last executing test programs: 2m30.66218545s ago: executing program 3 (id=358): openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x2a6082, 0x0) (async) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x2a6082, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x161000, 0x0) (async) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x161000, 0x0) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000040)={{0x2, 0x4e24, @loopback}, {0x1, @remote}, 0x14, {0x2, 0x4e23, @rand_addr=0x64010100}}) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') getuid() ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\a\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="04"], 0x14}}, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r2) (async) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000003c0), r2) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010000000000000000001900"], 0x14}}, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) 2m30.591441971s ago: executing program 3 (id=359): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x7ff, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2800048, &(0x7f00000011c0)={[{@uid={'uid', 0x3d, r0}}, {@gid={'gid', 0x3d, r1}}], [{@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@obj_type={'obj_type', 0x3d, '#'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000001640)={0x0, &(0x7f0000001240)=[@code={0x1, 0x8b, {"8f0978c3950f000000360f0766405bc7442400ec000000c744240200800000ff2c24660f383a1d0e000000b9800000c00f3235004000000f300f20c035010000000f22c066baf80cb814db4c87ef66bafc0cb800000100efb9800000c00f3235008000000f3066baf80cb8b412ca87ef66bafc0cb800400000ef"}}, @code={0x1, 0x4c, {"c4e3ed7842bef9c4e27d2a96e1000000460f019b00800000c462e50539460f6165080f01b9000000000f01c2c4423d167c5f8f66ba4300ec0f78ff"}}, @cpuid={0x2, 0x18, {0xffffffda, 0x7}}, @code={0x1, 0x6a, {"0f017d04440f21c06564642e660fc776f70f9be10f20e035010000000f22e0b9800000c00f3235001000000f30c4a3791d08b9c4a2d191b48544c1000048b80a000000000000000f23d80f21f835c00000d00f23f8460f214c"}}, @cpuid={0x2, 0x18, {0x0, 0x1a4f}}, @uexit={0x0, 0x18, 0x4}, @code={0x1, 0x74, {"c744240016000000c744240253540000ff2c24c422edb63475f58c2918b9800000c00f3235010000000f30400f1dcc0f06460f0fba076a78601d66450f381dfc0f30c4a24947e3c74424000d430000c7442402ffffffffc7442406000000000f011c24"}}, @cpuid={0x2, 0x18, {0x4, 0x6}}, @cpuid={0x2, 0x18, {0x6, 0x9}}, @code={0x1, 0x68, {"c1ca46c4013973d908b9800000c00f3235004000000f30420f205e470f38ca1866430fd69f39ffffffb97a010000b8f9ffffffba000000000f30b973080000b88fe00000ba000000000f3066ba2100ecb9c00200000f32"}}, @cpuid={0x2, 0x18, {0xfffffffa, 0xffffa9e4}}, @cpuid={0x2, 0x18, {0x0, 0x61}}, @uexit={0x0, 0x18, 0x6}, @uexit={0x0, 0x18, 0x9}, @cpuid={0x2, 0x18, {0xa, 0x40}}, @cpuid={0x2, 0x18, {0x3, 0x3}}, @cpuid={0x2, 0x18, {0x7ff, 0xe5c0}}, @code={0x1, 0x69, {"430f005d00b9800000c00f3235000100000f30f3440fc736c4a2c5062de0000000c7442400a0900000c7442402e551a9f1c7442406000000000f011c2426450f01c5b9400b00000f3266410f2386430f01c5c48107c2fc1a"}}, @code={0x1, 0x4e, {"66b8b7000f00d0c441d77c05b601480826f00fbb0c432e64660f38f642bd66ba210066ed4f0fc7590066b805018ee8660f38826fae41dced66bad004ec"}}], 0x3f4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0), &(0x7f0000001700), 0x2, 0x3) (async) setxattr$trusted_overlay_origin(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0), &(0x7f0000001700), 0x2, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001740)={0x1fe, 0x5, 0x4000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) creat(&(0x7f0000001780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x11) (async) r3 = creat(&(0x7f0000001780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x11) sendmsg$NFT_MSG_GETOBJ_RESET(r3, &(0x7f0000002900)={&(0x7f0000002780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000028c0)={&(0x7f00000027c0)={0xe0, 0x15, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0xb2, 0x8, "0151a45efa14b577e634d0b91665ce6c54bc7e9b96ef87007ee1e1ed98c35f9e88ef363f69906677905953dcf128d8cc9a51ae2fdddfe5341d9a22aa8767c0dd42c11b7299b89efb9cdabd36ef22e82b086bc8d78bd98e7568556bb3933a5434a1b56cf9bdb4c4edae02124322ded6e4c2c28e3087f0edc581e502ffc3863a08b64fc2a8e3bc503852c7182ded85fc6130da556da7233ba7c6d1ffa6ebc02b92214b213d9c77e050b0c2391fd507"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80801}, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000002940)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000029c0)=[@text16={0x10, &(0x7f0000002980)="0f01cf64660f381436fa07362e2e3e0fc7af626dba4300b026ee65f4c1f6b366f30fc7370f2024bad004edb86e008ee8", 0x30}], 0x1, 0x43, &(0x7f0000002a00)=[@cr0={0x0, 0xa}], 0x1) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000002a40), 0x90800, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0xa31a593e738a8714}, 0xc, &(0x7f0000002b40)={&(0x7f0000002ac0)={0x5c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8080}, 0x10) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x4) (async) r7 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002f80)={0xfc, 0x0, &(0x7f0000002e40)=[@register_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002bc0)={@fda={0x66646185, 0x3, 0x1, 0x3e}, @flat=@handle={0x73682a85, 0x110f, 0x3}, @fda={0x66646185, 0x4, 0x2, 0x3f}}, &(0x7f0000002c40)={0x0, 0x20, 0x38}}}, @decrefs={0x40046307, 0x3}, @free_buffer={0x40086303, r7}, @enter_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000002cc0)={@fda={0x66646185, 0x2, 0x2, 0x7}, @flat=@handle={0x73682a85, 0x80, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000002c80)=""/37, 0x25, 0x0, 0x33}}, &(0x7f0000002d40)={0x0, 0x20, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x50, 0x18, &(0x7f0000002d80)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x7, 0x2, 0x3d}}, &(0x7f0000002e00)={0x0, 0x18, 0x30}}}, @increfs_done={0x40106308, 0x2}], 0x2e, 0x0, &(0x7f0000002f40)="462434a0e6ab3794e852fe7e9389ce74eb1badbd44cc830f39e5b565a7d96e790619cb187dac826fca5aadaee574"}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002f80)={0xfc, 0x0, &(0x7f0000002e40)=[@register_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000002bc0)={@fda={0x66646185, 0x3, 0x1, 0x3e}, @flat=@handle={0x73682a85, 0x110f, 0x3}, @fda={0x66646185, 0x4, 0x2, 0x3f}}, &(0x7f0000002c40)={0x0, 0x20, 0x38}}}, @decrefs={0x40046307, 0x3}, @free_buffer={0x40086303, r7}, @enter_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000002cc0)={@fda={0x66646185, 0x2, 0x2, 0x7}, @flat=@handle={0x73682a85, 0x80, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000002c80)=""/37, 0x25, 0x0, 0x33}}, &(0x7f0000002d40)={0x0, 0x20, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x50, 0x18, &(0x7f0000002d80)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r3}, @fda={0x66646185, 0x7, 0x2, 0x3d}}, &(0x7f0000002e00)={0x0, 0x18, 0x30}}}, @increfs_done={0x40106308, 0x2}], 0x2e, 0x0, &(0x7f0000002f40)="462434a0e6ab3794e852fe7e9389ce74eb1badbd44cc830f39e5b565a7d96e790619cb187dac826fca5aadaee574"}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000002fc0)) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000003100)={&(0x7f0000003080)=""/65, 0x1200000, 0x0, 0xda, 0x3}, 0x20) r8 = dup3(0xffffffffffffffff, r3, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000003140)={0x0, 0x7, 0x0, [0x0, 0x3, 0x1, 0x9d, 0x9], [0x5e, 0x2, 0x5, 0x6, 0xfffffffffffffff9, 0x9, 0x9, 0x4, 0x5, 0x4c5, 0xffff, 0x1, 0x9, 0xb, 0x7991, 0xce5, 0x5, 0x6, 0xe, 0x1406b049, 0x80000001, 0x67, 0x1, 0x2, 0x67, 0x56108c3f, 0xf37, 0x100000000, 0x4, 0x10, 0x3, 0x7, 0x81, 0x8, 0x6, 0x9, 0x1ff, 0x400, 0x0, 0x7, 0x6a57, 0x7f, 0x8000000000000001, 0xc933, 0x6, 0x8, 0x1, 0x8, 0xd3, 0x40, 0x9, 0x8, 0x0, 0x9e0b, 0x8000000000000000, 0xfffffffffffffffc, 0x401, 0x9, 0xfffffffffffffffa, 0x34e, 0x6, 0x3, 0x5, 0x3, 0xd, 0x83, 0xfffffffffffffff8, 0x0, 0x8000000000000000, 0xd349, 0x5, 0x6, 0x3, 0x2, 0xfe12, 0x80000001, 0x3, 0xc, 0x4, 0xfffffffffffff6cd, 0x0, 0x4, 0x4, 0x4, 0x100000001, 0x200, 0x4, 0x1, 0x2018, 0xd3e, 0x3, 0x8, 0x5, 0x200, 0x1, 0x101, 0x4, 0x7, 0x6, 0x8885, 0x4, 0x0, 0x4, 0x5, 0x7fff, 0x2, 0x8, 0x40, 0x3ff, 0x5, 0x5, 0x9, 0x401, 0x3, 0x1, 0xcda, 0x100000000, 0x0, 0xfffffffffffff001, 0x5, 0xe73]}) (async) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000003140)={0x0, 0x7, 0x0, [0x0, 0x3, 0x1, 0x9d, 0x9], [0x5e, 0x2, 0x5, 0x6, 0xfffffffffffffff9, 0x9, 0x9, 0x4, 0x5, 0x4c5, 0xffff, 0x1, 0x9, 0xb, 0x7991, 0xce5, 0x5, 0x6, 0xe, 0x1406b049, 0x80000001, 0x67, 0x1, 0x2, 0x67, 0x56108c3f, 0xf37, 0x100000000, 0x4, 0x10, 0x3, 0x7, 0x81, 0x8, 0x6, 0x9, 0x1ff, 0x400, 0x0, 0x7, 0x6a57, 0x7f, 0x8000000000000001, 0xc933, 0x6, 0x8, 0x1, 0x8, 0xd3, 0x40, 0x9, 0x8, 0x0, 0x9e0b, 0x8000000000000000, 0xfffffffffffffffc, 0x401, 0x9, 0xfffffffffffffffa, 0x34e, 0x6, 0x3, 0x5, 0x3, 0xd, 0x83, 0xfffffffffffffff8, 0x0, 0x8000000000000000, 0xd349, 0x5, 0x6, 0x3, 0x2, 0xfe12, 0x80000001, 0x3, 0xc, 0x4, 0xfffffffffffff6cd, 0x0, 0x4, 0x4, 0x4, 0x100000001, 0x200, 0x4, 0x1, 0x2018, 0xd3e, 0x3, 0x8, 0x5, 0x200, 0x1, 0x101, 0x4, 0x7, 0x6, 0x8885, 0x4, 0x0, 0x4, 0x5, 0x7fff, 0x2, 0x8, 0x40, 0x3ff, 0x5, 0x5, 0x9, 0x401, 0x3, 0x1, 0xcda, 0x100000000, 0x0, 0xfffffffffffff001, 0x5, 0xe73]}) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x1) openat$cgroup_pressure(r5, &(0x7f0000003580)='io.pressure\x00', 0x2, 0x0) (async) openat$cgroup_pressure(r5, &(0x7f0000003580)='io.pressure\x00', 0x2, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f00000035c0)={0x1, 0x0, @pic={0xff, 0xd, 0x5, 0x8, 0x11, 0x7, 0x7f, 0x40, 0xa, 0x7f, 0x7, 0xfc, 0x6, 0x8, 0xc, 0x1}}) (async) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f00000035c0)={0x1, 0x0, @pic={0xff, 0xd, 0x5, 0x8, 0x11, 0x7, 0x7f, 0x40, 0xa, 0x7f, 0x7, 0xfc, 0x6, 0x8, 0xc, 0x1}}) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000003840)) (async) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000003840)=0x0) syz_clone3(&(0x7f0000003e00)={0x80000000, &(0x7f0000003bc0), &(0x7f0000003c00), &(0x7f0000003c40)=0x0, {0x13}, &(0x7f0000003c80)=""/81, 0x51, &(0x7f0000003d00)=""/169, &(0x7f0000003dc0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x4, {r5}}, 0x58) sendmsg$netlink(r5, &(0x7f0000004480)={&(0x7f0000003800)=@proc={0x10, 0x0, 0x25dfdbff, 0x400000}, 0xc, &(0x7f0000004400)=[{&(0x7f0000003880)={0x340, 0x37, 0x4, 0x70bd29, 0x25dfdbff, "", [@typed={0xc, 0xec, 0x0, 0x0, @u64}, @generic="7fd80eeb9d3f41cd5ee83f4a3b846ee1e5d35836c1606cdac537aed9425e4d0381b5b5ae672746128ca152d9b0987b1d2850679eb06423dd7e0a06d475b25b9e5a8fd7b5c110ea9f4085a499d39ade3d689fd8c82aee217c892ffc66cf72f7d6", @nested={0xcb, 0x14f, 0x0, 0x1, [@generic="5e894aebe3738d9b0e163f6b9ccb66dc41851198f9d2232f27fa1b3ff58e465be90fe449875d24ef53684f46741e6d0e99524b101d11327cd4b9e7081d08e0f84802a99c89fe497883d151df56e925554c5610a2d25d2b1985e3db9968c471295889b926c4d0452686fb6ad274dfe113d3edbd16caee4369cb0ecd21749d284840232c4c9f2b5a33ad984b29e3495d04ae6ec90a7cbf7a45fffdccc4eed579392b5f534594e163df193828c85c26935c6bb021698b5750a5722022", @generic="502de05a", @typed={0x8, 0xc7, 0x0, 0x0, @ipv4=@remote}]}, @generic="322f85c721b0a973071810fe77f378713d0e450473e5b0e35c282b1ed41281ce8a4779110e1e7007000b935ccba091b9bb8ae4a203f4c5287fb63d8fd73fd773df9bef36ad1e5bbfa0128806f7b999ab6cbb44062c96e7a426a03d91e933dfed98cb6f3eeebb22152f44e53f1ee7cde9dfb5843fa1f2a4d278b995c52d822a18a13724e4ee13018a992df631dbe7b3fc46e3ae64fbac8420afc7fc0e4fe6ac3ec2cda25fd33ff5a7059b02f94dc877c821d0400bc6ba9abd81ef4453cff8ef47b02b940d0df6205faa2e7886e90d023cae1077ab7d163f6ba738673bb24901fd1f01426cd7fffc6ba3c0e9b8bdcfc57f9742b9", @generic="ea746d2ac6ed895be5df6c0a200b035e6ff55684b22ab802ccd844ac0580c792b41f6939ba03b4a119d9f1161d31a1b2277d414467755a588063b35d9fb0d36e8a4acd37ba6c9e2aee953a704093092a3bd7b421081740", @typed={0x8, 0xbf, 0x0, 0x0, @pid=r9}, @generic="3868dcdd9e9e5f414b0e91dea41a9e08b34fb6da0541e975f44f776d0e8c2fd332fb2e7e9d55ff0938b6ed80adcf6912d55e17eb7aaef522e51e3330349be7bcf6c7228569c672aa9c4c98d894d9534d14c4adc2b8c662e78d5579947945faa418df5ed57748d084c5dcfab0d599da29fc8e58afa82f1862c0c56b6fc6cd6527c86841d1704a84d3bca57be5906ddbac84c502785e1296720610b5a7840bc73dcea44f"]}, 0x340}, {&(0x7f0000003e80)={0x54, 0x3d, 0x20, 0x70bd26, 0x25dfdbff, "", [@typed={0xc, 0x104, 0x0, 0x0, @u64=0x800}, @typed={0x8, 0x6e, 0x0, 0x0, @pid=r10}, @nested={0x24, 0x70, 0x0, 0x1, [@typed={0x1e, 0x89, 0x0, 0x0, @binary="ec870b19fd20c8ff0b25abb2ea37b4aeabb2c9841a82b74a5d93"}]}, @nested={0xc, 0xcc, 0x0, 0x1, [@nested={0x4, 0x13d}, @nested={0x4, 0x11c}]}]}, 0x54}, {&(0x7f0000003f00)={0x4e0, 0x28, 0x2, 0x70bd26, 0x25dfdbff, "", [@generic="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", @generic="b11c5aaec1ab200118865c35e43fbb9379425353b8b3aa993bf702067c166d1f715796830bf7c7ca642f173d1de3909f2cd36cd6c5290e08d77fa3174a33d9887b6835faf7803ae11a7c07351d1ba49c31730dd1ed46353054c6ebbf3a", @generic="2d9d668b2e1f530e95a5d1f4f1b5671a1888615f9be76c348a9936c2eaaba134740409fe155011247973cf7bfe66e21064331cedb825db179513a13917aee620db3fa775d047dc18dbe27a735b8d76c759cfebe900eead9cca7db08879acd3e2c8", @generic="559a676c6d3308cffde361a5fded9c965dbaf8843b2b419e34839d76c9389aca05ee31aec92e1d74af6909e61aa5dacf0b8ae4f7a5a814dc9d2b43059fa5513ffc19765542765afc80", @nested={0x1c, 0x99, 0x0, 0x1, [@nested={0x4, 0x11b}, @typed={0x8, 0x58, 0x0, 0x0, @u32=0x6}, @nested={0x4, 0x51}, @typed={0x8, 0x84, 0x0, 0x0, @ipv4=@remote}]}, @typed={0x4, 0x10a}, @nested={0x2a9, 0x12c, 0x0, 0x1, [@generic="7d2532a96db81d86accffa49db530c7102f018211b6c21c785222cd24da153ce26c3208d969c8fc378c4367e0c7c953c89da6bf3134a56f753bfd26126624fccedd9b26c92ebc87568493587398c075dedcdd28ef743d5c234698bb9f6a2fdec9436adeb161de7c282c665767c8b1e8398a62934be962b085c2fdf939de518b6f0d757f172b8fc47e5a3179880c2db94f95af65a70918503a0e8058877b2986308d7c92d575d7ca04894ce84a9ff2b566651bddad0a3d86a4d8cd042aa8361627033fbd66f4e6c2eae4a0da78e12d2768eafbcb356e32a", @generic="72e54898677f656d84d39bfb80eb10aabcee5a4ea6299ab7ecf12c0139e98ad8c88c38f982389eb83033af95e44835cb95c74b47dc65ddfa3c9fc8df10b30ab8c7c113408223ae20d4a8c0473f8d9d4a4b3adb2521f6e570f6fa151205c5bd6f45716027f89d71a7f50f9045bd63c9400508917b293b8c28aaaccdbf892f0096688995cf31d951df8339a90fcb3621d051f7ed803b33ae7fe14e208b21f0c09717779af5ffedff960d0c4523c948f51554bbab33f9b9f008863e124df7", @nested={0x4, 0xec}, @typed={0x14, 0x30, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @generic="332663341e80ce907500ab46c9c7e6afa200a4b6994c398706f9b3383e565841f0ea3d19c59970890444034757dced417b5c", @generic="d93ba1d12b0cc432439dc400251a24d12d41fcb4d627a1dd2c758364bde9abef8179bf917b1cb02a5a5327136a4424e304de0bb088b36cd2013d14de629de52ae2910783be6f17d332ba09ee181e3f4617a4ee1ce129a6266c3c90cd8ee9c311b18627d045e6f211edf452a760bed11864ea4635fffae044dca14034c969009ea5cad651594da29f98404f61f6cf0c78ebaf4e9ab5f61523f3303288c76a8a21569b1b1c07c8767b1dfa00e693a2741829dbc360edf13d247fb8b89223d9e3deb0f78c95db775a"]}]}, 0x4e0}], 