last executing test programs: 12m2.582933547s ago: executing program 32 (id=13): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x119000, 0x0) write(r0, &(0x7f0000000040)="65996f197d1ae0a5e2c5c378aa59973c77a6a22eeb9a47e3b21b7a838ed130f6b9ecf407bf095bfa55fc458316ab342caa334356b235f7d4dd30c1f0a9631c48f64ba29ed7d7f817a2a1ce7279d56dadd1890fdb390eddb8d1d63a6d6ad63e796da9baa8948c3caeff87a6e29368d2d193cb87c7b26c7dc53d97b02258", 0x7d) (async) sendto$inet(r0, &(0x7f00000000c0)="3f3cab04f5320daa9aff1d67ff8d290bc8d843efbf255b7e5c3b02861652ab104b3793e42b3485e1348b0e0c19d653603402355e80db214fb0282735261ef05be75164bfc43c3beaca378f10fca77b0dde4bda7813098c483109a84cc4711e9c48eeadd3f6698b2d31e18ce0a22ae3a360d9de230e509aea79568f", 0x7b, 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async) lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00', &(0x7f0000000200)='/dev/zero\x00', 0xa, 0x2) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) fcntl$lock(r1, 0x6, &(0x7f00000002c0)={0x0, 0x4, 0x10000, 0x9, r4}) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000000380)={'nat\x00', 0x0, 0x0, 0x0, [0xb79, 0x10, 0xffffffffffffffff, 0x0, 0x9, 0xfff], 0x5, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}]}, 0xc8) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000480)=[@mss={0x2, 0x9}, @mss={0x2, 0x87}], 0x2) (async) r6 = syz_io_uring_complete(0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r6, 0x4068aea3, &(0x7f00000004c0)={0xbc, 0x0, 0x2}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) setsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000580)={r7, @rand_addr=0x64010102, @remote}, 0xc) (async) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r6, 0x80083313, &(0x7f00000005c0)) (async) wait4(r4, &(0x7f0000000600), 0x1, 0x0) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r6) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, r8, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "45cb3a3201803ded6ec25f0e8e"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8008}, 0x8000) (async) r10 = signalfd4(r3, &(0x7f0000000800)={[0x800]}, 0x8, 0x80c00) (async) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000840)=0x2, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000880), r6) write$cgroup_devices(r6, &(0x7f00000008c0)={'b', ' *:* ', 'wm\x00'}, 0x9) sendmsg$TIPC_NL_MEDIA_GET(r10, &(0x7f0000000d40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d00)={&(0x7f0000000940)={0x398, r2, 0x211, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x54c8}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x137}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc3e}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1c}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}]}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc2}]}]}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'bridge_slave_0\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7cf9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9f}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc3a4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2280}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfd}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xec}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER={0xbc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'tunl0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4800}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff397}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f9a2a2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc2b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}]}]}, 0x398}, 0x1, 0x0, 0x0, 0x800}, 0x885) (async) sendto$inet(r0, &(0x7f0000000d80)="c3e3ae793dc4c5db03cd990ce78480e6b80f19ee85079e8e835bd63f70dbd7b6ad2cbeb311b0500115ffb9594b751086bf5da8b957450fdbb95ade47673a4577c39919c8d03383665633d7f12271348592673f71590aa63b6e16b1139d74fd727c48bc2b5ff46e8ece05b9edd79868646f9110124b23d4d8454028221925c0a8eabef51ebb2aa6184966f6ec0e1c0784223befef125371cef9e9a31e5189fe6317d84ac3240bf4", 0xa7, 0x0, &(0x7f0000000e40)={0x2, 0x4e24, @multicast1}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r6, &(0x7f0000000f40)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14, 0x7, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [""]}, 0x14}}, 0x4000) (async) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000000, 0x20010, r5, 0x94564000) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x54, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_BYTES={0xc}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x814b8b77f0ff271c}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x101}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2f000}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) 11m39.881133732s ago: executing program 33 (id=264): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x14, 0x2e, 0x21, 0x0, 0x0, {0x19}}, 0x14}}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETTXFILTER(r4, 0x400454ca, &(0x7f0000000000)=ANY=[@ANYBLOB="2e2e070c371303ed0133f2ff8689b3f20e2c12"]) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r3) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000500)={&(0x7f0000000100), 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x108, r5, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x108}, 0x1, 0x0, 0x0, 0x4040080}, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x40, 0xc1) execve(&(0x7f0000004700)='./file0\x00', &(0x7f0000004800)={[], 0x23}, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0x5000, 0xeeee6001, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0x3}, {0x2000, 0x5000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0x3000, 0x1, 0x9, 0x3, 0x4, 0x42, 0xb, 0xff, 0xa, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xb, 0x3, 0x15, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x0, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8000000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0xff, 0x70}, {0x100000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xb, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x6000, 0x7}, 0x80000031, 0x0, 0x100000, 0x2024, 0x3, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0xff]}) close_range(r0, 0xffffffffffffffff, 0x0) 10m48.44475199s ago: executing program 34 (id=650): r0 = socket(0x28, 0x4, 0x3) sendmmsg(r0, &(0x7f0000001080)=[{{&(0x7f0000000480)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000240)="8e2e49e8bdbba0981e296b2410d37247fadfc3", 0x13}, {&(0x7f0000000400)="4d13f68a0879c8a7cfdacb1f86ace9af5ea126222629701e5f6764d5ca2b4c", 0x1f}, {&(0x7f0000000500)="b535309ac4a249ad3e98cfc59699271dc70fe528d2c9097651bb20f332fca1582135", 0x22}, {&(0x7f0000000540)="9bc87d0790a317daa0272a2526ec4b4c23040ce4ec20cca0b245a9f97be4ad352156c492859f2c4c82a4dc6a12647bab706b85c9d15a2d58229901c61e8d2f67336c6270fc65f1835cb3f032960d0a61d9eb0ad5e332167b41edcb01e593f9ebb7d6245e6e54fbd4f2975390d4f55dfb87cb334ec5a3004eac7dbe298abc5dcaf210e7ca242466ad8ed782139b0c3468ded4d9f101eff919c25cfd5a467895ff0537b5a5d3183c2e9e77f5f93c97448fe430f47bbccb7648be3579d007e533341b3930a76932e2f921bc779c7c08880e84a37fe8cd1594d8cef6884c99fc6a808a875c431acf28de17ec0ab25c1cb8113a1ed97e4d", 0xf5}, {&(0x7f0000000640)="d3b0f14f27a98d1a9d4cf3d563aeebc3d9b0a66135363ac74a9bf0a621f7", 0x1e}, {&(0x7f0000000680)="984f3593676ea1aab4d806adb21fb0acf20f0516d173b626f8fdbe776948182bd8ff98c2c2f0e9c3c7cf57f214bbd1a07550ad4415eb74c1574f0e467365301a309f33816cc9223e6456df5a4c78654fed965b5a3a54c3cbf46afc9413c4d1629d55064021b442b3882fa69e8ae38cdd5cacae4ac804f13d3652cb5ce4fabb4a264956e6fa81ce1a9bacc352a414d6613737dfeeb12806b3", 0x98}, {&(0x7f0000000740)="b934ca691a0758b0f80b5875657e3b9e35ae233bbc314f8164b2f21aca461ad0ef33dab7734e1786bb10dbace077cdfa4dfce495457335bf29ba88c2229e5b441fb4bbdf8a22822d12142bd01f4dad07c83656f0be6ccf1abb4bb9618ce546d398a77b0b10eda7316aaffee19624660f2ccee0f0673abe715bbdd88c001119aed0d8ff4913cfa74535b19516ffd437968e3c00e13f48a00e7deb95baf339198b77e546b872f997867630", 0xaa}, {&(0x7f0000000800)="3f5fdfb15d4e05584456c520cdb9ed274a4943ff27ec2baaf9e7113f086f75199086ef9cc05f46753e07686bbbcd24ae39520101cbe30525de23cb3c7a", 0x3d}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000000840)="5b77818faebbb4020a1afe8bbfe1115e9e4f577964a239f4cc413b9a20", 0x1d}], 0xa, &(0x7f0000002300)=[{0x78, 0x10a, 0x4a2b, "da838770cb5cb1698c98e26ab155c30fdb2d2c9d36f0c64e5721aa422674e362e8b2e6291f406f45aeeb75ba4b3a516131401d52705db8e16b4c29394edc4650c731a55ed4f313950876d4d0003a56bf3195694849731e86bbf7a1c32185fc56d3"}, {0xe8, 0x109, 0x5, "581108952afb5dd261b9c0cb7844f1998acdf4985067120e3e3e4c269f1c4641702371364be6e9d15a171873e871a70f7f6fd2db9b8d3343868ecea3ad88aa664d837e7b57e587493cd4feee81a1a69034309f6cff6a564b52fd8076b060045185fc6fc685fc152a2f82f6f0f967eac5230164085a1c1966b486c3a33adb8ad6a651f05850e1585fc144303d42509a36f05edb5d268947f937eb6ed2482345abb8362c7f25a0274f383566f278a74fe2d61eaaf357f574ef26756f3c209efd46da586e59e5855accca8d5fb6d96c567ca11c0f69"}, {0x108, 0x1, 0x2, "49ad48f302d1ddfdfe4379ef72c8823afa956e82edd91877fd3120fdddcffe46ef34f4dbf2e5ee37c68f59a0d238c8a0f387a919225645110ead93eab4d463d813b3a4b50051fdb054e0dbbfc3f95680328c52a08262ddc018ac78cf91e82251b69be6ac8c26dcf4c0a9d24d2b4b8107dbbacc2e5761ef4e0d219dd88f46be1894fc4a0896c877ca710c9a49fd647bf944491fe1ecf9e9d408202422201840e1885fdd4aa480ec122f8aff918be5bfc24d1621faaf6bdc20eb796b5b6650cc69776a9aa84a0acc9591e6b80c098b5c4ca9a2ccf3afe0e91648fa80428204f6a71386943cdb14777550ec70b6232bf023a8174565"}, {0x1010, 0x110, 0x1, "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"}, {0xf8, 0x111, 0x9, "7921b4c42e1fa37f2df699c9c1d9216038528cf498c356064998d169882a44e8716acf05625d069bd16b978df9f2dd44dcbbac111a9a4c6340db187c48303b348c5a0e3c509cd0bad3421d12c58e75d90b431050bbb1821001a44713f338d13b3c9685c9dc5bb770d6773e98c38516b3f262ac21ff3e1be9b561c35314ce87e950742297248b91a9612d5803801f10d4e39b4275b07ce9b5c506b8588c0d98c4802dedc2d02974674c116808ee536991d26e1da6a3c5eaa43c051dcabc47f609c707f0c5f17aeeb2f2cd8d72a01203d6041cdbcb00cf3dd3c64e81b4ff91684c45970d"}], 0x1370}}, {{&(0x7f0000000940)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x1}, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000006300)="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", 0x1000}, {&(0x7f00000009c0)="236bdfa118255bfc7f5b587e018436663045e9c0b7eaa80fbf916834bc524cce3ecba066e52c", 0x26}, {&(0x7f0000000a00)="4e1529168efd434ce31c2929b8d7d6c04ddff15b2ea8b1cd2b0c297a2b8227015ddce2dc3dca9b0747e202067d85e3e08502c5b7f8cc1195a0aa5973ecc3de482ca38d650d821ebeaee0dbd39fa7d92cb70af79c679fb16615801dfa015f794e88144ec9fa05c785f69288790f716a2fd1d2c942a8e7cef81f91fb834846a3799bbfb7938588557d454dd8077e66a9a9f23a39a4d056527f8ea93a5ef7e15bf074be", 0xa2}, {&(0x7f0000000ac0)="c9db4a40e9b1b9bf0ebaa3853a113af155b1b54326b1fac0b1b391f30a528d8d82ee7cb3a0ecea357a4bc07d", 0x2c}, {&(0x7f0000000c00)="8083f52c95ac6870d98a36c07daed701e9fce31c0fc760850901cfeb2cdf766d70b0918c5593c5686098774250333c72f17e60ccfefc67cb8e62f0a7fe6ec8cc404ca96180a48d973d4ca8147968743e21b2d8a171a000ac61e3ea847aee6b", 0x5f}, {&(0x7f0000000c80)="f9af603c08f4280635beb48645cd1f5e747e374951f29ad516d72cc971c3246df420789ea9a82fa02581e26705451332dfa7b1a6bdd04aa128359dedc41de58019d2e2c4c25182da1bdc15cd69adc979afd5cf7c71fa45fbf2352abb13509fb8a896fc8af7c156997a0cb8744e2ee40272ffa5de113f6f122c8a42b1adb82a02bc4b296c15bd6eaea9d8442c658dc7254fba291efb4662dfee12b424a94c565aaa82b12f6cba6b648da486aa26", 0xad}, {&(0x7f0000000d40)="8a116a74bad40de59fe436a87548bfb0d2674b0feb9c1ed181bf3d0db71aa34603c0bd522bff3699ac8e186af976e49238e6d39052463742cfabc46bc45e20e7b4c939ac9b1a3661b8bc46959b31fa48d5438113b825085e6346dcf8f0efd8eddd3e9921f4f39c38c5c726e842981aed9d3f1e9e2e7d62af7764ed", 0x7b}, {&(0x7f0000000dc0)="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", 0xff}], 0x8, &(0x7f000000a380)=[{0xc8, 0x111, 0x2, "23204c6bc93a7cca3a04ae2819d9dbd512e4e6c66771abb58782cc3df51c747c2251aee130e89dbddaf3460c246f2724a9a4c0ee594699d11a8a33d4fb71e84a7b468dc6def0f521808e368db1a8991df525e8ad3d1a2f3c9424b4c71dfea362ae6028d7c36a77a00369ff4bb5f34814bb3987256bececbc1fe73f7f3b8246e6bc57e77e42d47ac74b8c849b21c6f52ded33f9c8b1a0f8cce442c4e2f318c450b54aa4cee6247f66bb385a53b1b83360dc0fcdc00f26"}, {0x58, 0x104, 0x1, "b74de0a454c01bf379e6ec4f2689f7436d2ac06c277ebf30762a5a445158dde16756340046b1f4f67eb793a997879ddd6d09a7a32a3786fd5ec0ee37a2927ff3d93f"}, {0x1010, 0x104, 0x8, "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"}, {0xd8, 0x110, 0x0, "bf3f78f29df1e7f99bc11f81d46b615e90ffa57273846f7ca31940e99fc1907e9ba7e879fc189771a138a8a6650fe9a98f2c92e680227918438925b508063ad8bf2a7f116c530211cc85d19496665e82274c1dfe735f8395d4d29ecc09e0e14c72ca1edf389a85bc6c46078205a6d38258b7f02d99af0afce1402730049ac7fb1136970460b2bcec36b84caf29010df4e9f781efc898ffb114a887a96c4920247c1e8831467e8581a65c94ad7bbb5bb513e43ef85dd1c7ef4917baae29c78bef2c30ff"}], 0x1208}}, {{&(0x7f0000000f40)=@isdn={0x22, 0x0, 0x7, 0xb9, 0xe9}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000fc0)="f43221223223f295ef6c97190d7c0499a4108e6637722219c84ac5d70cef8956d2d98f4b8594fa0b770728bb52d59be98c9674cbd7553f58d4dec4ee695ed0d23b9df53006bf3e96ca4d09469e674a62936531ed7b7ec094dda63ae44e2f62d24223f567bbc5c667e8e34ef96250762c91aee617ffd4b8c19103cbf0c39a7e7e15ff12da237dda4a861a00", 0x8b}], 0x1, &(0x7f000000b5c0)=[{0xf0, 0x114, 0x3, "d1f42db612eebe71794678cdae7d5aecd8af0ec4836cdd333ad69d8ef74adc7d87b7fca460e39d71d1d2d4fa47f7600a9536617094ffdce50451bf8f7ba72b480546c873b791c47039d6bdd17b469139ee66ff201331f67c292b0c3a5e3f6c3598efd5c2db6ce53b3541566a77268e1cbafb45f77224958d933851e2246d6a424a47ec556ca8540687cb258fe8a7c7a259063b1ffa8875e81d24ac721237f4c2dfe0f4b58b99e7510e8aa4256ca78a171b2f0a59e1dad854bf2b65c38eab66ac156adc3ba506cb71e98fa9518e8953b4b71668ea5320ded4e4fa62a8718ae6"}, {0x38, 0x3a, 0x4, "2c6f0599d3401a1f22027062361fedfbb91953c3c33f6ac822c1e96a4bc990199d34fe53ae76"}, {0xe0, 0x11, 0xc00, "9d83b68394c598d98dd5f0bfdf45065c6f238db13bffaf0419a2d4422007a6a472c751d8425607017f4fcc9961a17098c712814efecb5dfeb9a15041ce6c1a16e4027fe15935ff9d962574e3b2685fe458ea88417a2a81e656b2a304e5ed4aeadd13e36fae413619ce28b9a31b0e3994e6909f29c5f75d2c2b4dca7a1cf6d0e2df3e126e529185373a99e1998ffdb5a8b3091130e9c98971d4faa393f7130cefd4375cd75efb2465103cd065cc86e14e97e681415519ad84e9b7aa9f708277f5e0c3b1a21bfe7ded75dadc77b0ae7446"}, {0x1010, 0x10a, 0x8, "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"}, {0xf0, 0x109, 0x5, "0c9e36115bb4cbef0e0488d26abedddfdb9615f2df9720a66f062221788dfdfeb75373a734b2771e11d111c2d7a3e959c7dd7379e5d883adb8c1dc1e698a4c21bc153b1629cd858ffd57cf8f585dfb9024e8a11db8880cfd3093cb9df52ce191085b442074c92ae4c588a499a847236a0e1136c1a1bb208b4bdc61e6c38392d21bdb863282fc0c92f515b158ae1c7025710c452bde12025ee0da7f78a7581ebcd4546fcfc8961bc940fbbed0b0b6f0b186cb2aa46ccc58a35d271d8ca5e49991b8d1aa0a70dd9cbeb71d172cca85b58dcd0d16d9ad075162360319607489"}, {0x60, 0x119, 0x80, "bba0954dc7a068480de62377eea56afa343f0cf6ce4948dd50f3d5e93ca5d7785fe48818234c5578538209acdb20b7bccf6e21aaeb92f0558335d64ca2d3ff17fe2578553ddda4daecb189acf319c177"}], 0x1368}}], 0x3, 0xc000010) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r3, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0x4fcb6233, {0x0, 0x0, 0x0, '\x00', {0x7ff, 0x801, 0xadf, 0x804, 0xee01, 0x0, 0x2000, '\x00', 0x6, 0x81, 0x1, 0x3, {0x8, 0x8}, {0x4000000000006, 0x9}, {0x1, 0x7}, {0x1000000000, 0xa00}, 0x80008003, 0xa, 0xfffffffe, 0x6}}}}) write$FUSE_INIT(r3, &(0x7f0000001200)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x22000100}}, 0x50) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x3}) r6 = eventfd2(0x0, 0x1) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000000)={r6}) ioctl$KVM_IRQFD(r5, 0x4020ae76, &(0x7f0000000100)={r6, 0xfffffff9, 0x1, r6}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20040, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r7, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000200)={0x101ff, 0x6, 0x2, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) ioctl$sock_TIOCINQ(r8, 0x541b, &(0x7f00000001c0)) close_range(r1, 0xffffffffffffffff, 0x0) 10m47.543897258s ago: executing program 35 (id=661): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0x7, 0x4, 0x438, 0x0, 0x240, 0x0, 0x350, 0x350, 0x350, 0x4, 0x0, {[{{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, 0x0, 0xffffff00, 0x3, 0x0, {@empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x4002, 0x0, 0x0, 0x0, 0x0, 0xfffd, 'veth0_to_bridge\x00', 'veth1_macvtap\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="1758a179fe8f", @rand_addr=0x64010100, @multicast1, 0x2, 0xffffffff}}}, {{@arp={@rand_addr=0x64010101, @rand_addr, 0x0, 0x0, 0xc, 0x3, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x8a8cfb792f7af7f0]}}, 0x0, 0xfffc, 0x0, 0xa51, 0x0, 0x1000, 'team_slave_0\x00', 'veth0\x00', {0xff}}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x8, 0x5, 0x0, 0x0, "f245442f682c06144f1fb782d77bc38316214ca84d2f69b44810c3a40a495fa278a1728df4f6eaac07ddb7086bd6e732ed48ea39c4670df6527298897d41f42e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private=0xa010100, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x488) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="020080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r2 = getpgid(0xffffffffffffffff) timer_create(0x6, &(0x7f0000000180)={0x0, 0x3b, 0x1, @tid=r2}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) msync(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x58, 0x0, &(0x7f0000000600)=[@exit_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000100)={@ptr={0x70742a85, 0x0, &(0x7f0000000680)=""/4096, 0x1000, 0x1, 0x34}, @fda={0x66646185, 0x9, 0x1, 0x33}, @fda={0x66646185, 0x3, 0x1, 0x32}}, &(0x7f0000000080)={0x0, 0x28, 0x48}}}, @release={0x40046306, 0x3}, @increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) 10m45.709013593s ago: executing program 36 (id=687): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0x60a00, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x12, r1, 0x5147f000) fdatasync(r1) socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_STATS_FD_vm(r3, 0xaece) close_range(r0, 0xffffffffffffffff, 0x0) 10m11.68217328s ago: executing program 37 (id=974): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x400042, 0x1, 0x2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3, 0x3}, 0x10) keyctl$set_reqkey_keyring(0xe, 0x3) request_key(&(0x7f0000000480)='logon\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='.\x00', 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r2, 0xf370b000) futex(&(0x7f000000cffc), 0x80000000000b, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x2200, 0xe0) fsetxattr(r4, &(0x7f0000000000)=@known='user.incfs.size\x00', 0x0, 0x0, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{0xf, 0xa, 0x0, 0xffffff01}, {0x8000, 0x6, 0x81, 0xd28}, {0x2, 0x7, 0xf, 0x4}, {0xa, 0xf, 0x0, 0xc16}]}) recvmmsg$unix(r5, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/236, 0xec}, {&(0x7f0000000240)=""/249, 0xf9}, {&(0x7f0000000340)=""/93, 0x5d}, {&(0x7f00000003c0)=""/167, 0xa7}], 0x4, &(0x7f0000000580)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x128}}, {{&(0x7f00000006c0)=@abs, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000740)=""/102, 0x66}, {&(0x7f00000007c0)}, {&(0x7f0000000800)=""/133, 0x85}, {&(0x7f00000008c0)=""/27, 0x1b}], 0x4, &(0x7f0000000940)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x20}}, {{&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000000b00)=[{&(0x7f0000000a00)=""/131, 0x83}, {&(0x7f0000000ac0)}], 0x2, &(0x7f0000000b40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}], 0x3, 0x18002, 0x0) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) 10m5.709319497s ago: executing program 38 (id=1049): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) (async) ioctl$TCFLSH(r1, 0x400455c8, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') preadv(r3, &(0x7f0000000040)=[{&(0x7f0000000180)=""/66, 0x42}], 0x1, 0x2003, 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0x4}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000200)={@mcast2, 0x200000, 0x1, 0x0, 0xb, 0x7, 0x4f2}, 0x20) (async) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) mount$incfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB='rlog_wakeup_cnt=18446740073']) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000003c0)=ANY=[]) bind$bt_hci(r2, 0x0, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) 9m12.525582839s ago: executing program 39 (id=1720): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x29) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r0, 0x4068aea3, &(0x7f0000000280)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc2241, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"}) r3 = syz_open_pts(r2, 0x20800) dup3(r3, r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00') linkat(r5, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1400) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000ffdbdf2501000000000000000c41"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0x8, 0x7fff, 0x1, 0x1ff, 0x6, "29cf29c2b287426ddb33f844374acd18bfcf4f", 0x4, 0x1000000}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x44) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="3e7eb6a81fab7cc6"]) 8m34.566918342s ago: executing program 40 (id=2035): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000440)="4d1100000000fe8006000100e504c50900000000", 0x14, 0xc0, &(0x7f0000000340)={0x11, 0x7, 0x0, 0x1, 0xe, 0x6, @random}, 0x14) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@broadcast, @multicast1, r3}, 0xc) socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)="390000001300034700bb65e1c3e4ffff01000000560000dd0da83d00190004040400000007fd17e5ffff08000400000000a71d00000000", 0x37}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 8m26.461957781s ago: executing program 41 (id=2147): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = timerfd_create(0x4, 0x80800) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_clone(0x80004000, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, r3, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 7m55.244357933s ago: executing program 42 (id=2546): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000080)={&(0x7f00007ee000/0x2000)=nil, 0x2000}) listen(r1, 0x1) socketpair$unix(0x1, 0x6, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) r5 = socket$inet6(0xa, 0x80002, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00001009040000022a3e740009058bff7f000010110905", @ANYBLOB="4cae6c"], 0x0) sendmmsg$inet6(r5, &(0x7f0000002080)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x6, @loopback, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@flowinfo={{0x14, 0x29, 0xb, 0x7fff}}], 0x18}}], 0x1, 0x40000) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="000000010005000000fff002000400", @ANYRES32=r4, @ANYBLOB="040001000000000010000000000000002000040000000000"], 0x2c, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r6, &(0x7f00000001c0)={&(0x7f0000000080)=@abs, 0x6e, &(0x7f0000000180)=[{&(0x7f0000000580)=""/244}], 0x2, &(0x7f0000000240)=[@rights, @cred], 0xfffffdd9}, 0x40000001) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 6m41.578105836s ago: executing program 43 (id=4064): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) pipe2(0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xc2c}) write$FUSE_INIT(r1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000540)=ANY=[@ANYBLOB="010000000000000001000080"]) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)={0x3b, 0x0, [{0xc0010140}]}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000400)={0x6f, 0x0, 0x0, {0x7, 0x28, 0x80000001, 0x0, 0x0, 0x0, 0x2, 0x1}}, 0xfffffede) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c2c2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r7, &(0x7f00000042c0)={0x2020}, 0x2020) 6m3.660112104s ago: executing program 44 (id=4477): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x5}, @fda={0x66646185, 0x2, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) (async) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_debug_messages', 0x0, 0x80) (async) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_debug_messages', 0x0, 0x80) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0xfffffffffffffff9]}}) (async) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0xfffffffffffffff9]}}) sendmsg$IPSET_CMD_PROTOCOL(r4, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x4c, 0x1, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x58, 0x0, &(0x7f0000000780)=[@register_looper, @register_looper, @free_buffer={0x40086303, r1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000000c0)={0x30, 0x30, 0x30}}}], 0x81, 0x0, &(0x7f0000000900)="ef1740d2b5e2bde6ba6efdb0401fbe3822fb93701a8b7a068205becdcd71523688aaee2cbc3913027be4c8e3b8247e322c9f3c9742a657d4eb5c30f0a8737c41f1346258fd3c5d200e3bd8590f9d46f3cad919fdd48d65753afa8e86d25b3399b4ad710cdfb2a8a7bb6e567080fad8d454bab98ac824c77e7b03a323bdd8d6b05c"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x58, 0x0, &(0x7f0000000780)=[@register_looper, @register_looper, @free_buffer={0x40086303, r1}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000000c0)={0x30, 0x30, 0x30}}}], 0x81, 0x0, &(0x7f0000000900)="ef1740d2b5e2bde6ba6efdb0401fbe3822fb93701a8b7a068205becdcd71523688aaee2cbc3913027be4c8e3b8247e322c9f3c9742a657d4eb5c30f0a8737c41f1346258fd3c5d200e3bd8590f9d46f3cad919fdd48d65753afa8e86d25b3399b4ad710cdfb2a8a7bb6e567080fad8d454bab98ac824c77e7b03a323bdd8d6b05c"}) 6m3.627621965s ago: executing program 45 (id=4479): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000080)={0xa, 0x4e26, 0x80000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000024c0)=ANY=[@ANYBLOB], 0x70}, 0x810) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x84082, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x1}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x102080, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m13.851619256s ago: executing program 46 (id=6735): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e23, 0x6, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x7, 0x7, 0x5, 0x95d, 0xfffffffffffffffb, 0x2, 0x40, 0x6}, {0xe, 0x5, 0xb1b}, 0x401, 0x0, 0x2, 0xffffffffffffffff, 0x2, 0x2}, {{@in6=@empty, 0x4d4, 0x2a}, 0x39573c4e467c4e, @in=@loopback, 0x3502, 0x3, 0x0, 0x40, 0x9, 0x30, 0x7}}, 0xe8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0018"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x400, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988a8fbe888f7", 0x12}, {&(0x7f0000000540)="168f3f01d9a3678f90fd824eea53f172ba4b8b4d858b825ea85f4c8b57ec364a0000", 0x22}], 0x2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x0, 0x1000000}, @clear_death], 0x0, 0x0, 0x0}) 3m53.611160613s ago: executing program 47 (id=7128): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000340)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5257418, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) listen(0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000001400)=[@decrefs={0x40046307, 0x3}, @acquire={0x40046305, 0x3}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @exit_looper], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) (async) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) mount$9p_unix(&(0x7f0000000340)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5257418, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) (async) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@binder={0x73622a85, 0x10a, 0x5}, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) listen(0xffffffffffffffff, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x60, 0x0, &(0x7f0000001400)=[@decrefs={0x40046307, 0x3}, @acquire={0x40046305, 0x3}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @exit_looper], 0x0, 0x0, 0x0}) (async) 3m20.377002494s ago: executing program 3 (id=7659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8001, 0x4}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x40}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x84}, 0x1, 0x0, 0x0, 0x800}, 0x8011) 3m20.355327384s ago: executing program 3 (id=7660): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) syz_io_uring_setup(0x1e94, &(0x7f0000000180)={0x0, 0xbba4, 0x73651cda65ebb59b, 0x1, 0x3e3}, 0x0, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20e02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r2, 0x45809000) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000000)={{&(0x7f0000234000/0x3000)=nil, 0x3000}, 0x1}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000240)="390000001300034700ab65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002cc0)=""/2, 0x2) readv(r4, &(0x7f00000007c0)=[{0x0, 0xc}, {&(0x7f0000000700)=""/67, 0x43}, {0x0}], 0x3) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$netlink(0x10, 0x3, 0x0) mount$cgroup(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x1800004, &(0x7f0000000300)={[{@nofavordynmods}], [{@measure}]}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') statx(r6, &(0x7f00000000c0)='./cgroup\x00', 0x1000, 0x100, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="2d000e0080000000ffffffffffff08021100000008021100000000000000000000000000640000002503000000000000080026006c09"], 0x80}}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002cbd7000ffdbdf252500000008000300", @ANYRES32=0x0, @ANYBLOB="0c0099007de52700030000000800350004000000e5363a003bb758db260b1febdf9104f790490fd6f7a4000000000000000087ebd7e63545f40a3ea00511176983"], 0x38}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000100)="200000001300034700bb65e1c3e4ffff01000000005600000025000000", 0x1d}], 0x1) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r8, 0x1, 0xa, 0x0, &(0x7f00000015c0)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) close_range(r8, r0, 0x0) 3m19.510048021s ago: executing program 3 (id=7671): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async, rerun: 64) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64) fchdir(0xffffffffffffffff) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x11) (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000000c0)='/dev/uinput\x00') (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000040)='/dev/uinput\x00') (async) r2 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m19.493680061s ago: executing program 3 (id=7672): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x2) openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 3m19.438109362s ago: executing program 3 (id=7673): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x20010, r0, 0x44da2000) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd']) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000018c0), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x80001, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0x1e, 0x1b, "ec28a144f13d7607"}) write$binfmt_aout(r4, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x12, "0062ba5d8200"}) r5 = syz_open_pts(r4, 0x20800) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x44) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0d03001f000000000000130000001c000980070002"], 0x30}}, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast2, 0x100}}, {{0xa, 0x0, 0x8, @local}}}, 0x134) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r10, 0x4010ae68, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001900)=ANY=[@ANYBLOB="1800000f", @ANYRES16=r2, @ANYBLOB="a9732dbd7000fedbdf251300000004000980"], 0x18}, 0x1, 0x0, 0x0, 0x40000004}, 0x8040) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x60000009, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r11 = socket$xdp(0x2c, 0x3, 0x0) r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r12, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 3m19.410969633s ago: executing program 3 (id=7674): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000001380)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00]) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x103000, 0x18f) open$dir(&(0x7f00000002c0)='./file1\x00', 0x48040, 0x36) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0x3ed) lchown(&(0x7f00000001c0)='./file1\x00', 0xee00, 0x0) open(&(0x7f00000012c0)='./file1\x00', 0x60840, 0x53) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)=ANY=[@ANYBLOB="c8d67fda360f92772ef3a3aef6edc4e0eae49049c17e08563e52d4e7b86da217f2d41aba2d9968", @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf251b0000000700210061610000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r6, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01022bbd7000fcdbdf250200000021b385a4204582f220"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa07, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) pread64(r1, &(0x7f0000000200)=""/4098, 0x1002, 0xd37) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000080)={0x1, 0x1, 0x7a4a, 0x4163, 0x2, 0xa9c}) 3m19.356681923s ago: executing program 48 (id=7674): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000001380)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee00]) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x103000, 0x18f) open$dir(&(0x7f00000002c0)='./file1\x00', 0x48040, 0x36) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0x3ed) lchown(&(0x7f00000001c0)='./file1\x00', 0xee00, 0x0) open(&(0x7f00000012c0)='./file1\x00', 0x60840, 0x53) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)=ANY=[@ANYBLOB="c8d67fda360f92772ef3a3aef6edc4e0eae49049c17e08563e52d4e7b86da217f2d41aba2d9968", @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf251b0000000700210061610000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r6, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="01022bbd7000fcdbdf250200000021b385a4204582f220"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_CONTINUE(r8, 0xc020aa07, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) pread64(r1, &(0x7f0000000200)=""/4098, 0x1002, 0xd37) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, &(0x7f0000000080)={0x1, 0x1, 0x7a4a, 0x4163, 0x2, 0xa9c}) 3m17.988046741s ago: executing program 0 (id=7692): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000180)=[@register_looper], 0x5e, 0x0, &(0x7f0000000400)="b9d787b3af89a5d99a5a970a084485fae40e5ad0c55c8de8677cb6d6c24e611e69b8982fd15313e6a00abff49a2b981f3f98967aff7a8c71c6ae7fbe95c5a960489eaa8e65f3104c316074bb009024bd9fa592aa15f767d450fb5bad4248"}) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.metadata\x00') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3m17.884521913s ago: executing program 0 (id=7693): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) fstat(r0, &(0x7f00000000c0)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x5875, @mcast1, 0x3}, 0x1c) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @empty}, 0x6}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f00000005c0)='net/udplite6\x00') preadv(r4, &(0x7f0000000540)=[{&(0x7f0000000200)=""/161, 0xa1}], 0x1, 0xa3, 0x7) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="c40000001300e9990000000000000000fe800000000000002a145671af0c418f37354d88afa553f600000000000000bbe000000200000000000000000000000000000000000000000a00400000000000ed23cf9218f0e1338cabc5c892d2fa5c578b571ac204fb227ed44c8ce75c56d6bb0955e1ac70ea08c2154cd3d17d0f654c", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0008000800080000030000"], 0xc4}}, 0x4000) r6 = syz_open_dev$evdev(&(0x7f0000000080), 0x8, 0x8a800) ioctl$EVIOCGMTSLOTS(r6, 0x8040450a, &(0x7f00000001c0)=""/181) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r1, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r1}, @flat=@handle={0x73682a85, 