 161.496745][ T6413] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:47 [ 161.497217][ T6414] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 161.534057][ T6414] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:47 [ 161.718199][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2050'. [ 161.998415][ T6434] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.013419][ T36] audit: type=1400 audit(1757400629.947:555): avc: denied { create } for pid=6441 comm="syz.3.2056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 162.023010][ T6434] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.053168][ T6434] bridge_slave_0: entered allmulticast mode [ 162.059688][ T6434] bridge_slave_0: entered promiscuous mode [ 162.083669][ T6445] !@: renamed from xfrm0 (while UP) [ 162.099313][ T6434] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.109364][ T6434] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.124114][ T6434] bridge_slave_1: entered allmulticast mode [ 162.140750][ T6434] bridge_slave_1: entered promiscuous mode [ 162.280956][ T13] bridge_slave_1: left allmulticast mode [ 162.294329][ T13] bridge_slave_1: left promiscuous mode [ 162.303435][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.311673][ T13] bridge_slave_0: left allmulticast mode [ 162.317681][ T13] bridge_slave_0: left promiscuous mode [ 162.323511][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.393092][ T6434] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.400355][ T6434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.407703][ T6434] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.414794][ T6434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.423773][ T6456] netlink: 'syz.5.2059': attribute type 12 has an invalid length. [ 162.439495][ T13] veth1_macvtap: left promiscuous mode [ 162.445306][ T13] veth0_vlan: left promiscuous mode [ 162.490218][ T6458] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2060'. [ 162.499924][ T6458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.516086][ T36] audit: type=1400 audit(1757400630.447:556): avc: denied { mounton } for pid=6457 comm="syz.5.2060" path="/346/file0" dev="tmpfs" ino=1891 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 162.516124][ T6458] cgroup: No subsys list or none specified [ 162.583184][ T6434] veth0_vlan: entered promiscuous mode [ 162.595371][ T6434] veth1_macvtap: entered promiscuous mode [ 162.636122][ T36] audit: type=1400 audit(1757400630.567:557): avc: denied { watch } for pid=6465 comm="syz.8.2048" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 162.671076][ T6467] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 162.685175][ T6477] vcan0: entered promiscuous mode [ 162.856465][ T6482] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 163.108109][ T6503] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.115310][ T6503] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.122378][ T6503] bridge_slave_0: entered allmulticast mode [ 163.123330][ T366] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 163.129236][ T6503] bridge_slave_0: entered promiscuous mode [ 163.142206][ T6503] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.149497][ T6503] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.156917][ T6503] bridge_slave_1: entered allmulticast mode [ 163.163182][ T6503] bridge_slave_1: entered promiscuous mode [ 163.217159][ T6503] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.224294][ T6503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.231588][ T6503] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.238739][ T6503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.263862][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.271351][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.281733][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.284450][ T366] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 163.288819][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.303168][ T366] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 163.320652][ T366] usb 9-1: config 220 has no interface number 2 [ 163.327966][ T366] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 163.329075][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.349373][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.357482][ T366] usb 9-1: config 220 interface 0 has no altsetting 0 [ 163.364784][ T366] usb 9-1: config 220 interface 76 has no altsetting 0 [ 163.371814][ T366] usb 9-1: config 220 interface 1 has no altsetting 0 [ 163.381349][ T366] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 163.393434][ T366] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.409164][ T6503] veth0_vlan: entered promiscuous mode [ 163.415272][ T366] usb 9-1: Product: syz [ 163.419480][ T366] usb 9-1: Manufacturer: syz [ 163.429457][ T366] usb 9-1: SerialNumber: syz [ 163.437515][ T6503] veth1_macvtap: entered promiscuous mode [ 163.618779][ T36] audit: type=1400 audit(1757400631.546:558): avc: denied { connect } for pid=6548 comm="syz.6.2086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 163.686047][ T366] usb 9-1: selecting invalid altsetting 0 [ 163.691916][ T366] usb 9-1: Found UVC 7.01 device syz (8086:0b07) [ 163.699712][ T366] usb 9-1: No valid video chain found. [ 163.714020][ T366] usb 9-1: USB disconnect, device number 2 [ 163.807223][ T36] audit: type=1400 audit(1757400631.736:559): avc: denied { read } for pid=6564 comm="syz.3.2091" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 163.831313][ T36] audit: type=1400 audit(1757400631.736:560): avc: denied { open } for pid=6564 comm="syz.3.2091" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 163.883045][ T6572] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 163.891123][ T6572] syzkaller0: entered promiscuous mode [ 163.897083][ T6572] syzkaller0: entered allmulticast mode [ 164.215400][ T6583] loop2: detected capacity change from 0 to 7 [ 164.318139][ T6596] netlink: 'syz.8.2101': attribute type 10 has an invalid length. [ 164.341256][ T6598] binder: Bad value for 'max' [ 164.465673][ T1990] bridge_slave_1: left allmulticast mode [ 164.471418][ T1990] bridge_slave_1: left promiscuous mode [ 164.477224][ T1990] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.485401][ T1990] bridge_slave_0: left allmulticast mode [ 164.491128][ T1990] bridge_slave_0: left promiscuous mode [ 164.497006][ T1990] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.628919][ T1990] veth1_macvtap: left promiscuous mode [ 164.634639][ T1990] veth0_vlan: left promiscuous mode [ 164.643640][ T67] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 164.688305][ T6622] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.695505][ T6622] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.702616][ T6622] bridge_slave_0: entered allmulticast mode [ 164.709295][ T6622] bridge_slave_0: entered promiscuous mode [ 164.715896][ T6622] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.722978][ T6622] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.730271][ T6622] bridge_slave_1: entered allmulticast mode [ 164.737602][ T6622] bridge_slave_1: entered promiscuous mode [ 164.783488][ T67] usb 4-1: device descriptor read/64, error -71 [ 164.797569][ T6622] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.804675][ T6622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.812056][ T6622] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.819133][ T6622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.841457][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.848890][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.858720][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.865926][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.875507][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.882676][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.915812][ T6622] veth0_vlan: entered promiscuous mode [ 164.931947][ T6622] veth1_macvtap: entered promiscuous mode [ 164.977138][ T6641] binder: Unknown parameter '18446744073709551615' [ 164.985291][ T6641] loop0: detected capacity change from 0 to 7 [ 164.991766][ C0] blk_print_req_error: 8 callbacks suppressed [ 164.991784][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.007199][ C0] buffer_io_error: 8 callbacks suppressed [ 165.007217][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 165.021254][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.023694][ T67] usb 4-1: device descriptor read/64, error -71 [ 165.030506][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 165.044788][ T36] audit: type=1400 audit(1757400632.966:561): avc: denied { map } for pid=6640 comm="syz.8.2111" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 165.046028][ T6641] loop0: unable to read partition table [ 165.079464][ T6641] loop_reread_partitions: partition scan of loop0 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 165.094327][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.103541][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 165.111933][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.121164][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 165.129860][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.139201][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 165.147820][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.157053][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 165.165554][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.174765][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 165.182660][ T6642] loop0: unable to read partition table [ 165.186704][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.197940][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 165.209153][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 165.218374][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 165.220703][ T6653] netlink: 'syz.5.2119': attribute type 4 has an invalid length. [ 165.248567][ T6657] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=6657 comm=syz.8.2121 [ 165.278296][ T67] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 165.413748][ T67] usb 4-1: device descriptor read/64, error -71 [ 165.653624][ T67] usb 4-1: device descriptor read/64, error -71 [ 165.768228][ T67] usb usb4-port1: attempt power cycle [ 165.986695][ T6693] overlayfs: failed to clone upperpath [ 166.002861][ T36] audit: type=1326 audit(1757400633.926:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6694 comm="syz.5.2131" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9a978ebe9 code=0x0 [ 166.113944][ T67] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 166.115515][ T6700] netlink: 'syz.5.2132': attribute type 4 has an invalid length. [ 166.151241][ T6706] netlink: 'syz.6.2135': attribute type 4 has an invalid length. [ 166.159240][ T6706] netlink: 992 bytes leftover after parsing attributes in process `syz.6.2135'. [ 166.172645][ T67] usb 4-1: device descriptor read/8, error -71 [ 166.229252][ T6719] binder: Bad value for 'stats' [ 166.234538][ T6720] binder: Bad value for 'stats' [ 166.314864][ T67] usb 4-1: device descriptor read/8, error -71 [ 166.493873][ T31] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 166.553736][ T67] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 166.575623][ T67] usb 4-1: device descriptor read/8, error -71 [ 166.633777][ T31] usb 9-1: device descriptor read/64, error -71 [ 166.704807][ T67] usb 4-1: device descriptor read/8, error -71 [ 166.776547][ T6731] fuse: Unknown parameter '' [ 166.781945][ T6731] tmpfs: Unknown parameter 'dont_measure' [ 166.815894][ T67] usb usb4-port1: unable to enumerate USB device [ 166.873765][ T31] usb 9-1: device descriptor read/64, error -71 [ 166.940515][ T6757] overlayfs: failed to clone upperpath [ 167.038750][ T6763] overlayfs: failed to clone upperpath [ 167.133947][ T31] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 167.273840][ T31] usb 9-1: device descriptor read/64, error -71 [ 167.514013][ T31] usb 9-1: device descriptor read/64, error -71 [ 167.633851][ T31] usb usb9-port1: attempt power cycle [ 167.674597][ T36] audit: type=1400 audit(1757400635.606:563): avc: denied { write } for pid=6782 comm="syz.5.2162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 167.973901][ T31] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 167.995020][ T31] usb 9-1: device descriptor read/8, error -71 [ 168.022043][ T36] audit: type=1326 audit(1757400895.940:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6807 comm="syz.6.2173" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a4df8ebe9 code=0x0 [ 168.125558][ T31] usb 9-1: device descriptor read/8, error -71 [ 168.363841][ T31] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 168.384935][ T31] usb 9-1: device descriptor read/8, error -71 [ 168.514983][ T31] usb 9-1: device descriptor read/8, error -71 [ 168.623877][ T31] usb usb9-port1: unable to enumerate USB device [ 168.867574][ T36] audit: type=1400 audit(1757400896.790:565): avc: denied { rename } for pid=6820 comm="syz.6.2177" name="file0" dev="tmpfs" ino=1388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 168.931154][ T36] audit: type=1400 audit(1757400896.850:566): avc: denied { map } for pid=6824 comm="syz.5.2179" path="socket:[28167]" dev="sockfs" ino=28167 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 169.057633][ T6841] futex_wake_op: syz.5.2182 tries to shift op by -1; fix this program [ 170.144971][ T6911] overlayfs: failed to clone upperpath [ 170.343567][ T366] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 170.425295][ T6946] fuse: Unknown parameter '' [ 170.443146][ T36] audit: type=1326 audit(1757400898.360:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6947 comm="syz.6.2220" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a4df8ebe9 code=0x0 [ 170.493935][ T366] usb 4-1: device descriptor read/64, error -71 [ 170.505159][ T6953] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2221'. [ 170.516756][ T6949] overlayfs: failed to resolve './file0': -2 [ 170.558461][ T36] audit: type=1400 audit(1757400898.480:568): avc: denied { ioctl } for pid=6958 comm="syz.8.2223" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 170.598284][ T6962] netlink: 'syz.8.2224': attribute type 40 has an invalid length. [ 170.609930][ T6962] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 