0x3, &(0x7f0000004440)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x8000}, 0x400c000) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000004500)) (async) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000004500)) 2m30.590378611s ago: executing program 3 (id=360): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) (async) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0xd0040, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00') (async) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000300)='\x00\x00\x00\a\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') (async) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000040)='[\\\xe2-\x00') (async) pipe(&(0x7f0000000600)={0xffffffffffffffff}) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) (async) splice(r2, 0x0, r3, 0x0, 0x1100000000f336, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) 2m30.589975111s ago: executing program 3 (id=361): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') ioctl$int_out(r0, 0x5460, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = userfaultfd(0x801) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x2, 0x4, @local}}, {{0xa, 0x4ea1, 0x0, @dev={0xfe, 0x80, '\x00', 0x29}}}}, 0x108) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 2m30.569075101s ago: executing program 3 (id=362): unshare(0x22020400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f0000000140)=""/130) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r3, &(0x7f0000000200)={0x2, @long}, 0x8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0), &(0x7f0000000100)=0x14) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, &(0x7f0000000040)=0xfffffff7) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x48, 0x0, &(0x7f0000000380)=[@register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000400)="f5f8bc844de1c02a7c9f049ef2cbefdd6ccc05c5c279cfffe3b1ae9eaf03bbac8fdf87c9ea45d4faace03589d639c417b54053f9f0950a9720cef8afcc1a6f9124bf7bcc5c3a6ae57145f63c85dfd263"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000080)=[@register_looper], 0x0, 0x0, 0x0}) 2m30.479914093s ago: executing program 3 (id=363): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x3e, 0x4, @tid=r0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x400000b3}]}) ioprio_set$pid(0x2, 0x0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) read(r4, &(0x7f0000000080)=""/93, 0xffffff6c) r5 = socket(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0x80, 0x7, 0x2, @empty, @empty, 0x8000, 0x8, 0x3, 0xe}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r10) fcntl$setpipe(r8, 0x407, 0xffffffff80000000) r11 = socket(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) r15 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r15, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x1, 0x401, 0x3, {}, {}, {0x3, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x3, 0x1, 0x0, 0x1}, 0x32, 0x2, 0x0, 0x0, "8de0f739f1aa7cc7d2ed52459d604798164607bb419809e9a562796d78dbd7c274f9744f277b5106858da2252d464d91361e58452fc95a3ae3bd86238e122752"}}, 0x80}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d66646c726e506e6f3d09ee51dee232605773ddac38977e50fb633640edfa500b81eb16e7b8276114918939eaa224a22778a9bd5cb1d1b45fa85e5ed96ba3754e26a4c4a02b66e81cd2d6a74a73b0ab5872b7014d785f2d5551cd575276df1886849ba93f057b41181f4be3cd94dc5401235aeffb41a2", @ANYRESHEX=r12, @ANYRES16=r6, @ANYRESHEX=r13, @ANYBLOB=',dfltgid=', @ANYRESHEX=r14, @ANYBLOB=',k', @ANYRESHEX, @ANYRES64=r6, @ANYRESOCT=r11]) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1053, &(0x7f00000001c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x5e, 0x36, 0x17]}}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x35, 0x32, 0x70, 0x6d, 0x31]}}, {@gid={'gid', 0x3d, r14}}, {@nr_blocks={'nr_blocks', 0x3d, [0x446232f65a0f887, 0x65, 0x70]}}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/rnullb0\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0) ioprio_get$pid(0x0, r7) 2m30.404604044s ago: executing program 32 (id=363): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x3e, 0x4, @tid=r0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x400000b3}]}) ioprio_set$pid(0x2, 0x0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) read(r4, &(0x7f0000000080)=""/93, 0xffffff6c) r5 = socket(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000640)={'ip6tnl0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0x80, 0x7, 0x2, @empty, @empty, 0x8000, 0x8, 0x3, 0xe}}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r9, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r10) fcntl$setpipe(r8, 0x407, 0xffffffff80000000) r11 = socket(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) r15 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r15, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x1, 0x401, 0x3, {}, {}, {0x3, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x3, 0x1, 0x0, 0x1}, 0x32, 0x2, 0x0, 0x0, "8de0f739f1aa7cc7d2ed52459d604798164607bb419809e9a562796d78dbd7c274f9744f277b5106858da2252d464d91361e58452fc95a3ae3bd86238e122752"}}, 0x80}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f00000004c0)=ANY=[@ANYBLOB="7472616e733d66646c726e506e6f3d09ee51dee232605773ddac38977e50fb633640edfa500b81eb16e7b8276114918939eaa224a22778a9bd5cb1d1b45fa85e5ed96ba3754e26a4c4a02b66e81cd2d6a74a73b0ab5872b7014d785f2d5551cd575276df1886849ba93f057b41181f4be3cd94dc5401235aeffb41a2", @ANYRESHEX=r12, @ANYRES16=r6, @ANYRESHEX=r13, @ANYBLOB=',dfltgid=', @ANYRESHEX=r14, @ANYBLOB=',k', @ANYRESHEX, @ANYRES64=r6, @ANYRESOCT=r11]) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1053, &(0x7f00000001c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x5e, 0x36, 0x17]}}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x35, 0x32, 0x70, 0x6d, 0x31]}}, {@gid={'gid', 0x3d, r14}}, {@nr_blocks={'nr_blocks', 0x3d, [0x446232f65a0f887, 0x65, 0x70]}}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/rnullb0\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000300), 0x200000, 0x0) ioprio_get$pid(0x0, r7) 2m13.132301532s ago: executing program 0 (id=657): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000180)={0x21, 0x101, 0x7dbe, 0x7, 0x0, 0x0, 0x5}, 0xffffffffffffff05) 2m13.113522002s ago: executing program 0 (id=658): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 32) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f00000015c0)=0x6, 0x4) r2 = syz_usb_connect$cdc_ncm(0x1, 0x7f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x2, 0x1, 0xfd, 0xc0, 0xf8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "7481"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xf, 0x2, 0x6, 0x3}, {0x6, 0x24, 0x1a, 0xfff, 0xe}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x98}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0xf}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x68}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x39, 0x5, 0xe}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x9, 0x10, 0x9}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x250, 0x5, 0xb, 0x2, 0x20, 0xa}, 0x161, &(0x7f0000000180)={0x5, 0xf, 0x161, 0x6, [@generic={0x9a, 0x10, 0x2, "a6100ec5bc48bc6485d501c8e175134a341072baeacaa34ee912fb5fab2c714d41fb225ed0141b863db258d61adcd4c0fdaa57c2f91fc8f1c3a977ba364538f14523d81d96ac04155da71ee3f9b49efe67a3d41dc2356100c0b3105b8d43c393bfe357128cc785c022e94ce3c09b8beba9ac652d9bd455aa8dbf733bef10c2e2d6e5941c34a3a02369e57dac7c78791e9227b949eb29ef"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xb8, 0x40, 0xf, 0x2, 0xfd}, @wireless={0xb, 0x10, 0x1, 0x8, 0x60, 0x5, 0x1, 0x2, 0xd}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x7, 0xa373}, @generic={0xa2, 0x10, 0xb, "6ebc4440b01a7496e32918db8f5d53b529093e8d093b7d2a2b088f00f1b8bbbd9a53729de571772d6dab2f7345f46143e890e6195d57d591e8361f43253732498572670b2dfb25c8fc69718d578fc1bc3e958b83f47de148ff67c99dd0d78a252a48d79b860d5caad3680843cdf291558266beceafef5d47ef5fffcca9826a1c141178cce200f99e0c94c8e2048332e43ee1fe638581478255d852d9800124"}]}, 0x9, [{0x92, &(0x7f0000000300)=@string={0x92, 0x3, "3a851d316764103506ea3b8b9b9600c24df92dac2dc9fb0927f2da9b811e2e12b49fb444d28e26f681120ad59c63e95a480bff11214d9f968913774241b5ef7ec4a6015c3598fe58318b928f119dcd98fb6fe8e663b5112aeaa2df0bc7c5ac3443ede46e93347999e765c0cc6f5436397bca52e5cc99f7b029b819fc2fbbed95e80451615c94634a58f73a426bcc7811"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x25, &(0x7f00000004c0)=@string={0x25, 0x3, "cbe9ddd95a94382453ea60ab9efe3152026ad9f6ccb04f754e98ccca5afac774c94225"}}, {0x9b, &(0x7f0000000500)=@string={0x9b, 0x3, "a7afa294995d2b3e221fa1b38fffd929b8ed78e021f0661a3612e273af40ec2e0f78e71657462b77c297a2819a8713ffc199e68207366533df1c4395e4613f785291bf45401bb448d1d092d5e43700c39b96a2a4ba6ca105ea19e9d4b080163b63b655c31e294f3ba36ffb309dfc56add48438b825db74b921efe33d0f832cc5838b70ddc36d484f0f0fb79a6399b0f483725f1fde22a823e4"}}, {0x90, &(0x7f00000005c0)=@string={0x90, 0x3, "38cbf6f3a25d0094f9d1f14a7cd56fa049ab0714af82639c873349526c143e93860204a93f96ba894eabc5c49412eca003baf81d6629ff50448db6e396d7e233f607017f37e29a885e682da5fb7eff4b959fd4e83ec88143d5b6d9c0b0552003ff0b3d59b1ccc3f7d3eafbb82d84ffbf1e93ea8b1926cf01458d9f841681e49b1fe5f2860fc30ac95810a93f6d45"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000f40)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5, 0x30, 0x2, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x2, 0x80, "", {{{0x9, 0x5, 0x1, 0x2, 0x39f, 0x0, 0x8, 0x3}}}}}]}}]}}, &(0x7f0000001400)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x300, 0x5, 0x3, 0x8, 0x40, 0x3}, 0x124, &(0x7f0000000fc0)={0x5, 0xf, 0x124, 0x3, [@generic={0x100, 0x10, 0x0, "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"}, @ssp_cap={0x1c, 0x10, 0xa, 0x8, 0x4, 0x579, 0x11000, 0xcacd, [0x30, 0x60ff, 0xff0000, 0xc0]}, @ptm_cap={0x3}]}, 0x5, [{0x100, &(0x7f0000001100)=@string={0x100, 0x3, "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"}}, {0xc8, &(0x7f0000001200)=@string={0xc8, 0x3, "aaef958eee427af36427f61be31e8df3349ca6186e2eb2969b3838eeee1f0098a2cb52a93d239945b36000d4e2f9e3fbad622335a275e1062e1f0b2991ee855723fde6aa3c6b7a573ccac1419cfde85eb4a1bafe3ed5b101ccfe5297964ce822c7dd7d1fd26f8eeb0eb351e5a293f95c371c9e67a99d86838a7217ff425c4f641b8e1e10047df002f52ce80a6f57b77b791d2335fed434ec4643ebf57fc3634b3f25904d0e1b203d9d3e4262256d4bb0888ab57834dce62f5bf45222a626887685df225e6475"}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x40d}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x40a}}, {0x61, &(0x7f0000001380)=@string={0x61, 0x3, "7b5eb44b91a97a4e5a409a4091acd5976936f39425fe396a11bd22ded85ca359c360a6fed8c87c5831cff1f01ea3c9548ade9d6fb51b14a470c629839fb938f4931bec1d8e4f34ce8b8082b5ed5391526cb3491161b91af0d32e03afefc46b"}}]}) (async, rerun: 64) syz_usb_control_io(r2, &(0x7f0000000a40)={0x2c, &(0x7f0000000780)={0x40, 0x6, 0xd6, {0xd6, 0x6, "6fff0204b7a668bf2c39dafe60ed6a18a823f715c362e7574af6ce738bf4e9931a6b6daf6c8306e9c2f8e21e63aff4cfb2f2323f26a2df6f7ffbba3256cbba0efd2d4d3a22146224764af60008a9a244287e7e56f94a4235f99973417d9f0c4da81eb24ad6a42bd31166deaa9357a1d22320c8735d87ab0c043305501faf9485e927cad365e4567f497581c84f41f3f0214d03f64f26a1fe3dd052f38d4f0f630655b7a08576e2aaf9a33b446d1b502dbcd701150bbb4b6ea0ccd84fb391ae4dddcc660378c9524fbfeda0255d022d1f8c363554"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180a}}, &(0x7f00000008c0)={0x0, 0xf, 0xf2, {0x5, 0xf, 0xf2, 0x6, [@generic={0xa0, 0x10, 0xa, "a2b3501fd02c86d8f6b13be7e40ab775294a1f878e59cc4b476b494f11f10abb3a2b502b707e88e58b0c44897c3674cc46dc72890dd3e089a0f487c844e74516b777f1e63173aebcec6b16daf935a18091e03246d5f1085a0679073afb2ab4cae2a83c67837ebd5319d8d3f074310d6a7db7f9c464ef9d87c04ee9bdf8704f4fe9cf2f7a36bd3509e4215a78efad09cb33ab54ace94cc994ff5675cb22"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "b1078a88d8d46ff9a348bab6a2f3daac"}, @ptm_cap={0x3}, @ssp_cap={0x24, 0x10, 0xa, 0xc0, 0x6, 0x4, 0xf00f, 0x8, [0xc0, 0xff00cf, 0xffa030, 0xc0, 0x30, 0x3f00]}, @ext_cap={0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x23, 0x3, 0x6, 0x0, 0x3e}]}}, &(0x7f00000009c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x18, 0x2, 0x3, 'Ahkz', "cd485942"}}, &(0x7f0000000a00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x4, 0x3, 0x82, 0x6, 0x6, 0x8}}}, &(0x7f0000000e80)={0x84, &(0x7f0000000a80)={0x0, 0x31, 0x9, "2627bd559ee9d94efe"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000b40)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000b80)={0x20, 0x0, 0x8, {0x8, 0x80, [0xf00f]}}, &(0x7f0000000bc0)={0x40, 0x7, 0x2, 0xdbbc}, &(0x7f0000000c00)={0x40, 0x9, 0x1}, &(0x7f0000000c40)={0x40, 0xb, 0x2, "2180"}, &(0x7f0000000c80)={0x40, 0xf, 0x2, 0xeb66}, &(0x7f0000000cc0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000d00)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, &(0x7f0000000d40)={0x40, 0x19, 0x2, "adc9"}, &(0x7f0000000d80)={0x40, 0x1a, 0x2, 0xa35b}, &(0x7f0000000dc0)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000e00)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000e40)={0x40, 0x21, 0x1, 0x1}}) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) (async) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) (async, rerun: 64) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) (rerun: 64) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) (async) setsockopt$inet_mreqsrc(r8, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f0000000180)={0x1000000, 0xffffffffffffffff, 0x1}) r9 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000000000004503"]) (async) bind$inet6(r9, &(0x7f0000001580)={0xa, 0x4e21, 0x10001, @private1, 0x5}, 0x1c) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001480)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000001680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001500)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x6, 0x2, 0x37}, @fda={0x66646185, 0x4, 0x2, 0x2b}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}, 0x1600}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001600)={@flat, @fda={0x66646185, 0x8, 0x1, 0x24}, @flat=@handle={0x73682a85, 0x10a, 0x2}}, &(0x7f00000014c0)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0}) 2m13.090956972s ago: executing program 0 (id=659): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x1}}}, 0x10, 0x0}, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x91) ioctl$FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0xfff, 0x2, 0x2, 0x0, 0xfffffffc}, 0x1c) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000600)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x48040}, 0x1) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2m13.065650212s ago: executing program 0 (id=662): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x2000, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r6 = gettid() sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x33}, @void, @val={0xc, 