0x1200, 0x3}, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 3m17.857592353s ago: executing program 0 (id=7694): creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x256c, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x2}]}}, 0x0}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@directio}]}}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r4, &(0x7f00000029c0)={0x2020}, 0x2020) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$ASHMEM_GET_SIZE(r6, 0x7704, 0x0) 3m14.802290833s ago: executing program 0 (id=7718): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000001640)={0x1f, 0xfdce}, 0xe) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) chroot(&(0x7f0000000100)='./file0\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0xa81404, 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0\x00') fcntl$setstatus(r1, 0x4, 0x48400) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ptrace$ARCH_SET_CPUID(0x1e, r2, 0x0, 0x1012) r5 = eventfd2(0x400001, 0x800) dup(0xffffffffffffffff) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f00000002c0)={0x100, r5}) close_range(r1, 0xffffffffffffffff, 0x0) 3m14.801839403s ago: executing program 0 (id=7719): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$rtc(&(0x7f0000000040), 0x200, 0xb0000) fsetxattr$security_selinux(r3, &(0x7f00000000c0), &(0x7f0000000100)='system_u:object_r:initrc_exec_t:s0\x00', 0x23, 0x2) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0xdddd0000, 0xeeee6001, 0x3, 0x0, 0x40, 0x0, 0x7d, 0x6, 0x5, 0x3, 0x3, 0x3}, {0xeeef0000, 0x5000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0x3000, 0x1, 0x9, 0x3, 0x4, 0x42, 0xb, 0xff, 0xa, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xb, 0x3, 0x15, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x0, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8000000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0xff, 0x70}, {0x100000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xb, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x6000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0xff]}) close_range(r0, 0xffffffffffffffff, 0x0) 3m14.736097524s ago: executing program 0 (id=7722): munlockall() pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) sendfile(r0, r1, 0x0, 0x3) socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r2, 0x5434, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101c86e3d2099040c504933010203010902240001000010000904a9020146662700092402020600040000090582020002000110"], 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, 0x0, 0x0) unshare(0x62040200) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x0, 0x60, 0x14, 0x72}) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="4487"]) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x24014c70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) r9 = dup2(r8, r6) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000180)={0x3, 0x3, 0x7, 0x4, 0x10000}) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') getsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000200)=0x4) read$FUSE(r10, &(0x7f0000007100)={0x2020}, 0x941f) 3m14.682139285s ago: executing program 49 (id=7722): munlockall() pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) sendfile(r0, r1, 0x0, 0x3) socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r2, 0x5434, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12014101c86e3d2099040c504933010203010902240001000010000904a9020146662700092402020600040000090582020002000110"], 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, 0x0, 0x0) unshare(0x62040200) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0x0, 0x60, 0x14, 0x72}) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="4487"]) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x24014c70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) r9 = dup2(r8, r6) ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000180)={0x3, 0x3, 0x7, 0x4, 0x10000}) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') getsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f0000000100)=0x1, &(0x7f0000000200)=0x4) read$FUSE(r10, &(0x7f0000007100)={0x2020}, 0x941f) 3m1.425453625s ago: executing program 6 (id=7940): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="a8000000", @ANYBLOB="01002bbd7000fedbdf250e0000004400028006000f000f0000000800050001000000080008000000000008000700080000000800b94105000500000006"], 0xa8}, 0x1, 0x0, 0x0, 0x40}, 0x4041) pselect6(0x40, &(0x7f0000000100)={0x1, 0xd2, 0x5, 0x0, 0x25c, 0x2, 0x7fff}, 0x0, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000001c0)={0x10003, 0x1, 0x1, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r6 = dup(r5) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) read(r9, 0x0, 0x0) sendto$packet(r7, &(0x7f0000000080)="4d01000000000000002f00e50414090b00920000", 0x5e0, 0x81, &(0x7f0000000340)={0x11, 0x0, r8, 0x1, 0xe, 0x6, @broadcast}, 0x14) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000040)=@x86={0x5, 0x2, 0x4, 0x0, 0x7, 0xe5, 0xb, 0xf, 0x7e, 0x7, 0x1, 0x6, 0x0, 0x5, 0x1, 0x0, 0x4, 0x9, 0x0, '\x00', 0x87, 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000000c0)=0xffff) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000280)={'veth0_virt_wifi\x00', 0x10}) ioctl$TCFLSH(r2, 0x400455c8, 0x3f) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f0000000200)={'\x00', 0x0, 0x3, 0x7}) fcntl$addseals(r1, 0x409, 0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x13) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) 3m0.558539602s ago: executing program 6 (id=7968): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000240)={0x1, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 64) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0xd5, @loopback, 0xfff}, 0x1c) (rerun: 64) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x481, 0x0) r6 = dup(r5) ioctl$PTP_EXTTS_REQUEST2(r6, 0x40603d07, &(0x7f0000000180)={0xfffffffe}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000480)="66b9800000c00f326635000100000f3064360f886300a70f30baf80c66b80df85e8466efb00fee0f00db0f0666b8038000000f23c80f21f866350c00b0000f23f80f009b486f0f07", 0x48}], 0x1, 0x49, 0x0, 0x0) (async) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}, 0x8001) (async) ioctl$SIOCSIFHWADDR(r0, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote}) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0xc4) r9 = ioctl$KVM_GET_STATS_FD_vm(r6, 0xaece) ioctl$FUSE_DEV_IOC_BACKING_OPEN(r6, 0x4010e501, &(0x7f0000000000)={r9}) (async) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000a01000/0x3000)=nil, 0x3000, 0xb635773f05ebbee8, 0x11, 0xffffffffffffffff, 0x906d0000) setpgid(r10, 0xffffffffffffffff) (async) wait4(r10, 0x0, 0x2, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r10, 0x0, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) (rerun: 64) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, &(0x7f0000000380)) (async, rerun: 32) ioctl$BINDER_GET_EXTENDED_ERROR(r7, 0xc0046209, 0x0) (rerun: 32) 3m0.405158195s ago: executing program 6 (id=7977): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async) 3m0.369096125s ago: executing program 6 (id=7978): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x40040000, 0x80, 0x4, 0x0, 0x2, 0x0, 0x0, 0x20, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) close(r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r7, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20008080) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, r6, 0x603, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x80}]}, 0x28}}, 0x10) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0xc3ff}}, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000000080008000d000000", 0x24) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000041c0)=[{0x6}]}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="2ba52ebd7000fddbdf251b00000006002100"], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40c0) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x58, r10, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "31e6465523"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "6f67a2dedc5093e5ab568922a5"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "06e21a777618dae6de3f027d65"}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x804) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r8) 3m0.246320788s ago: executing program 6 (id=7979): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b0001000000000904"], 0x0) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x2000000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfde, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 3m0.215750539s ago: executing program 6 (id=7980): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="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", 0x19c, 0x10, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a0005181b01ccae12fb00000a"], 0x164}}, 0x40014) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newtclass={0xc94, 0x28, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x10}, {0x1, 0x3}, {0x6, 0xa}}, [@c_cbq={{0x8}, {0xc50, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x10001, 0x0, 0xfa3, 0x7, 0x7, 0x0, 0x6, 0x5, 0x3, 0x9, 0x7fffffff, 0x9, 0x1, 0x7, 0xc, 0x6, 0x1e, 0x1, 0x4, 0x5, 0x2, 0x7, 0x200, 0x8d, 0x3, 0xa6, 0x9, 0x80, 0x1, 0x7ff, 0x5018, 0x9, 0x7f00, 0x4, 0x6, 0xef, 0x400, 0x5, 0x101, 0x3, 0xf, 0x5, 0x5, 0x8, 0xac, 0x2, 0x8000, 0x1, 0x6, 0x247, 0x80, 0x3, 0xd56, 0xd91, 0x6, 0x2, 0x9, 0x2, 0x1, 0x557, 0x1000, 0xfffffffe, 0x6, 0x8b01655, 0x4, 0x81, 0xfff, 0x4, 0x173, 0xbd4, 0xc, 0x0, 0x56, 0xb262, 0x8, 0x0, 0x300000, 0x3, 0x5, 0x400, 0x9, 0x21b, 0x6, 0x2, 0x0, 0x1, 0xef, 0xc, 0x0, 0x4, 0x2, 0x9ef5, 0x3, 0x8, 0xf, 0x9, 0x0, 0x4, 0x7, 0x50000, 0x1, 0x7, 0xfffffffc, 0x3ff, 0x1c, 0x5, 0x8, 0x8, 0x44c8, 0xb, 0x4, 0x5, 0x800, 0x0, 0x8, 0x4, 0x9, 0xda, 0x1, 0x7, 0x6, 0x9, 0x7, 0x5, 0x9c, 0x5, 0x7, 0x2, 0x7, 0x3, 0x9, 0x60e5a7, 0xfffffffa, 0x6, 0x4, 0xa, 0x10000, 0x6, 0x5ea6, 0x80000001, 0x3, 0x7fff, 0x8, 0xee56, 0x8, 0x1, 0x80, 0xffffff07, 0x0, 0xfffff255, 0x40, 0x800, 0x1, 0x7, 0x4, 0x31, 0x1, 0x10001, 0x7ff, 0x3, 0x9, 0x2ac4, 0x1, 0x101, 0x58bc, 0x7, 0x1000, 0x7, 0x6, 0x9, 0x7fffffff, 0x7ff, 0xfffffff3, 0x7, 0x5, 0x400, 0x1, 0x1, 0x1c42, 0x6, 0x7, 0x1, 0x4, 0x9, 0x3, 0x3, 0x2318, 0x7, 0x5, 0x6, 0x46b, 0xd, 0x800, 0xb, 0x9, 0xfff, 0x2e, 0x5, 0x9, 0x4, 0x2, 0x2, 0x8, 0x2, 0x80000001, 0x7f, 0x0, 0xc, 0x9, 0xab4d, 0xf, 0x1000, 0x7, 0x155, 0x6, 0x4, 0x8000, 0x100, 0xfffffff8, 0x7, 0x200, 0xccb, 0x9, 0x9, 0x1, 0xb53a, 0x9, 0x6c51, 0x7, 0x9, 0x7f, 0x1, 0x4, 0xd, 0xb, 0x81, 0x10, 0xa, 0x7fff, 0x9, 0xf541, 0x97, 0x0, 0xfffffffe, 0x8, 0x8001, 0xfffff9ac, 0x1e, 0x4, 0x200, 0xe84, 0xfffffff7, 0x1, 0x2, 0x467d, 0x4]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xfff3, 0xffe0}, 0x0, 0xfffffff7}}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffffffff, 0xd, 0x6, 0xcb, 0x9, 0x2, 0x7, 0x7fffffff, 0x3ff, 0x81, 0x464f, 0xfec00000, 0x1, 0xffff0, 0x101, 0x0, 0x68ba, 0x8, 0x5, 0xfffe, 0x5, 0x5, 0xfffffffb, 0x0, 0x4, 0x961, 0xffffb1d3, 0x194, 0xffffffff, 0x7, 0x8000, 0x7, 0x5, 0x5f8, 0xc0000, 0x7, 0x9, 0x3, 0x9, 0x6, 0x3, 0x9, 0x8, 0x4800000, 0x9, 0x135c, 0x4800, 0x3, 0xfffffc00, 0x14000000, 0x9, 0x3, 0x6, 0x7f, 0x8000, 0xbc7, 0x1000, 0x6, 0x1, 0xd4, 0x9, 0x1, 0x7, 0x3, 0x1400000, 0x0, 0xff, 0xa, 0x3ff, 0x2, 0x9, 0x8, 0x0, 0x8, 0x7, 0x7ff, 0x257, 0x5, 0x220f, 0xe0c8, 0x4, 0x9, 0xe, 0xe, 0x1, 0x7fff, 0x3, 0xfff, 0x6, 0x3, 0x1, 0x9, 0x7e, 0xffff, 0x0, 0x55e, 0x982, 0x2, 0x2, 0xfffe0000, 0x2, 0x6, 0x0, 0x918, 0x84a17dc, 0xa, 0x5e, 0x1d485cc5, 0x1f0a, 0xb0e, 0x0, 0x5, 0x4b, 0x0, 0x8, 0x2, 0x1, 0x8, 0x45e, 0xbc, 0x6, 0x5, 0x3, 0x805, 0x9, 0x7, 0x5cea5ead, 0x3, 0x9, 0x6, 0x10001, 0x8001, 0x40, 0x300000, 0xffff, 0xea, 0x6, 0x8, 0x800, 0x1, 0x9, 0xb, 0x8, 0xffffffff, 0x5, 0x5, 0xe9, 0x8, 0xffff, 0x2, 0x9, 0xfd3, 0x9, 0x0, 0xfffffffa, 0x0, 0x5, 0xfffff07c, 0x2, 0x8, 0xd3eb, 0x8e3e, 0x1, 0x1, 0x3, 0x4, 0x6, 0x8, 0x7, 0x7fff, 0x2, 0x1ff, 0x1, 0xd8, 0x8, 0xe2fe, 0x5, 0x3ff, 0xff, 0xfffffffd, 0x1, 0x5, 0x20000, 0x401, 0xffffffff, 0x1, 0xf, 0x1, 0x2, 0xd72, 0x4, 0x7, 0x3, 0xa6, 0x4, 0x0, 0x6, 0x7, 0x6a6e, 0x0, 0x7, 0x8fd4, 0x3, 0x7, 0x8, 0x8001, 0x8, 0xe, 0x3, 0x5, 0x0, 0xbf, 0x40, 0xc, 0x1000, 0x1, 0x9, 0x9, 0x3c4b, 0x5, 0x1, 0x8, 0x3, 0x7, 0xac, 0x9, 0x8, 0x0, 0x5, 0xf9f, 0xe000, 0x5c, 0x9, 0x8, 0xc327, 0x4, 0x0, 0xffffffc0, 0x80000000, 0x5, 0x4, 0x1, 0xa, 0x80000000, 0x400, 0x5, 0x810f, 0x0, 0x4, 0x3, 0x5, 0x81, 0x401, 0x263, 0x7ff, 0x3]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x1c000000, 0x16, 0xffffffff, 0x1000, 0x3, 0x0, 0x5, 0x506, 0x0, 0xfffff5d4, 0x5, 0x4, 0xfffffffe, 0x60, 0x6, 0x1, 0x7f, 0x4, 0x3, 0x1000, 0x5, 0x7, 0x6, 0x1c0000, 0x0, 0x0, 0x400, 0x5, 0xfffff800, 0x101, 0x7, 0x4, 0x1, 0xfffff23c, 0x4, 0x101, 0x7, 0x6, 0x6, 0x8, 0x1d3, 0x7fffffff, 0x4, 0x4, 0x6, 0x80000001, 0xd, 0x8, 0x7, 0x1000, 0xfffffffc, 0x200, 0x0, 0x7, 0x2d7ab8c, 0xdff, 0x0, 0x8, 0x1, 0x9, 0x4, 0x3, 0x80, 0x6, 0x2, 0x8, 0x6, 0x200000, 0x812, 0x2, 0x3, 0x200, 0x84c5, 0x7, 0x1000, 0x5, 0xfffffff7, 0x5, 0x8001, 0x6, 0x6, 0x7, 0x8001, 0xfe, 0x7, 0x80000001, 0x7fff, 0x61, 0x6, 0x8000, 0x40, 0x4, 0x7, 0x5, 0x5214, 0x510, 0x7, 0x10000, 0x1, 0x9, 0x5, 0x8, 0x1, 0x7, 0x7, 0x2, 0x1, 0xde, 0x0, 0x9, 0x3, 0x9, 0xd, 0x80, 0x7, 0x9, 0xa71e, 0x10, 0x3, 0xff, 0x5, 0x1, 0x2, 0x0, 0x6, 0x401, 0x7, 0xff, 0x2, 0x400, 0x5, 0x88, 0x3, 0x6, 0x4, 0x1, 0x8cc8, 0x7fffffff, 0x7, 0x3, 0x5, 0x4398, 0x40, 0x191, 0xd, 0x5, 0x6, 0x4, 0x9, 0xad74, 0x5, 0x2, 0x5, 0xab, 0x1ff, 0x5, 0x80000001, 0x4d30830d, 0x0, 0x4, 0x0, 0x1, 0x800, 0x37b, 0x1, 0x6, 0x0, 0x2, 0x4, 0x423, 0x7, 0x9, 0x6, 0x9, 0x8, 0x9, 0x3, 0x59379b3b, 0x2, 0x8, 0x0, 0x2, 0x7fff, 0x7fff, 0x10, 0x5, 0xaf, 0x6, 0xd, 0x2, 0x40, 0x2850, 0x6, 0x2, 0x5, 0x5, 0x8, 0x9e9d, 0x10000, 0x6, 0x21, 0xd3, 0x9d, 0x8, 0x7, 0x3, 0x1, 0x7, 0x7ff, 0xb5d8, 0x6, 0x0, 0x6b, 0x401, 0x2, 0x45f4, 0x3, 0x0, 0x3, 0x3, 0x7f, 0xdabc8538, 0xf15, 0xfffffff7, 0xd25c, 0xfffffc00, 0x800, 0x18742cb0, 0x20, 0x80a, 0x7fffffff, 0xfffffff7, 0x6, 0x800, 0x8, 0x24000000, 0x9, 0x100, 0x40, 0x7, 0x6, 0x6, 0x4649, 0x1800000, 0x4, 0x0, 0x83, 0xe, 0x1, 0x9bc7, 0x449, 0x9cb, 0x3, 0x4, 0x8, 0x2f54]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xbe, 0x8, 0x5b, 0x6, 0x9, 0xffffe872}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x0, 0x7, 0x0, 0x10, 0x3, 0xde}}, @TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x1, 0x9, 0x6, 0xfffb, 0xfffffff8}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x34}}}]}, 0xc94}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0xfe42, 0x8080, 0x0, 0xfd74) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f000001b000/0x2000)=nil, 0x2000, 0x100000e, 0x12, r0, 0x3ed04000) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (async) sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="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", 0x19c, 0x10, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a0005181b01ccae12fb00000a"], 0x164}}, 0x40014) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) (async) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev}, &(0x7f0000000100)=0xc) (async) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newtclass={0xc94, 0x28, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x10}, {0x1, 0x3}, {0x6, 0xa}}, [@c_cbq={{0x8}, {0xc50, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x10001, 0x0, 0xfa3, 0x7, 0x7, 0x0, 0x6, 0x5, 0x3, 0x9, 0x7fffffff, 0x9, 0x1, 0x7, 0xc, 0x6, 0x1e, 0x1, 0x4, 0x5, 0x2, 0x7, 0x200, 0x8d, 0x3, 0xa6, 0x9, 0x80, 0x1, 0x7ff, 0x5018, 0x9, 0x7f00, 0x4, 0x6, 0xef, 0x400, 0x5, 0x101, 0x3, 0xf, 0x5, 0x5, 0x8, 0xac, 0x2, 0x8000, 0x1, 0x6, 0x247, 0x80, 0x3, 0xd56, 0xd91, 0x6, 0x2, 0x9, 0x2, 0x1, 0x557, 0x1000, 0xfffffffe, 0x6, 0x8b01655, 0x4, 0x81, 0xfff, 0x4, 0x173, 0xbd4, 0xc, 0x0, 0x56, 0xb262, 0x8, 0x0, 0x300000, 0x3, 0x5, 0x400, 0x9, 0x21b, 0x6, 0x2, 0x0, 0x1, 0xef, 0xc, 0x0, 0x4, 0x2, 0x9ef5, 0x3, 0x8, 0xf, 0x9, 0x0, 0x4, 0x7, 0x50000, 0x1, 0x7, 0xfffffffc, 0x3ff, 0x1c, 0x5, 0x8, 0x8, 0x44c8, 0xb, 0x4, 0x5, 0x800, 0x0, 0x8, 0x4, 0x9, 0xda, 0x1, 0x7, 0x6, 0x9, 0x7, 0x5, 0x9c, 0x5, 0x7, 0x2, 0x7, 0x3, 0x9, 0x60e5a7, 0xfffffffa, 0x6, 0x4, 0xa, 0x10000, 0x6, 0x5ea6, 0x80000001, 0x3, 0x7fff, 0x8, 0xee56, 0x8, 0x1, 0x80, 0xffffff07, 0x0, 0xfffff255, 0x40, 0x800, 0x1, 0x7, 0x4, 0x31, 0x1, 0x10001, 0x7ff, 0x3, 0x9, 0x2ac4, 0x1, 0x101, 0x58bc, 0x7, 0x1000, 0x7, 0x6, 0x9, 0x7fffffff, 0x7ff, 0xfffffff3, 0x7, 0x5, 0x400, 0x1, 0x1, 0x1c42, 0x6, 0x7, 0x1, 0x4, 0x9, 0x3, 0x3, 0x2318, 0x7, 0x5, 0x6, 0x46b, 0xd, 0x800, 0xb, 0x9, 0xfff, 0x2e, 0x5, 0x9, 0x4, 0x2, 0x2, 0x8, 0x2, 0x80000001, 0x7f, 0x0, 0xc, 0x9, 0xab4d, 0xf, 0x1000, 0x7, 0x155, 0x6, 0x4, 0x8000, 0x100, 0xfffffff8, 0x7, 0x200, 0xccb, 0x9, 0x9, 0x1, 0xb53a, 0x9, 0x6c51, 0x7, 0x9, 0x7f, 0x1, 0x4, 0xd, 0xb, 0x81, 0x10, 0xa, 0x7fff, 0x9, 0xf541, 0x97, 0x0, 0xfffffffe, 0x8, 0x8001, 0xfffff9ac, 0x1e, 0x4, 0x200, 0xe84, 0xfffffff7, 0x1, 0x2, 0x467d, 0x4]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xfff3, 0xffe0}, 0x0, 0xfffffff7}}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffffffff, 0xd, 0x6, 0xcb, 0x9, 0x2, 0x7, 0x7fffffff, 0x3ff, 0x81, 0x464f, 0xfec00000, 0x1, 0xffff0, 0x101, 0x0, 0x68ba, 0x8, 0x5, 0xfffe, 0x5, 0x5, 0xfffffffb, 0x0, 0x4, 0x961, 0xffffb1d3, 0x194, 0xffffffff, 0x7, 0x8000, 0x7, 0x5, 0x5f8, 0xc0000, 0x7, 0x9, 0x3, 0x9, 0x6, 0x3, 0x9, 0x8, 0x4800000, 0x9, 0x135c, 0x4800, 0x3, 0xfffffc00, 0x14000000, 0x9, 0x3, 0x6, 0x7f, 0x8000, 0xbc7, 0x1000, 0x6, 0x1, 0xd4, 0x9, 0x1, 0x7, 0x3, 0x1400000, 0x0, 0xff, 0xa, 0x3ff, 0x2, 0x9, 0x8, 0x0, 0x8, 0x7, 0x7ff, 0x257, 0x5, 0x220f, 0xe0c8, 0x4, 0x9, 0xe, 0xe, 0x1, 0x7fff, 0x3, 0xfff, 0x6, 0x3, 0x1, 0x9, 0x7e, 0xffff, 0x0, 0x55e, 0x982, 0x2, 0x2, 0xfffe0000, 0x2, 0x6, 0x0, 0x918, 0x84a17dc, 0xa, 0x5e, 0x1d485cc5, 0x1f0a, 0xb0e, 0x0, 0x5, 0x4b, 0x0, 0x8, 0x2, 0x1, 0x8, 0x45e, 0xbc, 0x6, 0x5, 0x3, 0x805, 0x9, 0x7, 0x5cea5ead, 0x3, 0x9, 0x6, 0x10001, 0x8001, 0x40, 0x300000, 0xffff, 0xea, 0x6, 0x8, 0x800, 0x1, 0x9, 0xb, 0x8, 0xffffffff, 0x5, 0x5, 0xe9, 0x8, 0xffff, 0x2, 0x9, 0xfd3, 0x9, 0x0, 0xfffffffa, 0x0, 0x5, 0xfffff07c, 0x2, 0x8, 0xd3eb, 0x8e3e, 0x1, 0x1, 0x3, 0x4, 0x6, 0x8, 0x7, 0x7fff, 0x2, 0x1ff, 0x1, 0xd8, 0x8, 0xe2fe, 0x5, 0x3ff, 0xff, 0xfffffffd, 0x1, 0x5, 0x20000, 0x401, 0xffffffff, 0x1, 0xf, 0x1, 0x2, 0xd72, 0x4, 0x7, 0x3, 0xa6, 0x4, 0x0, 0x6, 0x7, 0x6a6e, 0x0, 0x7, 0x8fd4, 0x3, 0x7, 0x8, 0x8001, 0x8, 0xe, 0x3, 0x5, 0x0, 0xbf, 0x40, 0xc, 0x1000, 0x1, 0x9, 0x9, 0x3c4b, 0x5, 0x1, 0x8, 0x3, 0x7, 0xac, 0x9, 0x8, 0x0, 0x5, 0xf9f, 0xe000, 0x5c, 0x9, 0x8, 0xc327, 0x4, 0x0, 0xffffffc0, 0x80000000, 0x5, 0x4, 0x1, 0xa, 0x80000000, 0x400, 0x5, 0x810f, 0x0, 0x4, 0x3, 0x5, 0x81, 0x401, 0x263, 0x7ff, 0x3]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x1c000000, 0x16, 0xffffffff, 0x1000, 0x3, 0x0, 0x5, 0x506, 0x0, 0xfffff5d4, 0x5, 0x4, 0xfffffffe, 0x60, 0x6, 0x1, 0x7f, 0x4, 0x3, 0x1000, 0x5, 0x7, 0x6, 0x1c0000, 0x0, 0x0, 0x400, 0x5, 0xfffff800, 0x101, 0x7, 0x4, 0x1, 0xfffff23c, 0x4, 0x101, 0x7, 0x6, 0x6, 0x8, 0x1d3, 0x7fffffff, 0x4, 0x4, 0x6, 0x80000001, 0xd, 0x8, 0x7, 0x1000, 0xfffffffc, 0x200, 0x0, 0x7, 0x2d7ab8c, 0xdff, 0x0, 0x8, 0x1, 0x9, 0x4, 0x3, 0x80, 0x6, 0x2, 0x8, 0x6, 0x200000, 0x812, 0x2, 0x3, 0x200, 0x84c5, 0x7, 0x1000, 0x5, 0xfffffff7, 0x5, 0x8001, 0x6, 0x6, 0x7, 0x8001, 0xfe, 0x7, 0x80000001, 0x7fff, 0x61, 0x6, 0x8000, 0x40, 0x4, 0x7, 0x5, 0x5214, 0x510, 0x7, 0x10000, 0x1, 0x9, 0x5, 0x8, 0x1, 0x7, 0x7, 0x2, 0x1, 0xde, 0x0, 0x9, 0x3, 0x9, 0xd, 0x80, 0x7, 0x9, 0xa71e, 0x10, 0x3, 0xff, 0x5, 0x1, 0x2, 0x0, 0x6, 0x401, 0x7, 0xff, 0x2, 0x400, 0x5, 0x88, 0x3, 0x6, 0x4, 0x1, 0x8cc8, 0x7fffffff, 0x7, 0x3, 0x5, 0x4398, 0x40, 0x191, 0xd, 0x5, 0x6, 0x4, 0x9, 0xad74, 0x5, 0x2, 0x5, 0xab, 0x1ff, 0x5, 0x80000001, 0x4d30830d, 0x0, 0x4, 0x0, 0x1, 0x800, 0x37b, 0x1, 0x6, 0x0, 0x2, 0x4, 0x423, 0x7, 0x9, 0x6, 0x9, 0x8, 0x9, 0x3, 0x59379b3b, 0x2, 0x8, 0x0, 0x2, 0x7fff, 0x7fff, 0x10, 0x5, 0xaf, 0x6, 0xd, 0x2, 0x40, 0x2850, 0x6, 0x2, 0x5, 0x5, 0x8, 0x9e9d, 0x10000, 0x6, 0x21, 0xd3, 0x9d, 0x8, 0x7, 0x3, 0x1, 0x7, 0x7ff, 0xb5d8, 0x6, 0x0, 0x6b, 0x401, 0x2, 0x45f4, 0x3, 0x0, 0x3, 0x3, 0x7f, 0xdabc8538, 0xf15, 0xfffffff7, 0xd25c, 0xfffffc00, 0x800, 0x18742cb0, 0x20, 0x80a, 0x7fffffff, 0xfffffff7, 0x6, 0x800, 0x8, 0x24000000, 0x9, 0x100, 0x40, 0x7, 0x6, 0x6, 0x4649, 0x1800000, 0x4, 0x0, 0x83, 0xe, 0x1, 0x9bc7, 0x449, 0x9cb, 0x3, 0x4, 0x8, 0x2f54]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xbe, 0x8, 0x5b, 0x6, 0x9, 0xffffe872}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x0, 0x7, 0x0, 0x10, 0x3, 0xde}}, @TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x1, 0x9, 0x6, 0xfffb, 0xfffffff8}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x34}}}]}, 0xc94}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) (async) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$inet6(r1, 0x0, 0xfe42, 0x8080, 0x0, 0xfd74) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) (async) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) (async) mmap(&(0x7f000001b000/0x2000)=nil, 0x2000, 0x100000e, 0x12, r0, 0x3ed04000) (async) 3m0.16483347s ago: executing program 50 (id=7980): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="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", 0x19c, 0x10, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a0005181b01ccae12fb00000a"], 0x164}}, 0x40014) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newtclass={0xc94, 0x28, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x10}, {0x1, 0x3}, {0x6, 0xa}}, [@c_cbq={{0x8}, {0xc50, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x10001, 0x0, 0xfa3, 0x7, 0x7, 0x0, 0x6, 0x5, 0x3, 0x9, 0x7fffffff, 0x9, 0x1, 0x7, 0xc, 0x6, 0x1e, 0x1, 0x4, 0x5, 0x2, 0x7, 0x200, 0x8d, 0x3, 0xa6, 0x9, 0x80, 0x1, 0x7ff, 0x5018, 0x9, 0x7f00, 0x4, 0x6, 0xef, 0x400, 0x5, 0x101, 0x3, 0xf, 0x5, 0x5, 0x8, 0xac, 0x2, 0x8000, 0x1, 0x6, 0x247, 0x80, 0x3, 0xd56, 0xd91, 0x6, 0x2, 0x9, 0x2, 0x1, 0x557, 0x1000, 0xfffffffe, 0x6, 0x8b01655, 0x4, 0x81, 0xfff, 0x4, 0x173, 0xbd4, 0xc, 0x0, 0x56, 0xb262, 0x8, 0x0, 0x300000, 0x3, 0x5, 0x400, 0x9, 0x21b, 0x6, 0x2, 0x0, 0x1, 0xef, 0xc, 0x0, 0x4, 0x2, 0x9ef5, 0x3, 0x8, 0xf, 0x9, 0x0, 0x4, 0x7, 0x50000, 0x1, 0x7, 0xfffffffc, 0x3ff, 0x1c, 0x5, 0x8, 0x8, 0x44c8, 0xb, 0x4, 0x5, 0x800, 0x0, 0x8, 0x4, 0x9, 0xda, 0x1, 0x7, 0x6, 0x9, 0x7, 0x5, 0x9c, 0x5, 0x7, 0x2, 0x7, 0x3, 0x9, 0x60e5a7, 0xfffffffa, 0x6, 0x4, 0xa, 0x10000, 0x6, 0x5ea6, 0x80000001, 0x3, 0x7fff, 0x8, 0xee56, 0x8, 0x1, 0x80, 0xffffff07, 0x0, 0xfffff255, 0x40, 0x800, 0x1, 0x7, 0x4, 0x31, 0x1, 0x10001, 0x7ff, 0x3, 0x9, 0x2ac4, 0x1, 0x101, 0x58bc, 0x7, 0x1000, 0x7, 0x6, 0x9, 0x7fffffff, 0x7ff, 0xfffffff3, 0x7, 0x5, 0x400, 0x1, 0x1, 0x1c42, 0x6, 0x7, 0x1, 0x4, 0x9, 0x3, 0x3, 0x2318, 0x7, 0x5, 0x6, 0x46b, 0xd, 0x800, 0xb, 0x9, 0xfff, 0x2e, 0x5, 0x9, 0x4, 0x2, 0x2, 0x8, 0x2, 0x80000001, 0x7f, 0x0, 0xc, 0x9, 0xab4d, 0xf, 0x1000, 0x7, 0x155, 0x6, 0x4, 0x8000, 0x100, 0xfffffff8, 0x7, 0x200, 0xccb, 0x9, 0x9, 0x1, 0xb53a, 0x9, 0x6c51, 0x7, 0x9, 0x7f, 0x1, 0x4, 0xd, 0xb, 0x81, 0x10, 0xa, 0x7fff, 0x9, 0xf541, 0x97, 0x0, 0xfffffffe, 0x8, 0x8001, 0xfffff9ac, 0x1e, 0x4, 0x200, 0xe84, 0xfffffff7, 0x1, 0x2, 0x467d, 0x4]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xfff3, 0xffe0}, 0x0, 0xfffffff7}}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffffffff, 0xd, 0x6, 0xcb, 0x9, 0x2, 0x7, 0x7fffffff, 0x3ff, 0x81, 0x464f, 0xfec00000, 0x1, 0xffff0, 0x101, 0x0, 0x68ba, 0x8, 0x5, 0xfffe, 0x5, 0x5, 0xfffffffb, 0x0, 0x4, 0x961, 0xffffb1d3, 0x194, 0xffffffff, 0x7, 0x8000, 0x7, 0x5, 0x5f8, 0xc0000, 0x7, 0x9, 0x3, 0x9, 0x6, 0x3, 0x9, 0x8, 0x4800000, 0x9, 0x135c, 0x4800, 0x3, 0xfffffc00, 0x14000000, 0x9, 0x3, 0x6, 0x7f, 0x8000, 0xbc7, 0x1000, 0x6, 0x1, 0xd4, 0x9, 0x1, 0x7, 0x3, 0x1400000, 0x0, 0xff, 0xa, 0x3ff, 0x2, 0x9, 0x8, 0x0, 0x8, 0x7, 0x7ff, 0x257, 0x5, 0x220f, 0xe0c8, 0x4, 0x9, 0xe, 0xe, 0x1, 0x7fff, 0x3, 0xfff, 0x6, 0x3, 0x1, 0x9, 0x7e, 0xffff, 0x0, 0x55e, 0x982, 0x2, 0x2, 0xfffe0000, 0x2, 0x6, 0x0, 0x918, 0x84a17dc, 0xa, 0x5e, 0x1d485cc5, 0x1f0a, 0xb0e, 0x0, 0x5, 0x4b, 0x0, 0x8, 0x2, 0x1, 0x8, 0x45e, 0xbc, 0x6, 0x5, 0x3, 0x805, 0x9, 0x7, 0x5cea5ead, 0x3, 0x9, 0x6, 0x10001, 0x8001, 0x40, 0x300000, 0xffff, 0xea, 0x6, 0x8, 0x800, 0x1, 0x9, 0xb, 0x8, 0xffffffff, 0x5, 0x5, 0xe9, 0x8, 0xffff, 0x2, 0x9, 0xfd3, 0x9, 0x0, 0xfffffffa, 0x0, 0x5, 0xfffff07c, 0x2, 0x8, 0xd3eb, 0x8e3e, 0x1, 0x1, 0x3, 0x4, 0x6, 0x8, 0x7, 0x7fff, 0x2, 0x1ff, 0x1, 0xd8, 0x8, 0xe2fe, 0x5, 0x3ff, 0xff, 0xfffffffd, 0x1, 0x5, 0x20000, 0x401, 0xffffffff, 0x1, 0xf, 0x1, 0x2, 0xd72, 0x4, 0x7, 0x3, 0xa6, 0x4, 0x0, 0x6, 0x7, 0x6a6e, 0x0, 0x7, 0x8fd4, 0x3, 0x7, 0x8, 0x8001, 0x8, 0xe, 0x3, 0x5, 0x0, 0xbf, 0x40, 0xc, 0x1000, 0x1, 0x9, 0x9, 0x3c4b, 0x5, 0x1, 0x8, 0x3, 0x7, 0xac, 0x9, 0x8, 0x0, 0x5, 0xf9f, 0xe000, 0x5c, 0x9, 0x8, 0xc327, 0x4, 0x0, 0xffffffc0, 0x80000000, 0x5, 0x4, 0x1, 0xa, 0x80000000, 0x400, 0x5, 0x810f, 0x0, 0x4, 0x3, 0x5, 0x81, 0x401, 0x263, 0x7ff, 0x3]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x1c000000, 0x16, 0xffffffff, 0x1000, 0x3, 0x0, 0x5, 0x506, 0x0, 0xfffff5d4, 0x5, 0x4, 0xfffffffe, 0x60, 0x6, 0x1, 0x7f, 0x4, 0x3, 0x1000, 0x5, 0x7, 0x6, 0x1c0000, 0x0, 0x0, 0x400, 0x5, 0xfffff800, 0x101, 0x7, 0x4, 0x1, 0xfffff23c, 0x4, 0x101, 0x7, 0x6, 0x6, 0x8, 0x1d3, 0x7fffffff, 0x4, 0x4, 0x6, 0x80000001, 0xd, 0x8, 0x7, 0x1000, 0xfffffffc, 0x200, 0x0, 0x7, 0x2d7ab8c, 0xdff, 0x0, 0x8, 0x1, 0x9, 0x4, 0x3, 0x80, 0x6, 0x2, 0x8, 0x6, 0x200000, 0x812, 0x2, 0x3, 0x200, 0x84c5, 0x7, 0x1000, 0x5, 0xfffffff7, 0x5, 0x8001, 0x6, 0x6, 0x7, 0x8001, 0xfe, 0x7, 0x80000001, 0x7fff, 0x61, 0x6, 0x8000, 0x40, 0x4, 0x7, 0x5, 0x5214, 0x510, 0x7, 0x10000, 0x1, 0x9, 0x5, 0x8, 0x1, 0x7, 0x7, 0x2, 0x1, 0xde, 0x0, 0x9, 0x3, 0x9, 0xd, 0x80, 0x7, 0x9, 0xa71e, 0x10, 0x3, 0xff, 0x5, 0x1, 0x2, 0x0, 0x6, 0x401, 0x7, 0xff, 0x2, 0x400, 0x5, 0x88, 0x3, 0x6, 0x4, 0x1, 0x8cc8, 0x7fffffff, 0x7, 0x3, 0x5, 0x4398, 0x40, 0x191, 0xd, 0x5, 0x6, 0x4, 0x9, 0xad74, 0x5, 0x2, 0x5, 0xab, 0x1ff, 0x5, 0x80000001, 0x4d30830d, 0x0, 0x4, 0x0, 0x1, 0x800, 0x37b, 0x1, 0x6, 0x0, 0x2, 0x4, 0x423, 0x7, 0x9, 0x6, 0x9, 0x8, 0x9, 0x3, 0x59379b3b, 0x2, 0x8, 0x0, 0x2, 0x7fff, 0x7fff, 0x10, 0x5, 0xaf, 0x6, 0xd, 0x2, 0x40, 0x2850, 0x6, 0x2, 0x5, 0x5, 0x8, 0x9e9d, 0x10000, 0x6, 0x21, 0xd3, 0x9d, 0x8, 0x7, 0x3, 0x1, 0x7, 0x7ff, 0xb5d8, 0x6, 0x0, 0x6b, 0x401, 0x2, 0x45f4, 0x3, 0x0, 0x3, 0x3, 0x7f, 0xdabc8538, 0xf15, 0xfffffff7, 0xd25c, 0xfffffc00, 0x800, 0x18742cb0, 0x20, 0x80a, 0x7fffffff, 0xfffffff7, 0x6, 0x800, 0x8, 0x24000000, 0x9, 0x100, 0x40, 0x7, 0x6, 0x6, 0x4649, 0x1800000, 0x4, 0x0, 0x83, 0xe, 0x1, 0x9bc7, 0x449, 0x9cb, 0x3, 0x4, 0x8, 0x2f54]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xbe, 0x8, 0x5b, 0x6, 0x9, 0xffffe872}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x0, 0x7, 0x0, 0x10, 0x3, 0xde}}, @TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x1, 0x9, 0x6, 0xfffb, 0xfffffff8}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x34}}}]}, 0xc94}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0xfe42, 0x8080, 0x0, 0xfd74) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) mmap(&(0x7f000001b000/0x2000)=nil, 0x2000, 0x100000e, 0x12, r0, 0x3ed04000) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (async) sendto$inet(0xffffffffffffffff, &(0x7f0000000440)="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", 0x19c, 0x10, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a0005181b01ccae12fb00000a"], 0x164}}, 0x40014) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) (async) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @dev}, &(0x7f0000000100)=0xc) (async) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newtclass={0xc94, 0x28, 0x400, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x10}, {0x1, 0x3}, {0x6, 0xa}}, [@c_cbq={{0x8}, {0xc50, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x10001, 0x0, 0xfa3, 0x7, 0x7, 0x0, 0x6, 0x5, 0x3, 0x9, 0x7fffffff, 0x9, 0x1, 0x7, 0xc, 0x6, 0x1e, 0x1, 0x4, 0x5, 0x2, 0x7, 0x200, 0x8d, 0x3, 0xa6, 0x9, 0x80, 0x1, 0x7ff, 0x5018, 0x9, 0x7f00, 0x4, 0x6, 0xef, 0x400, 0x5, 0x101, 0x3, 0xf, 0x5, 0x5, 0x8, 0xac, 0x2, 0x8000, 0x1, 0x6, 0x247, 0x80, 0x3, 0xd56, 0xd91, 0x6, 0x2, 0x9, 0x2, 0x1, 0x557, 0x1000, 0xfffffffe, 0x6, 0x8b01655, 0x4, 0x81, 0xfff, 0x4, 0x173, 0xbd4, 0xc, 0x0, 0x56, 0xb262, 0x8, 0x0, 0x300000, 0x3, 0x5, 0x400, 0x9, 0x21b, 0x6, 0x2, 0x0, 0x1, 0xef, 0xc, 0x0, 0x4, 0x2, 0x9ef5, 0x3, 0x8, 0xf, 0x9, 0x0, 0x4, 0x7, 0x50000, 0x1, 0x7, 0xfffffffc, 0x3ff, 0x1c, 0x5, 0x8, 0x8, 0x44c8, 0xb, 0x4, 0x5, 0x800, 0x0, 0x8, 0x4, 0x9, 0xda, 0x1, 0x7, 0x6, 0x9, 0x7, 0x5, 0x9c, 0x5, 0x7, 0x2, 0x7, 0x3, 0x9, 0x60e5a7, 0xfffffffa, 0x6, 0x4, 0xa, 0x10000, 0x6, 0x5ea6, 0x80000001, 0x3, 0x7fff, 0x8, 0xee56, 0x8, 0x1, 0x80, 0xffffff07, 0x0, 0xfffff255, 0x40, 0x800, 0x1, 0x7, 0x4, 0x31, 0x1, 0x10001, 0x7ff, 0x3, 0x9, 0x2ac4, 0x1, 0x101, 0x58bc, 0x7, 0x1000, 0x7, 0x6, 0x9, 0x7fffffff, 0x7ff, 0xfffffff3, 0x7, 0x5, 0x400, 0x1, 0x1, 0x1c42, 0x6, 0x7, 0x1, 0x4, 0x9, 0x3, 0x3, 0x2318, 0x7, 0x5, 0x6, 0x46b, 0xd, 0x800, 0xb, 0x9, 0xfff, 0x2e, 0x5, 0x9, 0x4, 0x2, 0x2, 0x8, 0x2, 0x80000001, 0x7f, 0x0, 0xc, 0x9, 0xab4d, 0xf, 0x1000, 0x7, 0x155, 0x6, 0x4, 0x8000, 0x100, 0xfffffff8, 0x7, 0x200, 0xccb, 0x9, 0x9, 0x1, 0xb53a, 0x9, 0x6c51, 0x7, 0x9, 0x7f, 0x1, 0x4, 0xd, 0xb, 0x81, 0x10, 0xa, 0x7fff, 0x9, 0xf541, 0x97, 0x0, 0xfffffffe, 0x8, 0x8001, 0xfffff9ac, 0x1e, 0x4, 0x200, 0xe84, 0xfffffff7, 0x1, 0x2, 0x467d, 0x4]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xfff3, 0xffe0}, 0x0, 0xfffffff7}}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffffffff, 0xd, 0x6, 0xcb, 0x9, 0x2, 0x7, 0x7fffffff, 0x3ff, 0x81, 0x464f, 0xfec00000, 0x1, 0xffff0, 0x101, 0x0, 0x68ba, 0x8, 0x5, 0xfffe, 0x5, 0x5, 0xfffffffb, 0x0, 0x4, 0x961, 0xffffb1d3, 0x194, 0xffffffff, 0x7, 0x8000, 0x7, 0x5, 0x5f8, 0xc0000, 0x7, 0x9, 0x3, 0x9, 0x6, 0x3, 0x9, 0x8, 0x4800000, 0x9, 0x135c, 0x4800, 0x3, 0xfffffc00, 0x14000000, 0x9, 0x3, 0x6, 0x7f, 0x8000, 0xbc7, 0x1000, 0x6, 0x1, 0xd4, 0x9, 0x1, 0x7, 0x3, 0x1400000, 0x0, 0xff, 0xa, 0x3ff, 0x2, 0x9, 0x8, 0x0, 0x8, 0x7, 0x7ff, 0x257, 0x5, 0x220f, 0xe0c8, 0x4, 0x9, 0xe, 0xe, 0x1, 0x7fff, 0x3, 0xfff, 0x6, 0x3, 0x1, 0x9, 0x7e, 0xffff, 0x0, 0x55e, 0x982, 0x2, 0x2, 0xfffe0000, 0x2, 0x6, 0x0, 0x918, 0x84a17dc, 0xa, 0x5e, 0x1d485cc5, 0x1f0a, 0xb0e, 0x0, 0x5, 0x4b, 0x0, 0x8, 0x2, 0x1, 0x8, 0x45e, 0xbc, 0x6, 0x5, 0x3, 0x805, 0x9, 0x7, 0x5cea5ead, 0x3, 0x9, 0x6, 0x10001, 0x8001, 0x40, 0x300000, 0xffff, 0xea, 0x6, 0x8, 0x800, 0x1, 0x9, 0xb, 0x8, 0xffffffff, 0x5, 0x5, 0xe9, 0x8, 0xffff, 0x2, 0x9, 0xfd3, 0x9, 0x0, 0xfffffffa, 0x0, 0x5, 0xfffff07c, 0x2, 0x8, 0xd3eb, 0x8e3e, 0x1, 0x1, 0x3, 0x4, 0x6, 0x8, 0x7, 0x7fff, 0x2, 0x1ff, 0x1, 0xd8, 0x8, 0xe2fe, 0x5, 0x3ff, 0xff, 0xfffffffd, 0x1, 0x5, 0x20000, 0x401, 0xffffffff, 0x1, 0xf, 0x1, 0x2, 0xd72, 0x4, 0x7, 0x3, 0xa6, 0x4, 0x0, 0x6, 0x7, 0x6a6e, 0x0, 0x7, 0x8fd4, 0x3, 0x7, 0x8, 0x8001, 0x8, 0xe, 0x3, 0x5, 0x0, 0xbf, 0x40, 0xc, 0x1000, 0x1, 0x9, 0x9, 0x3c4b, 0x5, 0x1, 0x8, 0x3, 0x7, 0xac, 0x9, 0x8, 0x0, 0x5, 0xf9f, 0xe000, 0x5c, 0x9, 0x8, 0xc327, 0x4, 0x0, 0xffffffc0, 0x80000000, 0x5, 0x4, 0x1, 0xa, 0x80000000, 0x400, 0x5, 0x810f, 0x0, 0x4, 0x3, 0x5, 0x81, 0x401, 0x263, 0x7ff, 0x3]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x1c000000, 0x16, 0xffffffff, 0x1000, 0x3, 0x0, 0x5, 0x506, 0x0, 0xfffff5d4, 0x5, 0x4, 0xfffffffe, 0x60, 0x6, 0x1, 0x7f, 0x4, 0x3, 0x1000, 0x5, 0x7, 0x6, 0x1c0000, 0x0, 0x0, 0x400, 0x5, 0xfffff800, 0x101, 0x7, 0x4, 0x1, 0xfffff23c, 0x4, 0x101, 0x7, 0x6, 0x6, 0x8, 0x1d3, 0x7fffffff, 0x4, 0x4, 0x6, 0x80000001, 0xd, 0x8, 0x7, 0x1000, 0xfffffffc, 0x200, 0x0, 0x7, 0x2d7ab8c, 0xdff, 0x0, 0x8, 0x1, 0x9, 0x4, 0x3, 0x80, 0x6, 0x2, 0x8, 0x6, 0x200000, 0x812, 0x2, 0x3, 0x200, 0x84c5, 0x7, 0x1000, 0x5, 0xfffffff7, 0x5, 0x8001, 0x6, 0x6, 0x7, 0x8001, 0xfe, 0x7, 0x80000001, 0x7fff, 0x61, 0x6, 0x8000, 0x40, 0x4, 0x7, 0x5, 0x5214, 0x510, 0x7, 0x10000, 0x1, 0x9, 0x5, 0x8, 0x1, 0x7, 0x7, 0x2, 0x1, 0xde, 0x0, 0x9, 0x3, 0x9, 0xd, 0x80, 0x7, 0x9, 0xa71e, 0x10, 0x3, 0xff, 0x5, 0x1, 0x2, 0x0, 0x6, 0x401, 0x7, 0xff, 0x2, 0x400, 0x5, 0x88, 0x3, 0x6, 0x4, 0x1, 0x8cc8, 0x7fffffff, 0x7, 0x3, 0x5, 0x4398, 0x40, 0x191, 0xd, 0x5, 0x6, 0x4, 0x9, 0xad74, 0x5, 0x2, 0x5, 0xab, 0x1ff, 0x5, 0x80000001, 0x4d30830d, 0x0, 0x4, 0x0, 0x1, 0x800, 0x37b, 0x1, 0x6, 0x0, 0x2, 0x4, 0x423, 0x7, 0x9, 0x6, 0x9, 0x8, 0x9, 0x3, 0x59379b3b, 0x2, 0x8, 0x0, 0x2, 0x7fff, 0x7fff, 0x10, 0x5, 0xaf, 0x6, 0xd, 0x2, 0x40, 0x2850, 0x6, 0x2, 0x5, 0x5, 0x8, 0x9e9d, 0x10000, 0x6, 0x21, 0xd3, 0x9d, 0x8, 0x7, 0x3, 0x1, 0x7, 0x7ff, 0xb5d8, 0x6, 0x0, 0x6b, 0x401, 0x2, 0x45f4, 0x3, 0x0, 0x3, 0x3, 0x7f, 0xdabc8538, 0xf15, 0xfffffff7, 0xd25c, 0xfffffc00, 0x800, 0x18742cb0, 0x20, 0x80a, 0x7fffffff, 0xfffffff7, 0x6, 0x800, 0x8, 0x24000000, 0x9, 0x100, 0x40, 0x7, 0x6, 0x6, 0x4649, 0x1800000, 0x4, 0x0, 0x83, 0xe, 0x1, 0x9bc7, 0x449, 0x9cb, 0x3, 0x4, 0x8, 0x2f54]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xbe, 0x8, 0x5b, 0x6, 0x9, 0xffffe872}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x0, 0x7, 0x0, 0x10, 0x3, 0xde}}, @TCA_CBQ_RATE={0x10, 0x5, {0x0, 0x1, 0x9, 0x6, 0xfffb, 0xfffffff8}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x34}}}]}, 0xc94}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) (async) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$inet6(r1, 0x0, 0xfe42, 0x8080, 0x0, 0xfd74) (async) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200) (async) ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) (async) mmap(&(0x7f000001b000/0x2000)=nil, 0x2000, 0x100000e, 0x12, r0, 0x3ed04000) (async) 2m47.577712186s ago: executing program 5 (id=8183): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom1\x00', 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002180)='/proc/partitions\x00', 0x0, 0x0) read(r2, &(0x7f0000000080)=""/122, 0x7a) read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x64, 0x0, &(0x7f00000003c0)=[@increfs, @enter_looper, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x0, &(0x7f0000000080)=""/3, 0x3, 0x0, 0x21}, @ptr={0x70742a85, 0x8000000, &(0x7f0000000480)=""/137, 0x89, 0x1, 0x13}}, &(0x7f0000000140)={0x0, 0x18, 0x40}}, 0x40}, @dead_binder_done], 0x0, 0x0, 0x0}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000006, 0x10, r2, 0x8000000) mmap$binder(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x1, 0x11, r1, 0xf576) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000002140)={0x5c, 0x0, &(0x7f0000002380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000022c0)={@ptr={0x70742a85, 0x0, &(0x7f0000002200)=""/136, 0x88, 0x1, 0x2a}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000002340)={0x0, 0x28, 0x40}}}, @release={0x40046306, 0x3}, @decrefs={0x40046307, 0x2}, @acquire={0x40046305, 0x1}], 0x0, 0x1000000, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0x102, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000040)=[@enter_looper, @increfs={0x40046304, 0x2}, @increfs, @request_death={0x400c630e, 0x1}], 0x79, 0x0, &(0x7f0000000240)="d81e15c3b9703b627c6f69f27e8fda212411223bed3eb544eea0bb85b9db7e9aa8f4f153246efaf2a8d8f8cf1ae69729c86fa15f7cf44d476fa4d69887ad7b73ec4b8475a112ee27f07411c59f2ffc9366ffbed63a8c5ec190844f6e88d1a386c79a11cba7984b989dd25d5a1ff840613bb1d0af8ce8d1a5aa"}) 2m47.494284328s ago: executing program 5 (id=8184): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) modify_ldt$read(0x0, &(0x7f0000000000)=""/242, 0xf2) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x4, 0x3}, 0x10) getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, 0x0, &(0x7f0000000080)) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448c9, 0x0) fcntl$dupfd(r1, 0x0, r2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0}, 0xfffffffffffffff9}], 0x0, 0x0, 0x0}) 2m47.493964298s