170.619597][ T6962] rust_binder: Write failure EINVAL in pid:43 [ 170.743871][ T366] usb 4-1: device descriptor read/64, error -71 [ 170.853539][ T490] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 170.993515][ T366] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 171.003657][ T490] usb 9-1: Using ep0 maxpacket: 16 [ 171.010135][ T490] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 171.018942][ T490] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.029070][ T490] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 171.039630][ T490] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1c23, bcdDevice= 0.40 [ 171.048855][ T490] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.056895][ T490] usb 9-1: Product: ᦂ뀷ꏘ྇웆雅ḉ秉ꬓߔ硫藚櫣鳥友䙼縒涃繬默鎚ꖐ簬再訏ꁊ⡅ꆁ⣜糙遙敲肾軫꺲⽚▇뻂툡吝痲쩲袚憸슸㨳뷃ࣜ㌙윯໤剴ɝ懱㧹⻪뀔飁띛㔔꛼闅窯䫄ꌒ㔢 [ 171.078936][ T490] usb 9-1: Manufacturer: 쀓͚鷗䋀䋎첓兑䐰됺ꍼ剗婇囹鶚ॎ礕Ბ㭋髺鶹鉂⭗彌ఌ奥편 [ 171.090350][ T490] usb 9-1: SerialNumber: syz [ 171.133857][ T366] usb 4-1: device descriptor read/64, error -71 [ 171.366049][ T6982] netlink: 'syz.5.2231': attribute type 4 has an invalid length. [ 171.373644][ T366] usb 4-1: device descriptor read/64, error -71 [ 171.381005][ T6982] netlink: 'syz.5.2231': attribute type 4 has an invalid length. [ 171.483554][ T366] usb usb4-port1: attempt power cycle [ 171.499203][ T67] usb 9-1: USB disconnect, device number 7 [ 171.823390][ T366] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 171.844558][ T366] usb 4-1: device descriptor read/8, error -71 [ 171.902869][ T7005] 9pnet_fd: Insufficient options for proto=fd [ 171.920872][ T7009] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2241'. [ 171.975624][ T366] usb 4-1: device descriptor read/8, error -71 [ 172.051559][ T7028] syzkaller0: entered promiscuous mode [ 172.057371][ T7028] syzkaller0: entered allmulticast mode [ 172.203801][ T7055] tipc: Enabling of bearer rejected, failed to enable media [ 172.213488][ T366] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 172.213907][ T36] audit: type=1400 audit(1757400900.140:569): avc: denied { getopt } for pid=7054 comm="syz.6.2260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 172.244333][ T366] usb 4-1: device descriptor read/8, error -71 [ 172.289204][ T36] audit: type=1400 audit(1757400900.210:570): avc: denied { mounton } for pid=7058 comm="syz.5.2261" path="/bus" dev="sysfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 172.289544][ T7059] incfs: Can't find or create .index dir in ./bus [ 172.317495][ T7059] incfs: mount failed -1 [ 172.325411][ T7059] incfs: Can't find or create .index dir in ./bus [ 172.332089][ T7059] incfs: mount failed -1 [ 172.374488][ T366] usb 4-1: device descriptor read/8, error -71 [ 172.483383][ T366] usb usb4-port1: unable to enumerate USB device [ 172.870351][ T7071] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2267'. [ 172.925490][ T36] audit: type=1400 audit(1757400900.851:571): avc: denied { create } for pid=7084 comm="syz.8.2273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 172.962008][ T36] audit: type=1326 audit(1757400900.881:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7089 comm="syz.6.2275" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a4df8ebe9 code=0x0 [ 173.471581][ T7123] overlay: Unknown parameter 'fowner>00000000000000000000' [ 173.524682][ T36] audit: type=1400 audit(1757400901.451:573): avc: denied { setattr } for pid=7131 comm="syz.5.2291" name="secretmem" dev="secretmem" ino=28919 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 173.911519][ T7141] rust_binder: 64: no such ref 2 [ 173.916617][ T7141] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:64 [ 173.938497][ T7143] 9pnet_fd: Insufficient options for proto=fd [ 173.961677][ T7145] rust_binder: 66: no such ref 1 [ 173.967945][ T7143] 9pnet_fd: p9_fd_create_tcp (7143): problem connecting socket to 127.0.0.1 [ 174.015099][ T7150] tipc: Trying to set illegal importance in message [ 174.022645][ T7147] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2298'. [ 174.151803][ T7168] fuse: Bad value for 'user_id' [ 174.157074][ T7168] fuse: Bad value for 'user_id' [ 174.197188][ T7182] fuse: Bad value for 'fd' [ 174.338209][ T7210] netlink: 'syz.6.2319': attribute type 3 has an invalid length. [ 174.373146][ T67] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 174.457725][ T36] audit: type=1326 audit(1757400902.381:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7209 comm="syz.6.2319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4df8ebe9 code=0x7fc00000 [ 174.523195][ T67] usb 4-1: Using ep0 maxpacket: 8 [ 174.551257][ T67] usb 4-1: unable to get BOS descriptor or descriptor too short [ 174.566607][ T67] usb 4-1: config 6 has an invalid interface number: 248 but max is 0 [ 174.586960][ T67] usb 4-1: config 6 has no interface number 0 [ 174.603256][ T67] usb 4-1: config 6 interface 248 has no altsetting 0 [ 174.631746][ T67] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 174.651082][ T67] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.670583][ T67] usb 4-1: Product: syz [ 174.679292][ T67] usb 4-1: Manufacturer: syz [ 174.691735][ T67] usb 4-1: SerialNumber: syz [ 174.760304][ T7259] overlayfs: failed to clone upperpath [ 174.767166][ T7259] overlayfs: failed to clone upperpath [ 174.789463][ T36] audit: type=1400 audit(1757400902.711:575): avc: denied { create } for pid=7263 comm="syz.8.2339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 174.921902][ T7157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.940639][ T7157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.964809][ T67] ums-karma 4-1:6.248: USB Mass Storage device detected [ 175.024028][ T67] usb 4-1: USB disconnect, device number 11 [ 175.365703][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2347'. [ 175.374796][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2347'. [ 175.502203][ T7293] netlink: 'syz.3.2349': attribute type 16 has an invalid length. [ 175.502203][ T7294] netlink: 'syz.3.2349': attribute type 25 has an invalid length. [ 175.502225][ T7293] netlink: 'syz.3.2349': attribute type 25 has an invalid length. [ 175.502239][ T7293] netlink: 64094 bytes leftover after parsing attributes in process `syz.3.2349'. [ 175.510147][ T7294] netlink: 64094 bytes leftover after parsing attributes in process `syz.3.2349'. [ 175.544858][ T7293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2349'. [ 175.554319][ T7293] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7293 comm=syz.3.2349 [ 175.567035][ T7293] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 175.567947][ T36] audit: type=1400 audit(1757400903.491:576): avc: denied { module_load } for pid=7292 comm="syz.3.2349" path="/sys/power/pm_trace_dev_match" dev="sysfs" ino=1461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 175.603008][ T7293] rust_binder: Error in use_page_slow: ESRCH [ 175.603035][ T7293] rust_binder: use_range failure ESRCH [ 175.609102][ T7293] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false [ 175.615071][ T7293] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 175.623279][ T7293] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:76 [ 175.656607][ T36] audit: type=1400 audit(1757400903.581:577): avc: denied { nlmsg_write } for pid=7297 comm="syz.3.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 175.686715][ T7299] loop7: detected capacity change from 0 to 16384 [ 175.732227][ T7311] fuse: Bad value for 'rootmode' [ 175.873490][ T7312] loop7: detected capacity change from 16384 to 0 [ 175.930907][ T7326] overlayfs: failed to clone upperpath [ 175.971888][ T36] audit: type=1400 audit(1757400903.891:578): avc: denied { read } for pid=7329 comm="syz.3.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 176.004547][ T7332] overlayfs: failed to clone upperpath [ 176.068898][ T7349] netlink: 'syz.5.2370': attribute type 4 has an invalid length. [ 176.100564][ T36] audit: type=1400 audit(1757400904.021:579): avc: denied { mounton } for pid=7350 comm="syz.5.2371" path="/462/file0" dev="tmpfs" ino=2515 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 176.103356][ T7351] 9pnet_fd: Insufficient options for proto=fd [ 176.202849][ T67] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 176.352800][ T67] usb 4-1: Using ep0 maxpacket: 16 [ 176.366524][ T67] usb 4-1: config 1 interface 0 has no altsetting 0 [ 176.384323][ T67] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a1a, bcdDevice= 0.40 [ 176.393733][ T67] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.401769][ T67] usb 4-1: Product: ъ [ 176.405950][ T67] usb 4-1: Manufacturer: 墻ɱ캇㔡浭守僼ﭿ衪鮱䙲ጩ罇悭ꞧ່譆洫ප笊塚稬わ㔘 [ 176.417585][ T67] usb 4-1: SerialNumber: syz [ 176.623515][ T7394] /dev/loop0: Can't lookup blockdev [ 176.629994][ T7330] netlink: 'syz.3.2363': attribute type 28 has an invalid length. [ 176.655959][ T7330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.671700][ T7330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.721723][ T67] usbhid 4-1:1.0: can't add hid device: -71 [ 176.731294][ T67] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 176.751562][ T67] usb 4-1: USB disconnect, device number 12 [ 177.042802][ T67] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 177.183572][ T36] audit: type=1326 audit(1757400905.111:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7408 comm="syz.8.2388" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93a8b8ebe9 code=0x0 [ 177.206415][ T67] usb 4-1: Invalid ep0 maxpacket: 32 [ 177.332712][ T67] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 177.482692][ T67] usb 4-1: Invalid ep0 maxpacket: 32 [ 177.488154][ T67] usb usb4-port1: attempt power cycle [ 177.736332][ T7416] overlayfs: failed to clone upperpath [ 177.852667][ T67] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 177.873067][ T67] usb 4-1: Invalid ep0 maxpacket: 32 [ 178.002649][ T67] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 178.023051][ T67] usb 4-1: Invalid ep0 maxpacket: 32 [ 178.028535][ T67] usb usb4-port1: unable to enumerate USB device [ 178.371812][ T7439] fuse: Bad value for 'user_id' [ 178.376788][ T7439] fuse: Bad value for 'user_id' [ 178.780724][ T7447] fuse: blksize only supported for fuseblk [ 178.913690][ T7465] overlayfs: failed to clone upperpath [ 179.178189][ T7488] netlink: 'syz.5.2419': attribute type 1 has an invalid length. [ 179.186992][ T7488] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2419'. [ 179.218276][ T7490] vlan0: entered promiscuous mode [ 179.224301][ T7490] vlan0: entered allmulticast mode [ 179.229534][ T7490] veth0_vlan: entered allmulticast mode [ 179.236710][ T7490] fuse: Unknown parameter '0x000000000000000a' [ 179.293985][ T7502] 9pnet_fd: Insufficient options for proto=fd [ 179.762124][ T36] audit: type=1400 audit(1757400907.681:581): avc: denied { load_policy } for pid=7551 comm="syz.3.2442" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 179.765715][ T7552] SELinux: failed to load policy [ 180.433697][ T7587] netlink: 'syz.6.2451': attribute type 4 has an invalid length. [ 180.566260][ T7599] rust_binder: 7594 RLIMIT_NICE not set [ 180.571670][ T7592] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2453'. [ 180.573019][ T31] rust_binder: 7593: removing orphan mapping 0:4248 [ 180.578111][ T7592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3595 sclass=netlink_route_socket pid=7592 comm=syz.6.2453 [ 180.608271][ T7592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=7592 comm=syz.6.2453 [ 180.621499][ T7602] raw_sendmsg: syz.5.2455 forgot to set AF_INET. Fix it! [ 180.712361][ T7601] fuse: Bad value for 'group_id' [ 180.717392][ T7601] fuse: Bad value for 'group_id' [ 180.759893][ T36] audit: type=1400 audit(1757400908.681:582): avc: denied { lock } for pid=7605 comm="syz.3.2458" path="socket:[29638]" dev="sockfs" ino=29638 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 180.772006][ T7606] netlink: 'syz.3.2458': attribute type 3 has an invalid length. [ 180.794101][ T7606] netlink: 324 bytes leftover after parsing attributes in process `syz.3.2458'. [ 180.803810][ T7606] rust_binder: Failed copying into alloc: EFAULT [ 180.803828][ T7606] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 180.810310][ T7606] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 180.818976][ T7606] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:97 [ 180.842061][ T36] audit: type=1400 audit(1757400908.761:583): avc: denied { accept } for pid=7608 comm="syz.3.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 181.132374][ T31] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 181.282214][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 181.290087][ T31] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 181.316970][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.333955][ T31] usb 4-1: Product: syz [ 181.338175][ T31] usb 4-1: Manufacturer: syz [ 181.342839][ T31] usb 4-1: SerialNumber: syz [ 181.356318][ T7642] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2470'. [ 181.509481][ T36] audit: type=1326 audit(1757400909.432:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7641 comm="syz.6.2470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a4df8ebe9 code=0x7fc00000 [ 181.550181][ T31] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 181.592698][ T31] usb 4-1: USB disconnect, device number 17 [ 181.611742][ T7663] fuseblk: Bad value for 'user_id' [ 181.621029][ T31] usblp0: removed [ 181.626799][ T7663] fuseblk: Bad value for 'user_id' [ 181.696878][ T7675] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.2479'. [ 181.717463][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2479'. [ 181.742138][ T7675] erspan0: default FDB implementation only supports local addresses [ 181.808731][ T7704] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 181.828523][ T7704] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 181.842787][ T7711] 9pnet_fd: Insufficient options for proto=fd [ 181.853298][ T7704] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 181.870092][ T7704] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 181.874660][ T7719] SELinux: Context system_u:object_r:boot_t:s0 is not valid (left unmapped). [ 181.889859][ T36] audit: type=1400 audit(1757400909.822:585): avc: denied { relabelto } for pid=7717 comm="syz.8.2489" name="rnullb0" dev="tmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:boot_t:s0" [ 181.917098][ T36] audit: type=1400 audit(1757400909.822:586): avc: denied { associate } for pid=7717 comm="syz.8.2489" name="rnullb0" dev="tmpfs" ino=131 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:boot_t:s0" [ 182.088425][ T7737] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2494'. [ 182.102269][ T7737] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 182.104031][ T36] audit: type=1326 audit(1757400910.032:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7736 comm="syz.3.2494" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1981d8ebe9 code=0x0 [ 182.162790][ T7738] rust_binder: Failed copying into alloc: EFAULT [ 182.162810][ T7738] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 182.169196][ T7738] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 182.192100][ T7738] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:128 [ 182.242104][ T36] audit: type=1326 audit(1757400910.162:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7646 comm="syz.5.2471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9a978ebe9 code=0x7fc00000 [ 182.294205][ T36] audit: type=1400 audit(1757400910.222:589): avc: denied { create } for pid=7739 comm="syz.5.2495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 182.527511][ T7743] 2N: renamed from vcan0 (while UP) [ 182.882496][ T7747] futex_wake_op: syz.6.2497 tries to shift op by -1; fix this program [ 183.310149][ T7792] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2511'. [ 183.320436][ T7792] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.696209][ T7828] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2523'. [ 183.850779][ T7835] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2524'. [ 183.872828][ T7837] overlayfs: failed to clone upperpath [ 184.077950][ T7857] rust_binder: 149: no such ref 2 [ 184.083114][ T7857] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:149 [ 184.123451][ T7859] ------------[ cut here ]------------ [ 184.138218][ T7859] WARNING: CPU: 1 PID: 7859 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0 [ 184.148113][ T7859] Modules linked in: [ 184.152073][ T7859] CPU: 1 UID: 0 PID: 7859 Comm: syz.3.2534 Not tainted syzkaller #0 1976820a860199aae9d2abf4727fc3b97aa7bbea [ 184.163680][ T7859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 184.173884][ T7859] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0 [ 184.179849][ T7859] Code: 00 48 8b 5d a0 74 08 48 89 df e8 c2 4e 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 18 e0 20 04 cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0 [ 184.199653][ T7859] RSP: 0018:ffffc90005c9fc88 EFLAGS: 00010202 [ 184.205815][ T7859] RAX: 1ffffd1ffff86712 RBX: ffffc9000d3328e8 RCX: ffffffff816dc9a9 [ 184.213838][ T7859] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc33890 [ 184.221881][ T7859] RBP: ffffc90005c9fcf0 R08: ffffe8ffffc33897 R09: 1ffffd1ffff86712 [ 184.229896][ T7859] R10: dffffc0000000000 R11: fffff91ffff86713 R12: dffffc0000000000 [ 184.237928][ T7859] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc33890 [ 184.245963][ T7859] FS: 0000555578fe6500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 184.255063][ T7859] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.261687][ T7859] CR2: 0000000000000000 CR3: 000000014b600000 CR4: 00000000003526b0 [ 184.269745][ T7859] Call Trace: [ 184.273124][ T7859] [ 184.276100][ T7859] kvm_put_kvm+0x1100/0x12b0 [ 184.280744][ T7859] ? __cfi_kvm_vm_release+0x10/0x10 [ 184.286452][ T7859] kvm_vm_release+0x47/0x70 [ 184.291002][ T7859] __fput+0x1fe/0xa00 [ 184.295172][ T7859] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 184.301034][ T7859] ____fput+0x20/0x30 [ 184.305091][ T7859] task_work_run+0x1e3/0x250 [ 184.309717][ T7859] ? __cfi_task_work_run+0x10/0x10 [ 184.314910][ T7859] ? __kasan_check_write+0x18/0x20 [ 184.320097][ T7859] resume_user_mode_work+0x36/0x50 [ 184.325261][ T7859] syscall_exit_to_user_mode+0x64/0xb0 [ 184.330768][ T7859] do_syscall_64+0x64/0xf0 [ 184.335271][ T7859] ? clear_bhb_loop+0x50/0xa0 [ 184.339996][ T7859] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 184.345965][ T7859] RIP: 0033:0x7f1981d8ebe9 [ 184.350419][ T7859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.370105][ T7859] RSP: 002b:00007fff9966abd8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 184.378686][ T7859] RAX: 0000000000000000 RBX: 000000000002ceff RCX: 00007f1981d8ebe9 [ 184.386732][ T7859] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 184.394762][ T7859] RBP: 00007f1981fc7da0 R08: 0000000000000001 R09: 000000119966aecf [ 184.402811][ T7859] R10: 0000001b32620000 R11: 0000000000000246 R12: 00007f1981fc5fac [ 184.410818][ T7859] R13: 00007f1981fc5fa0 R14: ffffffffffffffff R15: 00007fff9966acf0 [ 184.418918][ T7859] [ 184.422100][ T7859] ---[ end trace 0000000000000000 ]---