0x99, {0x5adb, 0x3a}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xa7, 0x5b}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r5}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_PID={0x8, 0x52, r6}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4008010) sendmsg$NL80211_CMD_GET_WOWLAN(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80020}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x53}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x800) r7 = accept4(r4, &(0x7f00000003c0)=@nl=@unspec, &(0x7f0000000440)=0x80, 0x800) ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f0000000480)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}) r8 = fsmount(r4, 0x1, 0x4) close(r7) r9 = openat(r4, &(0x7f00000004c0)='./file0\x00', 0x4401, 0x84) execveat(r0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000580)={[&(0x7f0000000540)='wlan1\x00']}, &(0x7f0000000680)={[&(0x7f00000005c0)='nl80211\x00', &(0x7f0000000600)='#-,\\\x00', &(0x7f0000000640)='\x00']}, 0x100) inotify_init1(0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r8, &(0x7f0000001bc0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001b80)={&(0x7f0000000700)={0x146c, r1, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xfffffffa, 0x39}}}}, [@NL80211_ATTR_TID_CONFIG={0x3e8, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xa0}]}, {0xb0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1a, 0x2, [{0x7, 0x6}, {0x0, 0x3}, {0x3, 0x7}, {0x4, 0xa}, {0x0, 0x8}, {0x2}, {0x4, 0x9}, {0x5, 0xa}, {0x3, 0x4}, {0x4, 0x2}, {0x1, 0x9}, {0x2, 0xa}, {0x7, 0x1}, {0x4, 0x1}, {0x4}, {0x1, 0x2}, {0x7, 0x6}, {0x0, 0x5}, {0x6, 0x9}, {0x4, 0x7}, {0x5, 0x6}, {0x6, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x24, 0x18, 0x5, 0x18, 0x24, 0x24, 0x24, 0x18, 0x48]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x2, 0xff, 0x7f, 0x0, 0x3, 0x1, 0x3]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x30, 0x60, 0x2, 0x12, 0xb, 0x4, 0x18, 0x6, 0x3, 0xb, 0x18, 0x30, 0x16, 0x30, 0x16, 0xc, 0x5, 0x0, 0x37]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1, 0xb, 0x30, 0x16, 0x12, 0xd, 0xb, 0x1b, 0x16, 0xb, 0x5, 0x26, 0x6c, 0x6, 0x5]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x0, 0x5}, {0x4, 0x6}, {0x6, 0x8}, {0x0, 0x9}, {0x4, 0x6}, {0x5, 0xa}, {0x7, 0x7}, {0x7, 0x6}, {0x4, 0x3}, {0x0, 0x5}, {0x5, 0x8}, {0x1, 0x2}, {0x1, 0x8}, {0x5, 0x2}, {0x2, 0x9}, {0x0, 0x8}, {0x1, 0x5}, {0x4, 0x4}, {0x4, 0x9}, {0x6, 0x5}, {0x7}, {0x1, 0x4}, {0x3, 0x4}, {0x7, 0xa}, {0x6, 0x8}]}]}]}]}, {0x90, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x27}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x59}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x1, 0xb, 0xb, 0xb, 0x24, 0x1, 0x24, 0x12, 0x1b, 0x60, 0x12, 0x48, 0x4, 0x6c, 0x1]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x8001, 0xa, 0x40, 0x9, 0x0, 0x7f, 0x241]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0xad9, 0x2159, 0x3, 0x759d, 0x40, 0x1, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}]}, {0x20c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xe0, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xdc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x1ff, 0x749, 0x9, 0xde9, 0xa, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xd2ca, 0x1, 0x6, 0xff, 0x8, 0x6, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x81, 0x0, 0x9, 0x9, 0xe, 0x3, 0x7]}}, @NL80211_TXRATE_HT={0x3e, 0x2, [{0x0, 0x8}, {0x0, 0x1}, {0x1, 0x5}, {0x0, 0x8}, {0x0, 0x5}, {0x5, 0x2}, {0x4, 0x5}, {0x0, 0x8}, {0x1, 0x7}, {0x3, 0x2}, {0x4, 0x1}, {}, {0x4, 0x6}, {0x2, 0x1}, {0x1, 0x9}, {0x6, 0x4}, {0x2, 0x1}, {0x1, 0x4}, {0x0, 0x3}, {0x0, 0x6}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x3}, {0x5, 0x4}, {0x6, 0x5}, {0x7, 0x9}, {0x4, 0x3}, {0x7, 0xa}, {0x6, 0x6}, {0x1, 0x7}, {0x0, 0x4}, {0x7, 0x8}, {0x3, 0x6}, {0x2, 0x7}, {0x5}, {0x1, 0x9}, {0x1, 0x8}, {0x7}, {0x0, 0x9}, {0x2, 0x7}, {0x1, 0x6}, {0x1, 0x8}, {0x1, 0x2}, {0x0, 0x6}, {0x1, 0x5}, {0x5, 0x8}, {0x2, 0x2}, {0x7, 0x8}, {0x3, 0x3}, {0x6, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x4, 0x5}, {0x1, 0x1}, {0x6, 0x9}, {0x2, 0x3}, {0x2, 0xa}, {0x7, 0xa}]}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x2}, {0x6, 0x6}, {0x1, 0x5}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x6, 0x2}, {0x2, 0x9}, {0x1, 0xa}, {0x6, 0x2}, {0x0, 0xa}, {0x1, 0x7}, {0x0, 0x1}, {0x0, 0x9}, {0x2, 0x9}, {0x3, 0x1}, {0x4, 0x7}, {0x7, 0x5}, {0x6, 0x4}, {0x6}, {0x7, 0x2}, {0x2, 0x7}, {0x1, 0x2}, {0x1, 0x2}, {0x4, 0x2}, {0x1, 0x8}, {0x0, 0x3}, {0x0, 0x5}, {0x3, 0x8}, {0x0, 0x2}, {0x4, 0x4}, {0x1, 0x7}, {0x2, 0x8}, {0x1, 0x2}, {0x1, 0x6}, {0x6, 0xa}, {0x3, 0x3}, {0x0, 0x6}, {0x7, 0x6}, {0x1, 0x4}, {0x4, 0x11}, {0x0, 0x6}, {0x7, 0x5}, {0x4, 0x2}, {0x7, 0x4}, {0x2}, {0x2, 0xa}, {0x0, 0x2}, {0x5, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x4, 0x6, 0x6, 0x40, 0x8001, 0x1f, 0x100]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xf0, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x44, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x2, 0xc, 0x3, 0x9, 0x16, 0x30, 0x36, 0x48, 0x1, 0x18, 0x6c, 0x4, 0xc, 0x48, 0xc, 0x18, 0x36, 0x4, 0x1, 0x6c, 0x36, 0x36, 0x48, 0x54, 0x60]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x6, 0x2}, {0x6, 0x7}, {0x0, 0x7}, {0x2, 0x1}, {0x7}, {0x0, 0x9}, {0x3, 0x2}, {0x1, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x6, 0x0, 0x400, 0x3, 0x2b54, 0x4de, 0xc6a]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x24, 0x48, 0x9, 0x24, 0xc, 0x5, 0x1b, 0x12, 0xb, 0x24, 0x36, 0x30, 0x16, 0x2, 0x16, 0x24, 0x3, 0x60, 0x6c, 0x48, 0x4, 0x30, 0x0, 0x9, 0x6]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x5, 0x2, 0x1, 0xc, 0x0, 0x10, 0x1450]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x11, 0x5, 0x5, 0xfff, 0x7, 0x0, 0x6, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x38, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x48, 0x16, 0x12, 0x24, 0x24, 0x2, 0x6, 0x30, 0x30, 0x1b, 0x5, 0x6, 0x1, 0x3, 0x16, 0x4, 0xc, 0x6, 0xc, 0xb, 0x4, 0x60]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0xb, 0x24, 0x9, 0x60, 0x12, 0x3, 0x2, 0x5, 0x16]}]}]}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x74}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x76}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x32}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x6b}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x33}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xff}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xab}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x3}]}]}, @NL80211_ATTR_TID_CONFIG={0x9e4, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xb}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xffffffff7fffffff}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x28}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3b}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x48}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfc}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x1d0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x19c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0xf, 0x1, 0x2, 0x2, 0xfff7, 0x4, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x4, 0x1ff, 0xc7ed, 0x0, 0x3, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xf1, 0x2a, 0x3, 0x3ff, 0x10, 0xb, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0x2, 0x1, 0x8, 0xfd, 0x2f8e, 0x1000]}}]}, @NL80211_BAND_2GHZ={0x50, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x38, 0x2, [{0x2, 0x7}, {0x6, 0x9}, {0x0, 0x5}, {0x4, 0x4}, {0x2, 0x6}, {0x2}, {0x2, 0xa}, {0x6, 0x1}, {0x5}, {0x6, 0x2}, {0x2, 0x8}, {0x7, 0x9}, {}, {0x3, 0x4}, {0x0, 0x8}, {0x0, 0x6}, {0x7, 0x2}, {0x4}, {0x5, 0x8}, {0x2, 0xa}, {0x5, 0x3}, {0x3, 0x4}, {0x3, 0x4}, {0x1, 0x1}, {0x1}, {0x7, 0x3}, {0x7, 0x5}, {0x7, 0x2}, {0x6}, {0x3, 0x1}, {0x7, 0x4}, {0x7, 0x9}, {0x5, 0x5}, {0x4, 0x7}, {0x7, 0xa}, {0x5, 0x4}, {0x7, 0x7}, {0x3, 0x7}, {0x0, 0xa}, {0x2, 0x4}, {0x0, 0x1}, {0x4, 0xa}, {0x3}, {0x0, 0x5}, {0x3, 0x1}, {0x0, 0x8}, {0x3, 0x1}, {0x2, 0x9}, {0x4, 0x4}, {0x0, 0xa}, {0x3, 0xa}, {}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x3, 0xfce, 0x81, 0x2, 0x7fff, 0x6, 0x2]}}]}, @NL80211_BAND_6GHZ={0xa8, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x1}, {0x1, 0x5}, {0x2, 0x6}, {0x6, 0x4}, {0x0, 0x3}, {0x4, 0x7}, {0x2, 0x6}, {0x1, 0x7}, {0x0, 0x8}, {0x1, 0x3}, {0x5, 0x6}, {0x4, 0x6}, {0x7, 0x4}, {0x1, 0x1}, {0x3, 0x3}, {0x4, 0x2}, {0x2, 0x3}, {0x7, 0x2}, {0x1, 0x4}, {0x1, 0x2}, {0x2, 0x6}, {}, {0x4, 0x2}, {0x2}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x0, 0x6}, {0x5, 0x2}, {0x3, 0x2}, {0x1, 0x6}, {0x5, 0x8}, {0x3, 0x8}, {0x0, 0x1}, {0x2, 0xa}, {0x2, 0x9}, {0x7, 0x8}, {0x5, 0x1}, {}, {0x0, 0x9}, {0x2, 0x3}, {0x0, 0x3}, {0x5, 0x5}, {0x0, 0x4}, {0x2}, {0x3, 0x7}, {0x4, 0x4}, {0x5, 0x8}, {0x3, 0x2}, {0x4, 0x3}, {0x3, 0x6}, {0x2, 0xa}, {0x5, 0x7}, {0x5, 0x5}, {0x6, 0x9}, {0x0, 0xa}, {0x6, 0x7}, {0x2, 0x5}, {0x3, 0x4}, {0x1, 0x6}, {0x7}, {0x1, 0x2}, {0x1}, {0x1, 0x2}, {0x2, 0xa}, {0x5, 0xa}, {0x7, 0x8}, {0x7, 0x6}, {0x1, 0x4}, {0x5, 0x6}, {0x7, 0x2}, {0x2, 0x9}, {0x5, 0x2}, {0x4, 0x1}, {0x5, 0x2}, {0x3, 0x6}, {0x1, 0x3}, {0x4, 0x5}, {0x0, 0x5}, {0x1, 0x8}, {0x4, 0x6}, {0x7, 0x1}, {0x4, 0xa}, {0x4, 0x4}, {0x5, 0xa}, {0x3, 0x2}, {0x1, 0x7}, {0x6, 0xa}, {0x3, 0x3}, {0x5, 0xa}, {0x5, 0x4}, {0x3, 0xa}, {0x3, 0x8}, {0x7, 0x8}, {0x2, 0x6}, {0x2, 0x8}, {0x4, 0x5}, {0x1, 0x5}, {0x7, 0x2}, {0x6, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2968, 0x9, 0x4, 0x101, 0x2, 0x5, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x7f, 0x2020, 0x3, 0x6bfa, 0x1ff, 0x101, 0x2]}}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x38}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x30}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x4c}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x314, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x2cc, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xdc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x17, 0x2, [{}, {0x5, 0x3}, {0x7, 0x2}, {0x6, 0x9}, {0x7, 0x6}, {0x5, 0x8}, {0x3, 0xa}, {0x1, 0x3}, {0x7, 0x3}, {0x5, 0x6}, {0x4, 0x7}, {0x7, 0x7}, {0x3, 0x4}, {0x7, 0x8}, {0x6, 0xa}, {0x2, 0x6}, {0x4, 0x5}, {0x3, 0x8}, {0x2, 0x3}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x6, 0xb, 0x9, 0x9f, 0x7ff, 0x3, 0x7]}}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x0, 0x8}, {0x1, 0x7}, {0x1, 0x3}, {0x5, 0x7}, {0x1, 0x3}, {0x2, 0x4}, {0x6, 0x2}, {0x3, 0x9}, {0x1, 0x7}, {0x2, 0x1}, {0x0, 0xa}, {0x4, 0x9}, {0x6, 0x4}, {0x5, 0x7}, {0x1, 0x2}, {0x2, 0xa}, {0x6}, {0x7, 0x5}, {}, {0x3, 0x3}, {0x4, 0x5}, {0x6, 0x6}, {0x2, 0x5}, {0x5, 0x9}, {0x1, 0x7}, {0x7, 0x2}, {0x3, 0xa}, {0x3, 0x9}, {0x0, 0x2}, {0x1, 0x8}, {0x6, 0x4}, {0x1, 0xa}, {0x4, 0x6}, {0x0, 0xa}, {0x4}, {0x5, 0x1}, {0x0, 0x5}, {0x5, 0x2}, {0x1, 0x8}, {0x4, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8000, 0x9, 0xe9, 0x0, 0x10, 0x6, 0xd5bd, 0x9]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x7, 0x6}, {0x5, 0x1}, {0x3, 0xa}, {0x1, 0x5}, {0x3, 0x2}, {0x3, 0x4}, {0x2}, {0x0, 0x8}, {0x0, 0x2}, {0x7, 0x2}, {0x7, 0x9}, {0x0, 0x1}, {0x2, 0x9}, {0x6}, {0x1, 0x9}, {0x5, 0x8}, {0x0, 0x4}, {0x5, 0x7}, {0x4}, {0x2, 0x1}, {0x1, 0x8}, {0x1, 0x1}, {0x6}, {0x5, 0x9}, {0x2, 0x1}, {0x1, 0x4}, {0x1, 0x2}, {0x3, 0x1}, {0x6, 0x6}, {0x5, 0x4}, {0x0, 0x9}, {0x5, 0x5}, {0x5, 0x1}, {0x6, 0x6}, {0x5, 0x14}, {0x5}, {0x0, 0x6}, {0x3, 0x7}, {0x4, 0x4}, {0x4, 0xa}, {0x1, 0xa}, {0x5, 0x8}, {0x0, 0x1}, {0x1, 0x5}, {0x4, 0x8}, {0x4, 0x2}, {0x5, 0x8}, {0x3, 0x6}, {0x6, 0x3}, {0x1, 0x6}, {0x1, 0x4}, {0x1, 0xa}, {0x5, 0x5}]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0xc, 0xc, 0x12, 0xb, 0xb, 0x4, 0x3, 0x16, 0x2c]}]}, @NL80211_BAND_5GHZ={0x40, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x30, 0x13, 0x60, 0x6c, 0x1b, 0x4, 0x36, 0x16, 0x6c, 0x24, 0x1b, 0x1b, 0x1b, 0x1, 0x24, 0x12, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7, 0xb, 0xa7, 0x7d6, 0xb66c, 0x40, 0x71]}}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1, 0x4, 0x8, 0x3, 0x1800, 0x90ab, 0x7]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x1, 0x3}, {0x0, 0x7}, {0x7, 0x1}, {0x1, 0x1}, {0x2, 0xa}, {0x1, 0x2}, {0x0, 0x7}, {0x7, 0x1}]}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x15, 0x1, [0x60, 0x6, 0x10, 0x16, 0x4, 0x12, 0x30, 0x12, 0x1b, 0x16, 0x30, 0x36, 0x3, 0x1b, 0x12, 0x4, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3ff, 0x9, 0x1, 0x6c5, 0x5, 0x101, 0x2f]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x48, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5ec4, 0x6, 0x3d02, 0x7, 0x5, 0x8, 0x100, 0x7ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x4, 0x6, 0x4c, 0x7fff, 0x2, 0xf, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0x4, 0x1, 0x7, 0x6, 0x6, 0x3, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x68, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0xfd2, 0x3ff, 0xff10, 0xc0f2, 0x3, 0x100, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x2, 0x0, 0xaef0, 0x9, 0xe, 0x4, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x4, 0x1}, {0x1, 0x7}, {0x7, 0xa}, {0x1, 0x1}, {0x0, 0x2}, {0x1, 0x6}, {0x4, 0x9}, {0x1, 0x7}, {0x0, 0x8}, {0x7, 0x5}, {0x4, 0x9}, {0x5, 0x1}, {0x7, 0x1}, {0x0, 0xa}, {0x6}, {0x6, 0x6}, {0x1, 0x5}, {0x3}, {0x3, 0xa}, {0x2, 0x3}, {0x2, 0x9}, {0x7, 0x2}, {}, {0x1, 0x9}, {0x7, 0x8}, {0x1, 0x2}, {0x2, 0xa}, {0x1, 0x7}, {0x4, 0x2}, {0x5, 0x9}, {0x2, 0x4}, {0x3, 0x2}, {0x0, 0x5}, {0x1, 0x8}, {0x0, 0x9}, {0x1, 0x5}, {0x2, 0x3}, {0x0, 0xa}, {0x1, 0x4}, {0x2, 0x3}, {0x5, 0x3}, {0x1, 0x4}, {0x5, 0x3}, {0x6, 0x2}, {0x0, 0x4}, {0x5, 0x7}, {0x2, 0x1}]}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x4b5bf2aaeb5baae7, 0x48, 0x28, 0x4d, 0x3, 0x4, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0xa22, 0x1, 0x3, 0x7ff, 0x1a, 0x9, 0xdc]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0xb, 0x9, 0x6, 0x1e, 0x1, 0x6, 0x9]}}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x3, 0x4}, {0x1, 0x7}, {0x7, 0x2}, {0x1}, {0x5, 0xa}, {0x1, 0x8}, {0x3, 0x5}, {0x3, 0x2}, {0x7, 0xa}, {0x5, 0xa}, {0x0, 0x5}, {0x1, 0x1}, {0x4}, {0x7, 0x6}, {0x0, 0x7}, {0x5}, {0x6, 0x9}, {0x4, 0x5}, {0x5, 0x1}, {0x6, 0x1}, {0x6, 0x7}, {0x7}, {0x0, 0x4}, {0x1, 0x3}, {0x5, 0xa}, {0x2, 0x7}, {0x5, 0x5}, {0x6, 0x7}, {0x7, 0x9}, {0x3, 0x7}, {0x2}, {0x0, 0x9}, {0x0, 0x9}, {0x6, 0x2}, {0x4, 0xa}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x7}, {0x1, 0x6}, {0x5}, {0x6, 0x1}, {0x3, 0x2}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xb4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xba}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x280, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x250, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8, 0x7, 0x200, 0x40, 0x800, 0xffb0, 0x3]}}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x23, 