ago: executing program 5 (id=8185): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x0) (async) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x21) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000180)=[@increfs, @decrefs={0x40046307, 0x3}], 0x0, 0x0, 0x0}) (async, rerun: 32) r2 = dup3(r1, r0, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xfffffd88, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 2m47.469896888s ago: executing program 5 (id=8186): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@private1}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, 0x0) wait4(0x0, 0x0, 0x2, 0x0) mount$9p_unix(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240), 0x20000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000600)={0x28, 0x0, 0x0, @host}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000001d80)=0x3, 0x8) read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020) 2m47.450618569s ago: executing program 5 (id=8187): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m47.40622423s ago: executing program 5 (id=8188): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000), 0x10000000000001f7, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000700), 0x622700, 0x0) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x26}, @flat=@weak_binder={0x77622a85, 0x1001, 0x2}, @flat=@binder={0x73622a85, 0x100a, 0x1}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"}) 2m47.40590212s ago: executing program 51 (id=8188): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000), 0x10000000000001f7, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000700), 0x622700, 0x0) fcntl$dupfd(r1, 0x406, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f00000003c0)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x0, 0x26}, @flat=@weak_binder={0x77622a85, 0x1001, 0x2}, @flat=@binder={0x73622a85, 0x100a, 0x1}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"}) 1m0.767642008s ago: executing program 2 (id=10164): r0 = socket$packet(0x11, 0x3, 0x300) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x3ff, 0x8006}, 0x4) writev(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) ftruncate(r5, 0x200002) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000004c0)) r6 = open(&(0x7f0000000140)='./file0\x00', 0x8800, 0x2e) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000040)={{0x2, 0x101}, {0x0, 0x109003ff}, 0x7, 0x3}) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) connect$pppl2tp(r8, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) sendfile(r8, r6, 0x0, 0x80001d00c0d0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0700616e733d66642c000000403116", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',access=', @ANYRESDEC=r10, @ANYBLOB=',\x00']) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00') 1m0.556778312s ago: executing program 2 (id=10171): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0xd0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000003c0), 0x200840d, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303030303030303130305d3975ab75736562f1c5a93d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r1, &(0x7f0000002480)={0x2020}, 0x204d) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x2000, 0x0, 0xffdd, 0x0, 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x1) syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x606040) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) connect$vsock_stream(r2, &(0x7f0000000140), 0x10) listen(r2, 0x5) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r2, 0x0, 0x0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x64340, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = dup(r4) openat2(r5, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x10400, 0x100}, 0x18) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket(0x1e, 0x805, 0x0) 1m0.323122657s ago: executing program 2 (id=10176): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r0) mount$9p_unix(&(0x7f0000000780)='./mnt\x00', &(0x7f0000000040)='./mnt\x00', 0x0, 0x291095, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x28011, r1, 0xffffd000) 1m0.20211456s ago: executing program 2 (id=10179): r0 = socket$netlink(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x19}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x5}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) close(r1) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000224e0000", 0x58}], 0x1) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$9p_unix(&(0x7f0000000340)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x5257418, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="3303000000040000080402"], 0x14}}, 0x40) write$binfmt_script(r2, 0x0, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000003c0)='./file0/file0\x00', &(0x7f00000004c0), 0x9ab080, 0x0) recvmsg$can_raw(r2, &(0x7f00000002c0)={&(0x7f0000000440)=@l2, 0x80, &(0x7f0000000180)=[{&(0x7f0000000580)=""/234, 0xea}, {&(0x7f0000000680)=""/149, 0x95}], 0x2, &(0x7f0000000240)}, 0x2141) 59.918230645s ago: executing program 2 (id=10186): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x808702, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') setuid(0xee01) close_range(r0, r0, 0x0) (async) close_range(r0, r0, 0x0) 59.860634526s ago: executing program 2 (id=10188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000000080)=0x7ffb, 0x4) close(r1) socket$netlink(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000d80)=[{&(0x7f0000000180)="c1000000da7ff40d5c0cf5", 0xb}, {&(0x7f00000002c0)="0f88a8", 0x3}, {&(0x7f0000000240)="c0c17a81df", 0x5}], 0x3) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r4, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffff7ffc, 0xfffffffd, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2000000, 0xc, 0x3}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x5) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 59.816952487s ago: executing program 52 (id=10188): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x48, &(0x7f0000000080)=0x7ffb, 0x4) close(r1) socket$netlink(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000000d80)=[{&(0x7f0000000180)="c1000000da7ff40d5c0cf5", 0xb}, {&(0x7f00000002c0)="0f88a8", 0x3}, {&(0x7f0000000240)="c0c17a81df", 0x5}], 0x3) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r4, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffff7ffc, 0xfffffffd, 0x6, 0x6, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2000000, 0xc, 0x3}}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x5) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) 59.093715931s ago: executing program 7 (id=10198): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x9ae3faa5a36be296, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000016c0)={0x1, 0x1, 0x0, 0x0, 0x0, 0xeeee0000}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000180)) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005280)=[{{&(0x7f00000011c0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}}], 0x1, 0x4008000) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x200002, 0x8, "ff00054fa93e008000295894c900ffff00"}) (async) r3 = syz_open_pts(r2, 0x1) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000080)) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0xc8) ioctl$TCSETA(r2, 0x5406, &(0x7f00000001c0)={0x3, 0xfffe, 0xb, 0xb, 0x11, "a0590469a322d928"}) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x4) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 59.014182452s ago: executing program 7 (id=10200): socket$inet6(0xa, 0x1, 0x0) pipe(&(0x7f00000002c0)) (async) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r1, &(0x7f00000002c0), 0x15) splice(r0, 0x0, r2, 0x0, 0x19403, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xd) ioctl$TCFLSH(r4, 0x400455c8, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) (async) r5 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x220, 0x0) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="00000600000000000000aaaaaaaaaaaaffffffffffffaaaaaaaaaabbaaaaaaaaaa11bbbbbbbbbb80"]) (async) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="00000600000000000000aaaaaaaaaaaaffffffffffffaaaaaaaaaabbaaaaaaaaaa11bbbbbbbbbb80"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) mount$incfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB='rlog_wakeup_cnt=18446740073']) r7 = socket$packet(0x11, 0xa, 0x300) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) sendto$packet(r8, &(0x7f00000000c0)="3f03", 0x2, 0x0, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_TIOCINQ(r7, 0x541b, &(0x7f00000004c0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) (async) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000003c0)=ANY=[]) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 58.937925964s ago: executing program 7 (id=10201): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000012c0)}, 0x40) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) r2 = open(&(0x7f0000000100)='./file2\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r2, 0x401070cd, 0x3) r3 = socket(0x2, 0x2, 0x0) chmod(&(0x7f0000000140)='./file2\x00', 0x88) setsockopt$inet_opts(r3, 0x0, 0x19, &(0x7f00000001c0)="a2", 0x1) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xffffffffffffffff, r5, r5) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r6, 0x80045518, &(0x7f0000000040)=0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r7, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a02fa905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba041fb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r7, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) close_range(r1, 0xffffffffffffffff, 0x0) 55.873740273s ago: executing program 7 (id=10236): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, 0x1e, 0x1, 0x70bd25, 0x25dfdbfb, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x4) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x80000, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190040000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x5, 0x0) connect$unix(r6, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000080)=@sr0, r3, 0x0) read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) 55.872596513s ago: executing program 7 (id=10237): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x180, r1, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xee96}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xf87}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0x68, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4bf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x85, 0x3, "99d1335dc18165b9bbf0f51f7578832281e8fcf33e6f04195850a5185f7dab594792c49dbc6b85958c175af5a688b797103adecf74886d627c761e365b1de0fc7478ec086dc7febd356402ef5791511b3136b6ede8a3d5a82ebc7fb51cc1ddb0c16192a9354c3e61e7baba2a9fc292dd9e66172fa612a48e5f34aa310a756c8c3a"}, @TIPC_NLA_NODE_ADDR={0x8}]}, @TIPC_NLA_LINK={0x4}]}, 0x180}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000280), 0xb, 0x18081) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f00000002c0)) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x40, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000400)='cpuset.effective_mems\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r4) sendmsg$ETHTOOL_MSG_EEE_SET(r4, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x1f0, r5, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x1bc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x100}, @ETHTOOL_A_BITSET_MASK={0x78, 0x5, "86708d2326d003760655175ef5e305c9d09197c036db2703c07c3ea8ab3bec68f8d9ade746fd44087bc63d02f0ace1977cadb7c0ce9b1da68cad12ab22904dcb99d18c95c0787e7730e4b265ca0ac5426a884425884700a87372d12c3c7c7e87dff1f26cbc5f9c6aba6bcc969350858a4e42be52"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_BITS={0x120, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/vsock\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc71b}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '))-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x225}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'cpuset.effective_mems\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'cpuset.effective_mems\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3224}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'o&-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'cpuset.effective_mems\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x7}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x8801}, 0x40005) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000740)={0x7fffffffffffffff, 0x9, 0x1}) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0xa) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) fcntl$notify(r6, 0x402, 0x20) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r3) sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f0000000900)={&(0x7f00000007c0), 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x50, r7, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x30, 0x5b}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040054}, 0x10) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000000940)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) r8 = fsmount(r4, 0x0, 0x7d) r9 = fspick(r3, &(0x7f0000000980)='./file0\x00', 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x14, r7, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [""]}, 0x14}}, 0x8000) ioctl$BLKCRYPTOIMPORTKEY(r8, 0xc0401289, &(0x7f0000000b80)={&(0x7f0000000ac0)="00cbcf533e0a23bab6f776dc92b58213f2145af6b95d76d2", 0x18, &(0x7f0000000b00)=""/79, 0x4f}) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000cc0)={0x60, 0x15, 0x8000, 0x7503, 0xec, 0x3b1, &(0x7f0000000bc0)="29cb21f5f11e07ab85cbc8e02424bcbf9b041d1cec1477bd097dbe3cc09e6cfc60056ff6d1f78aa7ab97c923972fac58957d47df4373dd069cc8ae46ddefcfb53feeeb719e249183baec235b18ed42a6a15752e6242b441e0ddf70e193735c9c80c453fb5d7c452aaa40af52abf71713e88675fcc4fa3235640d8e32fc1e823e98f25c56a865c2f3c737388daa9951bbd5e5fdcc634c3aae72528447e42a52b159596d12d38f91361cc82e6a72b43f7f7a289bf699bae134b3cab140edcac5820dc1c2d1da1a2b522da98ef2deea74293b7354258935a6f1c39939cc32d9f7b57ce839f367adcfa39d12d01f"}) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r5, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x8801) tee(r9, r8, 0x0, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000e00)={'batadv_slave_0\x00'}) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e80), r8) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000001240)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001200)={&(0x7f0000000ec0)={0x314, r10, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaa0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x48}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_BEARER={0x128, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8d}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x6, @mcast1, 0x10}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @mcast1, 0x50e68}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010100}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}}}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x54}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5d3}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf367}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffc01}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcf5b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'pim6reg1\x00'}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2e}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x801}, 0x20000840) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, r7, 0x208, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$UFFDIO_WRITEPROTECT(r8, 0xc018aa06, &(0x7f0000001380)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000001500)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001400)={0xb0, r1, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x42778000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x800}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x24d80c15}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x431e66b7}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffbd4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x537e7e90}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x65ffb475}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000001) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000001b00)={0x24, &(0x7f0000001940)={0x20, 0x8, 0xf2, {0xf2, 0x8, "c8d5114a1420a480dfc12838eb487fc78f7a4cfc7f97914b5cef46ae582330b739497043502bb6ad9de7d9edc24f43ed26793a4c543e69ab27e31eef0ee28384d749cc5fcdb13261322c7324000c79ccce997282ffba0f841d98a657e9c3de5349cc177ea51bf334b90d7e3d798e289a616be39c9cbf5a528ad9683d085c3150bef81c2e514243918f5f0e8125ee947a9e32b66510932dfbb7e65dff8f0dd14a95192db980d31141a8a817b64ec444824ed9498c5c8c67d17bd68e3d45e9bceda744e06ee8c3325e2d6db472fef712da60557daf73a74152d301b86968927e3fb40285133f7854eeb9968d4978d637d8"}}, &(0x7f0000001a40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x38a2}}, &(0x7f0000001a80)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0xa, 'Gq'}]}}, &(0x7f0000001ac0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x800, 0xb, 0x1, {0x22, 0x12c}}}}, &(0x7f0000001cc0)={0x2c, &(0x7f0000001b40)={0x40, 0x16, 0x30, "ce252c5c25c99767d512f5a7713053bf3fee80dcec5fabf11176210222a2e1ab20a2602eacf4ce2b7448f63d10c7dc34"}, &(0x7f0000001b80)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000001bc0)={0x0, 0x8, 0x1, 0xe3}, &(0x7f0000001c00)={0x20, 0x1, 0x52, "a57c62fc2b421a19286917680538839b44113d07742a5a46f1aebddff25019d2200c7f02be94449725a0c7fa9543a031688dd1c9d6d0f9bff9d02e1dd744c0302684ced7bc4594452a94c359cbd71638c071"}, &(0x7f0000001c80)={0x20, 0x3, 0x1, 0x5}}) 55.852995274s ago: executing program 7 (id=10238): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x1aa) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x7, 0x6, 0x6, 0xfffffffffffffffc, 0xffff, 0x29]}) write$tun(0xffffffffffffffff, &(0x7f0000003300)={@val={0x0, 0xf7}, @val={0x2, 0x0, 0x0, 0x0, 0x3d}, @ipv6=@gre_packet={0x2, 0x6, "39d39c", 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}, @ipv4={'\x00', '\xff\xff', @remote}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x1e, 0x3, 0x0, 0x2, 0x6, 0x9}, 0x1, {0xf88a}}}, {0x8, 0x22eb, 0x4, {{0x7, 0x2, 0x7, 0x1, 0x0, 0x1, 0x1, 0xe3}, 0x2, {0x100, 0x3, 0x1, 0x6, 0x0, 0x1, 0x3}}}, {0x8, 0x6558, 0x1}}}}}, 0x7a) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1555555555555457, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) getdents64(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 55.779508005s ago: executing program 53 (id=10238): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x100) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x1aa) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x7, 0x6, 0x6, 0xfffffffffffffffc, 0xffff, 0x29]}) write$tun(0xffffffffffffffff, &(0x7f0000003300)={@val={0x0, 0xf7}, @val={0x2, 0x0, 0x0, 0x0, 0x3d}, @ipv6=@gre_packet={0x2, 0x6, "39d39c", 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}, @ipv4={'\x00', '\xff\xff', @remote}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x1e, 0x3, 0x0, 0x2, 0x6, 0x9}, 0x1, {0xf88a}}}, {0x8, 0x22eb, 0x4, {{0x7, 0x2, 0x7, 0x1, 0x0, 0x1, 0x1, 0xe3}, 0x2, {0x100, 0x3, 0x1, 0x6, 0x0, 0x1, 0x3}}}, {0x8, 0x6558, 0x1}}}}}, 0x7a) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1555555555555457, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) getdents64(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.730421777s ago: executing program 8 (id=10629): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder0\x00', 0x800, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r1, &(0x7f0000003340)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x80002006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e75243301", 0x8}], 0x1}}], 0x1, 0x40000000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000000040)=0x20, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000004c0)={'veth0_to_batadv\x00', &(0x7f00000003c0)=@ethtool_dump={0x40, 0x9, 0x9f}}) socket$packet(0x11, 0x0, 0x300) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r4, 0x1, 0x70bd2a, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24008004}, 0x44009004) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f00000008c0)=@req={0x0, 0x4, 0x9, 0x6}, 0x10) bind$inet6(r5, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r5, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000040)=""/47, 0x2f}], 0x2}, 0x2}], 0x1, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000900)={0x33, 0x1b, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0x81}, @hao={0xc9, 0x10, @private1}, @generic={0xd8, 0xb3, "1aeb7271344ccec6f1c9f97f8ed2920f548ea8f48283dd1c2b54b2bac2dda57f9ba0282eaa754de3f950ddc0ba3809cebb8c52d3b55e0157fe25540ea54d0c6a761c7ff8e17ae1e0cf8cd0d6a54dee4ff7e4de25874cf7eaafd1e30662e26e9305f06cc443f287dff634a891e6873d13567a15bf676021c12e409aa14f14a9640726f84216b7d56a50b20e89fcca5ac2063d6e74eb0955024fbc66f5d2fd4d0dd3f805dac4d52657e4725da1f5a55d73720bb7"}]}, 0xe8) sendmmsg$inet6(r5, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)='3', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)="b458b09a7bc6afad62c3f97125bc54bad5b9f64492fb3237f80678f40515a15a9bc7f8f9c9244e7fe0c328f6457f6d457effb6e3090a2f0e0a47d7c95dddc94d4d0ca1243e14cef7da76bb37b1fbde72b364878299efb605561cf63ec0aa8d4ea52490ac25b637a07b15d9e617816d76958ff2c027a38249fb2a6fbdae24d00f42bfb58ca9a9c34449b077c0463dbb9e84cb", 0x92}], 0x1}}], 0x2, 0x20e8086) sendmmsg(r5, &(0x7f00000092c0), 0x4ff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x118a, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) sendmsg$inet(r3, &(0x7f0000000480)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000680)="9338e8a25f0105417e74deb70367fd30b56ebe96f77dc94cf0fe03a9b718c95a80e6eef2f1f70cb1f169f039fd19e2d979fe61ded56b9539ad5a864853ff65a862250a95c695d6c72ccec96500c6f73ae88c9fae5441230a862dab92298dcf1888dd8d96a87d163e4fcaccf84f6b", 0x6e}, {&(0x7f0000000800)="9aef55bfb8f3c46e517ec8c7d6f0f3cee1be6b42a7d799ed2ce20ad492fa4587fab168c136f0f3548015f1903b4a27772b4805745ebf50c64a0db3132b633ceffde31131f91ff5a13ab9b58fe365146b347dff819744deb6bbe022cde8d056ab3df0ded5ef4fedad69fd4c4e7a999f2b063308987833599d98fc1e8431414b7ac2f349fd5701f2dfa2fa162d577afa252c506e20ab03edc7e2d87618194faea4386ab5db40730b209f464d3794424410274eb80a00a94def9f55a2", 0xbb}], 0x2, &(0x7f0000000700)=[@ip_retopts={{0x24, 0x0, 0x7, {[@cipso={0x86, 0x12, 0x0, [{0x5, 0xc, "c2d04a68ba868e17c551"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x27}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x70}, 0x8000000) 2.726569017s ago: executing program 9 (id=10632): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x180, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d46549b, 0x0, [0xfffffffffffffffb, 0x0, 0x7, 0x0, 0x0, 0x1000, 0x10000]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x108000) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x1) write$FUSE_DIRENTPLUS(0xffffffffffffffff, 0x0, 0x138) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000000080)) 2.719317008s ago: executing program 9 (id=10634): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000240)=0x3, 0x4) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x9, 0x0, "000080f100df000000a7d9de16c708db7200"}) r2 = syz_open_pts(r1, 0x690041) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r3, 0x11b, 0x1, &(0x7f0000005340), &(0x7f00000053c0)=0x80) eventfd2(0x3, 0x1) r4 = dup3(r2, r1, 0x0) write$UHID_INPUT(r4, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.717556638s ago: executing program 9 (id=10637): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000040)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$getown(r3, 0x9) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/wakeup_count', 0x4aa82, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r8, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x20000890) sendmsg$can_bcm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r7], 0x48}, 0x300}, 0x8040) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) syz_open_procfs(0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) close_range(r1, 0xffffffffffffffff, 0x0) 2.717324018s ago: executing program 8 (id=10638): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x64, 0x0, 0x0, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0xdf7ea4ff8fcf8bed, 0x2) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, r1, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48805}, 0x20000080) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000500)=[@register_looper], 0x0, 0x0, 0x0}) 2.702904818s ago: executing program 8 (id=10639): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x10, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x38}}, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r2 = fcntl$dupfd(r1, 0x406, r1) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000400)=0x10, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x56c}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) shutdown(r1, 0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000300)=[{0x0, 0x1000}, {0x0, 0x8001, 0x2}], 0x2, 0x0, 0x0, 0x2, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r6) r7 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @my=0x1}, 0x57) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) close_range(r4, 0xffffffffffffffff, 0x0) 2.563805081s ago: executing program 8 (id=10641): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r0 = socket(0x2, 0x3, 0xff) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'vcan0\x00', 0x1}) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x4) r7 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x20, 0x0}) syz_usb_control_io(r7, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0003040000000403012814b198b6eb178e26321015a6a2d9"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r7, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000c40)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="00030200000011e6fdaeb6a4712c60c625d867e1e2a746cd315acfb43058b314e8dbe90f4dc2bc9c51fb8756f85023d2fddc8a69e93d9668f85f8a2882ca6e5c29e49d2754e4faa56e66f233a404be75beb5638c2a160001ac893902c3c8678a8e1ff1db167636e4b4ae9a80092770c99ca85447b4905547e20e09684bf4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x20, 0x82, 0x2, "8370"}, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x84, 0x2, "3db6"}, 0x0}) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) syz_usb_control_io(r7, 0x0, &(0x7f0000000b80)={0x84, &(0x7f00000006c0)={0x0, 0x3, 0x43, "519cca252e0654a35d5cc9ff250d61b1a99cb2ba319f8aa628e2adc025899a5ea9dcb72c0cd6eba6393c5fb3818f76e8085f20331888db32daecb6c0ece616db0e30c1"}, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x0, 0x4, {0x200, 0x20}}, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x40, 0xf, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)={0x40, 0x1e, 0x1, 0x4}, 0x0}) setsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, &(0x7f00000001c0)=0x5, 0x4) getsockopt$WPAN_SECURITY_LEVEL(r5, 0x0, 0x2, 0x0, &(0x7f0000001640)) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000000)={0x0, 0xfffffd23, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000011}, 0x80) write$FUSE_BMAP(r4, &(0x7f0000000000)={0x6, 0xfffffffffffffffe, 0x0, {0x6}}, 0x18) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r8, &(0x7f0000000380), 0x0, 0x100013c, 0x20000000) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x12) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x15) 2.426040703s ago: executing program 9 (id=10643): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) lsm_set_self_attr(0x65, 0x0, 0x0, 0x0) (async) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1, 0x1, 0x86, 0x10, 0x20f4, 0xe05a, 0x6c6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x69, 0x2, 0x2, 0xff, 0x5a, 0xa3, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r0, &(0x7f0000000080)={0x14, 0x0}, &(0x7f0000000480)={0x34, &(0x7f0000000300)={0x0, 0x31, 0x1a, "5e6e27eeff5aee929ecac6ec11f1e5aaf3cc5d5c150e8b28914a"}, 0x0, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x7}, 0x0, &(0x7f0000000400)={0x40, 0xa0, 0x4, 0x1}, &(0x7f0000000440)={0xc0, 0xa2, 0x2f, "9ec3f2a3ff473c52a7f43856d6b92b474f27899140769113015bfeb04d18da1a46084d002b060f35adf9a955d3cc01"}}) syz_usb_connect$hid(0x4, 0x0, 0x0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000200)={0x24, &(0x7f0000000700)={0x20, 0x9, 0xc0, {0xc0, 0x21, "6f36f76f12b30463f44c849aaec808f1c81aa897a9655fa4034d01673ae19c06079aea2753bb4694ee88fad0d2eb816583cfdf068b1d395f0f48b32339f07f67b1f41a3d63bede216c217bc438b421af5b8f77735990a35b8280087bdfa0867547d2795a7d46f49726936e68fc8985b0685aed00296f8d85caf0e0a320996327c3ed860dcae7e37900c6eab968759632bc4b1ff5292f5bc91525cba5bcbfb326946fd907dacdadca1552ea2fb4ba3980c35d979c64feb463f2cc4d6bcb3a"}}, &(0x7f0000000800)={0x0, 0x3, 0x76, @string={0x76, 0x3, "6fcff40e5a5c5e110e8e8002ab50e01025a496ac96de3823ef3d45cd2280c1566ea1625aec9e56f4d007d76e2e7d23277062629e0538bf8815dc051243c841aa906ada5d8268e89e0b53690603c1201547cb5d737a405dce1dbf1aeba8f696615c1fa96dcb52ebea1bdc66b2f079d4891996dbf3"}}, &(0x7f0000000100)={0x0, 0x22, 0x23, {[@global=@item_4={0x3, 0x1, 0xb, "b72ed462"}, @main=@item_4={0x3, 0x0, 0x8, "f18e1cad"}, @main=@item_012={0x1, 0x0, 0xa, "12"}, @local=@item_4={0x3, 0x2, 0x4, "08fd89ff"}, @main=@item_012={0x1, 0x0, 0xb, 'k'}, @main=@item_012={0x0, 0x0, 0xb}, @main=@item_4={0x3, 0x0, 0xc, "d5bc08ae"}, @global=@item_4={0x3, 0x1, 0x3, "93c4df9f"}, @main=@item_4={0x3, 0x0, 0xb, "ad48e702"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x9, 0x1, {0x22, 0x1de}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000940)={0x40, 0x18, 0xf3, "5b174c4efbe27d8587c091db3bc721771eca7faffbbb4ba1c07386cb1650456d8b5a6b22a8bf5e742facd5095f0c5d0ec9cfcf72e020372500a62d00caf3fac5d2dd2d06def3d7ccbe88492deba72c01bd10157f9450c5e381f69323a673376dcb5159cb77878efd53d3d5d62cf19d2bf87bb1d283d762bdc0e9eabfd468b1ce70b06cb4b55227970973c90d269537eb693f58dde56f6688f554acaf581b28858cc004c3f554ff5cd46cf61be7e8d8cb0670cadcb90b4a8b66b4f11d94172e06467826c1341303e58e85305db34732e5a3cf37f63be504bcd29c375f069633e0132b52a3010ba886d1ce1698a0cd1b25bc4093"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xa6}, &(0x7f0000000a40)={0x20, 0x1, 0xa1, "db0f7f87ebfa31650df3dd8586d9d3c5d35e29a75af403ffb4a785e9b26329fb82355a28e81cfed29b6462b58ac7ecbde4291aec6c8930f47b3715a39c7d3cf5732155b56167818d50926137dbe269d0c0253789c3e79107c3a2718c0524d9f0afd7f10f7796cef754489370e8066255c0b2ed9019a2f9adb2f3999add0cbf212d578ec7c158ee528cd83ed3120bb9ee11aface679db51efd7e17bd31ab55f4e58"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x8}}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async) r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) close(0x4) recvmsg(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x58, 0x0, &(0x7f0000001c40)=[@free_buffer={0x40086303, r3}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs={0x40046304, 0x3}], 0xcd, 0x0, &(0x7f0000001d40)="1d488055d3f1688c4e797b10f650c33bb295362f0d05fd380896aba267b2b8cad21dae8af42636cd1ca4f92ffd194cd6519e07c189705bbc9b9fc2fd1ac553684decb13566191e525ee138cbdd4dc3add35eb1f113f54244188e560e4faaecb1240498f80255f807faf24afb597d624a3299132e9c5818a54f4764f89a0bd1d0f0aca6836e768112db938863e35a5767c5915f661c40aac97e6bfc18a95bd354e77c6e6026ce26185686097d8d673ecb16748efa59c6ffd00271ad3c2dbbf6b4b357f4c289f45cf2f4618afe11"}) 1.478660422s ago: executing program 4 (id=10650): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x63ba, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c, 0x0}}], 0x1, 0x40000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191c, 0x5c, 0x9, 0x3, 0x2, 0x0, 0x8, 0x3, 0x0, 0x2ab, 0x4, 0x4, 0x4, 0x3c5b, 0x1, 0x1ff, 0x7, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xa, 0x0, 0x71, 0x2, 0xffffffff, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0xa, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x17, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0x6, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x0, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0xfff, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0x4, 0x1, 0x2, 0x2, 0x20009, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x40009, 0x2, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x400003, 0x9, 0x100, 0x42, 0x4400004], [0x6, 0x6, 0x81000001, 0x2, 0xff, 0x40000100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x1ff, 0x2, 0x2, 0x800, 0x1000008, 0x5, 0x8001, 0x7, 0x38, 0x800203, 0x1fe, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x800, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120002, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x10, 0xbb32, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1001, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x80, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0xfffffffe, 0x30b1d693, 0x5a2d, 0xc, 0x7, 0x1, 0x10, 0x0, 0x4, 0x5, 0xb19, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x1200000000000, 0x9, 0x68cb, 0x4000000000000, 0x6, 0x8, 0x252b}, 0x0, 0xfffffffffffffffc, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000300)={'syz0\x00', {0xff67, 0x2, 0x9, 0xfffb}, 0x3c, [0x3, 0x5, 0x5, 0x8, 0x6, 0xd, 0x1, 0x6, 0x5, 0x1, 0x5, 0xc49, 0x6, 0x3, 0x2, 0x0, 0x6cd4, 0x8, 0x0, 0x401, 0x8001, 0x800, 0x2, 0x1, 0x4, 0x6, 0x28f, 0xffffffff, 0x3d0, 0x3, 0x10001, 0xc74f, 0x2, 0x800, 0x5b, 0x8, 0x2, 0x419, 0xe913, 0x6, 0x3, 0x30000, 0x6, 0x9, 0x3, 0x1, 0x3, 0x8, 0xffff, 0x8001, 0x1000, 0x0, 0x80000000, 0x3, 0x2, 0x9, 0x400, 0x1, 0xee68, 0xf, 0x3c, 0x7f, 0x9, 0x80000000], [0xffffffff, 0xb2b, 0x5c, 0x9, 0xc, 0x9, 0x7f, 0x8, 0xa500, 0xe, 0x7e1205ff, 0x1, 0x4, 0x1, 0x2ae, 0x40, 0xc, 0x3, 0x0, 0x60, 0x5, 0x5e9f, 0x8001, 0xdeba, 0x2311, 0x2, 0x7ff, 0x800, 0x1, 0xa, 0x1, 0x4, 0x8, 0x7, 0x7baf, 0x0, 0xf, 0x8, 0x10001, 0x4, 0x749c, 0x2, 0x3, 0x3022, 0x7, 0x7fffffff, 0x4, 0x1, 0x80000001, 0x9, 0x0, 0x0, 0x7f, 0x100, 0x5, 0x9, 0xfffffffc, 0x7, 0x800, 0x10000, 0x9, 0x93, 0x4, 0x7], [0xffffffcb, 0x8991, 0x2, 0x80000000, 0x6, 0x8, 0xffffffff, 0x81, 0x3, 0x2000000, 0xfffffffb, 0xa3c, 0x8, 0x0, 0x1, 0x4, 0x8, 0x7cb, 0xf, 0x9, 0x372, 0x6, 0x3, 0x8, 0x2, 0x6, 0x40e3db42, 0x2, 0x0, 0x2, 0x10, 0xfff, 0x7, 0x1, 0x3, 0x8, 0x5b, 0x1025, 0x101, 0x1, 0x1, 0xffffffff, 0x6, 0x37, 0x2, 0x6, 0x0, 0x8000, 0x7, 0x1, 0xffffe793, 0x3, 0x3, 0xff, 0x6, 0x40, 0x4, 0xc, 0x1, 0x0, 0x62b, 0x5, 0x0, 0x2], [0xffff, 0x800, 0x80000000, 0x5, 0x80000000, 0x8001, 0x0, 0x6, 0xfffffff8, 0x3, 0xb5a2, 0x5, 0x3ff, 0x7, 0x6, 0x6c2, 0x10000, 0xfffffffe, 0x0, 0x80000000, 0x3ff, 0xe7b, 0x3, 0x67fca5a4, 0x2, 0xff, 0x5, 0x0, 0x10000, 0x800, 0xffffffff, 0x7, 0x1, 0xfffffffc, 0x6, 0x80000001, 0x8, 0x9, 0x655, 0x25e, 0x3, 0xa, 0x4, 0x8001, 0xfffffff9, 0x4, 0x9, 0x4, 0x8, 0x6, 0x9, 0xf, 0x7fffffff, 0x2, 0x1, 0x6, 0x9, 0x10, 0x5, 0x9, 0x2, 0x3, 0x5, 0xff]}, 0x45c) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000001300)={'filter\x00', 0xb001, 0x4, 0x3c0, 0xe8, 0x0, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0xf296, 0xd}}}, {{@arp={@private=0xa010101, @loopback, 0x0, 0x0, 0x6, 0x70, {@mac=@random="c1328a2329f2", {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0x0, 0xff]}}, 0x4, 0x7, 0xfffd, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10000, 'syz0\x00', {0x7b}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) syz_usb_connect(0x5, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x310, 0x6a, 0x5b, 0x61, 0x10, 0x582, 0x5, 