0x2, [{0x5, 0x3}, {0x7, 0x8}, {0x4}, {0x6, 0x7}, {0x3, 0x3}, {0x5}, {0x1, 0xa}, {0x2, 0x3}, {0x6, 0x1}, {0x5, 0x1}, {0x1, 0x3}, {0x7}, {0x7, 0x3}, {0x1, 0x1}, {0x7, 0x2}, {0x7, 0xa}, {0x3, 0x5}, {0x5}, {0x6, 0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x9}, {0x1, 0x7}, {0x2}, {0x7, 0x8}, {0x1, 0x9}, {0x2, 0x6}, {0x0, 0x5}, {0x0, 0x1}, {0x4, 0x3}, {0x5, 0x4}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7f, 0x3, 0x1, 0x1, 0x200, 0x3a4, 0x7ff, 0x6]}}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x24ff, 0x4, 0x3, 0x6, 0xfff2, 0x3, 0x62b]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5dc9, 0x0, 0x200, 0x7, 0x80, 0x6, 0x80]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xe000, 0x1, 0xa14b, 0x5, 0x7, 0x7ff, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1000, 0x7fff, 0x0, 0x9, 0x957, 0x8, 0x10, 0x5]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0x2, 0x2, 0xa, 0xda, 0x3, 0xfffe]}}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x6, 0x6}, {0x4, 0x1}, {0x6, 0x7}, {}, {0x0, 0xa}, {0x5, 0x4}, {0x5, 0x7}, {0x6, 0x5}, {0x2, 0x4}, {0x1, 0x5}, {0x4, 0x1}, {0x7, 0x8}, {0x5, 0x5}, {0x5, 0x3}, {0x1, 0x8}, {0x4, 0x7}, {0x0, 0x6}, {0x3, 0x5}, {0x4, 0x5}, {0x0, 0x3}, {0x0, 0x4}, {0x6, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x5f, 0xff81, 0x2, 0x1, 0x0, 0x5d2, 0x9]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0xb, 0x3, 0x60, 0x5, 0x36]}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0xc, 0xc, 0x39, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x800, 0x2, 0xb, 0x454, 0x10, 0x100, 0x1]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xc, 0x4, 0x9, 0x4, 0xa64, 0x5, 0x81]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6, 0x3a, 0x12, 0x1, 0x16, 0x30, 0x0, 0x6, 0x1, 0x9, 0x9, 0x6c, 0x0, 0x12, 0x36, 0xb, 0x16, 0x2, 0x1b, 0x6c, 0x1, 0x18]}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x30, 0x4, 0x0, 0x48, 0x1b, 0xd82e381a1d40e836, 0x18, 0x24, 0x4, 0x30, 0x1b, 0x6c, 0x7, 0x16, 0x16, 0x9, 0x3, 0x1b, 0x24, 0xc, 0x0, 0x36, 0x1, 0x36, 0x60, 0x6]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x3, 0x2, 0x6, 0x72, 0x16, 0x1, 0x1, 0xc, 0x48, 0x2, 0x5, 0x2e, 0x30, 0x5, 0xb, 0x4a, 0x60, 0x12, 0x7]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x7ff, 0x8, 0x400, 0xa, 0x8, 0x5, 0xdd1d]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x1b, 0x9, 0x66]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x3, 0x60, 0x8, 0x9, 0x53, 0x1b, 0x1b, 0x60, 0x30, 0x12, 0x18, 0x18, 0x30, 0x12, 0xb, 0x0, 0x3, 0x36, 0x30, 0x16, 0x2, 0x0, 0x5, 0x48, 0x1, 0x1, 0xc, 0xc]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x2, 0x18, 0x16, 0x60, 0x30, 0x30, 0x16, 0x30, 0xc, 0x0, 0x60, 0x62, 0x4]}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x49}]}, {0xbc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x54, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x0, 0x5}, {0x5, 0x3}, {0x0, 0x1}, {0x0, 0x5}, {0x7, 0x3}, {0x1, 0x1}, {0x7, 0xa}, {0x2}, {0x4}, {0x3, 0x1}, {0x4, 0x5}, {0x0, 0x6}, {0x7, 0x1}, {0x2, 0x9}, {0x1, 0x3}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x7}, {0x7, 0x6}, {0x1, 0x1}, {0x7, 0x8}, {0x6, 0x1}, {0x3, 0x1}, {0x5, 0x3}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x8, 0x6, 0x6, 0xa, 0x9, 0x8]}}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x24]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0xcf}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x49, 0x2, [{0x5, 0x8}, {0x5, 0x9}, {0x7, 0x1d}, {0x5, 0x9}, {0x1, 0x6}, {0x0, 0xa}, {0x5, 0x2}, {0x1, 0x5}, {0x0, 0x7}, {0x1, 0xa}, {0x3, 0x4}, {0x5, 0x7}, {0x5, 0x2}, {0x4, 0x1}, {0x4, 0xa}, {0x7, 0x4}, {0x0, 0x3}, {0x2, 0x8}, {0x7, 0x2}, {0x7, 0x5}, {0x1, 0x3}, {0x1, 0x3}, {0x6, 0x5}, {0x7, 0x1}, {0x0, 0x1}, {0x3, 0x9}, {0x7, 0x1}, {0x1, 0x4}, {0x3, 0x7}, {0x7, 0x6}, {0x0, 0x5}, {0x6, 0x3}, {0x4, 0x6}, {0x0, 0x4}, {0x7, 0x2}, {0x2, 0x9}, {0x5, 0xa}, {0x0, 0x9}, {0x4}, {0x1, 0xa}, {0x0, 0x7}, {0x5, 0x3}, {0x0, 0x8}, {0x3, 0x4}, {0x1, 0x5}, {0x5, 0x2}, {0x1, 0x6}, {0x4, 0x3}, {0x3, 0x3}, {0x2, 0x7}, {0x2, 0x2}, {0x1, 0x5}, {0x0, 0xa}, {0x1, 0x1}, {0x1, 0x4}, {0x4, 0x5}, {0x3, 0x8}, {0x3, 0xa}, {0x2}, {0x6}, {0x4, 0x6}, {0x4, 0x3}, {0x2, 0x5}, {0x5}, {0x1, 0x8}, {0x1, 0x5}, {0x3, 0x8}, {0x2, 0x8}, {0x7, 0x7}]}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x124, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf000, 0x1, 0x41fd, 0x7fff, 0x4, 0xe, 0x5, 0x1]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x1b, 0x1b, 0x18, 0x1b, 0x30, 0x56, 0x5, 0x0, 0x48, 0x0, 0x9, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x23, 0x7fff, 0x40, 0x10, 0x8, 0x6, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x6, 0x9, 0x9, 0x401, 0x2e18, 0x1, 0x2]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x1, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x301, 0x5, 0x0, 0x3, 0x3, 0x3, 0x7, 0xd]}}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x2, 0x7}, {0x0, 0x5}, {0x2, 0x6}, {0x1, 0x5}, {0x2, 0x4}, {0x1, 0x7}, {0x0, 0x9}, {0x0, 0x2}, {0x0, 0x2}, {0x4, 0x5}, {0x5, 0x2}, {0x7, 0x9}, {0x7, 0x7}, {0x7, 0x2}, {0x4, 0x2}, {0x2}, {0x6, 0x9}, {0x6, 0x3}, {0x7, 0x1}, {0x3, 0x6}, {0x0, 0x9}, {0x1, 0x5}, {0x6, 0x1}, {0x6}, {0x1}, {0x6, 0x5}, {0x2, 0xa}, {0x1, 0x6}, {0x5, 0xa}, {0x1, 0x3}, {0x5, 0x8}, {0x0, 0x9}, {0x6, 0x4}, {0x2, 0x8}, {0x6, 0x3}, {0x4, 0xa}, {0x6, 0x7}, {0x6, 0x4}, {0x7, 0x8}, {0x3, 0x2}, {0x1, 0x7}, {0x0, 0xa}, {0x0, 0x8}, {0x4, 0x9}, {0x3, 0x6}, {0x5, 0x3}, {0x3, 0x1}, {0x5, 0xa}, {0x2, 0x4}, {0x5, 0x1}, {0x4, 0x3}]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xbdd2, 0xc, 0x7, 0x8, 0x1, 0x9, 0x6, 0x5]}}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x248, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8c}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x19c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x14}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x188, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x4, 0x2}, {0x7, 0x1}, {0x1, 0x5}, {0x1, 0x6}, {0x1, 0x8}, {0x0, 0x3}, {0x6, 0x3}, {0x4, 0x9}, {0x1, 0x7}, {}, {0x0, 0x4}, {0x1, 0x6}, {0x6, 0x8}, {0x2, 0x9}, {0x1, 0x9}, {0x0, 0x1}, {0x5, 0x3}, {0x1, 0x1}, {0x1, 0x7}, {0x1}, {0x2, 0x6}, {0x1, 0x2}, {0x6, 0x6}, {0x4, 0x8}, {0x0, 0x5}, {0x7, 0x8}, {0x6}, {0x1, 0x6}, {0x5, 0x3}, {0x4, 0x7}, {0x5, 0xa}, {0x6, 0x7}, {0x7, 0x4}]}]}, @NL80211_BAND_6GHZ={0xdc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x8001, 0x5, 0x4, 0x3, 0x3, 0x7, 0xbb]}}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x7, 0x5}, {0x6, 0x1}, {0x2, 0x6}, {0x1, 0x2}, {0x3, 0x7}, {0x2, 0x1}, {0x1, 0x6}, {0x1, 0xa}, {0x1, 0x1}, {0x0, 0x4}, {0x7, 0x1}, {0x4, 0x1}, {0x2, 0x3}, {0x0, 0x3}, {0x7, 0x6}, {0x0, 0x2}, {0x1, 0x6}, {0x6, 0x3}, {0x4, 0x6}, {0x1}, {0x1, 0x8}, {0x5, 0x7}, {0x0, 0x8}, {0x3}, {0x0, 0x9}, {}, {0x2, 0x5}, {0x4, 0x3}, {0x6, 0x5}, {0x5, 0x3}, {0x3, 0x6}, {0x1, 0xa}, {0x2, 0x8}, {0x7, 0x9}, {0x3, 0x8}, {0x7, 0x4}, {0x5, 0x9}, {0x7, 0x3}, {0x0, 0x5}, {0x0, 0x5}, {0x0, 0x7}, {0x3, 0x2}, {0x1, 0x2}, {0x4, 0x4}, {0x4, 0x3}, {0x2, 0x5}, {0x7, 0x4}, {0x0, 0x1d}, {0x6, 0x7}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x2, 0x5}, {0x3, 0x5}, {0x2, 0x7}, {0x5, 0x9}, {0x1, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x18, 0x4, 0x2, 0x60, 0x7, 0xb, 0x3, 0xc, 0x9, 0x48, 0x5, 0x0, 0x33, 0x48, 0x6c, 0x60, 0x5, 0xc, 0x24, 0x9, 0x12, 0xc]}, @NL80211_TXRATE_HT={0x41, 0x2, [{0x4}, {0x6, 0x7}, {0x5, 0x9}, {0x0, 0x4}, {0x2}, {0x7, 0x7}, {0x1, 0x6}, {0x1, 0x4}, {0x3, 0xa}, {0x5, 0x8}, {0x1, 0x8}, {0x7, 0x7}, {0x1, 0x3}, {0x2, 0xa}, {0x4, 0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x0, 0x8}, {0x1, 0xa}, {0x2, 0x9}, {0x1, 0x8}, {0x6, 0x8}, {0x0, 0x3}, {0x0, 0xa}, {0x5, 0x7}, {0x4, 0x9}, {0x2, 0x1}, {0x0, 0x8}, {0x6, 0x6}, {0x0, 0x2}, {0x0, 0x5}, {0x5, 0x7}, {0x6, 0x5}, {0x0, 0xa}, {0x2, 0x6}, {0x3, 0x5}, {0x4, 0x4}, {0x7}, {0x0, 0x3}, {0x3, 0x5}, {0x2, 0x7}, {0x1, 0x9}, {0x2, 0x4}, {0x2, 0x6}, {0x0, 0x9}, {0x7, 0x8}, {0x6, 0x9}, {0x7, 0x3}, {0x7, 0x2}, {0x2, 0x2}, {0x0, 0x1}, {}, {0x7, 0x3}, {0x0, 0x7}, {0x7, 0x1}, {0x1, 0x6}, {0x2}, {0x1, 0x3}, {0x0, 0x5}, {0x4, 0x7}, {0x0, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xe, 0xa3, 0xa2, 0x9, 0x58, 0xfb36, 0x55]}}]}, @NL80211_BAND_6GHZ={0x6c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x101, 0x9f29, 0x9, 0xfffb, 0xff, 0x0, 0x7]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfff8, 0xaa, 0x8, 0x3, 0x23, 0x81, 0x3]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0xc, 0x16, 0x6c, 0x48, 0x4, 0x2, 0xb, 0x5, 0x29, 0xc, 0x48, 0x48]}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x7, 0x9}, {0x4, 0x9}, {0x2, 0x1}, {0x7, 0x8}, {0x1, 0x3}, {0x0, 0x6}, {0x1, 0x9}, {0x0, 0x7}, {0x2, 0x1}, {0x5, 0x5}, {0x2, 0x1}, {0x6, 0x5}, {0x0, 0xa}, {0x6}, {0x1, 0x4}, {0x4, 0x8}, {0x7}, {0x0, 0x5}, {0x5, 0x4}, {0x1, 0x6}, {0x5, 0x9}, {0x3, 0x8}, {0x1, 0x5}, {0x0, 0x4}, {0x7, 0x5}, {0x1, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x32}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1b}]}, {0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffff7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x8d}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x29}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2a}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0xb4, 0x11d, 0x0, 0x1, [{0xb0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xac, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xa8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x3, 0x2, 0x0, 0x6e5, 0x4, 0x9, 0x50]}}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x4, 0x3}, {0x0, 0x1}, {0x0, 0x9}, {}, {0x6, 0x8}, {0x2, 0x1}, {0x6, 0x3}, {0x1, 0x5}, {0x6, 0x9}, {0x6, 0x7}, {0x4, 0xa}, {0x4, 0x3}, {0x4, 0x3}, {0x6, 0x9}, {0x1, 0x6}, {0x1, 0x3}, {}, {0x3, 0x2}, {0x4, 0x4}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0x8}, {0x1, 0x6}, {0x3, 0x1}, {0x1, 0x3}, {0x3, 0x5}, {0x0, 0x4}, {0x3, 0x9}, {0x3, 0x6}, {0x0, 0x9}, {0x1, 0x1}, {0x1, 0x5}, {0x5, 0x6}, {0x5, 0x3}, {0x1, 0x9}, {0x1, 0x7}, {0x5, 0x3}, {0x1, 0x2}, {0x2, 0x1}, {0x3, 0x5}, {}, {0x5, 0x1}, {0x0, 0x4}, {0x4, 0xa}, {0x0, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8b09, 0x8000, 0xf07a, 0xffff, 0x8000, 0x1000, 0x8000, 0xc6]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x0, 0x9}, {0x6, 0x3}, {0x7, 0x6}, {0x7, 0x5}, {0x3, 0x3}, {0x3, 0x6}, {0x0, 0x2}, {0x5, 0x1}, {0x3, 0x3}, {0x4, 0x1}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffa, 0x6, 0x2, 0xb9, 0x40, 0x9, 0x0, 0x6e4]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x6, 0x3, 0xb, 0x1, 0x36, 0x6c, 0x12, 0x72, 0x18, 0x36, 0x30, 0x5, 0x48, 0x9, 0x1b, 0x70]}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x120, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0xf4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x100000000}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x34}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xa8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x0, 0x16, 0x30, 0x1, 0x24, 0x0, 0x3, 0x48, 0x18, 0x6, 0xc, 0xc, 0x6c, 0x5, 0x4, 0x6, 0x18, 0xc, 0xb, 0x0, 0xc, 0xc, 0x36, 0x4, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x12, 0x12, 0x12, 0x3, 0x2, 0x12, 0x4, 0x64, 0x1b, 0x6, 0x5, 0x48, 0x6, 0x24, 0x9, 0x48, 0x36, 0x3, 0x5, 0x12, 0x4, 0x24, 0x6c, 0x66, 0x1b, 0x48, 0x16, 0x16, 0x7e, 0x16, 0x3, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x7, 0x3, 0x7, 0x8, 0x10, 0x3a4, 0xff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x82, 0xc0, 0xfffe, 0x8, 0xfff, 0x9, 0x7, 0x2897]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x18, 0x1, 0x9, 0x2, 0x88e4, 0x6, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1a}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x50}]}]}, @NL80211_ATTR_TID_CONFIG={0x25c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x2f}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x1f4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1e8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x200, 0x2, 0x81, 0x2, 0x7, 0x25, 0x0, 0xfffa]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0xc, 0x60, 0x24, 0xb, 0x6, 0xb, 0x16, 0x36, 0x7f, 0x6, 0x9, 0x12, 0x1b, 0x36, 0x30, 0x2, 0x1b, 0x2, 0x0, 0x2, 0xb, 0xb, 0xb, 0x63, 0x1b, 0x24]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x0, 0x2}, {0x2, 0x7}, {0x7, 0xa}, {0x5, 0x8}, {0x4, 0x7}, {0x5, 0x3}, {0x3, 0x1}, {0x6, 0x1}, {0x3, 0x4}, {0x3, 0x2}, {0x1, 0x7}, {0x3, 0x9}, {0x6, 0x6}, {0x0, 0x6}, {0x1, 0x7}, {0x3, 0x9}, {0x7, 0x3}, {0x4, 0xa}, {0x6, 0x9}, {0x0, 0x2}, {0x3, 0x3}, {0x4, 0x5}, {0x0, 0x1f}, {0x7, 0x6}, {0x4, 0x6}, {0x2, 0x2}, {0x1, 0x9}, {0x4, 0x1}, {0x5}, {0x1, 0x7}, {0x0, 0x4}, {0x4, 0x3}, {0x6, 0x6}, {0x0, 0x2}, {0x1, 0x5}, {0x2, 0x8}, {0x2, 0x9}, {0x3, 0x5}, {0x0, 0x1}, {0x5, 0x5}, {0x2, 0x6}, {0x5, 0x1}, {0x0, 0x3}, {0x1, 0x6}, {0x2, 0x2}, {0x5, 0x6}, {0x4, 0x9}, {0x4, 0x2}, {0x1, 0x2}, {0x0, 0x7}, {0x0, 0xa}, {0x0, 0x1}, {0x1, 0x8}, {0x2, 0x5}, {0x1, 0x6}, {0x6, 0x8}, {0x7, 0x8}, {0x2, 0x8}, {0x5, 0x2}, {0x2, 0x4}, {0x1}, {0x5, 0x4}, {0x2, 0x3}, {0x1, 0x1}, {0x7}, {0x5, 0xa}, {0x0, 0x9}, {0x0, 0x7}, {0x1, 0x5}, {0x1, 0x3}, {0x1, 0x3}, {0x2, 0x1}, {0x4, 0x7}, {0x0, 0x6}, {0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x8001, 0x9, 0x8, 0x1000, 0x80, 0x40, 0x8a2d]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x48, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x3, 0x12, 0x3, 0x24, 0xb, 0x60, 0x36, 0x12, 0x1b, 0x2, 0x60, 0x2, 0x1b, 0x9, 0x48, 0x6c, 0x30, 0x16, 0x1, 0x0, 0x36, 0x16, 0x2, 0x6, 0x9, 0x16]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x60, 0x78, 0x18, 0x26, 0x3, 0x5, 0x1, 0x2, 0x24, 0x9, 0x2, 0x18, 0x3, 0x1, 0x8, 0x6, 0x36, 0x48, 0xb, 0x18, 0x3, 0x1b, 0x36, 0x30, 0x4, 0xc, 0x48, 0x48, 0x2, 0xc]}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x101, 0x9, 0x6, 0xb8, 0x4, 0x5, 0x1, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x1, 0xa}, {0x0, 0x1}, {0x5, 0xa}, {0x7, 0x6}, {0x5, 0x6}, {0x0, 0x9}, {0x1, 0x9}, {0x1, 0x5}, {0x4, 0x5}, {0x0, 0x1}, {0x6}, {0x5}, {0x2, 0x5}, {0x7, 0x9}, {0x2, 0x1}, {0x0, 0x8}, {0x0, 0x4}, {0x6, 0x8}, {0x0, 0xa}, {0x1, 0x3}, {0x3, 0x6}, {0x0, 0x4}, {0x2, 0x7}, {0x2, 0x8}, {0x1, 0x8}, {0x1, 0x2}, {0x1}, {0x6, 0x8}, {0x0, 0xa}, {0x2, 0x8}, {0x4, 0x7}, {0x1, 0x4}, {0x2, 0xa}, {0x2, 0x7}, {0x7, 0x6}, {0x1, 0x8}, {0x2, 0xa}, {0x6, 0x2}, {0x3, 0x9}, {0x1, 0x6}, {0x6, 0x7}, {0x7, 0x5}, {0x3, 0x3}]}, @NL80211_TXRATE_HT={0x4c, 0x2, [{0x7}, {0x7, 0x1}, {0x7, 0x2}, {0x6, 0x9}, {0x0, 0x3}, {0x5, 0x6}, {}, {0x6, 0x7}, {0x3, 0x6}, {0x7, 0x3}, {0x6, 0x1}, {0x1, 0x3}, {0x5}, {0x0, 0x3}, {0x7, 0x3}, {0x2, 0x7}, {0x3, 0x2}, {0x1, 0x6}, {0x6, 0x9}, {0x2, 0x3}, {0x1, 0x1}, {0x5, 0x2}, {0x0, 0x6}, {0x4, 0x5}, {0x4, 0x5}, {0x0, 0x1}, {0x3, 0x1}, {0x7, 0x1}, {0x4, 0x4}, {0x2}, {0x0, 0x8}, {0x3, 0x9}, {0x4, 0x8}, {0x1, 0x7}, {0x5, 0x3}, {0x2, 0xa}, {0x5, 0x3}, {0x6, 0x6}, {0x5, 0x4}, {0x7, 0x6}, {}, {0x0, 0x5}, {0x0, 0x5}, {0x0, 0x8}, {0x7, 0x2}, {0x5, 0x7}, {0x6, 0x3}, {0x6, 0x3}, {0x7, 0x3}, {0x2, 0x1}, {0x4, 0x3}, {0x7, 0x1}, {0x4, 0x7}, {0x5, 0x3}, {0x0, 0x3}, {0x6, 0x7}, {0x1, 0x7}, {0x5, 0x5}, {0x2, 0x9}, {0x5, 0x3}, {0x7, 0x1}, {0x5, 0x2}, {0x2, 0x7}, {0x6, 0x5}, {0x5, 0x5}, {0x5, 0x3}, {0x5, 0x6}, {0x1, 0x7}, {0x7, 0x8}, {0x3, 0x2}, {0x1, 0x2}, {0x3}]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x6c, 0x1, 0x24]}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x24}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x65}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x146c}, 0x1, 0x0, 0x0, 0x40014}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000001c00), 0x16001, 0x0) ioctl$TUNSETLINK(r10, 0x400454cd, 0x304) ioctl$KVM_GET_API_VERSION(r4, 0xae00, 0x0) read$FUSE(r8, &(0x7f0000001c40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000003c80), r8) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f0000003cc0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x7, 0x4}}, 0x30) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000003dc0)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003d80)={&(0x7f0000003d40)={0x3c, r13, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x20, 0x17, {0x4, 0x5, @l2={'eth', 0x3a, 'veth1_to_batadv\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048810}, 0x4004000) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r8, &(0x7f00000044c0)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000004480)={&(0x7f0000003e40)={0x624, r1, 0x300, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3f}}}}, [@NL80211_ATTR_TX_RATES={0x28c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x84, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x23, 0x6, 0x6, 0x50, 0x60, 0x1b, 0x18, 0x18, 0x60, 0x5, 0x24, 0x24, 0x4, 0x2, 0xb, 0x60, 0x5, 0x3, 0x12, 0x0, 0xb, 0x60, 0x48, 0x24, 0x1, 0x4]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x30, 0x24, 0x60, 0x5, 0x0, 0x30, 0x6c, 0x6c, 0x5, 0x3, 0x16, 0x24, 0x1b, 0x6c, 0x36, 0x2, 0x6, 0x6, 0x16, 0x1, 0x4, 0x77, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x6, 0x5, 0x7, 0x95d3, 0x5, 0x0, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x2f1, 0xd345, 0x1, 0x0, 0x7f, 0x2, 0x200]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x36, 0x4, 0x6, 0x0, 0x6c, 0x12, 0x39, 0xc, 0x36, 0x24, 0x1b, 0xc, 0x6, 0x36, 0x4, 0xb]}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x883, 0x2a, 0x0, 0x101, 0xba3b, 0xfc00]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x10, 0x48c6, 0x0, 0x2, 0x6, 0x0, 0x4, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x2e23, 0x6, 0x7ff, 0x7, 0xfff, 0x1, 0x8001]}}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x2, 0x4}, {0x0, 0x5}, {0x2, 0x3}, {0x4, 0x3}, {0x0, 0x5}, {0x1, 0x2}, {0x4, 0x7}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x4c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x40, 0x2, [{0x7, 0x6}, {0x2, 0x5}, {0x5, 0x1}, {0x5, 0xa}, {0x1, 0x4}, {0x5, 0x6}, {0x7, 0x4}, {0x3, 0x8}, {0x0, 0x3}, {0x4, 0x7}, {0x1, 0x8}, {0x7, 0x6}, {0x6, 0x3}, {0x0, 0x2}, {0x4, 0x7}, {0x1, 0x6}, {0x3, 0x8}, {0x0, 0x5}, {0x7, 0x2}, {0x2, 0x2}, {0x5, 0x3}, {0x2, 0x6}, {0x2, 0x9}, {0x1}, {0x1}, {0x0, 0x7}, {0x4, 0x8}, {0x4, 0x2}, {0x1, 0x1}, {0x5, 0x3}, {0x4, 0x5}, {0x0, 0xa}, {0x6, 0x5}, {0x2, 0x2}, {0x6, 0x4}, {0x2, 0xa}, {0x5}, {0x0, 0x8}, {0x2, 0x3}, {0x3}, {0x7, 0x7}, {0x7, 0x5}, {0x0, 0xa}, {0x1, 0x8}, {0x7, 0x2}, {0x3, 0xa}, {0x4, 0x5}, {0x1, 0x2}, {0x5, 0x4}, {0x3, 0x6}, {0x3, 0x1}, {0x2, 0x4}, {0x5, 0x8}, {0x7, 0x6}, {0x5, 0x5}, {0x6, 0x4}, {0x2, 0x4}, {0x1, 0x8}, {0x7, 0x9}, {0x1, 0xa}]}]}, @NL80211_BAND_60GHZ={0xc4, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1e, 0x2, [{0x1, 0x5}, {0x2, 0x4}, {0x5}, {0x7, 0x1}, {0x7, 0xa}, {0x6, 0x1}, {0x5, 0xa}, {0x7}, {0x3, 0x5}, {0x6, 0x8}, {0x1, 0x9}, {0x6, 0x9}, {0x0, 0x5}, {0x0, 0x9}, {0x0, 0x3}, {0x7, 0x8}, {0x4, 0xa}, {0x4, 0x5}, {0x6, 0x5}, {0x4, 0x2}, {0x4, 0xa}, {0x5, 0x2}, {0x4, 0x5}, {0x2, 0x6}, {0x6, 0x9}, {0x0, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x8000, 0x5556, 0x5, 0x8, 0x200, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0xfffa, 0x3, 0x5, 0x4, 0x4, 0x2]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff9, 0x9, 0x0, 0x1, 0x2, 0x8, 0x5, 0x5a4b]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8000, 0x7, 0xf7d4, 0x7, 0x1ff, 0x8001, 0x7]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0xb, 0x2, 0x4, 0x1, 0xc, 0x36, 0x4, 0x3]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xb, 0x401, 0xe, 0x2, 0xc, 0x2, 0xbf]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0xfff1, 0x7, 0x9, 0xa, 0x0, 0x1ff, 0x200]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfffe, 0x7, 0x0, 0x1, 0x7, 0x7, 0x9, 0x12]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0x60, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x38, 0x2, [{0x2, 0x2}, {0x3, 0x3}, {0x2, 0x4}, {0x2, 0x7}, {0x0, 0x9}, {0x5, 0x2}, {0x0, 0x8}, {0x4, 0x6}, {0x6, 0x5}, {0x3, 0x2}, {0x0, 0x8}, {0x4, 0x1}, {0x6, 0x6}, {0x4, 0x2}, {0x7, 0x8}, {0x5, 0x9}, {0x2, 0x4}, {0x1, 0x4}, {0x6, 0x5}, {0x0, 0x2}, {0x6, 0x6}, {0x6, 0x8}, {0x7, 0x9}, {0x1, 0x8}, {0x7, 0x4}, {0x5, 0x5}, {0x0, 0x9}, {0x0, 0x8}, {0x1, 0x2}, {0x7, 0x2}, {0x7, 0xa}, {0x1, 0x2}, {0x3, 0x8}, {0x7, 0x4}, {0x7, 0x7}, {0x2, 0x8}, {0x1, 0x2}, {0x1, 0x7}, {0x1, 0xa}, {0x2, 0x1}, {}, {0x1, 0xa}, {0x3, 0x6}, {0x7, 0x1}, {0x1, 0xa}, {0x5, 0x3}, {0x2, 0x1}, {0x5, 0x5}, {0x7, 0x6}, {0x1}, {0x4, 0x1}, {0x0, 0x7}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x428, 0xf, 0x3, 0x8b85, 0x8, 0x2, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x244, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xacf5, 0x3, 0xf, 0x1, 0x9, 0x200, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x24, 0x6, 0x12, 0x9, 0xc, 0xb, 0x0, 0x48, 0x14, 0x30]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0xf321, 0x81, 0x7, 0x3, 0x8000, 0x58, 0x2798]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x24, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x58a1727c5702c51a, 0xc, 0x6c, 0x3, 0x79, 0x3, 0x0, 0x1, 0x30, 0x1b, 0x1, 0x36, 0x4, 0x1, 0x24, 0xb, 0x9, 0xb, 0x6c, 0xd, 0x1, 0x6, 0x16, 0x36, 0x12, 0xb, 0x2, 0x4]}]}, @NL80211_BAND_2GHZ={0xa0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x8}, {0x7, 0x3}, {0x1, 0x6}, {0x2, 0x1}, {0x6, 0x3}, {0x2, 0xa}, {0x0, 0x2}, {0x4, 0x4}, {0x0, 0x5}, {0x1, 0x2}, {0x7, 0x4}, {0x6, 0x6}, {0x2, 0x1}, {0x4}, {0x0, 0x8}, {0x0, 0xa}, {0x6}, {0x1, 0x4}, {0x5, 0x2}, {0x7, 0x7}, {0x1, 0x6}, {0x1, 0x9}, {0x0, 0x9}, {0x1, 0x5}, {0x5, 0x7}, {0x6, 0x3}, {0x2, 0xa}, {0x3, 0x3}, {0x7, 0x4}, {0x7, 0x3}, {0x1, 0x8}, {0x0, 0x4}, {0x0, 0x5}, {0x1, 0x7}, {0x1, 0x1}, {0x7, 0x7}, {0x1, 0x5}, {0x5, 0x3}, {0x6, 0xa}, {0x5, 0x6}, {0x1, 0x5}, {0x5, 0xa}, {0x0, 0x3}, {0x5, 0x4}, {0x6, 0x9}]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0xc, 0x18, 0x1b, 0x60, 0x30, 0x6, 0x12, 0x3c, 0x2fb3f4c013388030, 0x0, 0x24, 0x17, 0x2, 0x6, 0x1b, 0x2, 0x6c, 0x18, 0x9, 0x60, 0x48, 0xb, 0x16, 0x48]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x12, 0x16, 0x1b, 0x36, 0x48, 0x1b, 0x6c, 0x2, 0x48, 0x48, 0x5, 0xc, 0x18, 0xc, 0x3, 0x36, 0x5, 0x6c, 0x1b, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x40, 0x3, 0x4, 0x7, 0x4, 0xea42, 0xff, 0x8604]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x36, 0x60, 0x0, 0x36, 0x48, 0x60, 0x1b, 0x6acd188ac16839a, 0x16, 0x2b, 0xb, 0x2]}]}, @NL80211_BAND_60GHZ={0xe8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x12, 0x2, [{0x5, 0x3}, {0x1, 0x7}, {0x0, 0x2}, {0x1, 0x4}, {0x6}, {0x3, 0x7}, {0x0, 0x9}, {0x2, 0x5}, {0x5, 0x3}, {0x7, 0x4}, {0x1, 0x5}, {0x2, 0x1}, {0x1, 0x2}, {0x0, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x1, 0x5, 0xfd6, 0x6, 0x1, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0xe}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0x7}, {0x6, 0x9}, {0x6, 0x8}, {0x1, 0x6}, {0x4}, {0x7, 0x8}, {0x0, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x1, 0x7}, {0x3, 0xa}, {}, {0x7, 0x2}, {0x7, 0x8}, {0x2, 0x5}, {0x1, 0xa}, {0x0, 0x6}, {0x1, 0xa}, {0x2, 0xa}, {0x4, 0x3}, {0x0, 0x5}, {0x1, 0x3}, {0x3}, {0x1, 0x6}, {0x2, 0x8}, {0x2, 0x8}, {0x2, 0xa}, {0x5, 0x7}, {0x5, 0x4}, {0x7, 0x4}, {0x5, 0x2}, {0x0, 0x3}, {0x2, 0x9}, {0x7}, {0x7, 0x2}, {0x4, 0x2}, {0x5, 0x3}, {0x5, 0x8}, {0x3, 0x2}, {0x1, 0x9}, {0x4, 0x1}, {0x6, 0x2}, {0x1, 0x5}, {0x1}, {0x7}, {0x5, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfff, 0x200, 0x6, 0x8, 0x7, 0x7fff, 0x6, 0x3ff]}}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x2, 0x9}, {0x4, 0xa}, {0x4, 0x5}, {0x6, 0x5}, {0x7, 0x4}, {0x1, 0x2}, {0x7}, {0x1, 0x8}, {0x5, 0x6}, {0x1, 0x7}, {0x3}, {0x1, 0x1}, {0x2, 0x2}, {0x1, 0x3}, {0x5, 0x8}, {0x0, 0x2}, {0x3, 0x7}, {0x1, 0x4}, {0x1, 0x8}, {0x1, 0x4}, {0x7}, {0x0, 0x2}, {0x5, 0x3}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x1}, {0x0, 0x3}, {0x5, 0x7}, {0x0, 0x5}, {0x7, 0x6}, {0x1, 0x6}, {0x6, 0x6}, {0x5}, {0x1, 0x1}, {0x6}, {0x2, 0x3}, {0x0, 0xa}, {0x4, 0x4}, {0x0, 0x9}, {0x0, 0x9}, {0x4, 0x1}, {0x1, 0x3}, {0x4, 0x2}, {0x3, 0x5}, {0x6, 0x1}, {0x6, 0x7}, {0x7, 0x6}, {0x5, 0x7}, {0x7, 0x7}, {0x0, 0x7}, {0x2, 0x9}, {0x1}, {0x4, 0x2}, {0x5, 0x8}, {0x0, 0x4}, {0x2, 0x1}, {0x3, 0x9}, {0x7, 0x2}, {0x5, 0xa}, {0x2, 0x9}, {0x1, 0xa}, {0x0, 0x6}, {0x4, 0xa}, {0x4, 0x9}, {0x5}, {0x5, 0x3}, {0x1, 0x1}, {0x7, 0xa}, {0x1, 0x7}, {0x0, 0x9}, {}, {0x5, 0x8}, {0x1, 0x6}, {0x5, 0x4}, {0x1, 0x2}, {0x7, 0x7}, {0x5, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x12, 0x2, [{0x6, 0x2}, {0x1, 0x5}, {0x7, 0x5}, {0x2, 0x3}, {0x2, 0x5}, {0x5, 0x4}, {0x1, 0x7}, {0x3, 0x5}, {0x6, 0x4}, {0x3, 0x3}, {0x4, 0x3}, {0x5, 0x9}, {0x0, 0x1}, {0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xf1, 0x2, 0x9, 0xfffe, 0x2, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x38, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x2, 0x12, 0x6, 0x48, 0xb, 0x48, 0x48]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x7, 0x3}, {0x4, 0x5}, {0x7, 0x9}, {0x1, 0x9}, {0x4, 0x4}, {0x3, 0x3}, {0x1, 0x1}, {0x4, 0xa}, {0x4, 0x8}, {0x7, 0x5}, {0x0, 0x1}, {0x5, 0xa}, {0x7, 0x2}, {0x7, 0x1}, {0x0, 0x5}, {0x5, 0x1}, {0x0, 0xa}, {0x5, 0xa}, {0x7, 0x6}, {0x1, 0x3}, {0x5, 0x2}, {0x4, 0xa}, {0x7, 0x4}, {0x2}, {0x5, 0x6}, {0x7, 0x7}, {0x0, 0x1}, {0x2, 0x3}, {0x3, 0x8}, {0x6, 0x2}, {0x3, 0x4}, {0x4, 0xa}]}]}]}, @NL80211_ATTR_TX_RATES={0xfc, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xcc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2c, 0x2, [{0x1}, {0x7, 0x1}, {0x6, 0x1}, {0x1, 0x6}, {0x7}, {0x1}, {0x3, 0x9}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x8}, {0x2, 0x6}, {0x4, 0x8}, {0x1, 0x6}, {0x5, 0x1}, {0x0, 0x5}, {0x2}, {0x7, 0x1}, {0x7, 0x5}, {0x7, 0x9}, {0x4, 0x9}, {0x1, 0x6}, {0x0, 0x3}, {0x2, 0x8}, {0x3, 0x6}, {0x7, 0x5}, {0x6, 0x3}, {0x1, 0x4}, {0x2}, {0x0, 0x1}, {0x2, 0x2}, {0x2, 0x5}, {0x4, 0x4}, {0x2, 0x7}, {0x5, 0x4}, {0x2, 0x4}, {0x4, 0x8}, {0x5}, {0x1, 0x3}, {0x6, 0x3}, {0x4, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8470, 0x6b1, 0x3, 0x7, 0x8, 0x7f, 0x6, 0x1400]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x2, 0x8, 0x4, 0x7, 0xe1, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xaa8a, 0x400, 0x1, 0xa, 0xffff, 0x4, 0x25, 0x4]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0x4}, {0x5, 0x9}, {0x6, 0x7}, {0x1, 0x7}, {0x4, 0x6}, {0x4, 0x8}, {0x0, 0x8}, {0x6}, {0x7, 0x8}, {0x2, 0x7}, {0x1, 0x5}, {0x0, 0x3}, {0x7, 0x3}, {0x5}, {}, {0x5, 0x1}, {0x2}, {0x4, 0x6}, {0x1, 0xa}, {0x2, 0x4}, {0x6}, {0x2, 0x2}, {0x3, 0x7}, {0x7, 0xf}, {0x1}, {0x2, 0x8}, {0x4, 0x8}, {0x1, 0x5}, {0x1, 0x1}, {0x5, 0x6}, {0x1, 0x7}, {0x2, 0x7}, {0x6, 0x1c}, {0x5, 0x1}, {0x7, 0xa}, {0x0, 0x6}, {0x0, 0x3}, {0x3, 0x8}, {0x3, 0x2}, {0x6, 0x8}, {0x6, 0x3}, {0x5, 0x9}, {0x4, 0x1}, {0x2}, {0x3, 0x5}, {0x0, 0x2}]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x1b, 0x1b, 0x1b, 0x1d, 0x1, 0x6e, 0x4, 0x6c, 0x6641a4de637f79b9, 0x1, 0xb, 0x16, 0x2e, 0x1, 0x6, 0xb, 0xc, 0x5, 0x24, 0x9, 0x18, 0x24, 0x24]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0xc583, 0xd, 0x3, 0x4, 0x2, 0x0, 0x9]}}]}]}]}, 0x624}, 0x1, 0x0, 0x0, 0xa844}, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) mount$bind(&(0x7f0000004500)='.\x00', &(0x7f0000004540)='./file0\x00', &(0x7f0000004580), 0x2001040, 0x0) r14 = openat$fuse(0xffffffffffffff9c, &(0x7f00000045c0), 0x2, 0x0) write$FUSE_BMAP(r14, &(0x7f0000004600)={0x18, 0x0, r11, {0x10}}, 0x18) wait4(r12, &(0x7f0000004640), 0x8, &(0x7f0000004680)) 2m13.051545753s ago: executing program 0 (id=663): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x1002, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x22401, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4008550d, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd(0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f00000000c0)=0x1, 0x4) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000280)={r4, 0x2, 0x2, r4}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x4400, 0x0) ioctl$IOC_PR_RESERVE(r7, 0x401070c9, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) close_range(r0, 0xffffffffffffffff, 0x0) 2m12.996167384s ago: executing program 0 (id=664): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x8001) (async) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x200000000000000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x1000810, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@msize={'msize', 0x3d, 0x26da2d2a}}]}}) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) dup(r8) (async) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r9, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x3ea3, 0x37b, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1010000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB, @ANYRESHEX, @ANYRESDEC]) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB, @ANYRESHEX, @ANYRESDEC]) pidfd_send_signal(r9, 0x40, &(0x7f0000000180)={0x3c, 0x0, 0xffffffe4}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0xff06, &(0x7f0000000000)={@fd, @fd, @flat=@binder={0x73622a85, 0x1000, 0x3}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 1m59.348528663s ago: executing program 4 (id=784): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) keyctl$clear(0x7, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r0, 0xfffff000) 1m59.348078963s ago: executing program 4 (id=785): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x1ff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x4}, 0x1c) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"}) 1m59.347747073s ago: executing program 4 (id=786): recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60000023, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) openat$random(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8100, 0xa0) openat$incfs(r1, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x110) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8100, 