0x5c87, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x9, 0x5, 0x0, 0x3, [{{0x9, 0x4, 0x3f, 0xbd, 0x0, 0x6b, 0x29, 0xec, 0x81}}, {{0x9, 0x4, 0x9f, 0x0, 0x0, 0xff, 0xff, 0xff, 0x3}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x2, 0x0, 0x0, 0x2, 0x19}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @fda={0x66646185, 0x3, 0x1, 0x1a}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000980)={'syz0\x00', {0x6, 0x8, 0x6, 0xc}, 0x33, [0x4, 0x200, 0x37969bed, 0x0, 0x8d0d, 0x9d, 0x0, 0xfffff02e, 0x7, 0x8001, 0x7, 0x37, 0x6, 0x0, 0xae2, 0x1ff, 0x6, 0x3, 0xff, 0x8, 0x7, 0x8, 0x7, 0x8, 0x7, 0x1, 0x7f, 0x48, 0x9, 0x6, 0x8, 0x6, 0x6, 0x1ff, 0x4, 0x2, 0x5, 0x1, 0x80, 0x30e7, 0x0, 0xef, 0x7fffffff, 0x40000000, 0x8c5, 0x3ccaf847, 0x0, 0xff, 0x8, 0x3, 0x4, 0x7f, 0x1, 0xfffffffd, 0x7, 0x4, 0x3ff, 0x4, 0x8001, 0x8, 0x2, 0x3, 0xfffffffe, 0x9], [0x4, 0x6, 0x5, 0x10001, 0xffff, 0x8, 0x7, 0x2, 0x7, 0x3, 0xd6835ab, 0x8, 0x1, 0x0, 0x7, 0xff, 0x7f, 0x5, 0x1, 0xc1, 0x9, 0x3, 0x9, 0x8, 0x9, 0x6, 0x80000000, 0x11, 0xf73a, 0x0, 0xe, 0x8, 0x0, 0x3, 0x96b9, 0x4, 0x5, 0x7, 0xffff, 0xfffffffa, 0x2, 0x8, 0xbda, 0xfffffffa, 0x0, 0xffff, 0x1, 0x2, 0x0, 0x8, 0x0, 0x8, 0x3, 0x7, 0x2b1, 0x7fffffff, 0x80000001, 0x39, 0x0, 0x2, 0x0, 0x1, 0x8, 0x10], [0x2, 0x6, 0xaf1a, 0x3, 0x7, 0xef, 0x100, 0xffffff92, 0x1ff, 0xfffffffb, 0x0, 0xe, 0x3, 0x8000, 0x7, 0x2, 0x10, 0x0, 0x4, 0x9, 0x8, 0xfffffffc, 0x8, 0xd440, 0x9, 0x0, 0xa1dd, 0x2, 0x5, 0xfbbf, 0x1, 0xfffffffe, 0x2, 0x0, 0x7, 0xfffffffe, 0x3, 0xbdb4, 0x8, 0x2, 0x6, 0x7, 0x6, 0x80000000, 0x8, 0x10000, 0x80000000, 0x80, 0x4, 0x7, 0x6, 0x180000, 0x5, 0x7, 0x9, 0x8001, 0x1, 0x6, 0x9d, 0x2, 0x2, 0x6, 0x9, 0x1], [0x101, 0x1, 0xae6, 0x6, 0x0, 0xd1, 0x4, 0x5, 0x2, 0x1, 0x3ff, 0x3, 0x8, 0x3, 0x37, 0x87, 0x7, 0x6, 0xe, 0x400, 0x8, 0x4, 0x3, 0x1, 0x8, 0x9, 0x2, 0x1, 0x8f3f, 0x1, 0x3, 0x81, 0x1ff, 0x4, 0x2, 0x4, 0xe, 0xc0c, 0xa0efe82, 0xff, 0xe2f4, 0x5, 0x7, 0x6, 0x100, 0x3, 0x6, 0x1, 0x73, 0x3, 0x7f, 0xfffffffd, 0x6, 0x23e, 0xfeb, 0x7, 0x5, 0x72, 0x6, 0x6, 0xffe000, 0x4, 0x7, 0x40]}, 0x45c) 1.429776983s ago: executing program 1 (id=10651): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, &(0x7f0000000440)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x3}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x54, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2e}}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x38}}, 0x1000}], 0x0, 0x0, 0x0}) 1.371228384s ago: executing program 1 (id=10652): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000000), 0x4) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder0\x00', 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x101800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) r4 = eventfd2(0x180, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r4}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000000000002"]) write$eventfd(r4, &(0x7f00000000c0)=0x33482a89, 0x8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="000000f6"], 0x8a) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) getsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000040), &(0x7f00000000c0)=0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) 1.242083386s ago: executing program 9 (id=10653): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000080)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x2}) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0x2, {0x2, 0x2, 0xa514, 0x80, 0x1}}) mount$overlay(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x8000, &(0x7f0000000100)={[{@redirect_dir_off}]}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) r2 = epoll_create1(0x0) setresuid(0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, 0x0, 0x0) statx(0xffffffffffffffff, 0x0, 0x4000, 0x40, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r4 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000005304"], 0x3c}, 0x1, 0x0, 0x0, 0x240208d1}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000008) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1900, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x2c, &(0x7f0000000000)=0x8, 0x4) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) syz_clone3(&(0x7f0000000a00)={0x110000, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780), {0x30}, &(0x7f00000007c0)=""/196, 0xc4, &(0x7f00000008c0)=""/250, &(0x7f00000009c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0], 0x3}, 0x58) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000500)=[@enter_looper], 0xffffffffffffff0b, 0x0, 0x0}) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) sendmsg$inet(r5, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000004c0)=[{&(0x7f00000000c0)="91b021e258a251967dd3eb39b05074a6aaef3e253a9f08fbb9e48848afdc85da70238e6857cbd506ecb1ba4d94c19420ed", 0x31}, {&(0x7f0000000180)="6a9f352cfd35622d6a37eab733e7d730a46f5e127a90d89e29d277636c49eede7184bcdccb1ae17e30fb6e529a3982e8dde90597d6593ab1", 0x38}], 0x2, &(0x7f0000000a80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0xe8, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x1}, @timestamp_prespec={0x44, 0x1c, 0xce, 0x3, 0x8, [{@multicast1, 0x800}, {@empty, 0x7}, {@loopback, 0x227a}]}, @cipso={0x86, 0x25, 0x1, [{0x0, 0xc, "15cf5535b331c291c193"}, {0x7, 0xe, "e1a9474024e104c89bf0e198"}, {0x5, 0x5, "7495bd"}]}, @noop, @timestamp_prespec={0x44, 0x24, 0x77, 0x3, 0xf, [{@broadcast, 0xfffffff9}, {@private=0xa010102, 0x9}, {@private=0xa010102, 0x3}, {@broadcast, 0x35}]}, @cipso={0x86, 0x12, 0x0, [{0x2, 0x3, 'g'}, {0x0, 0x9, "2b6afcc559d56c"}]}, @timestamp_addr={0x44, 0x3c, 0x26, 0x1, 0xd, [{@local, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@empty, 0x5}, {@loopback, 0x9}, {@rand_addr=0x64010100, 0x4}, {@loopback, 0x1}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x7fff}]}, @timestamp={0x44, 0x1c, 0x23, 0x0, 0x7, [0x1, 0xb0, 0x3, 0x3, 0x3, 0x3]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14}}, @ip_tos_int={{0x14}}], 0x148}, 0x1) 1.241805487s ago: executing program 1 (id=10654): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000040)=r1) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001010040"]) (async) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) (async) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)=0xf) (async) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 963.136202ms ago: executing program 4 (id=10655): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x1, 0x62, "9f9b1b1063013bebdfd426e96af5016bafbb1502c87a3bfbb0bc6e96f868471ce101a3d57571e6ce7eb4358cbdc4b11ad75483bc5672228440c3326758d70b1f932a047451072c1e97666b3be57459e87a71dbf3afa44ffc86ec05958e49b163f1cc"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x4}}) syz_usb_connect$uac1(0x5, 0xba, &(0x7f0000000c00)=ANY=[], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x10, 0x0, 0x0, 0x0, {0x1b}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)=0x4) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000000)={0x57, 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000010c0)={0x18, 0x20, 0x1, 0x70bd23, 0x0, "", [@typed={0x8, 0x62, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000000)={[], [{@flag='rw'}]}) 734.827696ms ago: executing program 1 (id=10656): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) io_setup(0x9, &(0x7f0000000280)) (async) io_setup(0x9, &(0x7f0000000280)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000002c0)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) 638.240788ms ago: executing program 1 (id=10657): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x1002, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) close_range(r0, 0xffffffffffffffff, 0x0) 637.491158ms ago: executing program 1 (id=10658): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) exit(0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc1}, &(0x7f0000000140)={0x0, "f95f497d32c4be3a5543070190b24d6938a0a35b2d913a9e644c6936a660db5fbc9b6273be683d60a987deef0dd9462257d8f8df67f381d90ca17e50073a4de6", 0x2f}, 0x48, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r3, r5, r4, 0x1) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r6, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000008c0)=""/150, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/76, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r6, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r6, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_VRING_KICK(r6, 0x4008af04, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r6, 0x4028af11, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, 0x0, 0xeeee8000}) r7 = timerfd_create(0x5, 0x800) r8 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f0000000000)={{r8}, 0x100000007fffffff, 0x7, 0x2}) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000100)) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000040)=0x200) 416.553173ms ago: executing program 9 (id=10659): r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000040)={'system_u:object_r:shell_exec_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x101}, 0x46) (async) write$selinux_access(r0, &(0x7f00000000c0)={'system_u:object_r:modules_conf_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x4}, 0x49) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001240)=0x0) (async) r2 = getpgrp(0xffffffffffffffff) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001280)={0x0, 0x0}) r4 = syz_clone3(&(0x7f0000001340)={0x20000000, &(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0, {0x33}, &(0x7f0000000200), 0x0, &(0x7f0000000240)=""/4096, &(0x7f0000001300)=[0x0, r1, r2, r3, 0x0, 0xffffffffffffffff], 0x6, {r0}}, 0x58) (async) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000013c0), 0x1, 0x0) ioctl$TCGETS2(r7, 0x802c542a, &(0x7f0000001400)) (async) r8 = getpgid(r6) syz_clone3(&(0x7f00000016c0)={0x10012880, &(0x7f0000001440)=0xffffffffffffffff, &(0x7f0000001480), &(0x7f00000014c0)=0x0, {0x8}, &(0x7f0000001500)=""/204, 0xcc, &(0x7f0000001600)=""/95, &(0x7f0000001680)=[r8, r1, r5, r5, r5, r4], 0x6, {r7}}, 0x58) ioctl$EXT4_IOC_GROUP_ADD(r9, 0x40286608, &(0x7f0000001740)={0x1, 0x1, 0x6, 0x7, 0x200, 0x3}) sendmsg$NFT_BATCH(r7, &(0x7f0000002180)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002140)={&(0x7f00000017c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELSET={0x920, 0xb, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_EXPRESSIONS={0x5b4, 0x12, 0x0, 0x1, [{0x5b0, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x59c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x4c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x3c, 0x1, "3046572dfd6a043e513502f7ef7de3414e459d9ac3fcc2a8ef2b49bc1936dcddedd24a2919c2c787ce106b32988e632d098f11df894ca41b"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xc890d8c6603182eb}, @NFTA_IMMEDIATE_DATA={0x110, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd6, 0x1, "e1177f0b092447626e7bb1d2eec31071901b9b871100f7722080ecbab293d34d663e621679b86c95bd867c3b5c547625ca7f45eab6bc0ce6974f76f4122cb3dd3fb42d121a375221825c7cb8eafe9fc88180acb3bccd0f1751f6dcb46ca8f2ba4ef7b8a3b22ec4dbaeaa3b4f477e160e6bc08081a50d9c63fca97a21d151adb74f6eee5e0f10dc24e9cd13a8973304cadd5d30ae4e9eeb3671a1e84d8388ce0f66753d8b1265aaacea90b819e0520e42567f85fbf4696b0d889c49b3bd5dd58e0396f8dbdf8a5c9021814634edafaefaa433"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_IMMEDIATE_DATA={0x198, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x78, 0x1, "85f42b0112dc127d3ebc80544966b4ab991cfda71770513fd301d783b9951eda23e74110dba1fbfe3d7e0dd106f4041f4c0e81a8463f23d1a0d2b96ad3d6d8deefbca99c73d7322fbf866270946928f0e8dfbd3ac207cdb297c06f02ab3c2d218e9ff01a1c15bcbee430e71306ece2015e259a29"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_IMMEDIATE_DATA={0x274, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xca, 0x1, "0a4ea8e7ee6716d3c6728bd9d7c947de86c18dbfcbf13878042e68caabf3a0621fd962493b3a73bff24f4878a11e5b263fba60198a03712a1a4b1b8fbe9ecc5ab6c8391a54f7f6fd869475c183c7f6a873d8f93f5896d4321e359e3daefaecaddf552be6790477dc340727748d1e7c03fb59269306916f82da57d2c83acf7232124102c5ebe9bb693d4585d1d1f215154fb70e0efa12d7cf5a509c369fb18b16ce3f72e416fc84951b3e8791fc6cd014130ec68610aac2eef467d9aeb4e03e6dfb5dc6a3cc97"}, @NFTA_DATA_VALUE={0xf1, 0x1, "d8e3e2936a11e81a3b9b982b08f60defa53e3df05fde163b0474e6afee3003ed67816d3c263097954d34b6a6438fabcbe590a1ebf99abab11b693f57402c29c7fad6f4abe307f6c0573fa6ead59ef6446ff5a36ac6c8d16860c7f076f712006ebfaf13ed70a182a8885e0c1392abba1b4e7afd4ae2e957d3f0bd3331b07dbcaff8e68eb4397302fc2121a98ebdf69620feb1e9854863f316541554b9620549a42991fb4ad3797e7443b2e177f2a149ae32698d676c0736720eb03b609a992c3893a855c626287ccbf49b9a2905a3b3ab44e39a1a54e7ce98d1e90d09d83c38304b38f7ae6b780085168f571d83"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x6}]}}}]}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_DESC={0x2d0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1a4, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6f0}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_CONCAT={0x120, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc6e}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x21b7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf920}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffeff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}]}]}]}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_EXPR={0x64, 0x11, 0x0, 0x1, @tproxy={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x12}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}], {0x14}}, 0x948}, 0x1, 0x0, 0x0, 0x50}, 0x8011) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002200), r7) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000002240)={'batadv0\x00', 0x0}) (async) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000002280)={0x0, @loopback, @multicast2}, &(0x7f00000022c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000002300)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r11, &(0x7f0000002440)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0xbc524b364cc2fa31}, 0xc, &(0x7f0000002400)={&(0x7f0000002340)={0xac, r12, 0xa04, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @ETHTOOL_A_PAUSE_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000841) (async) r16 = gettid() ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f00000035c0)={'\x00', 0x0, 0xff, 0x40, 0xfffffffffffffffe, 0xb, r3}) syz_clone3(&(0x7f0000003680)={0x2000200, &(0x7f0000002480), &(0x7f00000024c0), &(0x7f0000002500), {0x1e}, &(0x7f0000002540)=""/72, 0x48, &(0x7f00000025c0)=""/4096, &(0x7f0000003640)=[r8, r16, r17, r10, r8, r8, r2], 0x7, {r7}}, 0x58) openat$cgroup_procs(r7, &(0x7f0000003700)='tasks\x00', 0x2, 0x0) sendmsg$sock(r11, &(0x7f0000003a40)={&(0x7f0000003740)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x1, 0x4, 0x2, 0x1, {0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x512d}}}, 0x80, &(0x7f0000003a00)=[{&(0x7f00000037c0)="aefa0a502ced1d47d2a85366eed9319db6772fbe8c7cfd13d42962b5748c466a1a83ebe06d196011e6719b530298699003184474f8308e569583bf89a1384ed3e73ae91ff9132e9a4df3faf8ac077e4c64fff5450c53bd8355aaa4e93e2d89fba42512c81bfe6e421f9881318d5f5ef63db93d8a4b7ac363d5ce59b3561d15bc73007991f8cd1b8dfe67bb45ca232fe38d585a7cf565b9e68966bab884464bd56c51332846c2c747f6f57e12f4e9b7c2dbb291c08fc2375ac758deb069597ff7f74b0f709b274cb150dbc6f1b3f7ecb4918b0916e3aa6635ffbe6372df63617aff4eb49b73b67c0e594c0c9fc8fd905c417c7a08e1ece0e82d21", 0xfa}, {&(0x7f00000038c0)="f700343e747b64d32a143a61c5ef0cfe62755d56027c477eb8f6f19620560eca89d6807505bfc3dfbab0bd4cc1e151384744094110d2bf7c6b9cbcde3f3062abd4f731e5be7ea03b72b304424091f1a63421082c23725d58f66c388c34b6d1a68ce938395d7e01c31b438cd79fa716c565fce8dd17e9771005022a7479e3a350f915a5e0dd55eea70d4d975aabe97b762f591b74136a00bd73c3a2532bdddbefc53f8213ae7b7f38", 0xa8}, {&(0x7f0000003980)="a3b306f5150f023a626e701285e73c408cf18f3e94f3a325df71fbfbf1834a39f1d3ee98a3c9a9df43a8a5da016ac975d36c83aa151a41b1285c907585e8252cddf7b4f6f3f61dc73cfc6b515061dc6c6c8327cbf17d88fdbe807918e216e33b78102c725b7a4a90f4be5ee5bf", 0x6d}], 0x3}, 0x90) (async) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r7, 0x4068aea3, &(0x7f0000003a80)) syz_usb_connect$uac1(0x6, 0xd2, &(0x7f0000003b00)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x3, 0x1, 0xbc, 0x80, 0xff, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x71ad, 0xe}, [@selector_unit={0xb, 0x24, 0x5, 0x2, 0xff, "19bd24514d1e"}, @feature_unit={0x13, 0x24, 0x6, 0x3, 0x4, 0x6, [0xa, 0x5, 0xa, 0x2, 0x5, 0x5], 0x5}, @mixer_unit={0x9, 0x24, 0x4, 0x3, 0xc, "4676b4e6"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x4, 0x5, 0x5}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x3, 0x75, 0x2, "d3", "1b"}, @as_header={0x7, 0x24, 0x1, 0x8, 0xe7}, @as_header={0x7, 0x24, 0x1, 0xa1, 0x4, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x600, 0x3, 0x9, 0x9a, {0x7, 0x25, 0x1, 0x1, 0xe, 0x34}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x1, 0x2, 0xff, 0xb}, @as_header={0x7, 0x24, 0x1, 0x3, 0x7, 0x4}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x3, 0x3, 0x6, "8b5a80", 'L'}]}, {{0x9, 0x5, 0x82, 0x9, 0x3df, 0x3, 0xc1, 0xe7, {0x7, 0x25, 0x1, 0x0, 0x9, 0x200}}}}}}}]}}, &(0x7f0000003d80)={0xa, &(0x7f0000003c00)={0xa, 0x6, 0x110, 0xe, 0xe, 0x72, 0x20, 0x9}, 0x5, &(0x7f0000003c40)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000003c80)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000003cc0)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000003d00)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000003d40)=@lang_id={0x4, 0x3, 0xf0ff}}]}) (async) ioctl(r7, 0x2e3ccaca, &(0x7f0000003e00)="d581c21085b76bfa955bd4d2fbc1f9d9fa7837d70d9dae5b6711b527a95dcd095e0711702b899724a4dd9354bbf50d2103a2dee115419a92b7a217299cfc39a6b3f12de63edefb473ba07ae3deab651737dbaa1ce51ed6635a72af80d93a4a9259e53080") (async) ioctl$KDSKBMODE(r7, 0x4b45, &(0x7f0000003e80)=0x3) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r11, 0x4002f516, &(0x7f0000003ec0)={0x2, 0x8}) (async) getsockopt$nfc_llcp(r7, 0x118, 0x4, &(0x7f0000003f00)=""/185, 0xb9) 381.163003ms ago: executing program 4 (id=10660): ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x3, 'netpci0\x00', {0x1}, 0x4}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x38, &(0x7f0000001800)=0xff, 0x4) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='configfs\x00', 0x12a8010, 0x0) 322.281574ms ago: executing program 4 (id=10661): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x80000) r3 = fcntl$dupfd(r1, 0x406, r2) fcntl$setlease(r1, 0x400, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x40000000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x10000014}) close_range(r0, 0xffffffffffffffff, 0x0) 320.422015ms ago: executing program 4 (id=10662): ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x6, 0xffffff00, 0x5d, 0x81, 0xffffffffffffffff}) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x5, 0x2003) prctl$PR_SET_PTRACER(0x59616d61, r0) (async) prctl$PR_GET_CHILD_SUBREAPER(0x25) r1 = memfd_create(&(0x7f0000000080)=')\x00', 0x7) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) recvmsg$unix(r2, &(0x7f00000016c0)={&(0x7f0000000100), 0x6e, &(0x7f0000001600)=[{&(0x7f0000000180)=""/221, 0xdd}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/223, 0xdf}, {&(0x7f0000001380)=""/129, 0x81}, {&(0x7f0000001440)=""/27, 0x1b}, {&(0x7f0000001480)=""/201, 0xc9}, {&(0x7f0000001580)=""/116, 0x74}], 0x7, &(0x7f0000001680)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}], 0x40}, 0x40000142) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001780)={'wlan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000017c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000018c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x60, r4, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x13}, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PID={0x8, 0x52, r3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x40, 0x3c}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x28}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x22}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x53}}]}, 0x60}, 0x1, 0x0, 0x0, 0x48080}, 0x0) (async) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000001940), r2) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x1c, r7, 0x4da4894e0f6aa717, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000001a40)={{0x2, 0x4e21, @multicast2}, {0x1, @local}, 0xa, {0x2, 0x4e21, @broadcast}, 'netdevsim0\x00'}) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000001e40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001e00)={&(0x7f0000001b00)={0x2ec, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8c}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff1503}, @TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x294}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x84}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5878885e}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fff}}, {0x14, 0x2, @in={0x2, 0x4e22, @local}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_BEARER={0x164, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00', 0xed31}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @remote, 0xfffffff9}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x1, @mcast2, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6e6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa}]}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x44080}, 0x20040841) (async) prctl$PR_GET_CHILD_SUBREAPER(0x25) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000002b40)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002b00)={&(0x7f0000001ec0)={0xc10, r4, 0x0, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x73}}}}, [@NL80211_ATTR_TX_RATES={0x14c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0xd, 0x2, [{0x0, 0x9}, {0x0, 0x6}, {0x4, 0x4}, {0x0, 0x7}, {0x3, 0x8}, {0x0, 0x4}, {0x1, 0x3}, {0x4, 0x5}, {0x1, 0x5}]}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x2, 0x1, 0x24, 0x30, 0x24, 0x1, 0x6c, 0x16, 0x5, 0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x8900, 0x92ce, 0x4, 0xfff, 0x5, 0xd1, 0x40]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x14, 0x2, [{0x5, 0x5}, {0x0, 0x5}, {0x0, 0x2}, {0x5, 0x1}, {0x5, 0x7}, {0x4, 0x7}, {0x2, 0x4}, {0x1, 0x4}, {0x7, 0x9}, {0x1, 0x4}, {0x1, 0x7}, {0x3, 0x1}, {0x7, 0x8}, {0x2, 0x3}, {}, {0x5, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x1c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x48, 0x4, 0xc, 0x48, 0x18, 0x0, 0x4, 0x4b, 0x16, 0x1, 0x16]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xe, 0x1, [0x60, 0x6, 0x12, 0x1b, 0x36, 0x24, 0x1, 0x6, 0xc, 0xf]}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x4, 0x2, 0x24, 0x1b, 0x5, 0x24, 0x6c, 0x36, 0x1, 0x6c, 0x30, 0x1b, 0xb, 0x3, 0x30, 0x30, 0x30, 0x6, 0x4, 0x3, 0x12, 0x1b, 0x3, 0x12, 0x12]}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x4, 0x18, 0x5, 0xc, 0x6c, 0x12, 0x6c, 0x4, 0x0, 0x5, 0x5, 0x1, 0x1b]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x7d, 0x3a8b, 0x8, 0x2, 0x8, 0x7, 0x1ff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xc, 0x1, [0x36, 0x2, 0x5, 0x48, 0x4, 0x3, 0xab33df23db622484, 0x36]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x4, 0x18, 0xb, 0x1, 0x6, 0x1b, 0x5, 0x12, 0x1, 0x16, 0x3, 0x16, 0x12, 0x3, 0x1a, 0x48, 0x18, 0x16, 0x18, 0x48, 0x1, 0x18, 0x16, 0x48, 0xb, 0x60]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0xc, 0x5, 0x6, 0x3, 0x24, 0x16, 0x0, 0x6, 0x1b, 0x16]}]}]}, @NL80211_ATTR_TX_RATES={0x350, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x4, 0xc, 0x9, 0x38ec1be330c3f34e, 0x48, 0x2, 0x16, 0x4, 0x1, 0x18, 0x12, 0x60, 0x48, 0x16, 0x18, 0x1, 0x6c, 0x6c, 0x2, 0x11, 0x60, 0x3, 0xc, 0x6e, 0x36, 0x36, 0xc, 0x12, 0x1, 0x1b, 0x1b]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x17, 0x1, [0x2, 0x3, 0x1, 0x3, 0x3, 0x1b, 0x9, 0x60, 0x3, 0x18, 0x60, 0x1b, 0x25, 0x2, 0x16, 0x24, 0x60, 0x2, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x1, 0x7}, {0x0, 0x2}, {0x1, 0x4}, {0x4}, {0x3, 0x1}, {0x4}, {0x4, 0x2}, {0x7, 0x1}, {0x3}, {0x4, 0x3}, {0x6, 0x7}, {0x5}, {0x1, 0xa}, {0x0, 0x4}, {0x0, 0x2}, {0x4, 0x3}, {0x5, 0x2}, {0x5, 0x1}, {0x1}, {0x0, 0x5}, {0x1, 0x1}, {0x0, 0x7}, {0x4, 0x4}, {0x3, 0x4}, {0x0, 0x2}, {0x0, 0xa}, {0x6, 0x9}, {0x2, 0x9}, {0x0, 0x9}, {0x2}, {0x3, 0x2}, {0x1, 0x8}, {0x5, 0x3}, {0x6}, {0x0, 0x8}, {0x7, 0x6}, {0x1, 0x4}, {0x4, 0x2}, {0x0, 0x5}, {0x0, 0x9}, {0x3, 0xa}, {0x4, 0x2}, {0x3, 0x1}, {0x1, 0x7}]}]}, @NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3e, 0xa60f, 0x2210, 0xc, 0xc906, 0x8001, 0x9, 0x9]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x1b, 0x60, 0x4, 0x0, 0x16, 0x4, 0x16, 0x24, 0x9, 0x1, 0x36]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x5, 0x48, 0x36, 0x30, 0x6, 0x6, 0x6c, 0x30, 0x6c, 0x36, 0x6c, 0x6, 0x1a, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0x2964, 0xf73, 0xef92, 0x0, 0xfe01, 0x4]}}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x2, 0x7}, {0x2}, {0x0, 0x1}, {0x3, 0x5}, {0x4, 0x5}, {0x1, 0x3}, {0x6, 0x1}, {0x7, 0xa}, {0x4, 0x8}, {0x0, 0x8}, {0x0, 0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x3}, {0x2, 0x4}, {0x3}, {0x5, 0x8}, {0x2, 0x2}, {0x4, 0x7}, {0x1, 0x5}, {0x7, 0x3}, {0x5, 0x8}, {0x7, 0x9}, {0x3, 0x9}, {0x5, 0x2}, {0x3, 0x3}, {0x1, 0x8}, {0x1, 0x5}, {0x7, 0x1}, {0x0, 0x4}, {0x3, 0x5}, {0x3, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x48, 0x6c, 0xb, 0x6c, 0x24, 0x5, 0x16, 0x24, 0xb]}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x12, 0x24, 0x9, 0x12, 0xb, 0x4, 0x30, 0x18, 0x6c, 0xb, 0x36, 0x18, 0x6e08c71f7926f388, 0x18, 0x4, 0x30, 0xb, 0x36, 0xc, 0x16, 0x60, 0x6]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4a0, 0xfff1, 0x3, 0x7, 0xed07, 0x5, 0x3, 0x1]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x9, 0x6c, 0x4, 0x5, 0xb, 0x48, 0x1, 0xc, 0x1, 0x6c, 0x7, 0x36]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x9, 0x80, 0x6, 0x200, 0x1239, 0x1, 0x4]}}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0xdd111e6ef05fc152, 0x0, 0x6, 0xb, 0xc, 0xb, 0x36, 0x1b, 0x1b, 0x5, 0x30, 0x48, 0x48, 0x5, 0x18, 0x5, 0x6, 0x4]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x4, 0x7}, {0x2}, {0x3, 0xa}, {0x4, 0x8}, {0x6}, {0x0, 0x9}, {0x3}, {0x2, 0x9}, {0x6, 0x4}, {0x6, 0x6}, {0x5, 0x3}, {0x7, 0x4}, {0x0, 0x2}, {0x2, 0x5}, {0x0, 0xa}, {0x1}, {0x6, 0x2}, {}, {0x5, 0x2}, {0x7, 0x1}, {0x1, 0x7}, {0x7, 0x2}]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x4, 0x1}, {0x4, 0x2}, {0x7, 0x4}, {0x7, 0x1}, {0x5, 0x1}, {0x7, 0x4}, {0x3, 0x2}, {0x7, 0x9}, {0x1}, {0x5, 0x3}, {0x0, 0x3}, {0x3, 0x2}, {0x1, 0x7}, {0x1, 0x1}, {0x4, 0x4}, {0x0, 0x4}, {0x0, 0xa}, {0x6, 0x4}, {0x0, 0x9}, {0x7, 0x7}, {0x7, 0x3}]}]}, @NL80211_BAND_60GHZ={0xd8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x48, 0x6c, 0x17, 0x1b, 0xb, 0x48, 0x30, 0x24, 0x0, 0x9, 0x60, 0x36, 0x48, 0x5, 0x2, 0x3, 0x9, 0x60, 0x48, 0x1, 0x1, 0x30, 0x5, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x40, 0x83, 0x3, 0x9, 0x0, 0x2, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7e, 0x8, 0x7, 0xf2f0, 0x5, 0x1, 0x6, 0x8]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{}, {0x1, 0x6}, {0x4, 0x2}, {0x3, 0x7}, {0x6, 0x4}, {0x6, 0x1}, {0x5, 0x1}, {0x1, 0x2}, {0x4, 0x6}, {0x5, 0x7}, {0x5, 0x5}, {0x1, 0x4}, {0x0, 0x6}, {0x2, 0x2}, {0x6, 0xa}, {0x0, 0x6}, {0x5, 0x2}, {0x5, 0x8}, {0x6, 0x3}, {0x4, 0x1}, {0x1, 0x5}, {0x0, 0x1f}, {0x1, 0x7}, {0x6, 0x3}, {0x4, 0xa}, {0x0, 0x4}, {0x6, 0x7}, {0x1, 0xa}, {0x4, 0x7}, {0x3, 0x9}, {0x0, 0x8}, {0x7, 0x5}, {0x6, 0xa}, {0x3, 0x5}, {0x7, 0x5}, {0x0, 0x7}, {0x2, 0x7}, {0x7, 0x1}, {0x0, 0x1}, {0x6, 0x7}, {0x2, 0x4}, {0x0, 0x3}, {0x2}, {0x3, 0x7}, {0x3, 0x6}, {0x0, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x7, 0x1ff, 0x5, 0x2, 0x2, 0x4, 0x7]}}, @NL80211_TXRATE_HT={0x2e, 0x2, [{0x3, 0x7}, {0x3, 0x8}, {0x3, 0x7}, {0x5}, {0x0, 0x6}, {0x7, 0x3}, {0x1, 0x3}, {0x6, 0xa}, {0x4, 0x1}, {0x4, 0xa}, {0x3, 0x3}, {0x4, 0x3}, {0x5, 0xa}, {0x4, 0x6}, {0x3, 0x6}, {0x0, 0x6}, {0x1, 0x3}, {0x2}, {0x6, 0x2}, {0x6, 0x2}, {0x4, 0x1}, {0x5, 0x6}, {0x4, 0x3}, {0x5, 0x5}, {0x3, 0x5}, {0x2, 0x1}, {0x4, 0x2}, {0x3, 0x4}, {0x7, 0x6}, {0x2, 0x2}, {0x0, 0x4}, {0x1, 0x5}, {0x6, 0x4}, {0x6, 0x8}, {0x0, 0x8}, {0x0, 0x4}, {0x0, 0x4}, {0x1, 0x1}, {0x1, 0x5}, {0x3}, {0x6, 0x9}, {0x4}]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x3, 0x9, 0x9, 0x24, 0x9, 0x200, 0xb]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x7, 0xa}, {0x2, 0x9}, {0x5, 0x5}, {0x1, 0x2}, {0x4, 0x8}, {0x0, 0x9}, {0x7, 0x6}, {0x7, 0x3}, {0x5, 0x4}, {0x4, 0x2}, {0x3, 0x9}, {0x2, 0x8}, {0x4, 0x1}, {0x4}, {}, {0x7, 0x4}, {0x6, 0x1}, {0x5, 0x4}, {0x7, 0xa}, {0x1}, {0x5, 0x7}, {0x6, 0x1}, {0x4, 0x2}, {0x3, 0x6}]}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x9, 0x60, 0x4, 0x1b, 0x4, 0x60, 0x36, 0x30, 0x24, 0x1b, 0x30, 0x5, 0xb, 0x5, 0x74, 0xc, 0x1b, 0x5, 0xa, 0x1, 0x16, 0x3, 0x36, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0xf, 0x2, [{0x1, 0xa}, {0x6, 0x8}, {0x4, 0x4}, {0x4, 0x2}, {0x2, 0x7}, {0x4, 0xa}, {0x1, 0x5}, {0x3, 0x8}, {0x6, 0xa}, {0x7, 0x1}, {0x0, 0x5}]}]}]}, @NL80211_ATTR_TX_RATES={0x1d4, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x60, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xb, 0x3d, 0x24, 0xc, 0x6, 0x9, 0x48, 0x2, 0x1, 0x3, 0x4, 0x1b, 0x3, 0x12]}, @NL80211_TXRATE_HT={0x38, 0x2, [{0x4, 0x9}, {0x5, 0x5}, {0x1, 0x6}, {0x1, 0x6}, {0x0, 0x9}, {0x5, 0x1}, {0x4, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x3, 0x7}, {0x3, 0x5}, {0x4, 0x3}, {0x7, 0x3}, {0x3, 0x9}, {0x4, 0xa}, {0x6, 0x5}, {0x0, 0x6}, {0x2, 0x6}, {0x0, 0x1}, {0x0, 0x6}, {0x7, 0x7}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x2}, {0x1, 0xa}, {0x6, 0x6}, {0x2, 0x3}, {0x1, 0x6}, {0x2, 0x8}, {0x2}, {}, {0x2, 0x3}, {0x1, 0x3}, {0x0, 0x8}, {0x0, 0x1}, {0x1, 0x4}, {0x1, 0x3}, {0x7, 0x9}, {0x0, 0x8}, {0x1, 0x6}, {0x1, 0x6}, {0x7, 0x5}, {0x1, 0x5}, {0x1}, {0x5, 0x1}, {0x1, 0xa}, {0x7, 0x5}, {0x5, 0x3}, {0x1}, {0x0, 0xa}, {0x1, 0x2}, {0x1, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x44, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x4, 0xf, 0x7, 0x5, 0x4, 0xfff6, 0xff]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6c, 0x6, 0x18, 0x60, 0x16, 0xc, 0xb, 0x2, 0x6c, 0x16, 0x18, 0x6, 0x0, 0x1b, 0x9, 0x6c, 0x12, 0x4, 0xc, 0x48, 0x60, 0xc, 0x60, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x30, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x3, 0x1, 0x7, 0x7, 0x2, 0x4, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x3, 0x7}, {0x7}, {0x1, 0x3}, {0x4, 0x2}, {0x1, 0x4}, {0x3, 0x2}, {0x3, 0x8}, {0x6, 0x8}, {0x7, 0x1}, {0x3, 0x7}, {0x2, 0x3}, {0x6, 0x2}, {0x7, 0x1}, {0x1, 0x5}, {0x0, 0x8}, {0x3, 0x6}, {0x0, 0x8}, {0x6}, {0x1, 0xa}, {0x3, 0x4}, {0x0, 0x4}, {0x7, 0x5}, {0x5, 0x4}, {0x3}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x9, 0x28c, 0x2, 0x0, 0xa2, 0x1ff, 0x81]}}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x36, 0x2, 0x4, 0x60, 0x9, 0x24, 0x5, 0x30, 0x24, 0x1]}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa5, 0xffff, 0x1, 0x2, 0xb, 0x3, 0x7, 0x400]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x16, 0x1, [0x1b, 0x6c, 0xb, 0x18, 0x24, 0x60, 0x5, 0x6, 0x1, 0x1b, 0xc, 0x24, 0x24, 0x5, 0x2, 0x12, 0x36, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x9, 0x5, 0x7f, 0xfff, 0x7, 0x4, 0x180]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x1000, 0xffff, 0x4, 0xf801, 0x2000, 0x1, 0x3]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x7}, {0x1, 0x2}, {0x2, 0x2}, {0x7, 0x3}, {0x2, 0x3}, {0x1, 0x8}, {0x0, 0x2}, {0x0, 0x7}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x3, 0x7, 0x6a, 0xb, 0x8001, 0xf]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x2d0, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x84, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x7, 0x9, 0xcad4, 0x4, 0x1, 0x3, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x98, 0x9, 0x500, 0xd, 0xd, 0x93df, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x29, 0x2, [{0x6, 0x8}, {0x1, 0x4}, {0x6, 0x8}, {0x3, 0x8}, {0x4, 0xa}, {0x4, 0x1}, {0x7, 0x9}, {0x4, 0x9}, {0x6, 0x5}, {0x5, 0x3}, {0x1, 0x1}, {0x6, 0xa}, {0x0, 0x7}, {0x0, 0x3}, {0x0, 0x1}, {0x2, 0x6}, {0x5, 0x6}, {0x3, 0x7}, {0x7, 0x3}, {0x2, 0x6}, {0x0, 0x3}, {0x7, 0x8}, {0x2, 0x1}, {0x4, 0x2}, {0x1, 0x8}, {0x5, 0x4}, {0x5, 0x5}, {0x0, 0x5}, {0x0, 0x1}, {0x1}, {0x6, 0xa}, {0x3, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x2, 0x8}, {0x6, 0x9}, {0x0, 0x9}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x5ce5, 0x1e12, 0x4, 0x0, 0x7, 0x3, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1ff, 0x81, 0x1, 0x7e, 0x2, 0x101, 0x57]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xf, 0xfff7, 0xbeb, 0x9, 0x8, 0xfffe, 0x161]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x1b, 0x2, [{0x1, 0x6}, {0x4, 0x5}, {0x5, 0x5}, {0x1, 0x8}, {0x5}, {0x1, 0x14}, {0x2, 0xa}, {0x0, 0x6}, {0x0, 0x6}, {0x4, 0x4}, {0x1, 0x4}, {0x0, 0x8}, {0x6, 0x9}, {0x5}, {0x4, 0x6}, {0x2, 0x6}, {0x1, 0x1}, {0x1}, {0x6, 0x1}, {0x2, 0x3}, {0x1, 0x9}, {0x3, 0x1}, {0x5, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0xb851a4aa18d6a06e}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xffff, 0x40, 0x8, 0x0, 0x7, 0x2, 0x5]}}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd0b7, 0x3, 0x1000, 0x5, 0x3249, 0x101, 0xfff7, 0x9]}}]}, @NL80211_BAND_60GHZ={0x28, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x3, 0x168, 0x6, 0x2, 0x5, 0xdf, 0x620]}}]}, @NL80211_BAND_6GHZ={0xa4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd37, 0x800, 0x5, 0xffff, 0x5, 0xc1d, 0x3, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x4, 0x60, 0x18, 0x5, 0x48, 0xedbbd52aa9b5905a, 0x36, 0x5, 0x9, 0x4, 0x30, 0x12, 0x16, 0x48, 0x36, 0x16, 0x4, 0xc, 0x9, 0x0, 0x48, 0x6, 0xb, 0x2, 0xb, 0x48, 0x6, 0x6, 0x9]}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x1, 0x9}, {0x3, 0x8}, {0x0, 0x5}, {0x2, 0x9}, {0x7, 0x2}, {0x0, 0xa}, {0x3, 0x4}, {0x4, 0xa}, {0x5, 0xa}, {0x4, 0x3}, {0x3, 0xa}, {0x0, 0x9}, {0x7, 0x8}, {0x4, 0x8}, {0x6, 0x9}, {0x0, 0x9}, {0x1}, {0x4, 0x3}, {0x7, 0x5}, {0x2, 0x8}, {0x7, 0x5}, {0x2, 0x4}, {0x7, 0x5}, {0x7, 0x3}, {0x3, 0x3}, {0x0, 0x5}, {0x5, 0x9}, {0x7, 0x6}, {0x2, 0x9}, {0x7, 0x5}, {0x5, 0x5}, {0x4, 0x4}, {0x7, 0x2}, {0x3, 0x7}, {0x5, 0x2}, {0x0, 0x9}, {0x1, 0x3}, {0x7, 0x5}, {0x0, 0x5}, {0x5, 0x6}, {0x1}, {0x3, 0xa}, {0x0, 0x8}, {0x2, 0x2}, {0x4, 0x7}, {0x0, 0x7}, {0x7, 0x8}, {0x4, 0x7}, {0x3, 0x1}, {0x1, 0x9}, {0x7, 0x1}, {0x1, 0x6}, {0x3, 0x6}, {0x1}, {0x5, 0x3}, {0x0, 0x6}, {0x1, 0x9}, {0x6, 0x7}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x6, 0x5}, {0x6, 0x3}, {0x7, 0x3}, {0x5, 0x1}, {0x2, 0x6}, {0x0, 0x9}, {0x2, 0x2}, {0x4, 0x3}, {0x3}, {0x1, 0x1}, {0x7, 0x5}, {0x2, 0x3}, {0x4, 0x1}, {0x6, 0x6}, {0x0, 0x5}, {0x6, 0x3}, {0x5, 0x6}, {0x3, 0x3}, {0x7, 0x5}, {0x2, 0x2}, {0x3, 0x2}, {0x3, 0x5}, {0x0, 0x1}, {0x1}, {0x2, 0x5}]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xc, 0x12, 0x60, 0x16, 0x12, 0x12, 0x0, 0x12]}]}, @NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x29, 0x2, [{0x3}, {0x7, 0x7}, {0x2, 0x3}, {0x4, 0x7}, {0x2, 0x9}, {0x3, 0xa}, {0x5, 0x6}, {0x0, 0x6}, {0x7, 0x3}, {0x7, 0x5}, {0x3, 0xa}, {0x4, 0x7}, {0x6, 0x9}, {0x1}, {0x0, 0x2}, {0x4, 0x8}, {0x4, 0x7}, {0x7, 0xa}, {0x5, 0x9}, {0x5}, {0x1, 0x6}, {0x7, 0x3}, {0x7, 0x3}, {0x5}, {0x3}, {}, {0x5, 0xa}, {0x4, 0x4}, {0x1}, {0x1, 0xa}, {0x0, 0xa}, {0x3, 0x13}, {0x6, 0x7}, {0x1, 0xa}, {0x5, 0x6}, {0x0, 0x3}, {0x4, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x6, 0xffff, 0x7, 0x3, 0x6, 0x60a, 0x1]}}]}, @NL80211_BAND_2GHZ={0x5c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{0x3, 0x7}, {0x4, 0x6}, {0x1}, {0x3, 0x3}, {0x2, 0xa}, {0x1, 0x2}, {0x6, 0xa}, {0x6, 0x4}, {0x3}, {0x1, 0x7}, {0x0, 0x7}, {0x7, 0x5}, {0x7, 