0xa0) openat$incfs(r2, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x110) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0xe, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x2}) 1m59.341012413s ago: executing program 4 (id=787): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setrlimit(0xe, &(0x7f0000000040)={0xd847, 0x6}) mount(0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x7000000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x200000c, 0x2010, r1, 0xf7f03000) setreuid(0x0, r3) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x100000) sendfile(r0, r0, 0x0, 0x7ffff000) 1m58.440328888s ago: executing program 4 (id=803): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000580)=""/85, 0x55}], 0x1, 0x0, 0xffffffff) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x8085b) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x3000002, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000006c0)='\x00\x00\x03\t\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\x80\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\b\xd0\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=vj<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d\n\xce\f\xba\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\xa9\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9h\x00\x13P1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xbeMk\xe0C\xc3\aSH\xe0\xf2\x0f\'z8\xbe\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\a\x00\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+p\x00\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc2\x00\x00\x00\x00\x00\x00\x04<\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|\x18\bb\x82\x8f\xc0\xab\xe3a`z\x06\x00\x00\x00\x00\x00\x00\x00\\\xf2\xd5\b\x00\x00\x00\x00') ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000300)='\x00\x00\x03\x06\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn\x05\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xdca\xfb\xa6\xff\xff\xff\xff\x00\x00\x00\x00d\xf0\xf1j\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\xbfA\xeb\xd8\t\x00\x00\x00CvNhx461\x04N<\xedV\xcet\xaa~\xf3j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\x99\x12\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg2\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\xf2\x998\xc8\xc2|2\xee\xb4W\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xd6Z%\xa7Ks\x8bUolS\x05\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x00\x00') 1m58.439454788s ago: executing program 4 (id=804): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000840)=ANY=[@ANYRES8=r0], 0x15) (async) prctl$PR_SET_IO_FLUSHER(0x41, 0x1) prctl$PR_SET_IO_FLUSHER(0x41, 0x0) (async, rerun: 32) r3 = dup(r1) (async, rerun: 32) r4 = gettid() setpgid(r4, r4) (async, rerun: 32) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) sendmsg$inet6(r5, &(0x7f0000002240)={&(0x7f0000001d00)={0xa, 0xe24, 0x21f, @remote, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="24000000000000002900000232000000006a040000", @ANYRES16=r0, @ANYBLOB="00004900180000000000000029000000390008000800000600000000fa555e7c7b42046cd1420793dba05466be456b419fa84803166a415f704c545f41813deffc998a332bfef64bdcb3a30ccfdee431c7469bef005c0576cc375301278d2b1e4013055b278520219f9f765ae1000009b82f27d6bb7892fc4e972ebdc588f5984be2e8d9e542a49bf3af58f66f18d74e44dc59229a644d313246aae1a320a9c87460e183f6b142a0820d81f33ab52258020a4ebd2bf8f2b705e1c3a1eb78441b0d6126a64d14defe3ce9d152dfb68725cf41a6202a1fa7c631721d6a4f85087dd24a8073d26d38d3a12785"], 0xfffffffffffffeef}, 0x4080) mmap(&(0x7f0000126000/0x1000)=nil, 0x1000, 0x0, 0x10010, 0xffffffffffffffff, 0x1000) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_POLL(r6, &(0x7f0000000000)={0x18, 0xd0669625430145f, 0x0, {0x6}}, 0x18) (async) sched_setscheduler(r4, 0x5, &(0x7f0000000100)=0x8) (async, rerun: 32) write$FUSE_BMAP(r6, &(0x7f0000000340)={0x18, 0xfffffffffffffffe, 0x0, {0x3b9}}, 0x18) (rerun: 32) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async, rerun: 32) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) (async, rerun: 32) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="b9000000000000", @ANYRESHEX=0x0], 0xb8) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3df905d8b03dc31c637636258e0e540a231a35a3487e", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=loose,\x00']) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x420002, 0x0) read$FUSE(r7, &(0x7f0000002c80)={0x2020}, 0x2020) (async) r8 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) (async) sendmsg$nl_generic(r7, 0x0, 0x2000c040) (async) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x9) (async) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 32) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) bind$xdp(r8, &(0x7f0000000540)={0x2c, 0xd, r10, 0x34}, 0x10) 1m57.193695138s ago: executing program 33 (id=664): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x8001) (async) ioctl$int_in(r1, 0x5421, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000500)={0x0, 0x0, 0x200000000000000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x1000810, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@msize={'msize', 0x3d, 0x26da2d2a}}]}}) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2, r2}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) dup(r8) (async) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r9, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x3ea3, 0x37b, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1010000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB, @ANYRESHEX, @ANYRESDEC]) (async) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYBLOB, @ANYRESHEX, @ANYRESDEC]) pidfd_send_signal(r9, 0x40, &(0x7f0000000180)={0x3c, 0x0, 0xffffffe4}, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x2) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0xff06, &(0x7f0000000000)={@fd, @fd, @flat=@binder={0x73622a85, 0x1000, 0x3}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x10}], 0x0, 0x0, 0x0}) 1m51.205743204s ago: executing program 2 (id=911): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x80040, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f00000002c0)=[@exit_looper, @acquire_done={0x40106309, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={@ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/4096, 0x0, 0x2, 0x1c}, @flat=@binder={0x73622a85, 0x100a, 0x1}, @flat=@weak_binder={0x77622a85, 0x3001, 0x3}}, &(0x7f0000000100)}}], 0x59, 0x0, &(0x7f0000000180)="7da36444688b9003c6045e1cc7af25c074e647b4f4564aaa63f27ea91489a03854cefdb82aa7678a81e6c8848304e129eafaad290f30a1fdb345cc9108b412d63b555e427f4860ca62c851483d9fcdadd026296f264d18663831e148180528a1a50b1eb41156e49ac7"}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) listen(r3, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x3b, 0x0, &(0x7f0000000080)=0x203714e722813fa8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0xb03cdf087638818c, 0x3}) r5 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x569000, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RMKNOD(r6, &(0x7f0000000340)={0x14, 0x13, 0x1, {0x8, 0x4, 0x1}}, 0x14) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0xffffffffffffffdd, 0x0, &(0x7f0000000380)=[@free_buffer={0x40086303, r5}], 0x0, 0x0, 0x0}) 1m51.195220314s ago: executing program 2 (id=912): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000000)={'wg1\x00'}) (async) ioctl$SIOCSIFHWADDR(r0, 0x8b0f, &(0x7f0000000000)={'wg1\x00'}) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000002e00)="2210942272ce9a37c0fb001f95548ca7", 0x20) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYRES32=r6]) close_range(r2, 0xffffffffffffffff, 0x0) 1m51.169895275s ago: executing program 2 (id=913): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r1) r2 = getpgrp(0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x5, 0x0, &(0x7f0000000040)=[@release={0x40046306, 0x1}], 0x19, 0x0, 0x0}) pidfd_getfd(r3, r3, 0x0) r5 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000040)={0x0, 0x5, [{0xffffffffffffffff, 0x0, 0x2000, 0x10000}, {0xffffffffffffffff, 0x0, 0xfffffffff0000000, 0x8000}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0x8000}, {0xffffffffffffffff, 0x0, 0x1000000, 0xfffff000}, {0xffffffffffffffff, 0x0, 0x1000000, 0xfffff000}]}) dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 1m51.104312845s ago: executing program 2 (id=914): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) poll(&(0x7f0000000200)=[{r2, 0x1}], 0x1, 0x5) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/image_size', 0x6c0002, 0x40) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010025bd7000fedbdf2525d856f1062254268c01571096f2000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r5) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="29fe19f6", @ANYRES16=r7, @ANYBLOB="010027bd7000ffdbdf250100000004000680"], 0x18}, 0x1, 0x0, 0x0, 0x4000014}, 0x8008) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000400)='./file0\x00', &(0x7f00000003c0)='./file0\x00') r8 = gettid() poll(&(0x7f0000000080)=[{r3, 0x6000}, {r2, 0x4000}], 0x2, 0x7) clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000140)={0x77359400}, 0x0) rt_sigqueueinfo(r8, 0x2, &(0x7f0000000480)={0x2, 0x0, 0xffffffff}) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_clone(0x802400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f00000000c0)={0xfffffffe, 0xa8d, 0x0, &(0x7f0000000940)="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", 0x1725ae0a7c66b58c, 0xd2}) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f00000001c0)="d8c081d56efaed3dae367a8426bfc7ca771411e6ecc9b0015a49045cc6", 0x0, 0x1d}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1m51.028491887s ago: executing program 2 (id=915): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x51, 0x0, &(0x7f0000000340)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b8003975be8a982d5135e161a783d3d01fddcbd838bac308358a7e349f333e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b9a"}) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f0000000a00)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', [{0x20, '\xaa\xaa\xaa\xaa\xaa'}]}, 0x105) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000480)=""/144, 0x90, 0x1, 0x7}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x9, 0x0, 0x2d}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1m50.929094538s ago: executing program 2 (id=916): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x96, 0xf, 0x3, 0x7fff}]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6313}], 0x0, 0x0, 0x0}) 1m50.84485725s ago: executing program 34 (id=916): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x96, 0xf, 0x3, 0x7fff}]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6313}], 0x0, 0x0, 0x0}) 1m42.637507521s ago: executing program 35 (id=804): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000840)=ANY=[@ANYRES8=r0], 0x15) (async) prctl$PR_SET_IO_FLUSHER(0x41, 0x1) prctl$PR_SET_IO_FLUSHER(0x41, 0x0) (async, rerun: 32) r3 = dup(r1) (async, rerun: 32) r4 = gettid() setpgid(r4, r4) (async, rerun: 32) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) sendmsg$inet6(r5, &(0x7f0000002240)={&(0x7f0000001d00)={0xa, 0xe24, 0x21f, @remote, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="24000000000000002900000232000000006a040000", @ANYRES16=r0, @ANYBLOB="00004900180000000000000029000000390008000800000600000000fa555e7c7b42046cd1420793dba05466be456b419fa84803166a415f704c545f41813deffc998a332bfef64bdcb3a30ccfdee431c7469bef005c0576cc375301278d2b1e4013055b278520219f9f765ae1000009b82f27d6bb7892fc4e972ebdc588f5984be2e8d9e542a49bf3af58f66f18d74e44dc59229a644d313246aae1a320a9c87460e183f6b142a0820d81f33ab52258020a4ebd2bf8f2b705e1c3a1eb78441b0d6126a64d14defe3ce9d152dfb68725cf41a6202a1fa7c631721d6a4f85087dd24a8073d26d38d3a12785"], 0xfffffffffffffeef}, 0x4080) mmap(&(0x7f0000126000/0x1000)=nil, 0x1000, 0x0, 0x10010, 0xffffffffffffffff, 0x1000) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$FUSE_POLL(r6, &(0x7f0000000000)={0x18, 0xd0669625430145f, 0x0, {0x6}}, 0x18) (async) sched_setscheduler(r4, 0x5, &(0x7f0000000100)=0x8) (async, rerun: 32) write$FUSE_BMAP(r6, &(0x7f0000000340)={0x18, 0xfffffffffffffffe, 0x0, {0x3b9}}, 0x18) (rerun: 32) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async, rerun: 32) write$FUSE_GETXATTR(r3, &(0x7f00000000c0)={0x18}, 0x18) (async, rerun: 32) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="b9000000000000", @ANYRESHEX=0x0], 0xb8) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3df905d8b03dc31c637636258e0e540a231a35a3487e", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=loose,\x00']) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x420002, 0x0) read$FUSE(r7, &(0x7f0000002c80)={0x2020}, 0x2020) (async) r8 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) (async) sendmsg$nl_generic(r7, 0x0, 0x2000c040) (async) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x9) (async) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 32) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) bind$xdp(r8, &(0x7f0000000540)={0x2c, 0xd, r10, 0x34}, 0x10) 18.185465727s ago: executing program 6 (id=2649): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast2}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8041, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x76, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x2004c404}, 0x20000000) ioctl$KVM_RUN(r4, 0xae80, 0x0) listen(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RREADDIR(r5, &(0x7f0000000100)={0x128, 0x29, 0x1, {0x1, [{{0x1, 0x4, 0x7}, 0x5, 0x5, 0xd, './file0/file0'}, {{0x0, 0x3, 0x2}, 0x8000, 0xb, 0x7, './file0'}, {{0x8, 0x2}, 0xae, 0xdc, 0x7, './file0'}, {{0x40, 0x2, 0x3}, 0x2, 0x10, 0x7, './file0'}, {{0x10, 0x1}, 0x2, 0xed, 0x7, './file0'}, {{0x8, 0x0, 0x6}, 0xa9d, 0xf1, 0x7, './file0'}, {{0x30, 0x1, 0x2}, 0x15, 0x40, 0x7, './file0'}, {{0x20, 0x0, 0x7}, 0x3, 0x6, 0x7, './file0'}, {{0x4, 0x4, 0x3}, 0xfffffffffffffffd, 0x1, 0x7, './file0'}]}}, 0x128) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000040), 0x14000c, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r6, 0x10001, 0x0) 18.175992147s ago: executing program 6 (id=2650): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x160e) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x208000, 0x1) statx(r1, &(0x7f0000000140)='./file1\x00', 0x0, 0x7ff, &(0x7f0000000200)) 18.120420948s ago: executing program 6 (id=2651): ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000000)=0xffff, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000440)=0x2803, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x3, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x200000000000005d) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b45, &(0x7f0000000000)={0x0, 0xc5f8, 0x1, 0x1, 0xc3}, 0x0, 0x0) r2 = gettid() clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) rt_sigqueueinfo(r2, 0x21, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 18.119920768s ago: executing program 6 (id=2652): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') move_mount(r0, &(0x7f00000000c0)='./mnt\x00', r0, &(0x7f0000000080)='./mnt\x00', 0x172) (async) r1 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8422) ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000180)) syz_clone3(&(0x7f0000000240)={0x0, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000002c0), {}, &(0x7f0000000300)=""/192, 0xfffffffffffffe2a, &(0x7f00000001c0)=""/23, &(0x7f0000000200), 0x7}, 0x58) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) (async) recvmmsg(r3, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f00000003c0)=""/184, 0xb8}], 0x2}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000014c0)=""/197, 0xc5}, {&(0x7f0000000080)=""/45, 0x2d}, {&(0x7f0000001840)=""/4096, 0x1000}], 0x3}, 0x2}], 0x2, 0x2, 0x0) (async) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = dup2(r4, r4) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, 0x0, 0x0) (async) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) (async) r7 = socket$inet(0x2, 0x2, 0x0) (async) r8 = syz_open_pts(r5, 0x4100) ioctl$KDGKBENT(r8, 0x4b46, &(0x7f0000001780)={0x40, 0x7, 0x9}) (async) setsockopt$inet_mreqn(r7, 0x0, 0x20, &(0x7f0000000740)={@broadcast, @empty}, 0xc) getsockopt$inet6_mreq(r6, 0x29, 0x8, &(0x7f0000000340)={@empty, 0x0}, &(0x7f0000000480)=0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001700)={&(0x7f00000015c0)=@getae={0xec, 0x1f, 0x20, 0x70bd2d, 0x25dfdbfb, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x4d4, 0x16, 0x32}, @in6=@remote, 0x7c, 0x3503}, [@policy={0xac, 0x7, {{@in6=@private0, @in=@multicast1, 0x4e23, 0x4, 0x4e21, 0xf, 0xa, 0xc0, 0x20, 0x84, r9}, {0x0, 0x7, 0xa, 0xffff, 0x4f23272e, 0x4, 0x0, 0x5}, {0x1, 0x7, 0xffffffffffff8000, 0x6}, 0x71, 0x6e6bb4, 0x0, 0x1, 0x1, 0x3}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x4) (async) ioctl$PPPIOCGDEBUG(r6, 0x80047441, &(0x7f00000017c0)) r10 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r10, &(0x7f0000000000)={0x1f, @any, 0xfe}, 0xa) (async) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r11, 0xffffffffffffffff, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000040)={'binder0\x00'}) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000001c0)=0x1aa2, 0x4) 18.119608279s ago: executing program 6 (id=2653): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000003c0)='cgroup.stat\x00', 0x275a, 0x0) read$FUSE(r2, &(0x7f00000007c0)={0x2020}, 0x2020) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) read$FUSE(r3, &(0x7f0000001d40)={0x2020}, 0x2020) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2d, &(0x7f0000000400)={0x0, {{0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, {{0xa, 0x4e21, 0xffff0001, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) ioctl$sock_inet6_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000000)) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000044d564b"]) close_range(r0, 0xffffffffffffffff, 0x0) 18.01168787s ago: executing program 6 (id=2657): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05", 0x1, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x5b, 0x0, &(0x7f0000000240)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b809e39281a19cbfb9b5e161a783d3d01fddcbd0600ac308358a7e349f3a4a1b68f764a237475a3b033e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x0, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/251, 0xfb, 0x1, 0x1f}, @fda={0x66646185, 0x400000000000005, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, 0x0}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x45, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000f1600000009"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@flat=@weak_binder={0x77622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r4}, @flat=@binder={0x73622a85, 0x110a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 18.00703987s ago: executing program 36 (id=2657): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05", 0x1, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000100)=[@register_looper], 0x5b, 0x0, &(0x7f0000000240)="a89aff67520a7335b849b4f88a6db06e45e3f5e648a65b809e39281a19cbfb9b5e161a783d3d01fddcbd0600ac308358a7e349f3a4a1b68f764a237475a3b033e620505e4cf1982c991b516a9e26b6bb537c85f5ad467697f0d78b"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x0, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/251, 0xfb, 0x1, 0x1f}, @fda={0x66646185, 0x400000000000005, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, 0x0}}, 0x0}, 0x10}], 0x0, 0x0, 0x0}) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x45, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000f1600000009"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000540)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@flat=@weak_binder={0x77622a85, 0x1001, 0x2}, @fd={0x66642a85, 0x0, r4}, @flat=@binder={0x73622a85, 0x110a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x40}], 0x0, 0x0, 0x0}) 4.470929738s ago: executing program 8 (id=2854): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002240), 0x96642, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x49) fchdir(r3) mkdir(&(0x7f0000000000)='./file0\x00', 0x26) r4 = openat(r3, &(0x7f0000002280)='./file0\x00', 0x45000, 0x59) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xffffffffffffffbe) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448f0, 0x0) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) signalfd(r0, &(0x7f00000023c0)={[0x1]}, 0x8) mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x1010, r2, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='mountinfo\x00') syz_fuse_handle_req(r6, &(0x7f0000000240)="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", 0x2000, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xf, &(0x7f00000022c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x5, &(0x7f0000000100)=0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000002400)={0x0, 0x747, 0x0, 0x13, 0x0, 0x0, 0xe5e}, 0xc) connect$bt_l2cap(r10, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r10) 3.564385792s ago: executing program 8 (id=2868): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x101, 0xd1, 0xb7, 0x43, 0x10, 0x3eb, 0x2002, 0x118, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xf7, 0x5, 0xc0, 0x2d, [{{0x9, 0x4, 0x4f, 0xe9, 0x0, 0xba, 0xf6, 0xd5, 0x6c}}]}}]}}, 0x0) (async, rerun: 64) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x14, 0x0, &(0x7f0000000400)=[@increfs_done={0x40106308, 0x0, 0xfc}], 0x0, 0x0, 0x0}) (rerun: 64) 2.302985933s ago: executing program 8 (id=2894): ioprio_set$uid(0x3, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0xffff) (async) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0xffff) sendfile(r0, r0, 0x0, 0x7ffff002) 2.294353313s ago: executing program 8 (id=2895): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r4 = dup(r3) write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x3ff, 0x400, 0xcad4, 0x50, 0x9, 0x4, 0x0, 0x0, 0x40, 0x80000001}}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) r6 = creat(&(0x7f0000000080)='./file0\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f00000014c0)={0x2020}, 0x2020) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/resume_offset', 0x200000, 0x5) socket$tipc(0x1e, 0x5, 0x0) r9 = accept4$tipc(r6, &(0x7f00000002c0), &(0x7f0000000300)=0x10, 0x400) bind$tipc(r9, &(0x7f0000000100)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x1}}, 0x10) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) r10 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r10, 0x0, 0x45, 0x48040, &(0x7f00000003c0)={0x11, 0xd, r5, 0x1, 0x7, 0x6, @local}, 0x14) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) sendto$inet(r1, &(0x7f0000000400)="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", 0xc7, 0x40080081, 0x0, 0xffffffffffffff67) close_range(r0, 0xffffffffffffffff, 0x0) 2.281069163s ago: executing program 8 (id=2896): getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="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", 0xfe) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0xc0000, 0x0) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160015000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f) r4 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000000), 0x9) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r5, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0c0}, 0x50) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) sendmmsg(r7, &(0x7f0000000440)=[{{&(0x7f0000000500)=@xdp={0x2c, 0x300, r9}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x3c}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x20000084) mmap(&(0x7f0000fee000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x4000) mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, r0, 0x0) 2.180290795s ago: executing program 8 (id=2897): r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), r1) setresgid(0x0, 0x0, 0xee01) getgroups(0x8, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]) setfsgid(0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.state\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) write(r4, &(0x7f0000000080)="df0907ac3affd400", 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', r2, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r2}, 0x14) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYRES8=r3], 0x0) ptrace(0x11, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x20000) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_dev$hiddev(&(0x7f0000000200), 0x0, 0x4140) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x12, &(0x7f0000000240)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x17e88210a7685c1, &(0x7f00000005c0)=ANY=[@ANYRES8]) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) geteuid() mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x2a49009, &(0x7f0000000580)=ANY=[@ANYBLOB="6d07000000000000003030f1f464c8537ec3c03030303030303030352c00"]) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') 2.034069697s ago: executing program 5 (id=2902): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x9, &(0x7f00000000c0)=0xfff7f7fe, 0xae) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e27, @rand_addr=0x64010102}, 0x10) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e25, @private=0xa010100}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000240)=@file={0x1, './file1\x00'}, 0x6e) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r3 = inotify_init() r4 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r6, 0x0) listen(r5, 0xd7) preadv(r4, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/183, 0xf4}], 0x1, 0xa800, 0x7ffe) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) inotify_add_watch(r3, &(0x7f0000000200)='./file0\x00', 0x1600095e) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x150) rmdir(&(0x7f0000000080)='./file0\x00') pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_script(r8, &(0x7f0000020240), 0x10010) splice(r7, 0x0, r9, 0x0, 0x100000004, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x4) recvfrom$inet(r0, &(0x7f0000000300)=""/21, 0x15, 0x40010540, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) 1.136461871s ago: executing program 5 (id=2905): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x0, 0x9c}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/144}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000040)=[@enter_looper, @clear_death], 0xb7, 0x0, &(0x7f0000000340)="022b966675d6ccdaa84bb3f466171a3d1762718d1dfb03c88559107c653b98c10bb0ba1f8de2d7ffe9abec887352e0411cbf40f3ec832418dd72e4edcb513ab7fb3b8ce8006f9d03240966a0e94551886d44256a1ae18640654b15de1bbc8f23080e04b5a072a53104cd9b51c0e7c01660193bd1d45e197303bd4e75adae6287d6d6256a889c1805b8a5a1623980ec450315e07997f7d2ab88bed8270fc9271372c4f9292b5ced051b8fa176b5d76715acd8c9ef6eab1a"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000040)=[@enter_looper, @clear_death], 0xb7, 0x0, &(0x7f0000000340)="022b966675d6ccdaa84bb3f466171a3d1762718d1dfb03c88559107c653b98c10bb0ba1f8de2d7ffe9abec887352e0411cbf40f3ec832418dd72e4edcb513ab7fb3b8ce8006f9d03240966a0e94551886d44256a1ae18640654b15de1bbc8f23080e04b5a072a53104cd9b51c0e7c01660193bd1d45e197303bd4e75adae6287d6d6256a889c1805b8a5a1623980ec450315e07997f7d2ab88bed8270fc9271372c4f9292b5ced051b8fa176b5d76715acd8c9ef6eab1a"}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r3, 0x4068aea3, &(0x7f0000000140)={0xa8, 0x0, 0x3}) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000000)) (async) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xc, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000004c0)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r3, 0x4068aea3, &(0x7f00000001c0)) 1.106644591s ago: executing program 5 (id=2906): mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x40000, &(0x7f0000000000)={[{@stats}, {@max={'max', 0x3d, 0xd3}}, {@stats}, {@stats}, {@max={'max', 0x3d, 0xd90b}}, {@max={'max', 0x3d, 0x5}}, {@stats}], [{@measure}]}) 1.042070183s ago: executing program 5 (id=2907): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) geteuid() mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x8000, &(0x7f0000000580)={[{@mode={'mode', 0x3d, 0x5}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @pic={0x81, 0x5, 0xfc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1}}) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020) 920.973725ms ago: executing program 5 (id=2908): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rpc\x00') r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x2c}, @void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8080) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x4, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x47}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r2 = openat$incfs(r0, &(0x7f0000000280)='.log\x00', 0x80800, 0xc) sendmsg$NL80211_CMD_GET_REG(r2, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x17c, r1, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4f}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xa5}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xa7}, @NL80211_ATTR_REG_RULES={0x138, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4cf}]}, {0x4}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xb6e}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x40}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xc}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1200000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x297}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7e2f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6fb}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1d3}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xd}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffa}]}]}]}, 