0x4}, {0x0, 0x1}, {0x1, 0x4}, {0x7, 0x1}, {0x3, 0x9}, {0x4, 0x7}, {0x3, 0x6}, {0x6, 0x7}, {0x6, 0x5}, {0x4, 0x5}, {0x3, 0xb}, {0x0, 0xa}, {0x7}, {0x4, 0x5}, {0x7, 0x5}, {0x3, 0x3}, {}, {0x3, 0x5}, {0x6, 0x2}, {0x6, 0x9}, {0x1, 0x9}, {0x0, 0xa}, {0x0, 0x4}, {0x1}, {0x4, 0x5}, {0x0, 0x4}, {0x7, 0x7}, {0x4, 0x2}, {0x0, 0x9}, {0x5, 0x3}, {0x6, 0x3}, {0x7}, {0x5}, {0x1, 0x7}, {0x4, 0x4}, {0x0, 0x7}, {0x5, 0x1}, {0x6, 0x3}, {0x5, 0x1}, {0x3, 0x2}, {0x6, 0x2}, {0x7, 0x8}, {0x4, 0x8}, {0x7, 0x8}, {0x4, 0x1}, {0x5, 0x8}, {0x7, 0x4}, {0x0, 0x9}, {0x0, 0x2}, {0x6, 0x8}, {0x7, 0x7}, {0x0, 0x5}, {0x3, 0x9}, {0x6, 0x9}, {0x7, 0x2}, {}, {0x7, 0x6}, {0x1, 0x1}, {0x1}, {0x5, 0x6}, {0x6, 0x5}, {0x1, 0x2}]}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x70, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x8001, 0x7, 0xbf, 0xdb4a, 0x6, 0x2, 0xa5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x161, 0x7, 0x4, 0x9, 0x0, 0x19a]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x7fff, 0xff, 0x7, 0x2, 0x7ff, 0x0, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x2, 0x1b, 0x18, 0x4, 0xb, 0x12, 0x60, 0x0, 0x2, 0x22, 0x0]}]}]}, @NL80211_ATTR_TX_RATES={0x20c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x5, 0x1, 0x7, 0x3, 0x4, 0x2, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xc, 0x6, 0x1, 0x0, 0x1, 0x2, 0xb51a]}}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x7}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x8}, {0x4, 0xa}, {0x2, 0x3}, {0x1, 0x8}, {0x0, 0x3}, {0x1, 0x9}, {0x3, 0x6}, {0x3, 0x9}, {0x1, 0x4}, {0x3, 0xa}, {0x5}, {0x6, 0x5}, {0x0, 0x2}, {0x1, 0x6}, {0x1, 0x6}, {0x4}, {0x2, 0x8}, {0x3, 0x2}, {0x6, 0xa}, {0x4, 0x2}, {0x0, 0x2}, {0x7, 0x5}, {0x2, 0x8}, {0x2, 0x6}, {0x5, 0xa}, {0x2, 0x6}, {0x1, 0x9}, {0x1, 0x4}, {0x3, 0x5}]}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x6, 0x1, 0x12, 0x1b, 0x60, 0x2, 0x5, 0x60, 0x1, 0x6, 0x5, 0xc, 0x5, 0x6c, 0x24, 0x95adb1e152a9eaaa, 0xc, 0x16, 0x3, 0x30, 0x48, 0x5, 0x4, 0x6c, 0x16, 0x9]}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x2, 0x12, 0x60, 0x24, 0x9, 0x12, 0xb, 0x5, 0x1b, 0x1b, 0x1b, 0x3, 0x6c, 0x9, 0x24, 0x9, 0xc, 0x9, 0x1, 0x5, 0x6c, 0x2, 0x5, 0x6c, 0x3, 0x60, 0x36, 0x4, 0x36]}]}, @NL80211_BAND_5GHZ={0x5c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0xfff, 0x10, 0x40, 0x550d, 0x3, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x4, 0x800, 0x3ff, 0x8, 0x2, 0x2, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffc, 0x2, 0x7, 0x400, 0x4, 0x0, 0x5, 0x1000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0xfff, 0x6, 0x6, 0xffff, 0x80e2, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x3, 0xf, 0x6, 0x8, 0xb, 0x2, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x80, 0xffff, 0x2, 0x101, 0x101, 0x1, 0x6b]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_60GHZ={0x68, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x28, 0x2, [{0x1, 0x1}, {0x6, 0x9}, {0x6, 0x2}, {0x0, 0x5}, {0x3, 0x6}, {0x3, 0x1}, {0x3, 0x9}, {0x7, 0x8}, {0x4, 0x4}, {0x3, 0x9}, {}, {0x3, 0x9}, {0x7, 0x2}, {0x1}, {0x3, 0x1}, {0x3, 0x9}, {0x2, 0x2}, {0x6, 0x5}, {0x5}, {0x7, 0x9}, {0x3}, {0x4, 0x9}, {0x0, 0x3}, {}, {0x1, 0x9}, {0x7}, {0x2, 0x3}, {0x1, 0xa}, {0x4}, {0x2}, {0x7, 0xa}, {0x6, 0x5}, {0x4, 0xa}, {0x5, 0x8}, {0x1, 0x9}, {0x6, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x9, 0xe, 0x0, 0x3, 0x3, 0x4, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x2c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0xf4e, 0x1, 0x8e, 0x2, 0x200, 0xa]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xff, 0xfffc, 0x0, 0xc, 0x4a9, 0x2, 0x6]}}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x3, 0x24, 0x9, 0x12, 0x12, 0x4d, 0x18, 0x36, 0x54, 0x9, 0x2, 0x24, 0x5, 0x2, 0xc, 0x12, 0x2, 0x49c04cbdf61a061d, 0x3, 0x5b6f03b14a2bfb2a, 0x4, 0x12, 0x24, 0x16, 0x5, 0x6c, 0x16, 0x4, 0xb, 0x16, 0x12]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x2c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7, 0x300, 0x5, 0xd, 0x2, 0x6, 0x1000]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0xc10}, 0x1, 0x0, 0x0, 0x88000}, 0x24000011) (async) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000002b80)=0x8000, &(0x7f0000002bc0)=0x2) (async) arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000002c00)) prctl$PR_GET_CHILD_SUBREAPER(0x25) (async) ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000002c40)) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000002dc0)={&(0x7f0000002c80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002d80)={&(0x7f0000002cc0)={0xa4, r4, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x10, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}]}]}, @NL80211_ATTR_REG_RULES={0x80, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xf}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xeb}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5d3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xb}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffd}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7fff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x80}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xffffff3a}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x513}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x880) (async) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000002e00)=@req3={0x55, 0xc00000, 0x5, 0x1, 0x0, 0x6, 0x8663}, 0x1c) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MCAST_RATE(r8, &(0x7f0000002f00)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x2480e010}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x38, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x34}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4040881) syz_usb_connect(0x4, 0xc61, &(0x7f0000002f40)={{0x12, 0x1, 0x200, 0x16, 0x33, 0x33, 0x40, 0x4a5, 0x3035, 0x21f9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc4f, 0x4, 0xa5, 0x9, 0x60, 0x3, [{{0x9, 0x4, 0xb4, 0x0, 0x0, 0xdf, 0x6f, 0xfd, 0x9, [@hid_hid={0x9, 0x21, 0x4, 0x11, 0x1, {0x22, 0x32d}}, @uac_as={[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x0, 0x1, 0xf8, 0x1, "30559587"}]}]}}, {{0x9, 0x4, 0x80, 0x49, 0xb, 0x1a, 0x5e, 0x50, 0x2, [@generic={0x41, 0xc, "398d2980d6deb421942b855f8e17ad298940bd6aa89df2b0e22f575f3590696142d7699662fbe10bdad716e548c875458f4c131456aac6ba1915beee3efcb5"}, @hid_hid={0x9, 0x21, 0x3, 0x7, 0x1, {0x22, 0x15b}}], [{{0x9, 0x5, 0xf, 0xc, 0x400, 0x2, 0x10, 0x7}}, {{0x9, 0x5, 0x4, 0x10, 0x3ff, 0x1, 0x4, 0x6}}, {{0x9, 0x5, 0xf, 0x7, 0x3ff, 0xa0, 0x49, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xf1, 0x100}, @generic={0xca, 0xc, "85f526d11add462bc1f405559c10e563fa0eb8be298acd2c034e620e821a8be2e706fb20f9bb46573613e9b1fcada16544d915f94f4ded969969ba1e1c1a7fcf9a8b2b60656f0bb2b31370f2c53c32860dfe4da7c9efbfd0c10ad6ffb26ddf126333cc1bdd1b17349c31c1fb94b7576c7a4296efda16165aedfdcaf925d292214eb98cdcb6df2bc321b1f90e6c97a51f88ec926ff78da9d49a08bebe5a298f83f5c894ee5073a5baf8c8e0f88cb3232c998e786c7d822b8f76d6f391d97f75da8c96c638d3fc97f3"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x40, 0x20, 0x6, 0x2, [@generic={0x50, 0x30, "1bfb7d6254a63acee07d8de3e90694253f483f7db120ca34253f8c3559d6cfad8d98ecc7e050b2f8229fdbab5f3453133648bddad90d664bacee9dfa366a7dbf2ffdc94ae0cfb55b41d41def05a4"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x8, 0x1, 0x6}}, {{0x9, 0x5, 0xf, 0x4, 0x10, 0x2, 0x1, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x81, 0x1}]}}, {{0x9, 0x5, 0x4, 0x0, 0x10, 0x2, 0x69, 0x0, [@generic={0xf0, 0x21, "58e00165ca4f81b2e2f5b67bf120e11458c529e86fa98f41abb7b48d9f539cd5c5078ad074dc37f8fee72482b2f51b47500e3e6405061b36ccb239208e3f328c08fffe1450afe5b28a9884732fa5ee31c770383d57f3c21af7178072137400cb767d951128b5701783aab9327899c7a07b359ffb49d5bc3f95c6041c868746b83794c4cf1ead0c27c8171705d6e1fcaeb203ace88d5276ade2f1396393610ac48592c9dd10dcb9cd801b832d10eb5db49544f1c7444a4df0de7d98ed6a8b719361af5c923bfb15a03c9a964c2809ca04cd6d86b9c00adfd92f04c44ddb8974fd7dcb7006f2865dc92eae11fe55fa"}, @generic={0xb0, 0xf, "dc27c458659852da34d691f859985fb1b08ca49404b451d68bc65635fb199a678142ae76ac0de76c62780433db3f425da65a3bd18947afed0d28b27be6b693958e31076a7ecaa23ae2adb6479be8389f0fd9f526dcc8a48408c67a5973a4cf4877c5ab164ba89fc834669d45f263cccecab6abd096f54c9f0bc604497a2d045067ec897523a733fcc71d5f490d57af851a137596e76d8459cb93eff4738e7715b08e7de31294682a88377d938039"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0xfc, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xff, 0x1}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x4, 0x1, 0x8, [@generic={0x9, 0x6, "9fb6d9af7766e3"}, @generic={0x14, 0x2, "c5bdaecd5ff6fb2d7dbaa85607515f9cdfc7"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x40, 0x5, 0x8, [@generic={0x94, 0x8, "eaf27e6550f54c9b6f7f4a6722596c374b002b2410168fd68b8eee45f170ca654e209dbf60a67bbf3df351fb59ba62923cc981dd8d2bc62d620d5c10756d605e3549e875d0ce8e19ee0a3c4965d3aef7d69d4e43182b9ead135ecbbce7c6afb776acb6e6d492ee08c43d5cc73a260256423a565b4fa7b6d0d82d8f90502153944dede211f8528ebcfa0b8381363334402d0a"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x3}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x2, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x42, 0x7, 0xff66}]}}]}}, {{0x9, 0x4, 0x2, 0xb5, 0xc, 0x66, 0x8d, 0xe2, 0x1d, [], [{{0x9, 0x5, 0x4, 0x10, 0x7bf, 0x2, 0x7f}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0x81, 0x56, 0x1, [@generic={0xe4, 0x31, "ad84996d50d0527999107ffcfa60c786e6b36da5b10da2785bfab57c602e0692d80db421735172aaf60a6fbdf9959a1a9da7f7453c21b849e1edf8a91542ccbcc04a726f0aac57db7429d2daf10053a463b3bd4159aa4f75b5a6a8a1ebc5e03153d158281712bd0bda98c8cb361e0445c446502a46b42ce99dde283f125e7b33ada8af21d65c70abfbb09ed4450b8ace92a98feeb1b8009b830c1b45a0ec07ff77b5b3089c88fafd4a0d08c4be5faebc2b248ac69b6d9263081ca835e12ad72b040f1c31d17397da1f8fa3898997b9f8f12c70191ffadab500b7a3f0aa0c10c188d2"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x4}]}}, {{0x9, 0x5, 0xf, 0x1, 0x8, 0xb, 0x1, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x75, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x7ff}]}}, {{0x9, 0x5, 0x5, 0x1, 0x200, 0x7, 0x6, 0x4, [@generic={0x102, 0xe, "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"}, @generic={0xbf, 0x22, "684ace15951a6fd321b1aa80bdc1d7e8edac3a6da6b124d20ce3c1c35f0ab6eeeead0c068d846a9913c204e42b67ce2806635e5ddbc0b1a03492ace612c8879333566e35226b2e02e64ea52f9ef32134f4b192761c95003966f3701fd40107a9fcb24c101cc40274ded1e5f4c60b33b347b95af172bdd7bf40c65db77607dbb86c03b95a496a982d8bcc550239b053b3196e61af6d09c105abc3621f4d72d2ff2e58c6c98bb6d605e40c1e70b4a07a6dfb318bcd27e13bfcae3a6b45e0"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x2, 0x92, 0x7}}, {{0x9, 0x5, 0xa, 0x2, 0x400, 0x0, 0x0, 0x27, [@generic={0x48, 0x23, "92e2fffb50ae012c1c31a1b135ac027287d2f280212a6a13cee89d249b19b67bec0cc9997ef4d0ba32aee2c67037d7f3b3d8ae70092d873cd74cb142f177f5ca969faabf1a24"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x9, 0x2, 0x0, [@generic={0xc0, 0xe, "2e92887f5c6f6505f5201ce8a229836f9ba3c0791b5fca45fb5445e8d3d030a2e6bd144b64fb6d2f4931d2fec271cb0af73b8345b5a27accb93f665d3725567e58a3b7bebdca5d2b386547f9b0447cd54ef3bef0344a7b27d5d64cb9f5a0f4c44ca5e9bbb5c283c400617d1b141a3a965c558eeec9b67330c1ebf921eefd54374de9c1f436abee2dadb4075f0d71842a761185b9621f6e98c2f85da9ede1e0ccd1b09d26cc9c52a42160321b665121cf6a4553b76342fa5cc95c2056a5ec"}, @generic={0xa8, 0x6, "b05e134a98d23be166f08e6c11f12924c8d74abd71c975a3c60939418bf7f6d00261d154aacb94c95a854238327920741657959dbc67d89af0a724fe84b46f6e2d29f36d4ba33c26e9099f3b754a43bc7a1bf4e4ce28ef2faeed08af65c45d47c7986d01b8a446af90e1421a50c03276c3f4c27c874134e4ddfa0cdd8a297553959c00aef0f8d354ba56b8be9727dd92cb64d534189409cc097f4a2dc5a4e4fa56afdb1d8fa6"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x3ff, 0xda, 0x8, 0x9}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x5, 0x4, 0x1}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x1, 0xd, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xfe, 0x7}, @generic={0xb8, 0x10, "d8ea3b23ad8d89ccba815287808a7597afd2f44dde83d7eb9cf3b354a51c42cb86a174dae3afcc7789df68903d89020403760d9ba84f8824a916ff36e52130f6a33c4e1e3cba7b946dcfcc923e321cb7ebc55560a8b6d43c912f0dac78be6a87e56a2608879a914cf9665c3e8c166c35b9cd17cb3b95c75d153b697d6f30b821e8e9403ef3974398c184f11dbabe8d3ba4220aa6e004af40510420056376db0a458a98d8d042df5a1290506a26a841697b0e472ed886"}]}}, {{0x9, 0x5, 0xb, 0x3, 0x20, 0x5, 0x10, 0x8, [@generic={0x6a, 0x3, "771f896bd90ec1b23ba0ccef71761d6fced3a6865530b899e2231d67574d4ff55c42c7ef17784a96825fa585b63a2155c505e98f5283e970f585cdfb218eb2defb74616b41685f701a197bd57c0dfc26cfbaf73d1236cbf52b3e26a92941e6ffbe352a3c7fbefa29"}]}}, {{0x9, 0x5, 0x2, 0x8, 0x40, 0x1, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf4, 0xf}]}}]}}, {{0x9, 0x4, 0x8e, 0x80, 0xa, 0xff, 0x4, 0x5, 0x12, [], [{{0x9, 0x5, 0xe, 0x10, 0x40, 0x5, 0x7f}}, {{0x9, 0x5, 0x6, 0x3, 0x400, 0x3, 0x7, 0xfa}}, {{0x9, 0x5, 0x80, 0x4, 0x40, 0x3, 0xd6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xfb, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5d}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x10, 0x1f, 0x83}}, {{0x9, 0x5, 0x4, 0xc, 0x10, 0x0, 0x33, 0x7, [@generic={0xf, 0x8, "6c349dec26dd99d4600bc033fc"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xd, 0x1000}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0xce, 0x0, 0x4, [@generic={0x89, 0xe, "b96c2eea8cbcff0f429c46fd447f2e5938914c29a1574099b43085d8645c76bb003583b69aec28736861f39c94ff3b79cda5a80b4040098d24d3066b893144394d6673c4082367d35c44b4d8947b5a76a9f8c76dc4c047c24af597de8d97593ab8b26efe922dc2f574fd3b8d25a9de3e4ea84f869aa5676047b2033ef6a53487603ccf53782cbf"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x6, 0x6, 0x5}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x53, 0x5, 0x81, [@generic={0x2e, 0xd, "2ccce9eccd83c99b74bf8e8962f10f6ceb584a7bb5b8c9c9f2bbf0b22c27238bbfe107680092aaa5aa725150"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0xaf, 0xff, 0x6}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x4, 0x1, 0x6, [@generic={0x97, 0x23, "9340769ca6640bc614915da48576975f3de4ccaf1f9af85a595f7cc95cd9b4cb4507fc8d87c947c75edef4c5372121ad90b6e233e80914cf924e1d62263bea16ff04c575bcdf8d9d4e7f4441624238f6d0edb4d5c211feffd1ebde1e47c6752aca6c2309d10b4a1065bd5d62dc17a8ab61cd7452b8c32c500358a6491af4d6f370e6833915c0cf75b6d1b6dcc3274c3184d3bf84fb"}]}}]}}]}}]}}, &(0x7f0000003cc0)={0xa, &(0x7f0000003bc0)={0xa, 0x6, 0x201, 0x9, 0xb, 0x8, 0x20, 0x5b}, 0x2f, &(0x7f0000003c00)={0x5, 0xf, 0x2f, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x3, 0x9, 0x42, 0x7fff, 0x3}, @ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x8, 0xff00, 0x8, [0xff0000, 0xff3f00, 0x0, 0x0]}]}, 0x2, [{0x4, &(0x7f0000003c40)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000003c80)=@lang_id={0x4, 0x3, 0x1001}}]}) r9 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) finit_module(r9, &(0x7f0000003d00)='\xd9{\\:\x00', 0x1) 320.051694ms ago: executing program 4 (id=10663): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000300)="5d8095954d00d01aa9d1c32ddf60cb5e46ebc4847109dc7e3f503a39b856a4e426bab18cfa8a34263dcba43d5ae4264c323ab6bac30a9d96e2262636856e33e3e18bc5df81", 0x45}], 0x1}}], 0x1, 0xc8000) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000040)={0x0, 0xe, 0x3, "37ae5f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000040)={0x14, &(0x7f0000000140)={0x40, 0xd, 0xd7, {0xd7, 0x21, "48a1724b25c1b7f68afb71e515160a3a2a3fd00dbc5b3e58f0540e36152428bfb961adc9adb33c180ce55b115a40a6eee5ca5035a10f8975ea352ca066071bbaecf7c7449dd74c273947deff353f6cb222362cdaafd4c8939994ecda685493472b9a707601afd6f7d43b76719c9fb044215b2c727828d9ac4d303e9834e565e038a46d738e7d5af6f941e3befc3122aeb06bfc1a70b1def0c6527d964262bf388c676a8e2c0300a705fc5b845dfb91be8ff73228574a332d7d138bcb0303ec2fefb72567eab0fcc58ae4130765de41f35b1b7d5980"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000280)={0x1c, &(0x7f0000000540)={0x0, 0x18, 0xc5, "1ff9166d37ffbb54b19ddcdaca8309276c665ddb0a796ff3d4a56e513a2faf883ce8fc577609825563c2cc574a7b9ece831e97e5d39497ec99972bb3f353f4fa1dd11755a06e6d2a511e9941e39f907fd036a3876d7689e163cd7eaabf7c0f93bbfa5d5c63bfef36a49510a96eb0234ec902d0721167df4d569f5a22d306e0d61f35eab081afa13563cd052bdb5b9c062bc88a023340db0f6d7f1609a8615a93ddf7a1dd75b0002cf0570402102317e8325d433343154c6ec637bd4ce2d497e8be48a7505f"}, &(0x7f0000000080)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0xe}}) recvmmsg(r3, &(0x7f0000002800)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40000022, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r5, 0x11b, 0x1, &(0x7f0000005340), &(0x7f00000053c0)=0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) close_range(r0, 0xffffffffffffffff, 0x0) 120.974598ms ago: executing program 8 (id=10664): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r3, &(0x7f0000000140)="f09bda31", 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x10) mount$incfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)={0x50281, 0x0, 0x8}, 0x18) sendfile(r2, r3, &(0x7f0000000000), 0xfffb) fcntl$addseals(r3, 0x409, 0x8) r4 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) syz_kvm_add_vcpu$x86(r4, &(0x7f00000003c0)={0x0, &(0x7f0000000140)=[@wrmsr={0x1e, 0x20, {0x34c, 0x7}}, @wrmsr={0x1e, 0x20, {0x188, 0xa178}}, @wrmsr={0x1e, 0x20, {0x10f, 0xa}}, @wrmsr={0x1e, 0x20, {0x9a9, 0x7}}, @uexit={0x0, 0x18, 0x5bb45162}, @wr_crn={0x46, 0x20, {0x0, 0x9}}, @uexit={0x0, 0x18, 0x4}, @cpuid={0x14, 0x18, {0xffff, 0x8}}, @wr_crn={0x46, 0x20, {0x8, 0xcae1}}, @uexit={0x0, 0x18, 0x2}, @wr_crn={0x46, 0x20, {0x4, 0xffffffffffffffff}}, @wr_crn={0x46, 0x20, {0x3, 0x6}}, @uexit={0x0, 0x18, 0x1}, @rdmsr={0x32, 0x18, {0xb414e907d6887d72}}, @code={0xa, 0x78, {"b94e060000b8ff770000ba000000000f30d1934b00c0fe48b850720897f26a2c150f23d80f21f835000000a00f23f8c442dd8e34400f20c467420f31b9800000c00f3235000100000f30c4e2319f360f20e035080000000f22e0b805000000b9000001000f01c1"}}, @wrmsr={0x1e, 0x20, {0x960, 0x8}}, @cpuid={0x14, 0x18, {0x4, 0xffff8000}}, @wr_crn={0x46, 0x20, {0x3}}, @cpuid={0x14, 0x18, {0xef0, 0x101}}], 0x278}) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000c40)={"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"}) close_range(r0, 0xffffffffffffffff, 0x0) r7 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000480)=0x60, 0x100800) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000000)=0xc) capset(&(0x7f00000000c0)={0x20071026, r8}, &(0x7f0000000100)={0xff, 0xfff, 0x8, 0xc0000000, 0xffffffff, 0xe6e0}) 0s ago: executing program 8 (id=10665): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005280)=[{{&(0x7f00000011c0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000001640)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}], 0x18}}], 0x1, 0x4008000) syz_open_dev$loop(&(0x7f0000006200), 0xb3, 0x82403) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$inet_udplite(0x2, 0x2, 0x88) kernel console output (not intermixed with test programs): usblp0: removed [ 678.894118][ T330] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 679.044096][ T330] usb 10-1: Using ep0 maxpacket: 32 [ 679.052720][ T330] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 679.066766][ T330] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 679.081032][ T330] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 679.090298][ T330] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 679.100142][ T330] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 679.115969][ T330] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 679.129183][ T330] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 679.138356][ T330] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.147147][ T330] usb 10-1: config 0 descriptor?? [ 679.555538][ T330] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 75 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 679.567691][ T330] usb 10-1: USB disconnect, device number 75 [ 679.574476][ T330] usblp0: removed [ 679.744165][ T3059] Bluetooth: hci0: command 0x1003 tx timeout [ 679.744310][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 680.167999][ T36] audit: type=1326 audit(2000000601.112:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30535 comm="syz.9.9987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad8d8ebe9 code=0x7ffc0000 [ 680.196511][ T36] audit: type=1326 audit(2000000601.112:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30535 comm="syz.9.9987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f9ad8dc3449 code=0x7ffc0000 [ 680.220368][ T36] audit: type=1326 audit(2000000601.112:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30535 comm="syz.9.9987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad8d8ebe9 code=0x7ffc0000 [ 680.244459][ T36] audit: type=1326 audit(2000000601.112:1947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30535 comm="syz.9.9987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9ad8d461d7 code=0x7ffc0000 [ 680.267991][ T36] audit: type=1326 audit(2000000601.112:1948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30535 comm="syz.9.9987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad8d8ebe9 code=0x7ffc0000 [ 680.291547][ T36] audit: type=1326 audit(2000000601.112:1949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30535 comm="syz.9.9987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad8d8ebe9 code=0x7ffc0000 [ 680.319970][ T36] audit: type=1326 audit(2000000601.112:1950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30535 comm="syz.9.9987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad8d8ebe9 code=0x7ffc0000 [ 680.340850][T30546] rust_binder: 30546 RLIMIT_NICE not set [ 680.343567][ T36] audit: type=1326 audit(2000000601.112:1951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30535 comm="syz.9.9987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9ad8d8ec23 code=0x7ffc0000 [ 680.372664][ T36] audit: type=1326 audit(2000000601.112:1952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30535 comm="syz.9.9987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9ad8d8eca7 code=0x7ffc0000 [ 680.380865][ T291] rust_binder: 30545: removing orphan mapping 0:1168 [ 680.396365][ T36] audit: type=1326 audit(2000000601.112:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30535 comm="syz.9.9987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9ad8d4616d code=0x7ffc0000 [ 680.428961][T30548] rust_binder: Failed to allocate buffer. len:136, is_oneway:true [ 681.064136][ T330] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 681.204183][ T330] usb 10-1: device descriptor read/64, error -71 [ 681.464120][ T330] usb 10-1: device descriptor read/64, error -71 [ 681.604180][T30610] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10006'. [ 681.616809][T30608] veth1: entered allmulticast mode [ 681.622072][T30608] veth1: left allmulticast mode [ 681.704167][ T330] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 681.834153][ T330] usb 10-1: device descriptor read/64, error -71 [ 681.860392][T30626] rust_binder: Error while translating object. [ 681.860445][T30626] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 681.867049][T30626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:96 [ 681.877946][T30628] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 682.074174][ T330] usb 10-1: device descriptor read/64, error -71 [ 682.194242][ T330] usb usb10-port1: attempt power cycle [ 682.534173][ T330] usb 10-1: new high-speed USB device number 78 using dummy_hcd [ 682.555445][ T330] usb 10-1: device descriptor read/8, error -71 [ 682.685273][ T330] usb 10-1: device descriptor read/8, error -71 [ 682.789072][T30652] rust_binder: 30652 RLIMIT_NICE not set [ 682.794130][ T291] rust_binder: 30651: removing orphan mapping 0:1192 [ 682.811062][T30654] random: crng reseeded on system resumption [ 682.833249][T30656] random: crng reseeded on system resumption [ 682.868220][T30659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 682.868252][T30659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 682.874935][T30659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 682.881442][T30659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 682.888197][T30659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 682.894503][T30659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 682.901032][T30659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 682.917434][T30659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 682.917460][T30659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 682.924043][T30659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 682.924130][ T330] usb 10-1: new high-speed USB device number 79 using dummy_hcd [ 682.944830][T30659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 682.944857][T30659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 682.945117][T30660] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2 [ 682.951295][T30659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 682.951314][T30659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 682.957828][T30660] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 682.965114][T30659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 682.972820][ T330] usb 10-1: device descriptor read/8, error -71 [ 682.978216][T30659] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 683.027378][T30665] rust_binder: 30665 RLIMIT_NICE not set [ 683.039326][ T10] rust_binder: 30664: removing orphan mapping 0:1168 [ 683.115200][ T330] usb 10-1: device descriptor read/8, error -71 [ 683.126256][T30674] /dev/md0: Can't lookup blockdev [ 683.144748][T30676] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 683.224290][ T330] usb usb10-port1: unable to enumerate USB device [ 683.309102][T30687] netlink: 'syz.7.10033': attribute type 16 has an invalid length. [ 683.317189][T30687] netlink: 'syz.7.10033': attribute type 2 has an invalid length. [ 683.325301][T30687] netlink: 'syz.7.10033': attribute type 2 has an invalid length. [ 683.333193][T30687] netlink: 64066 bytes leftover after parsing attributes in process `syz.7.10033'. [ 683.428272][T30698] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10038'. [ 683.444320][T30698] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10038'. [ 683.521151][T30704] rust_binder: 30703 RLIMIT_NICE not set [ 683.521412][T30703] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 683.527201][T30703] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:360 [ 684.258356][T30728] overlayfs: failed to clone upperpath [ 684.309509][ T330] rust_binder: 30702: removing orphan mapping 0:4248 [ 684.809938][T30753] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 685.054161][ T330] usb 10-1: new high-speed USB device number 80 using dummy_hcd [ 685.214189][ T330] usb 10-1: Using ep0 maxpacket: 16 [ 685.220600][ T330] usb 10-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.231959][ T330] usb 10-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.233132][T30789] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10065'. [ 685.242265][ T330] usb 10-1: config 0 interface 0 has no altsetting 0 [ 685.258121][ T330] usb 10-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 685.267791][ T330] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.277008][ T330] usb 10-1: config 0 descriptor?? [ 685.281076][T30792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10070'. [ 685.690110][ T330] zeroplus 0003:0C12:0005.0032: hidraw0: USB HID v0.07 Device [HID 0c12:0005] on usb-dummy_hcd.9-1/input0 [ 685.721661][ T330] zeroplus 0003:0C12:0005.0032: no inputs found [ 685.738406][ T330] usb 10-1: USB disconnect, device number 80 [ 685.814313][T30832] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 685.833885][T30834] 9pnet_fd: Insufficient options for proto=fd [ 685.848696][T30834] rust_binder: Error in use_page_slow: ESRCH [ 685.848723][T30834] rust_binder: use_range failure ESRCH [ 685.855079][T30834] rust_binder: Failed to allocate buffer. len:1072, is_oneway:false [ 685.861084][T30834] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 685.869453][T30834] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:126 [ 685.918491][T30845] hub 8-0:1.0: USB hub found [ 685.935055][T30845] hub 8-0:1.0: 1 port detected [ 685.976876][T30852] tipc: Enabling of bearer rejected, failed to enable media [ 686.048437][T30861] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37 [ 686.048504][T30861] rust_binder: Error while translating object. [ 686.065023][T30861] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 686.075991][T30861] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:130 [ 686.102207][T30870] rust_binder: Write failure EINVAL in pid:379 [ 686.131620][T30879] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 686.148295][T30879] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 686.157159][T30879] rust_binder: 381: no such ref 2 [ 686.169708][T30879] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 686.196106][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 686.196126][ T36] audit: type=1400 audit(2000000607.142:1964): avc: denied { remount } for pid=30886 comm="syz.7.10103" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 686.222493][T30888] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:383 [ 686.474164][ T330] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 686.614200][ T330] usb 8-1: device descriptor read/64, error -71 [ 686.638305][T30892] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 686.652456][T30892] rust_binder: inc_ref_done called when no active inc_refs [ 686.854167][ T330] usb 8-1: device descriptor read/64, error -71 [ 686.904123][ T9] usb 10-1: new high-speed USB device number 81 using dummy_hcd [ 687.054131][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 687.060402][ T9] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 687.070674][ T9] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 687.079785][ T9] usb 10-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 687.088979][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.098794][ T9] usb 10-1: config 0 descriptor?? [ 687.104166][ T330] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 687.203909][T30910] netlink: 'syz.4.10110': attribute type 4 has an invalid length. [ 687.213341][T30910] netlink: 'syz.4.10110': attribute type 4 has an invalid length. [ 687.234156][ T330] usb 8-1: device descriptor read/64, error -71 [ 687.254186][T30917] overlay: Unknown parameter 'subj_user' [ 687.295905][T30925] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30925 comm=syz.4.10114 [ 687.484140][ T330] usb 8-1: device descriptor read/64, error -71 [ 687.505307][T30948] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=30948 comm=syz.4.10122 [ 687.594659][ T330] usb usb8-port1: attempt power cycle [ 687.723369][ T36] audit: type=1400 audit(2000000608.662:1965): avc: denied { connect } for pid=30956 comm="syz.4.10124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 687.754543][T30964] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 687.868019][T30979] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:160 [ 687.944141][ T330] usb 8-1: new full-speed USB device number 12 using dummy_hcd [ 687.985323][ T330] usb 8-1: device descriptor read/8, error -71 [ 688.046718][ T36] audit: type=1400 audit(2000000608.992:1966): avc: denied { watch watch_reads } for pid=30988 comm="syz.2.10134" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 688.051911][T30992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 688.082614][T30992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 688.115143][ T330] usb 8-1: device descriptor read/8, error -71 [ 688.364142][ T330] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 688.395151][ T330] usb 8-1: device descriptor read/8, error -71 [ 688.525124][ T330] usb 8-1: device descriptor read/8, error -71 [ 688.644160][ T330] usb usb8-port1: unable to enumerate USB device [ 688.901355][T31000] fuseblk: Bad value for 'group_id' [ 688.906676][T31000] fuseblk: Bad value for 'group_id' [ 688.941107][T31000] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10138'. [ 688.952964][T31000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10138'. [ 689.228914][T31007] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.238855][T31007] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.246087][T31007] bridge_slave_0: entered allmulticast mode [ 689.252648][T31007] bridge_slave_0: entered promiscuous mode [ 689.274792][ T46] bridge_slave_1: left allmulticast mode [ 689.294134][ T46] bridge_slave_1: left promiscuous mode [ 689.300155][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.307976][ T46] bridge_slave_0: left allmulticast mode [ 689.315565][ T46] bridge_slave_0: left promiscuous mode [ 689.321226][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.387498][T31007] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.394683][T31007] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.401761][T31007] bridge_slave_1: entered allmulticast mode [ 689.408323][T31007] bridge_slave_1: entered promiscuous mode [ 689.448013][ T46] tipc: Left network mode [ 689.456461][ T46] veth1_macvtap: left promiscuous mode [ 689.462084][ T46] veth0_vlan: left promiscuous mode [ 689.514161][T31007] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.521262][T31007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.528632][T31007] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.535701][T31007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.560369][ T8500] bridge0: port 1(bridge_slave_0) entered disabled state [ 689.570209][ T8500] bridge0: port 2(bridge_slave_1) entered disabled state [ 689.583043][ T8499] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.590125][ T8499] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.600333][ T8500] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.607406][ T8500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.634979][T31007] veth0_vlan: entered promiscuous mode [ 689.646925][T31007] veth1_macvtap: entered promiscuous mode [ 689.654153][ T330] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 689.670435][ T45] usb 10-1: USB disconnect, device number 81 [ 689.694441][T31020] rust_binder: Error while translating object. [ 689.694494][T31020] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 689.702111][T31020] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 689.730989][T31024] syzkaller0: entered promiscuous mode [ 689.746179][T31024] syzkaller0: entered allmulticast mode [ 689.816092][ T330] usb 8-1: config 5 has an invalid interface number: 4 but max is 3 [ 689.824235][ T330] usb 8-1: config 5 has an invalid interface number: 19 but max is 3 [ 689.832336][ T330] usb 8-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 689.841158][ T330] usb 8-1: config 5 has an invalid interface number: 197 but max is 3 [ 689.849447][ T330] usb 8-1: config 5 has an invalid descriptor of length 215, skipping remainder of the config [ 689.860155][ T330] usb 8-1: config 5 has 3 interfaces, different from the descriptor's value: 4 [ 689.870825][ T330] usb 8-1: config 5 has no interface number 0 [ 689.878016][ T330] usb 8-1: config 5 has no interface number 1 [ 689.884205][ T330] usb 8-1: config 5 has no interface number 2 [ 689.890474][ T330] usb 8-1: config 5 interface 4 altsetting 89 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 689.904386][ T330] usb 8-1: config 5 interface 4 altsetting 89 has an invalid descriptor for endpoint zero, skipping [ 689.919267][ T330] usb 8-1: config 5 interface 4 altsetting 89 has an invalid descriptor for endpoint zero, skipping [ 689.927023][T31039] syzkaller0: entered promiscuous mode [ 689.930371][ T330] usb 8-1: config 5 interface 4 altsetting 89 bulk endpoint 0xE has invalid maxpacket 1024 [ 689.936732][T31039] syzkaller0: entered allmulticast mode [ 689.951607][ T330] usb 8-1: config 5 interface 19 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 689.962699][ T330] usb 8-1: config 5 interface 19 altsetting 0 endpoint 0x8 has an invalid bInterval 134, changing to 7 [ 689.973956][ T330] usb 8-1: config 5 interface 19 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 689.984715][ T330] usb 8-1: config 5 interface 19 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 689.995776][ T330] usb 8-1: config 5 interface 19 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 690.006477][ T330] usb 8-1: config 5 interface 19 altsetting 0 has an endpoint descriptor with address 0x57, changing to 0x7 [ 690.018422][ T330] usb 8-1: config 5 interface 19 altsetting 0 endpoint 0x7 has an invalid bInterval 90, changing to 7 [ 690.029769][T31043] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1 [ 690.037161][T31043] rust_binder: Write failure EINVAL in pid:16 [ 690.037525][ T330] usb 8-1: config 5 interface 19 altsetting 0 endpoint 0x7 has invalid maxpacket 9127, setting to 1024 [ 690.056800][ T330] usb 8-1: config 5 interface 19 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 690.069957][ T330] usb 8-1: config 5 interface 197 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 690.083622][ T330] usb 8-1: config 5 interface 4 has no altsetting 0 [ 690.091002][ T330] usb 8-1: config 5 interface 197 has no altsetting 0 [ 690.102736][T31047] rust_binder: Error while translating object. [ 690.102789][T31047] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 690.110802][T31047] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19 [ 690.121691][ T330] usb 8-1: Dual-Role OTG device on HNP port [ 690.141695][ T330] usb 8-1: New USB device found, idVendor=05c6, idProduct=9079, bcdDevice=31.46 [ 690.156065][ T330] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.164414][ T330] usb 8-1: Product: ခ [ 690.168610][ T330] usb 8-1: Manufacturer: ᐌ [ 690.173214][ T330] usb 8-1: SerialNumber: ᠉ [ 690.179508][T31012] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 690.208113][T31050] rust_binder: Write failure EINVAL in pid:21 [ 690.214626][ T9] rust_binder: 31049: removing orphan mapping 0:4200 [ 690.314466][T31058] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 690.341771][T31058] syzkaller0: entered promiscuous mode [ 690.344226][T31061] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 690.347839][T31058] syzkaller0: entered allmulticast mode [ 690.399193][ T330] usb 8-1: USB disconnect, device number 14 [ 690.495726][T31076] netlink: 'syz.9.10159': attribute type 16 has an invalid length. [ 691.108057][T31089] IPv4: Oversized IP packet from 172.20.20.10 [ 691.114449][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 691.120687][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 691.139341][T31089] IPv4: Oversized IP packet from 172.20.20.10 [ 691.145705][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 691.151885][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 691.159274][ T36] audit: type=1400 audit(2000000612.102:1967): avc: denied { unlink } for pid=31088 comm="syz.2.10164" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 691.161354][T31089] IPv4: Oversized IP packet from 172.20.20.10 [ 691.188983][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 691.195207][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 691.205610][T31089] IPv4: Oversized IP packet from 172.20.20.10 [ 691.325234][T31108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10171'. [ 691.334300][T31108] bridge_slave_1: left allmulticast mode [ 691.339976][T31108] bridge_slave_1: left promiscuous mode [ 691.345956][T31108] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.361682][T31108] bridge_slave_0: left allmulticast mode [ 691.367462][T31108] bridge_slave_0: left promiscuous mode [ 691.373072][T31108] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.381202][T31113] fuseblk: Bad value for 'rootmode' [ 691.413278][T31115] rust_binder: 31112 RLIMIT_NICE not set [ 691.413534][T31112] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 691.436602][T31112] rust_binder: Error while translating object. [ 691.436644][T31112] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 691.447207][T31112] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender. [ 691.458364][T31112] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:406 [ 691.503260][ T330] rust_binder: 31111: removing orphan mapping 0:4248 [ 691.551876][T31125] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10177'. [ 691.578567][T31128] fuse: Bad value for 'user_id' [ 691.583565][T31128] fuse: Bad value for 'user_id' [ 691.584303][T31125] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10177'. [ 691.608883][T31125] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10177'. [ 691.634149][T31125] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10177'. [ 691.643579][T31125] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10177'. [ 691.662861][T31125] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10177'. [ 691.675454][T31125] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10177'. [ 691.783928][T31140] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 691.785226][T31140] rust_binder: 416: no such ref 3 [ 691.814392][T31140] rust_binder: Write failure EFAULT in pid:416 [ 691.814471][T31140] rust_binder: Write failure EFAULT in pid:416 [ 691.829833][T31130] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=31130 comm=syz.2.10179 [ 692.129978][T31162] tipc: Started in network mode [ 692.136933][T31162] tipc: Node identity 9ad706201482, cluster identity 4711 [ 692.144364][T31162] tipc: Enabled bearer , priority 0 [ 692.154174][T31164] tipc: Disabling bearer [ 692.192164][T31163] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.199394][T31163] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.206903][T31163] bridge_slave_0: entered allmulticast mode [ 692.213278][T31163] bridge_slave_0: entered promiscuous mode [ 692.219943][T31163] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.232192][T31163] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.240865][T31163] bridge_slave_1: entered allmulticast mode [ 692.247457][T31163] bridge_slave_1: entered promiscuous mode [ 692.298829][T31163] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.305929][T31163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.313224][T31163] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.320285][T31163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.328483][ T8500] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.335961][ T8500] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.360905][ T7312] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.368021][ T7312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.377442][ T8500] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.384542][ T8500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.412177][T31163] veth0_vlan: entered promiscuous mode [ 692.423579][T31163] veth1_macvtap: entered promiscuous mode [ 692.455478][T31175] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 692.724470][ T9] usb 2-1: new low-speed USB device number 89 using dummy_hcd [ 692.754165][ T45] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 692.845201][T31196] incfs: Options parsing error. -22 [ 692.849944][T31192] rust_binder: Error while translating object. [ 692.850497][T31192] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 692.860622][T31196] incfs: mount failed -22 [ 692.864469][T31192] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:431 [ 692.894115][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 692.923409][ T45] usb 5-1: config 1 interface 0 has no altsetting 0 [ 692.937735][ T45] usb 5-1: New USB device found, idVendor=046d, idProduct=c218, bcdDevice= 0.40 [ 692.955323][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.965817][ T45] usb 5-1: Product: syz [ 692.970076][ T45] usb 5-1: Manufacturer: syz [ 692.981989][ T45] usb 5-1: SerialNumber: syz [ 693.046470][ T9] usb 2-1: new low-speed USB device number 90 using dummy_hcd [ 693.065091][T31207] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.181760][ T36] audit: type=1400 audit(2000000614.122:1968): avc: denied { listen } for pid=31211 comm="syz.9.10205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 693.196043][ T45] usbhid 5-1:1.0: can't add hid device: -71 [ 693.224270][ T45] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 693.231364][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 693.237805][ T9] usb usb2-port1: attempt power cycle [ 693.244128][ T7438] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 693.252793][ T45] usb 5-1: USB disconnect, device number 31 [ 693.384122][ T7438] usb 8-1: device descriptor read/64, error -71 [ 693.514482][T31224] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.522442][T31225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.544169][T31225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.544199][T31225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.550675][T31225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.564317][T31225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.564347][T31225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.580584][ T9] usb 2-1: new low-speed USB device number 91 using dummy_hcd [ 693.581045][T31225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.591228][T31226] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 693.597771][T31226] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:457 [ 693.604891][T31225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.621002][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 693.624141][ T7438] usb 8-1: device descriptor read/64, error -71 [ 693.632815][T31225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.632846][T31225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.632863][T31225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.658441][T31225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.659344][T31225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.674865][T31225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.674904][T31225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.687950][T31225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.687978][T31225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.714120][T31225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.714150][T31225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.729054][T31225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.745758][T31225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.754378][T31225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.764120][ T9] usb 2-1: new low-speed USB device number 92 using dummy_hcd [ 693.768317][T31225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.778231][T31225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.784967][T31225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.791609][T31225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.794475][ T9] usb 2-1: Invalid ep0 maxpacket: 64 [ 693.800179][T31225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.811973][T31225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.814323][ T9] usb usb2-port1: unable to enumerate USB device [ 693.818836][T31225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.833102][T31231] tipc: Started in network mode [ 693.852415][T31231] tipc: Node identity a65af7390ead, cluster identity 4711 [ 693.859960][T31225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.860000][T31225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.866535][ T7438] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 693.880704][T31231] tipc: Enabled bearer , priority 0 [ 693.887551][T31225] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 693.917108][T31232] syzkaller0: entered promiscuous mode [ 693.929423][T31232] syzkaller0: entered allmulticast mode [ 693.940115][T31232] tipc: Resetting bearer [ 693.946889][T31231] tipc: Resetting bearer [ 693.952998][T31234] binder: Unknown parameter '' [ 693.973175][T31231] tipc: Disabling bearer [ 694.014198][ T7438] usb 8-1: device descriptor read/64, error -71 [ 694.037666][T31237] syzkaller0: entered promiscuous mode [ 694.043389][T31237] syzkaller0: entered allmulticast mode [ 694.264188][ T7438] usb 8-1: device descriptor read/64, error -71 [ 694.394227][ T7438] usb usb8-port1: attempt power cycle [ 694.445006][T31259] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:469 [ 694.451168][ T45] rust_binder: 31256: removing orphan mapping 0:24 [ 694.487529][T31261] binder: Unknown parameter '0xffffffffffffffff' [ 694.529740][T31263] netlink: 'syz.9.10225': attribute type 4 has an invalid length. [ 694.537954][T31263] netlink: 'syz.9.10225': attribute type 4 has an invalid length. [ 694.551107][ T36] audit: type=1326 audit(2000000615.492:1969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31262 comm="syz.9.10225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad8d8ebe9 code=0x7ffc0000 [ 694.577338][ T36] audit: type=1326 audit(2000000615.522:1970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31262 comm="syz.9.10225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad8d8ebe9 code=0x7ffc0000 [ 694.603463][ T36] audit: type=1326 audit(2000000615.522:1971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31262 comm="syz.9.10225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9ad8d8d550 code=0x7ffc0000 [ 694.631295][ T36] audit: type=1326 audit(2000000615.522:1972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31262 comm="syz.9.10225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9ad8d90417 code=0x7ffc0000 [ 694.655125][ T36] audit: type=1326 audit(2000000615.522:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31262 comm="syz.9.10225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad8d8ebe9 code=0x7ffc0000 [ 694.678817][ T36] audit: type=1326 audit(2000000615.522:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31262 comm="syz.9.10225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad8d8ebe9 code=0x7ffc0000 [ 694.703317][ T36] audit: type=1326 audit(2000000615.522:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31262 comm="syz.9.10225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9ad8d8ebe9 code=0x7ffc0000 [ 694.727130][ T36] audit: type=1326 audit(2000000615.522:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31262 comm="syz.9.10225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad8d8ebe9 code=0x7ffc0000 [ 694.751307][ T36] audit: type=1326 audit(2000000615.522:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31262 comm="syz.9.10225" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ad8d8ebe9 code=0x7ffc0000 [ 694.754248][ T7438] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 694.795324][ T7438] usb 8-1: device descriptor read/8, error -71 [ 694.802878][T31265] rust_binder: 31266 RLIMIT_NICE not set [ 694.807946][ T330] rust_binder: 31264: removing orphan mapping 0:4248 [ 694.902443][T31275] binder: Unknown parameter 'defcontext01777777777777777777777' [ 694.925122][ T7438] usb 8-1: device descriptor read/8, error -71 [ 695.017400][T31279] rust_binder: Error while translating object. [ 695.017434][T31279] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 695.023727][T31279] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:490 [ 695.164195][ T7438] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 695.195344][ T7438] usb 8-1: device descriptor read/8, error -71 [ 695.325465][ T7438] usb 8-1: device descriptor read/8, error -71 [ 695.434213][ T7438] usb usb8-port1: unable to enumerate USB device [ 695.467123][T31287] __nla_validate_parse: 58 callbacks suppressed [ 695.467144][T31287] netlink: 37 bytes leftover after parsing attributes in process `syz.4.10233'. [ 695.549510][T31291] rust_binder: 31291 RLIMIT_NICE not set [ 695.724122][ T7438] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 695.884129][ T330] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 695.885296][ T7438] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 695.900877][ T7438] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.911922][ T7438] usb 5-1: config 0 descriptor?? [ 695.935987][T31293] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 696.014161][ T330] usb 2-1: device descriptor read/64, error -71 [ 696.172064][ T7312] bridge_slave_1: left allmulticast mode [ 696.177872][ T7312] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.185822][ T7312] bridge_slave_0: left allmulticast mode [ 696.191495][ T7312] bridge_slave_0: left promiscuous mode [ 696.197252][ T7312] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.247949][T31299] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.255057][T31299] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.262153][T31299] bridge_slave_0: entered allmulticast mode [ 696.268228][ T330] usb 2-1: device descriptor read/64, error -71 [ 696.274696][T31299] bridge_slave_0: entered promiscuous mode [ 696.281308][T31299] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.284351][ T9] usb 10-1: new high-speed USB device number 83 using dummy_hcd [ 696.290238][T31299] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.303184][T31299] bridge_slave_1: entered allmulticast mode [ 696.309720][T31299] bridge_slave_1: entered promiscuous mode [ 696.321543][ T7438] nintendo 0003:057E:200E.0033: unknown main item tag 0x0 [ 696.328784][ T7438] nintendo 0003:057E:200E.0033: item fetching failed at offset 3/5 [ 696.337015][ T7438] nintendo 0003:057E:200E.0033: HID parse failed [ 696.337084][ T7312] tipc: Left network mode [ 696.343481][ T7438] nintendo 0003:057E:200E.0033: probe - fail = -22 [ 696.354336][ T7438] nintendo 0003:057E:200E.0033: probe with driver nintendo failed with error -22 [ 696.371932][ T7312] veth1_macvtap: left promiscuous mode [ 696.377521][ T7312] veth0_vlan: left promiscuous mode [ 696.454296][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 696.460621][ T9] usb 10-1: config 2 has an invalid interface number: 5 but max is 1 [ 696.465733][T31299] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.469244][ T9] usb 10-1: config 2 has an invalid interface number: 206 but max is 1 [ 696.475831][T31299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.484382][ T9] usb 10-1: config 2 has an invalid interface number: 32 but max is 1 [ 696.491380][T31299] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.499729][ T9] usb 10-1: config 2 has an invalid interface number: 51 but max is 1 [ 696.506533][T31299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.522207][ T330] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 696.532064][ T8500] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.540200][ T9] usb 10-1: config 2 has an invalid interface number: 76 but max is 1 [ 696.549145][ T8500] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.557068][ T9] usb 10-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 696.566275][ T9] usb 10-1: config 2 has 5 interfaces, different from the descriptor's value: 2 [ 696.576965][ T8500] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.584039][ T8500] bridge0: port 1(bridge_slave_0) entered forwarding state [ 696.591712][ T8500] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.598789][ T8500] bridge0: port 2(bridge_slave_1) entered forwarding state [ 696.607373][ T9] usb 10-1: config 2 has no interface number 0 [ 696.613548][ T9] usb 10-1: config 2 has no interface number 1 [ 696.620309][ T9] usb 10-1: config 2 has no interface number 2 [ 696.626674][ T9] usb 10-1: config 2 has no interface number 3 [ 696.632764][T31299] veth0_vlan: entered promiscuous mode [ 696.634264][ T9] usb 10-1: config 2 has no interface number 4 [ 696.644609][ T9] usb 10-1: config 2 interface 5 altsetting 13 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 696.648642][T31299] veth1_macvtap: entered promiscuous mode [ 696.661436][ T9] usb 10-1: config 2 interface 5 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 696.674560][ T9] usb 10-1: config 2 interface 206 altsetting 211 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 696.686056][ T9] usb 10-1: config 2 interface 206 altsetting 211 has a duplicate endpoint with address 0x6, skipping [ 696.697503][ T330] usb 2-1: device descriptor read/64, error -71 [ 696.703840][ T9] usb 10-1: config 2 interface 206 altsetting 211 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 696.716833][ T9] usb 10-1: config 2 interface 206 altsetting 211 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 696.728249][ T9] usb 10-1: config 2 interface 206 altsetting 211 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 696.739896][ T9] usb 10-1: config 2 interface 206 altsetting 211 has 7 endpoint descriptors, different from the interface descriptor's value: 8 [ 696.753500][ T9] usb 10-1: too many endpoints for config 2 interface 32 altsetting 192: 225, using maximum allowed: 30 [ 696.764859][ T9] usb 10-1: config 2 interface 32 altsetting 192 has 0 endpoint descriptors, different from the interface descriptor's value: 225 [ 696.778565][ T9] usb 10-1: config 2 interface 51 altsetting 9 bulk endpoint 0x8 has invalid maxpacket 8 [ 696.793643][ T9] usb 10-1: config 2 interface 51 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 696.806988][ T9] usb 10-1: too many endpoints for config 2 interface 76 altsetting 167: 255, using maximum allowed: 30 [ 696.818998][ T9] usb 10-1: config 2 interface 76 altsetting 167 has an invalid descriptor for endpoint zero, skipping [ 696.831123][ T9] usb 10-1: config 2 interface 76 altsetting 167 has a duplicate endpoint with address 0x6, skipping [ 696.842131][ T9] usb 10-1: config 2 interface 76 altsetting 167 has a duplicate endpoint with address 0xF, skipping [ 696.853084][ T9] usb 10-1: config 2 interface 76 altsetting 167 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 696.867472][ T9] usb 10-1: config 2 interface 5 has no altsetting 0 [ 696.874483][ T9] usb 10-1: config 2 interface 206 has no altsetting 0 [ 696.881371][ T9] usb 10-1: config 2 interface 32 has no altsetting 0 [ 696.888254][ T9] usb 10-1: config 2 interface 51 has no altsetting 0 [ 696.895079][ T9] usb 10-1: config 2 interface 76 has no altsetting 0 [ 696.903378][ T9] usb 10-1: New USB device found, idVendor=0403, idProduct=f070, bcdDevice=64.70 [ 696.912682][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.920812][ T9] usb 10-1: Product: У [ 696.925037][ T9] usb 10-1: Manufacturer: 䵏ⶰ娮䣳햫㦙厹餕垉ﺗ䠴颊䷍㈩កḇ〿ﳐ軏妖얍䂯ꡱன클鑕ኀ빌対Ꮺ꽝Ἁ팋ঁ擹ꇸ鰹㥳椃辷硽콰椲꣧Ⓑ晳䷶鲘꓀콎⧴貘ሱ氚裦力遧㛇왰 [ 696.946701][ T9] usb 10-1: SerialNumber: ᰉ [ 697.004106][ T330] usb 2-1: device descriptor read/64, error -71 [ 697.074107][T30897] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 697.124222][ T330] usb usb2-port1: attempt power cycle [ 697.224252][T30897] usb 9-1: Using ep0 maxpacket: 32 [ 697.230687][T30897] usb 9-1: config 7 has an invalid interface number: 69 but max is 3 [ 697.239144][T30897] usb 9-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 697.249883][T30897] usb 9-1: config 7 has 1 interface, different from the descriptor's value: 4 [ 697.258899][T30897] usb 9-1: config 7 has no interface number 0 [ 697.265393][T30897] usb 9-1: config 7 interface 69 altsetting 5 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 697.276443][T30897] usb 9-1: config 7 interface 69 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 697.287363][T30897] usb 9-1: config 7 interface 69 has no altsetting 0 [ 697.295872][T30897] usb 9-1: New USB device found, idVendor=0bda, idProduct=1e1e, bcdDevice=7d.37 [ 697.305013][T30897] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.316136][T30897] usb 9-1: Product: 뾳ᓥ兒Ⱬᦀ⾺Ω劻滚烒垍骱㳂ᭃᨵꑼꄎ勈皵嶻瓇饞襹풹麷ⱄﶾ菩잣뽹贗䉜艅᳊䄴艉⺀ᦚᢨᢩ⌽ᆠꃮ瞵烩ꅏᤠ备ሉ封摤끌䭠쫆ሸᆓଢ撘㤌䲜㉛⍼ꃍѻ솢ᛢ㨠᮹俨苑♉䱍渟ˋ旉ۻ먴═贿࢐䘽愚폱㬤趵⶚珺ȱ왰㹈薴៩靝䐨铥爽投㶣娱진ᬈ瀟᭼㞮ꂌ᠇銹말㌖湧샛 [ 697.354652][T30897] usb 9-1: Manufacturer: 됫乵ᥥᚡ쎓昞踯Ზ鳙Ꟃ휣ﯼ⩔㪪勑眷摆㘈랮㧠⽯ꐎ钛洼ꆷᵷ嚶曰ﻱ禞⤋ꑇᑢ鷏㿃瞲飣ܖﶠׯ鵤ꝨΚ≖癋઒⬽ʿ㺒靺퉖ꄈㆵꎣ쎈琨ᨐ搰镽혏̉畎섅 [ 697.378152][T30897] usb 9-1: SerialNumber: ᐇ [ 697.383939][ T9] ftdi_sio 10-1:2.5: FTDI USB Serial Device converter detected [ 697.391909][ T9] ftdi_sio ttyUSB0: unknown device type: 0x6470 [ 697.401601][ T9] ftdi_sio 10-1:2.206: FTDI USB Serial Device converter detected [ 697.409879][ T9] ftdi_sio ttyUSB1: unknown device type: 0x6470 [ 697.418468][ T9] ftdi_sio 10-1:2.32: FTDI USB Serial Device converter detected [ 697.426897][ T9] ftdi_sio ttyUSB2: unknown device type: 0x6470 [ 697.434636][ T9] ftdi_sio 10-1:2.51: FTDI USB Serial Device converter detected [ 697.442779][ T9] ftdi_sio ttyUSB3: unknown device type: 0x6470 [ 697.451365][ T9] ftdi_sio 10-1:2.76: FTDI USB Serial Device converter detected [ 697.459694][ T9] ftdi_sio ttyUSB4: unknown device type: 0x6470 [ 697.469004][ T9] usb 10-1: USB disconnect, device number 83 [ 697.475110][ T330] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 697.484960][ T9] ftdi_sio 10-1:2.5: device disconnected [ 697.501606][ T9] ftdi_sio 10-1:2.206: device disconnected [ 697.508799][ T330] usb 2-1: device descriptor read/8, error -71 [ 697.515538][ T9] ftdi_sio 10-1:2.32: device disconnected [ 697.522309][ T9] ftdi_sio 10-1:2.51: device disconnected [ 697.529129][ T9] ftdi_sio 10-1:2.76: device disconnected [ 697.618967][T30897] usb 9-1: USB disconnect, device number 29 [ 697.620016][T31335] 9pnet_fd: Insufficient options for proto=fd [ 697.647505][ T330] usb 2-1: device descriptor read/8, error -71 [ 697.884179][ T330] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 697.911510][ T330] usb 2-1: device descriptor read/8, error -71 [ 698.045342][ T330] usb 2-1: device descriptor read/8, error -71 [ 698.154203][ T330] usb usb2-port1: unable to enumerate USB device [ 698.508825][ T330] rust_binder: 0: removing orphan mapping 0:1168 [ 698.774216][ T330] usb 9-1: new low-speed USB device number 30 using dummy_hcd [ 698.822572][T31369] netlink: 'syz.9.10260': attribute type 11 has an invalid length. [ 698.904132][T30897] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 698.934146][ T330] usb 9-1: Invalid ep0 maxpacket: 64 [ 699.055337][T30897] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 699.064514][ T330] usb 9-1: new low-speed USB device number 31 using dummy_hcd [ 699.072038][T30897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 699.080929][T30897] usb 2-1: config 0 descriptor?? [ 699.224086][ T330] usb 9-1: Invalid ep0 maxpacket: 64 [ 699.229550][ T330] usb usb9-port1: attempt power cycle [ 699.574181][ T330] usb 9-1: new low-speed USB device number 32 using dummy_hcd [ 699.594462][ T330] usb 9-1: Invalid ep0 maxpacket: 64 [ 699.724100][ T330] usb 9-1: new low-speed USB device number 33 using dummy_hcd [ 699.745497][ T330] usb 9-1: Invalid ep0 maxpacket: 64 [ 699.750946][ T330] usb usb9-port1: unable to enumerate USB device [ 699.954191][ T45] usb 10-1: new high-speed USB device number 84 using dummy_hcd [ 700.104133][ T45] usb 10-1: Using ep0 maxpacket: 8 [ 700.110421][ T45] usb 10-1: config 1 interface 0 altsetting 72 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 700.123670][ T45] usb 10-1: config 1 interface 0 has no altsetting 0 [ 700.131860][ T45] usb 10-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.40 [ 700.141038][ T45] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.149371][ T45] usb 10-1: Product: syz [ 700.153654][ T45] usb 10-1: Manufacturer: 첒殸㺃㐣矲「ጨ﹞쀼␤湒澎蟖㒜ጽ辺您诫졋防㆕䫖䖜㝉ꩫ֢Ϻ癵鑧꧄ㆎ튻毂ᒘ†殇絯蛄噁ᤃ㙌絯ㅞ皍톝ᒛ渫壨᫏看♓閩甬댚䒜햲瑲筆䪜 [ 700.175034][ T45] usb 10-1: SerialNumber: syz [ 700.291416][T30897] usb 2-1: Cannot set autoneg [ 700.297048][T30897] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 700.312416][T30897] usb 2-1: USB disconnect, device number 97 [ 700.584074][ T45] usbhid 10-1:1.0: can't add hid device: -71 [ 700.590178][ T45] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 700.599208][ T45] usb 10-1: USB disconnect, device number 84 [ 700.825610][T31386] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:14 [ 700.976314][T31390] tipc: Enabling of bearer rejected, failed to enable media [ 701.006638][T31392] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 701.006677][T31392] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:20 [ 701.016746][T31392] rust_binder: 20: no such ref 2 [ 701.031455][T31392] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:20 [ 701.192933][T31409] rust_binder: Error in use_page_slow: ESRCH [ 701.192956][T31409] rust_binder: use_range failure ESRCH [ 701.199161][T31409] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 701.204821][T31409] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 701.212825][T31409] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:113 [ 701.314144][T30897] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 701.352639][T31423] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:127 [ 701.366033][T31425] input: syz0 as /devices/virtual/input/input65 [ 701.429357][T31429] usb usb8: usbfs: process 31429 (syz.4.10280) did not claim interface 0 before use [ 701.485345][T30897] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 701.491827][T31444] rust_binder: Error while translating object. [ 701.496458][T31444] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 701.496811][T30897] usb 2-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 701.503753][T31444] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:139 [ 701.512593][T30897] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 701.541307][T30897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.564453][T30897] usb 2-1: invalid MIDI out EP 0 [ 701.603656][T30897] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 701.647869][T31453] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 701.918824][T31477] rust_binder: Write failure EFAULT in pid:153 [ 701.984167][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 701.984190][ T36] audit: type=1326 audit(2000000622.912:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31481 comm="syz.4.10296" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6848f8ebe9 code=0x0 [ 702.144557][T30897] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 702.294091][T30897] usb 9-1: Using ep0 maxpacket: 16 [ 702.300450][T30897] usb 9-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 702.311130][T30897] usb 9-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 702.333987][T30897] usb 9-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 702.347089][T30897] usb 9-1: config 1 interface 0 has no altsetting 0 [ 702.357069][T30897] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 702.366246][T30897] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.374331][T30897] usb 9-1: Product: syz [ 702.378821][T30897] usb 9-1: Manufacturer: syz [ 702.383470][T30897] usb 9-1: SerialNumber: syz [ 702.596756][T30897] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 702.634891][ T904] usb 10-1: new high-speed USB device number 85 using dummy_hcd [ 702.785567][ T904] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 702.794860][ T904] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.803597][ T904] usb 10-1: config 0 descriptor?? [ 702.860980][ T36] audit: type=1400 audit(2000000623.802:1994): avc: denied { bind } for pid=31487 comm="syz.4.10298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 704.013961][ T904] usb 10-1: Cannot set autoneg [ 704.023602][ T904] MOSCHIP usb-ethernet driver 10-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 704.035305][ T45] usb 2-1: USB disconnect, device number 98 [ 704.044769][ T904] usb 10-1: USB disconnect, device number 85 [ 704.345847][T31513] rust_binder: Write failure EFAULT in pid:177 [ 704.358467][T31515] 2N: renamed from vcan0 (while UP) [ 704.427308][T31517] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 704.435391][T31517] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock [ 704.443847][T31517] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 704.451868][T31517] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock [ 704.462319][ T45] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 704.503645][T31523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10310'. [ 704.529377][ T36] audit: type=1326 audit(2000000625.472:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31527 comm="syz.9.10311" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ad8d8ebe9 code=0x0 [ 704.552882][ T36] audit: type=1326 audit(2000000625.472:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31527 comm="syz.9.10311" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ad8d8ebe9 code=0x0 [ 704.604115][ T45] usb 2-1: device descriptor read/64, error -71 [ 704.617913][T31531] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10312'. [ 704.627713][T31531] bpf: Bad value for 'gid' [ 704.844139][ T45] usb 2-1: device descriptor read/64, error -71 [ 704.914833][ T9] usb 9-1: USB disconnect, device number 34 [ 704.921834][ T9] usblp0: removed [ 705.084139][ T45] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 705.264164][T31558] rust_binder: validate_parent_fixup: new_min_offset=37, sg_entry.length=0 [ 705.264189][T31558] rust_binder: Error while translating object. [ 705.272999][T31558] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 705.279758][T31558] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:54 [ 705.284244][ T45] usb 2-1: device descriptor read/64, error -71 [ 705.323085][T31562] binder: Unknown parameter 'context' [ 705.420565][T31576] rust_binder: Error while translating object. [ 705.420607][T31576] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 705.427238][T31576] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:556 [ 705.486632][T31584] rust_binder: Failed to allocate buffer. len:4294967808, is_oneway:false [ 705.486665][T31584] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 705.495321][T31584] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:563 [ 705.544147][ T45] usb 2-1: device descriptor read/64, error -71 [ 705.664374][ T45] usb usb2-port1: attempt power cycle [ 705.706604][T31603] overlayfs: failed to resolve './file0redirect_dir=follow': -2 [ 705.954105][ T291] usb 10-1: new high-speed USB device number 86 using dummy_hcd [ 706.004181][ T45] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 706.025240][ T45] usb 2-1: device descriptor read/8, error -71 [ 706.104140][ T291] usb 10-1: Using ep0 maxpacket: 16 [ 706.110565][ T291] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 706.120877][ T291] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 706.131434][ T291] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 706.140790][ T291] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.149133][ T291] usb 10-1: Product: syz [ 706.153442][ T291] usb 10-1: Manufacturer: syz [ 706.158218][ T291] usb 10-1: SerialNumber: syz [ 706.163778][ T45] usb 2-1: device descriptor read/8, error -71 [ 706.325012][T31608] rust_binder: Error while translating object. [ 706.325056][T31608] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 706.331365][T31608] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:65 [ 706.373426][T31603] rust_binder: 31603 RLIMIT_NICE not set [ 706.384913][ T291] usb 10-1: 0:2 : does not exist [ 706.398640][ T291] usb 10-1: 5:0: failed to get current value for ch 0 (-22) [ 706.409059][T31612] binder: Unknown parameter 'defcontext01777777777777777777777' [ 706.414126][ T45] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 706.424528][ T291] usb 10-1: USB disconnect, device number 86 [ 706.438610][T28254] udevd[28254]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 706.455762][ T45] usb 2-1: device descriptor read/8, error -71 [ 706.585321][ T45] usb 2-1: device descriptor read/8, error -71 [ 706.694246][ T45] usb usb2-port1: unable to enumerate USB device [ 706.904504][ T45] rust_binder: 0: removing orphan mapping 0:1192 [ 707.174140][ T9] usb 10-1: new high-speed USB device number 87 using dummy_hcd [ 707.314096][ T9] usb 10-1: device descriptor read/64, error -71 [ 707.363562][T31635] /dev/loop0: Can't lookup blockdev [ 707.413627][T31645] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY [ 707.413666][T31645] rust_binder: Error in use_page_slow: EBUSY [ 707.430090][T31645] rust_binder: use_range failure EBUSY [ 707.437840][T31645] rust_binder: Failed to allocate buffer. len:24, is_oneway:false [ 707.443432][T31645] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY } [ 707.454707][T31645] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:46 [ 707.554451][ T9] usb 10-1: device descriptor read/64, error -71 [ 707.684110][T30897] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 707.794116][ T330] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 707.804250][ T9] usb 10-1: new high-speed USB device number 88 using dummy_hcd [ 707.842907][T30897] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 707.856864][T30897] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 707.868442][T30897] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 707.882189][T30897] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 707.895668][T30897] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 707.904991][T30897] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.914642][T30897] usb 9-1: config 0 descriptor?? [ 707.919905][T31647] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 707.945502][ T330] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 707.954703][ T9] usb 10-1: device descriptor read/64, error -71 [ 707.963858][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.973132][ T330] usb 2-1: config 0 descriptor?? [ 707.982239][T31660] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 707.982313][T31660] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:216 [ 708.007443][T31662] /dev/loop0: Can't lookup blockdev [ 708.022803][T31662] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 708.022830][T31662] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:218 [ 708.048283][T31664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.066504][T31664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.075519][T31665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.086830][T31665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.204121][ T9] usb 10-1: device descriptor read/64, error -71 [ 708.314264][ T9] usb usb10-port1: attempt power cycle [ 708.530938][T30897] usbhid 9-1:0.0: can't add hid device: -71 [ 708.537838][T30897] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 708.546811][T30897] usb 9-1: USB disconnect, device number 35 [ 708.654146][ T9] usb 10-1: new high-speed USB device number 89 using dummy_hcd [ 708.675097][ T9] usb 10-1: device descriptor read/8, error -71 [ 708.722900][T31673] netlink: 'syz.4.10358': attribute type 4 has an invalid length. [ 708.737774][T30897] rust_binder: 31671: removing orphan mapping 0:4232 [ 708.791286][T31679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 708.799906][T31679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 708.808797][ T9] usb 10-1: device descriptor read/8, error -71 [ 708.981104][ T330] usb 2-1: Cannot set autoneg [ 708.985995][ T330] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 709.054158][ T9] usb 10-1: new high-speed USB device number 90 using dummy_hcd [ 709.075161][ T9] usb 10-1: device descriptor read/8, error -71 [ 709.130825][ T36] audit: type=1400 audit(2000000630.072:1997): avc: denied { read write } for pid=31698 comm="syz.8.10367" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 709.154858][ T36] audit: type=1400 audit(2000000630.072:1998): avc: denied { open } for pid=31698 comm="syz.8.10367" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 709.188523][T31701] exFAT-fs (rnullb0): invalid boot record signature [ 709.195256][T31701] exFAT-fs (rnullb0): failed to read boot sector [ 709.201648][T31701] exFAT-fs (rnullb0): failed to recognize exfat type [ 709.209769][ T9] usb 10-1: device descriptor read/8, error -71 [ 709.229193][ T36] audit: type=1400 audit(2000000630.172:1999): avc: denied { lock } for pid=31702 comm="syz.8.10369" path="/30/file0" dev="tmpfs" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 709.324313][ T9] usb usb10-port1: unable to enumerate USB device [ 709.400885][T31710] rust_binder: Error while translating object. [ 709.400926][T31710] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 709.407433][T31710] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:102 [ 709.594187][T31714] incfs_lookup_dentry err:-13 [ 709.608210][T31714] incfs: Can't find or create .index dir in ./bus [ 709.614734][T31714] incfs: mount failed -13 [ 709.648924][ T36] audit: type=1400 audit(2000000630.592:2000): avc: denied { create } for pid=31715 comm="syz.8.10373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 709.674258][ T36] audit: type=1400 audit(2000000630.592:2001): avc: denied { bind } for pid=31715 comm="syz.8.10373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 709.806222][T30897] rust_binder: 31731: removing orphan mapping 0:4120 [ 710.384160][T30897] usb 10-1: new high-speed USB device number 91 using dummy_hcd [ 710.538992][T31739] overlayfs: conflicting options: userxattr,verity=require [ 710.547425][T31739] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10381'. [ 710.555848][ T330] usb 2-1: USB disconnect, device number 103 [ 710.557102][T31739] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2 sclass=netlink_xfrm_socket pid=31739 comm=syz.9.10381 [ 710.600375][T30897] usb 10-1: unable to get BOS descriptor or descriptor too short [ 710.618341][T30897] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 710.628954][T30897] usb 10-1: can't read configurations, error -71 [ 710.694324][T31753] rust_binder: pid 31753 performed invalid decrement on ref [ 710.701693][T31753] rust_binder: Failed to allocate buffer. len:8, is_oneway:false [ 710.769296][T31765] /dev/loop0: Can't lookup blockdev [ 710.864821][T31778] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 710.871913][T31778] rust_binder: 267: no such ref 2 [ 710.886646][T31779] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 710.893875][T31779] rust_binder: 267: no such ref 2 [ 710.944145][ T291] usb 9-1: new full-speed USB device number 36 using dummy_hcd [ 711.121110][ T291] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 711.135942][ T291] usb 9-1: can't read configurations, error -61 [ 711.142784][T31787] rust_binder: Write failure EINVAL in pid:590 [ 711.143871][T31789] rust_binder: Error while translating object. [ 711.150416][T31786] rust_binder: Error while translating object. [ 711.156665][T31786] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 711.163318][T31789] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 711.178570][T31786] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:274 [ 711.188524][T31789] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:274 [ 711.239437][T31795] fuse: Bad value for 'user_id' [ 711.260104][T31795] fuse: Bad value for 'user_id' [ 711.265629][ T291] usb 9-1: new full-speed USB device number 37 using dummy_hcd [ 711.281946][T31795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.296527][T31795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.354249][T31805] overlayfs: missing 'workdir' [ 711.445569][ T291] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 711.453342][ T291] usb 9-1: can't read configurations, error -61 [ 711.459833][ T291] usb usb9-port1: attempt power cycle [ 711.559591][T31825] FAT-fs (rnullb0): bogus number of reserved sectors [ 711.566430][T31825] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 711.588088][ T36] audit: type=1400 audit(2000000632.532:2002): avc: denied { create } for pid=31826 comm="syz.9.10408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 711.609693][T31827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.618854][T31827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.804136][ T291] usb 9-1: new full-speed USB device number 38 using dummy_hcd [ 711.835480][ T291] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 711.843091][ T291] usb 9-1: can't read configurations, error -61 [ 711.850178][T31834] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10411'. [ 711.858524][ T9] usb 10-1: new high-speed USB device number 93 using dummy_hcd [ 711.867274][T31834] rust_binder: Write failure EFAULT in pid:279 [ 711.887623][T31837] rust_binder: Error while translating object. [ 711.893924][T31837] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 711.900388][T31837] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:282 [ 711.954108][ T45] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 711.974127][ T291] usb 9-1: new full-speed USB device number 39 using dummy_hcd [ 712.011461][ T291] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 712.019153][ T291] usb 9-1: can't read configurations, error -61 [ 712.024113][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 712.025617][ T291] usb usb9-port1: unable to enumerate USB device [ 712.038518][ T9] usb 10-1: unable to get BOS descriptor or descriptor too short [ 712.047220][ T9] usb 10-1: config 10 has an invalid interface number: 163 but max is 0 [ 712.056068][ T9] usb 10-1: config 10 has no interface number 0 [ 712.062458][ T9] usb 10-1: config 10 interface 163 altsetting 95 bulk endpoint 0x82 has invalid maxpacket 64 [ 712.072842][ T9] usb 10-1: config 10 interface 163 has no altsetting 0 [ 712.081295][ T9] usb 10-1: New USB device found, idVendor=0499, idProduct=1025, bcdDevice=d2.2e [ 712.090605][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.098737][ T9] usb 10-1: Product: syz [ 712.103104][ T9] usb 10-1: Manufacturer: syz [ 712.108199][ T9] usb 10-1: SerialNumber: syz [ 712.116051][T31828] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 712.134112][ T45] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 712.143283][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.154324][ T45] usb 2-1: config 0 descriptor?? [ 712.166889][T31849] can0: slcan on ttyS3. [ 712.325388][ T36] audit: type=1400 audit(2000000633.272:2003): avc: denied { setopt } for pid=31826 comm="syz.9.10408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 712.358165][ T9] snd-usb-audio 10-1:10.163: probe with driver snd-usb-audio failed with error -2 [ 712.368869][ T9] usb 10-1: USB disconnect, device number 93 [ 712.376553][T28254] udevd[28254]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:10.163/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 712.874760][T31846] can0 (unregistered): slcan off ttyS3. [ 712.912979][T31875] SELinux: security_context_str_to_sid () failed with errno=-22 [ 712.932639][ T36] audit: type=1400 audit(2000000633.872:2004): avc: denied { write } for pid=31876 comm="syz.9.10420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 712.967041][ T36] audit: type=1400 audit(2000000633.872:2005): avc: denied { connect } for pid=31876 comm="syz.9.10420" lport=46 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 712.992184][ T36] audit: type=1400 audit(2000000633.872:2007): avc: denied { ioctl } for pid=31876 comm="syz.9.10420" path="socket:[114554]" dev="sockfs" ino=114554 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 713.148392][T31903] netlink: 57 bytes leftover after parsing attributes in process `syz.9.10423'. [ 713.158556][T31903] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2 [ 713.186178][T31909] rust_binder: Error while translating object. [ 713.186230][T31909] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 713.192624][T31909] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:645 [ 713.300745][T31917] netlink: 'syz.9.10426': attribute type 7 has an invalid length. [ 713.394678][ T45] usb 2-1: Cannot set autoneg [ 713.399465][ T45] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 713.413065][ T45] usb 2-1: USB disconnect, device number 104 [ 713.773208][T31929] fuse: Bad value for 'fd' [ 713.935029][T31940] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 713.942266][T31940] rust_binder: Write failure EINVAL in pid:76 [ 713.955833][T31943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10435'. [ 713.972670][T31943] 8021q: VLANs not supported on vcan0 [ 713.979091][T31943] rust_binder: Error while translating object. [ 713.979128][T31943] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 713.985578][T31943] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:78 [ 714.009782][T31945] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 714.044094][ T291] usb 9-1: new full-speed USB device number 40 using dummy_hcd [ 714.216917][ T291] usb 9-1: config 5 has an invalid interface number: 141 but max is 1 [ 714.225399][ T291] usb 9-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 714.234283][ T291] usb 9-1: config 5 has an invalid interface number: 119 but max is 1 [ 714.242542][ T291] usb 9-1: config 5 has an invalid descriptor of length 119, skipping remainder of the config [ 714.252967][ T291] usb 9-1: config 5 has no interface number 0 [ 714.259102][ T291] usb 9-1: config 5 has no interface number 1 [ 714.265251][ T291] usb 9-1: config 5 interface 141 altsetting 5 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 714.276253][ T291] usb 9-1: config 5 interface 141 altsetting 5 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 714.287164][ T291] usb 9-1: config 5 interface 141 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 714.298193][ T291] usb 9-1: config 5 interface 141 altsetting 5 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 714.309342][ T291] usb 9-1: config 5 interface 141 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 714.320089][ T291] usb 9-1: config 5 interface 141 altsetting 5 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 714.330986][ T291] usb 9-1: config 5 interface 141 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 714.341894][ T291] usb 9-1: config 5 interface 141 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 714.352620][ T291] usb 9-1: config 5 interface 141 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 714.363342][ T291] usb 9-1: config 5 interface 141 altsetting 5 has 12 endpoint descriptors, different from the interface descriptor's value: 11 [ 714.376599][ T291] usb 9-1: config 5 interface 119 altsetting 93 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 714.389974][ T291] usb 9-1: config 5 interface 141 has no altsetting 0 [ 714.396879][ T291] usb 9-1: config 5 interface 119 has no altsetting 0 [ 714.405152][ T291] usb 9-1: New USB device found, idVendor=19d2, idProduct=1598, bcdDevice=5c.4b [ 714.414236][ T291] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.422240][ T291] usb 9-1: Product: 쌖덠撩蔶ᙴ怅➙獎里ﰀ穎Ồ宔ꔗ댳䙐뒸ល䦟䶧⭮羯ᩭ幗뚭皯ꂐ白㍊敼Ɣᄰ鵜Ṅ౑對瀥礭銷㎲䭃ᜉ猦묒ᐉᔟᦗ⧕턻㙁ꈽ䔌๬꼤즤蕚ꨱ㫪ܙ♥啓ꙕཏ쇎좌뫤狄ꐫﳹ獈큿ஈ街썆佧谭讒ꭜ馼櫿⧻ꄞ翡㳛㲇袡☨䃐㌅Ϫ뮷㈬돤 [ 714.453567][ T291] usb 9-1: Manufacturer: Ж [ 714.458168][ T291] usb 9-1: SerialNumber: 햯ᴏﱗ繪돜ᴱ೸髊퐉ᙠ⢡ጚ⟰䮰칚쑘쥓㽻柩떁ᩯ翦葒鱕볌⍸ᨧ퇐ឩ⪲⹰꼧悔ꯁ㹭ꇣ崵ᚨ趎捾湘ᚳ軏锎ꋋᘁￍ躀싇ꍫʄ⑤溫禀磫竁瘾樲Ȳ흲䇗๝쓞ᤥ肘溵⎕왵ጕ벉ꗭ錍ꌲ傪㎖焳챏⢞件鲛雄偶눺∈ฎ縰➔썱 [ 714.896742][ T291] usb 9-1: USB disconnect, device number 40 [ 715.183086][T31981] /dev/nullb0: Can't lookup blockdev [ 715.234109][T30897] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 715.313378][T31992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 715.322039][T31992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 715.385156][T30897] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 715.393380][T30897] usb 2-1: config 0 has no interface number 0 [ 715.401138][T30897] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 715.410299][T30897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.418449][T30897] usb 2-1: Product: syz [ 715.422849][T30897] usb 2-1: Manufacturer: syz [ 715.427609][T30897] usb 2-1: SerialNumber: syz [ 715.432994][T30897] usb 2-1: config 0 descriptor?? [ 715.641933][T30897] usb 2-1: Found UVC 0.08 device syz (046d:0823) [ 715.648610][T30897] usb 2-1: No valid video chain found. [ 715.655290][T30897] usb 2-1: USB disconnect, device number 105 [ 715.714135][ T330] usb 9-1: new full-speed USB device number 41 using dummy_hcd [ 715.865153][ T330] usb 9-1: config 0 has an invalid interface number: 251 but max is 0 [ 715.873378][ T330] usb 9-1: config 0 has no interface number 0 [ 715.885714][ T330] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 715.894879][ T330] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.903147][ T330] usb 9-1: Product: syz [ 715.914078][ T330] usb 9-1: Manufacturer: syz [ 715.918891][ T330] usb 9-1: SerialNumber: syz [ 715.934379][ T330] usb 9-1: config 0 descriptor?? [ 716.514121][ T9] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 716.675201][ T9] usb 2-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 716.686504][ T9] usb 2-1: config 253 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 716.697786][ T9] usb 2-1: config 253 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 716.711990][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 716.721146][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 716.729300][ T9] usb 2-1: SerialNumber: syz [ 716.742341][ T330] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 716.754304][ T330] asix 9-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 716.765020][ T330] asix 9-1:0.251: probe with driver asix failed with error -71 [ 716.775308][ T330] usb 9-1: USB disconnect, device number 41 [ 716.824140][T30897] usb 10-1: new high-speed USB device number 94 using dummy_hcd [ 716.915387][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 716.915418][ T36] audit: type=1400 audit(2000000637.862:2009): avc: denied { read } for pid=32036 comm="syz.4.10467" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 716.945586][ T36] audit: type=1400 audit(2000000637.862:2010): avc: denied { open } for pid=32036 comm="syz.4.10467" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 716.969553][ T36] audit: type=1400 audit(2000000637.892:2011): avc: denied { ioctl } for pid=32036 comm="syz.4.10467" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0xf511 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 716.994938][T30897] usb 10-1: Using ep0 maxpacket: 16 [ 717.002805][T30897] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 717.012023][T30897] usb 10-1: config 0 has no interface number 0 [ 717.014269][T32040] fuse: Bad value for 'fd' [ 717.018395][T30897] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.018426][T30897] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 717.018475][T30897] usb 10-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 717.018501][T30897] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.062415][ T9] rndis_host 2-1:253.0: RNDIS init failed, -71 [ 717.068791][ T9] rndis_host 2-1:253.0: probe with driver rndis_host failed with error -71 [ 717.085092][ T9] usb 2-1: USB disconnect, device number 106 [ 717.094455][T30897] usb 10-1: config 0 descriptor?? [ 717.151291][ T36] audit: type=1400 audit(2000000638.092:2012): avc: denied { ioctl } for pid=32062 comm="syz.1.10474" path="socket:[115144]" dev="sockfs" ino=115144 ioctlcmd=0x7201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 717.195758][T32068] rust_binder: Write failure EINVAL in pid:359 [ 717.195869][T32061] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:359 [ 717.209302][ T291] rust_binder: 32060: removing orphan mapping 0:24 [ 717.443799][T32088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.453045][T32088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.624096][ T9] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 717.711367][T30897] uclogic 0003:28BD:0071.0034: failed retrieving string descriptor #100: -71 [ 717.720749][T30897] uclogic 0003:28BD:0071.0034: failed retrieving pen parameters: -71 [ 717.729113][T30897] uclogic 0003:28BD:0071.0034: pen probing failed: -71 [ 717.736171][T30897] uclogic 0003:28BD:0071.0034: failed probing parameters: -71 [ 717.743687][T30897] uclogic 0003:28BD:0071.0034: probe with driver uclogic failed with error -71 [ 717.754091][T30897] usb 10-1: USB disconnect, device number 94 [ 717.774116][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 717.780392][ T9] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 717.788844][ T9] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 717.797554][ T9] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 717.806575][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 717.816301][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 717.826958][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 717.840094][ T9] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 717.849271][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.858028][ T9] usb 9-1: config 0 descriptor?? [ 718.006308][T32090] tipc: Enabled bearer , priority 0 [ 718.033949][T32090] syzkaller0: entered promiscuous mode [ 718.039525][T32090] syzkaller0: entered allmulticast mode [ 718.045751][T32090] tipc: Resetting bearer [ 718.055599][T32090] tipc: Resetting bearer [ 718.068149][T32090] tipc: Disabling bearer [ 718.070664][T32086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.075632][ T9] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 42 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 718.084452][T32086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.098602][ T9] usb 9-1: USB disconnect, device number 42 [ 718.108142][ T9] usblp0: removed [ 718.148881][T32096] random: crng reseeded on system resumption [ 718.205326][T32100] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 718.205359][T32100] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 718.225809][T32105] 9p: Unknown access argument 00000000000000000000].: -22 [ 718.293703][T32115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.302178][ T291] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 718.310253][T32115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.464184][ T291] usb 2-1: Using ep0 maxpacket: 32 [ 718.471119][ T291] usb 2-1: config 0 has an invalid interface number: 210 but max is 0 [ 718.479381][ T291] usb 2-1: config 0 has no interface number 0 [ 718.485602][ T291] usb 2-1: config 0 interface 210 altsetting 0 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 718.496616][ T45] usb 10-1: new high-speed USB device number 95 using dummy_hcd [ 718.504376][ T291] usb 2-1: config 0 interface 210 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 718.515368][ T7395] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 718.523093][ T291] usb 2-1: config 0 interface 210 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 718.534107][ T291] usb 2-1: config 0 interface 210 altsetting 0 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 718.546881][ T291] usb 2-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice=b1.12 [ 718.556004][ T291] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.564145][ T291] usb 2-1: Product: syz [ 718.568317][ T291] usb 2-1: Manufacturer: и [ 718.572824][ T291] usb 2-1: SerialNumber: syz [ 718.578253][ T291] usb 2-1: config 0 descriptor?? [ 718.694130][ T7395] usb 9-1: Using ep0 maxpacket: 32 [ 718.700474][ T45] usb 10-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 718.709790][ T7395] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 718.718341][ T45] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.726604][ T7395] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 718.735603][ T7395] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 718.745324][ T45] usb 10-1: config 0 descriptor?? [ 718.750530][ T7395] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 718.760362][ T7395] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 718.770670][ T7395] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 718.783689][ T7395] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 718.792906][ T7395] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.804512][ T7395] usb 9-1: config 0 descriptor?? [ 718.809741][ T291] usb 2-1: USB disconnect, device number 107 [ 718.964189][ T45] usb 10-1: string descriptor 0 read error: -71 [ 718.972618][ T45] usbhid 10-1:0.0: can't add hid device: -71 [ 718.978873][ T45] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 718.991429][ T45] usb 10-1: USB disconnect, device number 95 [ 719.018108][ T7395] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 43 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 719.030349][ T7395] usb 9-1: USB disconnect, device number 43 [ 719.037192][ T7395] usblp0: removed [ 719.099995][T32117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.108580][T32117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.310519][T32119] can0: slcan on ttyS3. [ 719.341662][T32119] syzkaller0: entered promiscuous mode [ 719.347581][T32119] syzkaller0: entered allmulticast mode [ 719.456729][T32118] can0 (unregistered): slcan off ttyS3. [ 719.518409][T32139] rust_binder: Error in use_page_slow: ESRCH [ 719.518434][T32139] rust_binder: use_range failure ESRCH [ 719.524567][T32139] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false [ 719.530056][T32139] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 719.542203][T32139] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:138 [ 719.559987][T32146] 9pnet_virtio: no channels available for device 0 [ 719.619318][T32159] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 719.619350][T32159] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 719.633670][ T36] audit: type=1400 audit(2000000640.575:2013): avc: denied { bind } for pid=32155 comm="syz.9.10499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 719.788474][T32180] netlink: 44 bytes leftover after parsing attributes in process `syz.8.10506'. [ 719.804299][T32180] binder: Bad value for 'max' [ 719.938190][T32195] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 720.029827][T32200] rust_binder: Error while translating object. [ 720.029854][T32200] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 720.036196][T32200] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:403 [ 720.054143][ T330] usb 9-1: new full-speed USB device number 44 using dummy_hcd [ 720.093226][ T36] audit: type=1400 audit(2000000641.035:2014): avc: denied { sys_admin } for pid=32203 comm="syz.4.10514" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 720.149325][T32210] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 720.157570][T32210] syzkaller0: entered promiscuous mode [ 720.163144][T32210] syzkaller0: entered allmulticast mode [ 720.170885][T32210] fuse: Unknown parameter 'f0x000000000000000b' [ 720.600573][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.608431][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.618911][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.626404][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.633892][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.641488][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.648943][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.656359][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.663769][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.671187][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.678611][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.686029][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.693550][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.700967][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.708492][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.715958][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.723390][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.730871][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.738629][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.746154][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.754938][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.763169][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.770670][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.778158][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.785731][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.793248][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.800741][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.808386][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.815899][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.823370][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.830921][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.838412][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.845973][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.853551][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.861142][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.870374][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.878080][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.886343][T32224] fuse: Bad value for 'fd' [ 720.907048][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.918954][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.920260][T32234] input: syz0 as /devices/virtual/input/input68 [ 720.933970][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.949342][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.949430][T32234] tipc: New replicast peer: 255.255.255.255 [ 720.956997][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.968785][T32234] tipc: Enabled bearer , priority 10 [ 720.975152][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.978275][T32234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10522'. [ 720.993232][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 720.993703][T32234] tipc: Disabling bearer [ 721.000734][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.008321][T32234] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 721.015307][T32234] rust_binder: Failed to allocate buffer. len:4294967784, is_oneway:false [ 721.020984][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.021941][T32234] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 721.030654][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.038444][T32234] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:430 [ 721.047702][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.071435][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.086873][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.094522][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.102118][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.110027][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.117756][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.125318][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.132749][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.140208][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.147657][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.155669][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.163705][T32244] /dev/rnullb0: Can't open blockdev [ 721.169955][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.184711][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.192158][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.201457][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.210459][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.224727][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.240779][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.248568][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.256225][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.263712][T32252] net_ratelimit: 86 callbacks suppressed [ 721.263732][T32252] veth0_to_team: mtu greater than device maximum [ 721.276278][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.278859][T32254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.283761][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.292764][T32254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.299695][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.314948][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.322529][T32252] netlink: 260 bytes leftover after parsing attributes in process `syz.9.10528'. [ 721.331720][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.334641][T32252] rust_binder: inc_ref_done called when no active inc_refs [ 721.339372][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.354391][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.361885][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.369365][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.376850][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.384325][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.391767][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.399246][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.406873][ T9] hid-generic 0003:0008:000F.0035: unknown main item tag 0x0 [ 721.414982][ T9] hid-generic 0003:0008:000F.0035: hidraw0: USB HID v0.00 Device [syz1] on syz1 [ 721.441064][T32258] fido_id[32258]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 721.472847][T32264] netlink: 'syz.1.10531': attribute type 16 has an invalid length. [ 721.480862][T32264] netlink: 'syz.1.10531': attribute type 25 has an invalid length. [ 721.488812][T32264] netlink: 64094 bytes leftover after parsing attributes in process `syz.1.10531'. [ 721.499624][T32263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=32263 comm=syz.1.10531 [ 721.784116][ T9] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 721.934176][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 721.940489][ T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 721.949473][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 721.959756][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 721.970289][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 721.979416][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.988732][ T9] usb 2-1: Product: syz [ 721.992948][ T9] usb 2-1: Manufacturer: syz [ 721.997625][ T9] usb 2-1: SerialNumber: syz [ 722.094342][T32274] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10534'. [ 722.124982][ T36] audit: type=1400 audit(2000000643.075:2015): avc: denied { read } for pid=32273 comm="syz.9.10534" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 722.149092][ T36] audit: type=1400 audit(2000000643.075:2016): avc: denied { open } for pid=32273 comm="syz.9.10534" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 722.405927][ T9] usb 2-1: 0:2 : does not exist [ 722.424082][T30897] usb 10-1: new high-speed USB device number 96 using dummy_hcd [ 722.575087][T30897] usb 10-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 722.585312][T30897] usb 10-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 722.595406][T30897] usb 10-1: config 1 interface 0 has no altsetting 0 [ 722.603485][T30897] usb 10-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 722.617916][T30897] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.627345][T30897] usb 10-1: Product: syz [ 722.632139][T30897] usb 10-1: Manufacturer: syz [ 722.637145][T30897] usb 10-1: SerialNumber: syz [ 722.647542][T32274] raw-gadget.4 gadget.9: fail, usb_ep_enable returned -22 [ 722.654789][T32274] raw-gadget.4 gadget.9: fail, usb_ep_enable returned -22 [ 722.664688][ T9] usb 2-1: USB disconnect, device number 108 [ 722.669640][T32282] batadv_slave_1: entered promiscuous mode [ 722.680733][T28254] udevd[28254]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 722.698496][T32281] batadv_slave_1: left promiscuous mode [ 722.729509][ T36] audit: type=1400 audit(2000000643.675:2017): avc: denied { map } for pid=32286 comm="syz.1.10538" path="socket:[116172]" dev="sockfs" ino=116172 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 722.753689][ T36] audit: type=1400 audit(2000000643.675:2018): avc: denied { read } for pid=32286 comm="syz.1.10538" path="socket:[116172]" dev="sockfs" ino=116172 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 722.891945][T32295] netlink: 'syz.1.10542': attribute type 4 has an invalid length. [ 723.085516][T30897] rtl8150 10-1:1.0: couldn't reset the device [ 723.091729][T30897] rtl8150 10-1:1.0: probe with driver rtl8150 failed with error -5 [ 723.101637][T30897] usb 10-1: USB disconnect, device number 96 [ 723.174129][ T45] usb 2-1: new low-speed USB device number 109 using dummy_hcd [ 723.304111][ T45] usb 2-1: device descriptor read/64, error -71 [ 723.544124][ T45] usb 2-1: device descriptor read/64, error -71 [ 723.784117][ T45] usb 2-1: new low-speed USB device number 110 using dummy_hcd [ 723.914112][ T45] usb 2-1: device descriptor read/64, error -71 [ 724.154104][ T45] usb 2-1: device descriptor read/64, error -71 [ 724.264193][ T45] usb usb2-port1: attempt power cycle [ 724.299557][ T36] audit: type=1400 audit(2000000645.245:2019): avc: denied { write } for pid=32303 comm="syz.4.10545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 724.614342][ T45] usb 2-1: new low-speed USB device number 111 using dummy_hcd [ 724.635166][ T45] usb 2-1: device descriptor read/8, error -71 [ 724.674106][ T7438] usb 10-1: new high-speed USB device number 97 using dummy_hcd [ 724.765123][ T45] usb 2-1: device descriptor read/8, error -71 [ 724.825194][ T7438] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 724.836177][ T7438] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.847217][ T7438] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 724.857119][ T7438] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 724.871002][ T7438] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 724.880486][ T7438] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 724.888731][ T7438] usb 10-1: Manufacturer: syz [ 724.894339][ T7438] usb 10-1: config 0 descriptor?? [ 725.004098][ T45] usb 2-1: new low-speed USB device number 112 using dummy_hcd [ 725.025192][ T45] usb 2-1: device descriptor read/8, error -71 [ 725.155116][ T45] usb 2-1: device descriptor read/8, error -71 [ 725.211331][T32313] rust_binder: Failed to allocate buffer. len:224, is_oneway:false [ 725.244141][ T330] usb 9-1: device descriptor read/64, error -32 [ 725.264235][ T45] usb usb2-port1: unable to enumerate USB device [ 725.294401][T32320] __vm_enough_memory: pid: 32320, comm: syz.4.10551, bytes: 18014402804453376 not enough memory for the allocation [ 725.307359][T32320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.316597][ T7438] appleir 0003:05AC:8243.0036: unknown main item tag 0x0 [ 725.323861][ T7438] appleir 0003:05AC:8243.0036: No inputs registered, leaving [ 725.331764][T32320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.340321][ T7438] appleir 0003:05AC:8243.0036: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.9-1/input0 [ 725.403162][T32320] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:452 [ 725.504184][ T330] usb 9-1: device descriptor read/64, error -32 [ 725.578053][ T7438] usb 10-1: USB disconnect, device number 97 [ 725.754108][ T330] usb 9-1: new full-speed USB device number 45 using dummy_hcd [ 725.884206][ T330] usb 9-1: device descriptor read/64, error -32 [ 726.124117][ T330] usb 9-1: device descriptor read/64, error -32 [ 726.235617][ T330] usb usb9-port1: attempt power cycle [ 726.246145][ T330] raw-gadget.0 gadget.8: failed to queue reset event [ 726.255484][T32340] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false [ 726.295133][T32346] rust_binder: Write failure EFAULT in pid:747 [ 726.304150][T32348] rust_binder: Write failure EFAULT in pid:747 [ 726.324209][ T330] raw-gadget.0 gadget.8: failed to queue resume event [ 726.337424][ T330] raw-gadget.0 gadget.8: failed to queue reset event [ 726.340404][T32350] can0: slcan on ttyS3. [ 726.385574][T32350] can0 (unregistered): slcan off ttyS3. [ 726.554138][ T330] raw-gadget.0 gadget.8: failed to queue resume event [ 726.614101][ T330] usb 9-1: new full-speed USB device number 46 using dummy_hcd [ 726.634268][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 726.641585][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 726.648934][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 726.656055][ T330] usb 9-1: device descriptor read/8, error -32 [ 726.771414][T32385] rust_binder: Failed copying remainder into alloc: EFAULT [ 726.771436][T32385] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 726.779465][T32385] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 726.787808][T32385] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:200 [ 726.797311][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 726.813742][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 726.821044][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 726.833026][ T330] usb 9-1: device descriptor read/8, error -32 [ 726.839273][ T9] usb 10-1: new high-speed USB device number 98 using dummy_hcd [ 726.867003][ T36] audit: type=1400 audit(2000000647.815:2020): avc: denied { map } for pid=32388 comm="syz.1.10567" path="/dev/ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 726.935749][T32391] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 726.942932][T32391] rust_binder: Write failure EINVAL in pid:206 [ 726.954105][ T330] raw-gadget.0 gadget.8: failed to queue suspend event [ 726.967398][ T330] raw-gadget.0 gadget.8: failed to queue reset event [ 726.995302][ T9] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 727.005665][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.018268][ T9] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 727.027450][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.035566][ T9] usb 10-1: Product: syz [ 727.039924][ T9] usb 10-1: Manufacturer: syz [ 727.044679][ T330] raw-gadget.0 gadget.8: failed to queue resume event [ 727.051564][ T9] usb 10-1: SerialNumber: syz [ 727.114084][ T330] usb 9-1: new full-speed USB device number 47 using dummy_hcd [ 727.134220][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 727.141509][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 727.148769][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 727.155895][ T330] usb 9-1: device descriptor read/8, error -32 [ 727.185136][ T401] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 727.284291][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 727.291940][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 727.299214][ C0] raw-gadget.0 gadget.8: ignoring, device is not running [ 727.306349][ T330] usb 9-1: device descriptor read/8, error -32 [ 727.334092][ T401] usb 2-1: Using ep0 maxpacket: 32 [ 727.340389][ T401] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 727.348809][ T401] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 727.357525][ T401] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 727.366540][ T401] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 727.376249][ T401] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 727.385958][ T401] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 727.399081][ T401] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 727.408162][ T401] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.416213][ T330] raw-gadget.0 gadget.8: failed to queue suspend event [ 727.423525][ T330] usb usb9-port1: unable to enumerate USB device [ 727.430232][ T401] usb 2-1: config 0 descriptor?? [ 727.437447][T32180] raw-gadget.0 gadget.8: failed to queue disconnect event [ 727.638719][ T401] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 113 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 727.651871][ T401] usb 2-1: USB disconnect, device number 113 [ 727.659090][ T401] usblp0: removed [ 727.794122][ T45] usb 9-1: new full-speed USB device number 48 using dummy_hcd [ 727.945213][ T45] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 727.958412][ T45] usb 9-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 727.967663][ T45] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.976604][ T45] usb 9-1: config 0 descriptor?? [ 727.981868][T32400] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 728.060175][ T9] cdc_ncm 10-1:1.0: bind() failure [ 728.067542][ T9] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 728.074540][ T9] cdc_ncm 10-1:1.1: bind() failure [ 728.080812][ T9] usb 10-1: USB disconnect, device number 98 [ 728.365160][ T36] audit: type=1400 audit(2000000649.315:2021): avc: denied { watch } for pid=32402 comm="syz.1.10573" path="pipe:[116342]" dev="pipefs" ino=116342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 728.392804][ T45] hid-generic 0003:04F3:0755.0037: unknown main item tag 0x0 [ 728.401587][ T45] hid-generic 0003:04F3:0755.0037: unknown main item tag 0x0 [ 728.409685][ T45] hid-generic 0003:04F3:0755.0037: unknown main item tag 0x0 [ 728.417660][ T45] hid-generic 0003:04F3:0755.0037: unknown main item tag 0x0 [ 728.419910][T32410] rust_binder: Failed copying remainder into alloc: EFAULT [ 728.425216][ T45] hid-generic 0003:04F3:0755.0037: unknown main item tag 0x0 [ 728.425890][T32410] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 728.434358][ T45] hid-generic 0003:04F3:0755.0037: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.8-1/input0 [ 728.454129][T32410] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 728.459774][T32410] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:212 [ 728.483364][T32413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=32413 comm=syz.1.10575 [ 728.496465][T32415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.515408][T32415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.528323][T32415] netlink: 136 bytes leftover after parsing attributes in process `syz.4.10576'. [ 728.539265][T32417] overlayfs: overlapping lowerdir path [ 728.607639][ T9] usb 9-1: USB disconnect, device number 48 [ 728.675799][T32425] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 728.784123][ T401] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 728.924144][ T330] usb 10-1: new high-speed USB device number 99 using dummy_hcd [ 728.944155][ T401] usb 2-1: Using ep0 maxpacket: 16 [ 728.950630][ T401] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 728.960992][ T401] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 728.971532][ T401] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 728.980732][ T401] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.988818][ T401] usb 2-1: Product: syz [ 728.993004][ T401] usb 2-1: Manufacturer: syz [ 728.997770][ T401] usb 2-1: SerialNumber: syz [ 729.054112][ T330] usb 10-1: device descriptor read/64, error -71 [ 729.204257][T32417] 9pnet_fd: Insufficient options for proto=fd [ 729.213304][ T401] usb 2-1: 0:2 : does not exist [ 729.226603][ T401] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 729.248512][ T401] usb 2-1: USB disconnect, device number 114 [ 729.276241][T28254] udevd[28254]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 729.304132][ T330] usb 10-1: device descriptor read/64, error -71 [ 729.425597][ T36] audit: type=1326 audit(2000000650.375:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32449 comm="syz.8.10587" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe74818ebe9 code=0x0 [ 729.516684][ T36] audit: type=1401 audit(2000000650.465:2023): op=setxattr invalid_context=73797374656D5F753A6F626A6563745F723A667361646D5F657865635F743A73300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002E2F66696C65300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 [ 729.523506][T32458] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 729.623478][ T330] usb 10-1: new high-speed USB device number 100 using dummy_hcd [ 729.631373][T32458] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 729.631424][T32458] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:181 [ 729.754103][ T330] usb 10-1: device descriptor read/64, error -71 [ 729.926121][T32468] rust_binder: Error while translating object. [ 729.926158][T32468] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 729.932421][T32468] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:221 [ 730.034144][ T330] usb 10-1: device descriptor read/64, error -71 [ 730.104961][T32474] rust_binder: Write failure EFAULT in pid:224 [ 730.118458][T32477] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 730.154200][ T330] usb usb10-port1: attempt power cycle [ 730.197593][ T36] audit: type=1400 audit(2000000651.145:2024): avc: denied { write } for pid=32480 comm="syz.4.10596" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=115695 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 730.224100][ T738] usb 9-1: new full-speed USB device number 49 using dummy_hcd [ 730.233087][ T36] audit: type=1400 audit(2000000651.175:2025): avc: denied { getopt } for pid=32480 comm="syz.4.10596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 730.266398][T32483] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10597'. [ 730.283550][ T36] audit: type=1400 audit(2000000651.225:2026): avc: denied { create } for pid=32482 comm="syz.4.10597" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1 [ 730.375233][ T738] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 730.385497][ T738] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 730.396501][ T738] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 730.406301][ T738] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 730.419173][ T738] usb 9-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 730.428428][ T738] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.437647][ T738] usb 9-1: config 0 descriptor?? [ 730.443985][ T738] usb 9-1: MIDIStreaming interface descriptor not found [ 730.494166][ T330] usb 10-1: new high-speed USB device number 101 using dummy_hcd [ 730.515383][ T330] usb 10-1: device descriptor read/8, error -71 [ 730.645169][ T330] usb 10-1: device descriptor read/8, error -71 [ 730.652483][ T401] usb 9-1: USB disconnect, device number 49 [ 730.829421][T32493] 9pnet_fd: Insufficient options for proto=fd [ 730.860156][T32495] syzkaller0: entered promiscuous mode [ 730.865680][T32495] syzkaller0: entered allmulticast mode [ 730.884127][ T330] usb 10-1: new high-speed USB device number 102 using dummy_hcd [ 730.905326][ T330] usb 10-1: device descriptor read/8, error -71 [ 731.035056][ T330] usb 10-1: device descriptor read/8, error -71 [ 731.049762][T32505] binder: Unknown parameter 'context' [ 731.154261][ T330] usb usb10-port1: unable to enumerate USB device [ 731.203724][T32531] rust_binder: Write failure EFAULT in pid:487 [ 731.222892][T32535] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 731.231273][T32536] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true [ 731.239880][T32535] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 731.248011][T32536] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 731.257711][T32535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:191 [ 731.267344][T32536] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:191 [ 731.317542][ T36] audit: type=1400 audit(2000000652.265:2027): avc: denied { setattr } for pid=32540 comm="syz.8.10618" name="tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 731.486859][T32556] binder: Unknown parameter '' [ 731.523442][ T36] audit: type=1400 audit(2000000652.465:2028): avc: denied { map } for pid=32561 comm="syz.8.10625" path="socket:[116584]" dev="sockfs" ino=116584 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 731.567906][T32560] syzkaller0: entered promiscuous mode [ 731.573609][T32560] syzkaller0: entered allmulticast mode [ 731.593201][T32564] binder: Unknown parameter 'deO' [ 731.635750][T32572] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false [ 731.635782][T32572] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 731.643832][T32572] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:222 [ 731.682246][T32577] can0: slcan on ttyS3. [ 731.750104][T32577] can0 (unregistered): slcan off ttyS3. [ 731.867958][T32595] syzkaller0: entered promiscuous mode [ 731.881666][T32595] syzkaller0: entered allmulticast mode [ 749.149860][T32623] tipc: Enabled bearer , priority 0 [ 749.187382][T32623] syzkaller0: entered promiscuous mode [ 749.193082][T32623] syzkaller0: entered allmulticast mode [ 749.199022][T32623] tipc: Resetting bearer [ 749.213854][T32628] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10640'. [ 749.224810][T32623] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10637'. [ 749.265431][T32634] tipc: Resetting bearer [ 749.282488][T32634] tipc: Disabling bearer [ 749.364898][T32638] /dev/rnullb0: Can't open blockdev [ 749.433349][T32645] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 749.474087][ T45] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 749.534131][ T9] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 749.624116][ T330] usb 10-1: new high-speed USB device number 103 using dummy_hcd [ 749.645285][ T45] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.657051][ T45] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 749.666829][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.675006][ T45] usb 2-1: Product: syz [ 749.679288][ T45] usb 2-1: Manufacturer: syz [ 749.683884][ T45] usb 2-1: SerialNumber: syz [ 749.689855][ T45] usb 2-1: config 0 descriptor?? [ 749.697659][ T45] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 749.704081][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 749.715957][ T9] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 749.723530][T32624] udevd[32624]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 749.725075][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 749.750908][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 749.761289][ T9] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 749.770471][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.778609][ T9] usb 9-1: Product: syz [ 749.782789][ T9] usb 9-1: Manufacturer: syz [ 749.787406][ T9] usb 9-1: SerialNumber: syz [ 749.794135][ T330] usb 10-1: Using ep0 maxpacket: 16 [ 749.800581][ T330] usb 10-1: config 1 has an invalid interface number: 105 but max is 0 [ 749.808943][ T330] usb 10-1: config 1 has no interface number 0 [ 749.815263][ T330] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 749.825511][ T330] usb 10-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 749.835680][ T330] usb 10-1: config 1 interface 105 has no altsetting 0 [ 749.843965][ T330] usb 10-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 749.853231][ T330] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.861405][ T330] usb 10-1: Product: syz [ 749.865799][ T330] usb 10-1: Manufacturer: syz [ 749.870530][ T330] usb 10-1: SerialNumber: syz [ 749.876333][T32643] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 749.883560][T32643] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 749.897452][T30897] usb 2-1: USB disconnect, device number 115 [ 750.194311][ T9] usb 9-1: 0:2 : does not exist [ 750.291909][T32643] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 750.299355][T32643] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 750.353164][T32659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.362024][T32659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.419333][T32661] rust_binder: Write failure EFAULT in pid:268 [ 750.420195][T32661] tipc: Started in network mode [ 750.431378][T32661] tipc: Node identity ac14142e, cluster identity 4711 [ 750.438335][T32661] tipc: Enabling of bearer rejected, failed to enable media [ 750.447272][T32661] rust_binder: Error while translating object. [ 750.447310][T32661] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM } [ 750.453517][T32661] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:268 [ 750.509498][ T330] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 750.529901][ T330] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 750.546481][ T330] aqc111 10-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 750.560217][ T330] aqc111 10-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.9-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 5e:6e:27:ee:ff:5a [ 750.604243][ T330] usb 10-1: USB disconnect, device number 103 [ 750.610906][ T330] aqc111 10-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.9-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 750.645283][ T330] aqc111 10-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 750.654875][ T330] aqc111 10-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 750.665004][ T330] aqc111 10-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 750.751701][T32672] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 750.751733][T32672] rust_binder: Read failure Err(EFAULT) in pid:782 [ 750.885623][T32674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.900926][T32674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.911005][T32674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.919679][T32674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.113855][T32676] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1 [ 751.211043][ T9] usb 9-1: USB disconnect, device number 50 [ 751.537295][T32698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.545869][T32698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.586128][ T8500] erspan0: left allmulticast mode [ 751.591203][ T8500] erspan0: left promiscuous mode [ 751.597046][ T8500] bridge0: port 3(erspan0) entered disabled state [ 751.603925][ T8500] bridge_slave_1: left allmulticast mode [ 751.609657][ T8500] bridge_slave_1: left promiscuous mode [ 751.615316][ T8500] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.622731][ T8500] bridge_slave_0: left allmulticast mode [ 751.628461][ T8500] bridge_slave_0: left promiscuous mode [ 751.634138][ T8500] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.786704][ T8500] veth1_macvtap: left promiscuous mode [ 751.792265][ T8500] veth0_vlan: left promiscuous mode [ 751.854188][T32452] ------------[ cut here ]------------ [ 751.859714][T32452] WARNING: CPU: 1 PID: 32452 at fs/inode.c:340 drop_nlink+0xce/0x110 [ 751.867952][T32452] Modules linked in: [ 751.871868][T32452] CPU: 1 UID: 0 PID: 32452 Comm: syz.8.10587 Not tainted syzkaller #0 3aa8e93a75ec4fb080c21ea51d8727149e6cfac5 [ 751.883615][T32452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 751.893825][T32452] RIP: 0010:drop_nlink+0xce/0x110 [ 751.898945][T32452] Code: 04 00 00 be 08 00 00 00 e8 5f 46 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d8 c5 a0 03 cc e8 82 0e 98 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c [ 751.918719][T32452] RSP: 0018:ffffc9000405f860 EFLAGS: 00010293 [ 751.924942][T32452] RAX: ffffffff81edd58e RBX: ffff888142e5c070 RCX: ffff8881178bb900 [ 751.932937][T32452] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 751.940961][T32452] RBP: ffffc9000405f888 R08: 0000000000000003 R09: 0000000000000004 [ 751.948985][T32452] R10: dffffc0000000000 R11: fffff5200080befc R12: dffffc0000000000 [ 751.957071][T32452] R13: 1ffff110285cb817 R14: ffff888142e5c0b8 R15: 0000000000000000 [ 751.965194][T32452] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 751.974241][T32452] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 751.980852][T32452] CR2: 00007fe748ef8710 CR3: 0000000126038000 CR4: 00000000003526b0 [ 751.988902][T32452] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 751.996940][T32452] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 752.004994][T32452] Call Trace: [ 752.008313][T32452] [ 752.011290][T32452] shmem_rmdir+0x5f/0x90 [ 752.015747][T32452] vfs_rmdir+0x3dd/0x560 [ 752.020122][T32452] incfs_kill_sb+0x109/0x230 [ 752.024872][T32452] deactivate_locked_super+0xd8/0x2a0 [ 752.030366][T32452] deactivate_super+0xb8/0xe0 [ 752.035127][T32452] cleanup_mnt+0x3f1/0x480 [ 752.039650][T32452] __cleanup_mnt+0x1d/0x40 [ 752.044119][T32452] task_work_run+0x1e3/0x250 [ 752.048843][T32452] ? __cfi_task_work_run+0x10/0x10 [ 752.053981][T32452] ? free_nsproxy+0x223/0x290 [ 752.058828][T32452] do_exit+0x9bc/0x2630 [ 752.063025][T32452] ? __sched_text_start+0x10/0x10 [ 752.068232][T32452] ? __cfi_do_exit+0x10/0x10 [ 752.072880][T32452] ? __kasan_check_write+0x18/0x20 [ 752.078180][T32452] ? _raw_spin_lock_irq+0x8d/0x120 [ 752.083336][T32452] ? __kasan_check_read+0x15/0x20 [ 752.088457][T32452] ? cgroup_update_frozen+0x160/0x990 [ 752.093933][T32452] do_group_exit+0x22a/0x300 [ 752.098576][T32452] ? cgroup_leave_frozen+0x16c/0x2b0 [ 752.103974][T32452] get_signal+0x139d/0x14f0 [ 752.108533][T32452] arch_do_signal_or_restart+0x96/0x720 [ 752.114187][T32452] ? common_nsleep+0x93/0xb0 [ 752.118871][T32452] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 752.125084][T32452] ? __se_sys_clock_nanosleep+0x300/0x390 [ 752.130853][T32452] ? __kasan_check_read+0x15/0x20 [ 752.135946][T32452] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 752.142043][T32452] syscall_exit_to_user_mode+0x58/0xb0 [ 752.147613][T32452] do_syscall_64+0x64/0xf0 [ 752.152146][T32452] ? clear_bhb_loop+0x50/0xa0 [ 752.156946][T32452] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 752.162895][T32452] RIP: 0033:0x7fe7481c14a5 [ 752.167360][T32452] Code: Unable to access opcode bytes at 0x7fe7481c147b. [ 752.174501][T32452] RSP: 002b:00007fe748fc0f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 752.182932][T32452] RAX: fffffffffffffdfc RBX: 00007fe7483c6090 RCX: 00007fe7481c14a5 [ 752.190947][T32452] RDX: 00007fe748fc0fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 752.198973][T32452] RBP: 00007fe748211e19 R08: 0000000000000000 R09: 0000000000000000 [ 752.206991][T32452] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 752.215024][T32452] R13: 00007fe7483c6128 R14: 00007fe7483c6090 R15: 00007fff8492a8b8 [ 752.223009][T32452] [ 752.226398][T32452] ---[ end trace 0000000000000000 ]--- [ 752.232020][T32452] ================================================================== [ 752.240112][T32452] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70 [ 752.246529][T32452] Write of size 4 at addr 0000000000000168 by task syz.8.10587/32452 [ 752.254596][T32452] [ 752.256928][T32452] CPU: 0 UID: 0 PID: 32452 Comm: syz.8.10587 Tainted: G W syzkaller #0 3aa8e93a75ec4fb080c21ea51d8727149e6cfac5 [ 752.256954][T32452] Tainted: [W]=WARN [ 752.256960][T32452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 752.256970][T32452] Call Trace: [ 752.256977][T32452] [ 752.256984][T32452] __dump_stack+0x21/0x30 [ 752.257043][T32452] dump_stack_lvl+0x10c/0x190 [ 752.257064][T32452] ? __cfi_dump_stack_lvl+0x10/0x10 [ 752.257087][T32452] print_report+0x3d/0x70 [ 752.257104][T32452] kasan_report+0x163/0x1a0 [ 752.257122][T32452] ? ihold+0x24/0x70 [ 752.257138][T32452] ? _raw_spin_unlock+0x45/0x60 [ 752.257161][T32452] ? ihold+0x24/0x70 [ 752.257177][T32452] kasan_check_range+0x299/0x2a0 [ 752.257195][T32452] __kasan_check_write+0x18/0x20 [ 752.257217][T32452] ihold+0x24/0x70 [ 752.257232][T32452] vfs_rmdir+0x26a/0x560 [ 752.257253][T32452] incfs_kill_sb+0x109/0x230 [ 752.257276][T32452] deactivate_locked_super+0xd8/0x2a0 [ 752.257297][T32452] deactivate_super+0xb8/0xe0 [ 752.257317][T32452] cleanup_mnt+0x3f1/0x480 [ 752.257334][T32452] __cleanup_mnt+0x1d/0x40 [ 752.257351][T32452] task_work_run+0x1e3/0x250 [ 752.257369][T32452] ? __cfi_task_work_run+0x10/0x10 [ 752.257388][T32452] ? free_nsproxy+0x223/0x290 [ 752.257410][T32452] do_exit+0x9bc/0x2630 [ 752.257428][T32452] ? __sched_text_start+0x10/0x10 [ 752.257444][T32452] ? __cfi_do_exit+0x10/0x10 [ 752.257463][T32452] ? __kasan_check_write+0x18/0x20 [ 752.257485][T32452] ? _raw_spin_lock_irq+0x8d/0x120 [ 752.257508][T32452] ? __kasan_check_read+0x15/0x20 [ 752.257530][T32452] ? cgroup_update_frozen+0x160/0x990 [ 752.257546][T32452] do_group_exit+0x22a/0x300 [ 752.257565][T32452] ? cgroup_leave_frozen+0x16c/0x2b0 [ 752.257593][T32452] get_signal+0x139d/0x14f0 [ 752.257615][T32452] arch_do_signal_or_restart+0x96/0x720 [ 752.257639][T32452] ? common_nsleep+0x93/0xb0 [ 752.257653][T32452] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 752.257676][T32452] ? __se_sys_clock_nanosleep+0x300/0x390 [ 752.257702][T32452] ? __kasan_check_read+0x15/0x20 [ 752.257723][T32452] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 752.257744][T32452] syscall_exit_to_user_mode+0x58/0xb0 [ 752.257764][T32452] do_syscall_64+0x64/0xf0 [ 752.257787][T32452] ? clear_bhb_loop+0x50/0xa0 [ 752.257807][T32452] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 752.257826][T32452] RIP: 0033:0x7fe7481c14a5 [ 752.257839][T32452] Code: Unable to access opcode bytes at 0x7fe7481c147b. [ 752.257847][T32452] RSP: 002b:00007fe748fc0f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 752.257864][T32452] RAX: fffffffffffffdfc RBX: 00007fe7483c6090 RCX: 00007fe7481c14a5 [ 752.257876][T32452] RDX: 00007fe748fc0fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 752.257886][T32452] RBP: 00007fe748211e19 R08: 0000000000000000 R09: 0000000000000000 [ 752.257896][T32452] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 752.257906][T32452] R13: 00007fe7483c6128 R14: 00007fe7483c6090 R15: 00007fff8492a8b8 [ 752.257920][T32452] [ 752.257926][T32452] ================================================================== [ 752.571768][T32452] Disabling lock debugging due to kernel taint [ 752.578034][T32452] BUG: kernel NULL pointer dereference, address: 0000000000000168 [ 752.585970][T32452] #PF: supervisor write access in kernel mode [ 752.592064][T32452] #PF: error_code(0x0002) - not-present page [ 752.598047][T32452] PGD 800000012664c067 P4D 800000012664c067 PUD 0 [ 752.604564][T32452] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI [ 752.610650][T32452] CPU: 0 UID: 0 PID: 32452 Comm: syz.8.10587 Tainted: G B W syzkaller #0 3aa8e93a75ec4fb080c21ea51d8727149e6cfac5 [ 752.623846][T32452] Tainted: [B]=BAD_PAGE, [W]=WARN [ 752.628858][T32452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 752.638919][T32452] RIP: 0010:ihold+0x2a/0x70 [ 752.643454][T32452] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 6d 05 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 1c 3d ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 7d [ 752.663089][T32452] RSP: 0018:ffffc9000405f8a0 EFLAGS: 00010246 [ 752.669199][T32452] RAX: ffff8881178bb900 RBX: 0000000000000000 RCX: ffff8881178bb900 [ 752.677208][T32452] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 752.685219][T32452] RBP: ffffc9000405f8b0 R08: ffffffff8896d947 R09: 1ffffffff112db28 [ 752.693332][T32452] R10: dffffc0000000000 R11: fffffbfff112db29 R12: ffff888142e5c07c [ 752.701327][T32452] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 752.709316][T32452] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 752.718247][T32452] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 752.724862][T32452] CR2: 0000000000000168 CR3: 0000000138398000 CR4: 00000000003526b0 [ 752.732846][T32452] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 752.740815][T32452] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 752.748787][T32452] Call Trace: [ 752.752065][T32452] [ 752.754993][T32452] vfs_rmdir+0x26a/0x560 [ 752.759243][T32452] incfs_kill_sb+0x109/0x230 [ 752.763849][T32452] deactivate_locked_super+0xd8/0x2a0 [ 752.769231][T32452] deactivate_super+0xb8/0xe0 [ 752.773917][T32452] cleanup_mnt+0x3f1/0x480 [ 752.778335][T32452] __cleanup_mnt+0x1d/0x40 [ 752.782752][T32452] task_work_run+0x1e3/0x250 [ 752.787343][T32452] ? __cfi_task_work_run+0x10/0x10 [ 752.792453][T32452] ? free_nsproxy+0x223/0x290 [ 752.797136][T32452] do_exit+0x9bc/0x2630 [ 752.801302][T32452] ? __sched_text_start+0x10/0x10 [ 752.806332][T32452] ? __cfi_do_exit+0x10/0x10 [ 752.810952][T32452] ? __kasan_check_write+0x18/0x20 [ 752.816067][T32452] ? _raw_spin_lock_irq+0x8d/0x120 [ 752.821184][T32452] ? __kasan_check_read+0x15/0x20 [ 752.826249][T32452] ? cgroup_update_frozen+0x160/0x990 [ 752.831622][T32452] do_group_exit+0x22a/0x300 [ 752.836217][T32452] ? cgroup_leave_frozen+0x16c/0x2b0 [ 752.841533][T32452] get_signal+0x139d/0x14f0 [ 752.846045][T32452] arch_do_signal_or_restart+0x96/0x720 [ 752.851595][T32452] ? common_nsleep+0x93/0xb0 [ 752.856199][T32452] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 752.862363][T32452] ? __se_sys_clock_nanosleep+0x300/0x390 [ 752.868135][T32452] ? __kasan_check_read+0x15/0x20 [ 752.873167][T32452] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 752.879249][T32452] syscall_exit_to_user_mode+0x58/0xb0 [ 752.884766][T32452] do_syscall_64+0x64/0xf0 [ 752.889219][T32452] ? clear_bhb_loop+0x50/0xa0 [ 752.893939][T32452] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 752.899854][T32452] RIP: 0033:0x7fe7481c14a5 [ 752.904272][T32452] Code: Unable to access opcode bytes at 0x7fe7481c147b. [ 752.911306][T32452] RSP: 002b:00007fe748fc0f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 752.919722][T32452] RAX: fffffffffffffdfc RBX: 00007fe7483c6090 RCX: 00007fe7481c14a5 [ 752.927699][T32452] RDX: 00007fe748fc0fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 752.935780][T32452] RBP: 00007fe748211e19 R08: 0000000000000000 R09: 0000000000000000 [ 752.943750][T32452] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 752.951820][T32452] R13: 00007fe7483c6128 R14: 00007fe7483c6090 R15: 00007fff8492a8b8 [ 752.959812][T32452] [ 752.962859][T32452] Modules linked in: [ 752.966754][T32452] CR2: 0000000000000168 [ 752.970900][T32452] ---[ end trace 0000000000000000 ]--- [ 752.976357][T32452] RIP: 0010:ihold+0x2a/0x70 [ 752.980866][T32452] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 6d 05 98 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 1c 3d ee ff 41 be 01 00 00 00 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 7d [ 753.000662][T32452] RSP: 0018:ffffc9000405f8a0 EFLAGS: 00010246 [ 753.006731][T32452] RAX: ffff8881178bb900 RBX: 0000000000000000 RCX: ffff8881178bb900 [ 753.014727][T32452] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 753.022720][T32452] RBP: ffffc9000405f8b0 R08: ffffffff8896d947 R09: 1ffffffff112db28 [ 753.030717][T32452] R10: dffffc0000000000 R11: fffffbfff112db29 R12: ffff888142e5c07c [ 753.038690][T32452] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 753.046663][T32452] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 753.055597][T32452] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 753.062204][T32452] CR2: 0000000000000168 CR3: 0000000138398000 CR4: 00000000003526b0 [ 753.070197][T32452] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 753.078174][T32452] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 753.086179][T32452] Kernel panic - not syncing: Fatal exception [ 753.092590][T32452] Kernel Offset: disabled [ 753.096916][T32452] Rebooting in 86400 seconds..