0x17c}}, 0x10) r3 = syz_usb_connect$uac1(0x5, 0xf9, &(0x7f0000000500)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe7, 0x3, 0x1, 0x4, 0x40, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xa, 0x6}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x100, 0x3, 0xec, 0x5, 0x7, 0x2}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x300, 0x2, 0x2, 0xb}, @extension_unit={0x7, 0x24, 0x8, 0x2, 0x6, 0x4}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x300, 0x5, 0x3, 0xd}, @extension_unit={0xb, 0x24, 0x8, 0x4, 0x7, 0x3c, "a1526083"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x8, 0x9, 0x6, "99c5bd6387bd4787"}, @as_header={0x7, 0x24, 0x1, 0x7, 0x37, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x2, 0x9, 0xe, {0x7, 0x25, 0x1, 0x1, 0xa0, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3, 0x4, 0x6, 0x5, "f6", ')Z'}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x0, 0x2, 0x5, "2570f8af54"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x3, 0x3, 0x6, '9', 'O'}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x8, 0x4, 0x3, 0x2, "8001c07a57e7fae4"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x12, 0x1, 0x7f, 0xa, "74dc", "ce960f"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xe1, 0x40, 0xcd, {0x7, 0x25, 0x1, 0x81, 0x6}}}}}}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000600)={0xa, 0x6, 0x300, 0x3, 0x8, 0x1, 0x10, 0x3}, 0x8, &(0x7f0000000640)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0x101, &(0x7f0000000680)=@string={0x101, 0x3, "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"}}, {0x9b, &(0x7f00000007c0)=@string={0x9b, 0x3, "7c8335fd0cd62bd22181552bab9644712386bbdc107f6ea77d6b8966533a2ca8c9e2dbb16627b28199bfc47a3169c0f80d9ad7b7bcffa285ef51c5d533364f9ee01f5935a8f265b299aa4ec7ab58d45cd461d0221be1ca996af7ce585fb4e6f71652dfe514debccd41b19ade3075b5a018ed8a9fd91f24d5abc0cba2d781385da39293fd23a0bb837dd22bcaba9eea1e4ef1c84236925cdcac"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x407}}]}) syz_usb_control_io(r3, &(0x7f0000000ac0)={0x2c, &(0x7f0000000900)={0x40, 0x23, 0xa8, {0xa8, 0x4, "50d3ad4e65195ddc39471c5148f1cdd36cae4d06df06f49e856c31c0e88cfb1438cf5f8c420f400ebc9c35675a75a13079318831be666cc65082e1aace0950683ae05d7be71ac573b7d561e32988063000725f9f4879988ceb33be576bbc89b0cdbc521c565ce74928e5da29dd8ea5f94d13422d1640f01c1520b8a75cf2ec2633ada7adade4ea1fb57edd9a22efd163e2a88638e4a204472d723474c76d48b981590478641f"}}, &(0x7f00000009c0)={0x0, 0x3, 0x18, @string={0x18, 0x3, "e0a082d3a57c9ed789d360d677db49a5d89c4a1b34ee"}}, &(0x7f0000000a00)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000a40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x90, 0x0, 0x75, 0xc, "32914384", "75251895"}}, &(0x7f0000000a80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xbc, 0x8, 0x0, 0xb9, 0x37, 0x517, 0x9}}}, &(0x7f0000000fc0)={0x84, &(0x7f0000000b00)={0x20, 0x14, 0xe7, "3d3838fa81498d08f99afd76d71b9ddf1355abb314a44c6493e5f00b437df331f21e012442015d3ac934ddd806020fa13c50f2861a6f7f12c5cf675cabada63c134f8c259599fe3e5719119531e082f34fbf690cebe4071a205cbf4e0a93b0ef879a7182a209d1968aba5d6aefa31af8860ea6d41cc1a89ba472389656cd756554567c23a7b2db696f75b3d243e279c43db657104f8ff10bca31f65577e4f4f62b387ae809420853e265aff812c9f3e416c9802378a2707b70a0294a30a34776837f16b3f4b9530ebb734f83271c3d83e58cc7eb76e108332074df412f070ee5f618b6cd51369e"}, &(0x7f0000000c00)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000c40)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000c80)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000cc0)={0x20, 0x0, 0x4, {0x160, 0x8}}, &(0x7f0000000d00)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000d40)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000d80)={0x40, 0xb, 0x2, "39eb"}, &(0x7f0000000dc0)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, &(0x7f0000000e40)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000e80)={0x40, 0x19, 0x2, 'iq'}, &(0x7f0000000ec0)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000f00)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000000f40)={0x40, 0x1e, 0x1, 0xc7}, &(0x7f0000000f80)={0x40, 0x21, 0x1, 0x2}}) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000001080)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x8, 0x57e, 0x2017, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0x10, 0xa1, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x1, 0x3, 0x4, {0x9, 0x21, 0x80, 0xc0, 0x1, {0x22, 0x610}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x7f}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x5, 0x81}}]}}}]}}]}}, &(0x7f00000012c0)={0xa, &(0x7f00000010c0)={0xa, 0x6, 0x200, 0x7, 0xc, 0x8, 0x40, 0xdc}, 0x2d, &(0x7f0000001100)={0x5, 0xf, 0x2d, 0x4, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x6}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "99692656817f814b03e6553c47820a42"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x1, 0x8a, 0x2}]}, 0x5, [{0xc, &(0x7f0000001140)=@string={0xc, 0x3, "83d98446cea8a1be4a23"}}, {0xc, &(0x7f0000001180)=@string={0xc, 0x3, "311ea7ffb115bf0b0710"}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x820}}, {0x97, &(0x7f0000001200)=@string={0x97, 0x3, "96b7ddb64922350d3046499956f6456a2e83e248a4cb6aa4fc6ef4fb2fd8620110c59911c564d98b5e9b7d96e1aec4feff11c0e206eb9cbe927552f976aff36567950c66db7bef0899f990e9d8d205fdaf05f87635389393efaffe669832e49119af685b809b2d5fad316270f633c32cf96a35137534fa54bbfc6bf515f520cc64b9fad9c3feb6abcd357c8fdf73608048e58c23b1"}}, {0x0, 0xfffffffffffffffd}]}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001340)='/proc/cpuinfo\x00', 0x0, 0x0) bind$tipc(r0, &(0x7f0000001380)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x3}}, 0x10) bind$inet(r2, &(0x7f00000013c0)={0x2, 0x4e20, @remote}, 0x10) write$khugepaged_scan(r2, &(0x7f0000001400), 0x8) ftruncate(0xffffffffffffffff, 0x7ca) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001480), r4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000014c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f00000015c0)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x70, r5, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xbf3, 0x30}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4010) bind$tipc(r2, &(0x7f0000001600)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) r7 = syz_open_dev$loop(&(0x7f0000001640), 0x5, 0x141000) ioctl$HDIO_GETGEO(r7, 0x301, &(0x7f0000001680)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000016c0)={'veth1_to_team\x00'}) r8 = socket$can_raw(0x1d, 0x3, 0x1) close_range(r0, r8, 0x0) close_range(r4, r4, 0x0) pipe(&(0x7f0000001700)={0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r9, 0xc0145401, &(0x7f0000001740)={0x1, 0x0, 0x8, 0x8a0f267b531117a3, 0x2}) getsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000001780), &(0x7f00000017c0)=0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001800), 0x2, 0x0) r10 = syz_open_dev$loop(&(0x7f0000001840), 0x3, 0x105000) ioctl$BLKOPENZONE(r10, 0x40101286, &(0x7f0000001880)={0x1, 0x3}) 447.911583ms ago: executing program 5 (id=2913): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0) r0 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCGRAB(r0, 0x40044590, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) timer_create(0x4, 0x0, 0x0) timer_gettime(0x0, 0x0) stat(0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$binder(0x0, 0x0, 0x0, 0x20c411, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000040) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) r4 = userfaultfd(0x800) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x404}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(0x0, 0x60142, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) 447.451852ms ago: executing program 7 (id=2914): r0 = getuid() (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) (async, rerun: 64) syz_open_procfs$userns(r2, &(0x7f0000000000)) (rerun: 64) r3 = getegid() r4 = getgid() (async) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000028c0)={{{@in=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@initdev}}, &(0x7f00000029c0)=0xe8) (async) fstat(0xffffffffffffffff, &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000000280)="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", 0x2000, &(0x7f0000002bc0)={&(0x7f0000002280)={0x50, 0x0, 0x2, {0x7, 0x2b, 0x3, 0x0, 0x1000, 0x200, 0x1, 0x0, 0x0, 0x0, 0x146, 0x8}}, &(0x7f0000000100)={0x18, 0x0, 0xe, {0x8000}}, &(0x7f0000002300)={0x18, 0x0, 0xd5, {0x5}}, &(0x7f0000002340)={0x18, 0xb1b12fe8cc9c727c, 0x6, {0x1}}, &(0x7f0000002380)={0x18, 0x0, 0x7, {0x101}}, &(0x7f00000023c0)={0x28, 0x0, 0x9, {{0x9, 0x2c, 0x1, r2}}}, &(0x7f0000002400)={0x60, 0xfffffffffffffffe, 0x6, {{0xfffffffffffffffe, 0x4, 0x6, 0x7, 0x2, 0x7ff, 0xff5b}}}, &(0x7f0000002480)={0x18, 0xfffffffffffffff5, 0x3, {0x2}}, &(0x7f00000024c0)={0x11, 0x0, 0x6, {'\x00'}}, &(0x7f0000002500)={0x20, 0x0, 0x21, {0x0, 0x8}}, &(0x7f0000002540)={0x78, 0x0, 0x8000, {0x0, 0x4, 0x0, {0x2, 0x3, 0x3ff, 0x0, 0x58b, 0x6, 0x5, 0x6e1, 0x1, 0x4000, 0x3b04, r0, 0xee00, 0x1ff, 0x1}}}, &(0x7f00000025c0)={0x90, 0x0, 0x1ff, {0x0, 0x2, 0x3, 0x9, 0x4, 0x8, {0x2, 0x0, 0x6, 0x7, 0x1, 0x4, 0x40, 0x7, 0x80000000, 0x4000, 0x5, r0, r3, 0x9, 0xfffffffb}}}, &(0x7f0000002680)={0x48, 0x0, 0x0, [{0x5, 0x2, 0x3, 0x9, '*]*'}, {0x2, 0x400, 0x0, 0x7}]}, &(0x7f0000002700)={0xb0, 0x0, 0x8448, [{{0x5, 0x3, 0x73, 0x7fffffff, 0xffffffff, 0x2, {0x4, 0x80, 0x5664622c, 0x100, 0x3, 0x9, 0x1, 0x8, 0x0, 0x6000, 0x40, r0, 0x0, 0x51}}, {0x4, 0x81, 0x5, 0x1000, 'euid>'}}]}, &(0x7f00000027c0)={0xa0, 0x0, 0x1, {{0x4, 0x2, 0x0, 0x9, 0x3, 0x1, {0x4, 0x81, 0x1, 0x32e, 0x0, 0x30000000, 0x6, 0x1, 0xcc, 0xc000, 0x1, r0, r4, 0xdb, 0x1ff}}, {0x0, 0x9}}}, &(0x7f0000002880)={0x20, 0x0, 0x8, {0x1, 0x0, 0xc, 0x1}}, &(0x7f0000002a80)={0x130, 0x0, 0xe41, {0x4, 0xe, 0x0, '\x00', {0x40, 0x8, 0x200, 0x2, r5, r6, 0x2000, '\x00', 0x9, 0xbaa, 0x5, 0x8000000000000001, {0x7ff, 0x2}, {0xfffffffffffffffa, 0xffffffb9}, {0xfffffffffffffffa, 0x1}, {0xffffffffffffffff, 0x1}, 0x0, 0x9, 0x7, 0x80000001}}}}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0xeeee8000, 0x2000, &(0x7f0000e99000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x1, 0x0, 0x1000, 0x2000, &(0x7f0000fa2000/0x2000)=nil}) setreuid(0x0, r0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={[{@max={'max', 0x3d, 0x7fffffff}}], [{@dont_appraise}, {@fowner_eq}, {@appraise_type}, {@flag='rw'}, {@hash}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@fowner_gt={'fowner>', r0}}, {@euid_gt={'euid>', r9}}, {@seclabel}, {@euid_gt={'euid>', r0}}]}) 430.009883ms ago: executing program 7 (id=2915): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000340)=[@increfs, @request_death={0x400c630e, 0x3}], 0x0, 0x0, 0x0}) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000000000)) (async) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) 376.596084ms ago: executing program 7 (id=2916): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_debug_messages', 0x900, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_clone(0x802400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000c, 0x13, r1, 0x293f000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_debug_messages', 0x900, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_clone(0x802400, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x300000c, 0x13, r1, 0x293f000) (async) 376.276684ms ago: executing program 7 (id=2917): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0xa, 0x2}) (async) mmap$binder(&(0x7f00000c0000)=nil, 0x0, 0x1, 0x11, r0, 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x1a, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffc9a, 0x18, 0x0, &(0x7f0000000040)={0x30, 0x30, 0xfffffffffffffce6}}, 0x400}], 0x0, 0x0, 0x0}) 376.025444ms ago: executing program 7 (id=2918): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r1 = dup2(r0, 0xffffffffffffffff) r2 = open_tree(r1, &(0x7f0000000200)='./file0\x00', 0x80000) r3 = fcntl$getown(r2, 0x9) syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880)=0xffffffffffffffff, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) write(r4, 0x0, 0x0) syz_open_procfs$pagemap(r3, &(0x7f0000000440)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000240)="0f01c4defdc4e189ee3f660f38804fec670f784f00b9800000c00f3235008000000f3066b8ab000f00d0260f01c80fc72a67660ff310", 0x36}], 0x1, 0x44, &(0x7f0000000440), 0x0) r5 = open$dir(&(0x7f0000000180)='./file0\x00', 0x400000, 0xc2) renameat2(r1, &(0x7f0000000140)='./file0\x00', r5, &(0x7f00000001c0)='./file0\x00', 0x3) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x90e, 0x2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x33}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x31}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}, 0x10}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000380)="ec5879bcae4ebf1dcf85134d8b5e05505209abff506d2f73957fa39fbdbc84a722e85b7aa2dd37976eaa5b831df72f213796242fbd571621cc5d7cdf0257b01ea7a5119e8f9d6ed2b82920a14886fc0c"}) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000480)=0x37846292, 0x4) 370.798293ms ago: executing program 7 (id=2920): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0xd000, 0x5, 0x9, 0x6, 0x0, [{0x7f, 0x3, 0xff, '\x00', 0x5}, {0x91, 0x7, 0x7, '\x00', 0x9}, {0x47, 0x6, 0x6, '\x00', 0xb5}, {0x15, 0x8, 0x2, '\x00', 0x4}, {0x5, 0x9, 0xc, '\x00', 0x8}, {0xff, 0x40, 0x1, '\x00', 0x1}, {0x5, 0x7f, 0x40, '\x00', 0x3}, {0x9, 0x1, 0xc, '\x00', 0xe}, {0xdc, 0x4, 0x7, '\x00', 0x1}, {0x9, 0x0, 0x2, '\x00', 0x2e}, {0x3, 0x2, 0xa, '\x00', 0x61}, {0xf5, 0x8, 0x5, '\x00', 0x1}, {0xff, 0x4, 0x1, '\x00', 0x80}, {0xf0, 0xbf, 0x6, '\x00', 0x1}, {0x4e, 0x7, 0x81}, {0x83, 0x2, 0x0, '\x00', 0x2}, {0x4, 0x5, 0xe, '\x00', 0x5}, {0x3, 0x0, 0x8, '\x00', 0x4d}, {0x7, 0xb, 0x0, '\x00', 0x5}, {0x3, 0x2, 0xf, '\x00', 0x4}, {0xb, 0x9, 0x3f}, {0xe, 0x8, 0x5, '\x00', 0xf7}, {0x9, 0x8, 0x2, '\x00', 0x1}, {0x9, 0xd9, 0x3, '\x00', 0xc}]}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x35, 0xfdf, 0x0, 0x180, 0x6, 0x14, 0xd, 0x1000, 0x7fffffffffffe, 0x5, 0x5, 0xb, 0x0, 0x45, 0x3, 0xbdb], 0xffff1000, 0x1c4213}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000005e0000000000000000000f300f222566baf80c7741364a81143a3d420f07b8010000000f01c1"], 0x5e}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x541c00, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f00000001c0)={0x1fd, 0x280, 0x200, &(0x7f0000000840)=[0x8cc, 0x9, 0x1, 0x7fff, 0x3, 0x2, 0x7, 0x6, 0xfffffffffffffffd, 0x0, 0x8, 0x0, 0x45b1, 0x4, 0x3, 0xb63, 0x1, 0x100, 0x4, 0xcfd, 0x0, 0x3, 0x81, 0x0, 0xddc, 0x1, 0xa0, 0x1, 0x7, 0x2, 0x7fffffffffffffff, 0x4, 0xfffffffffffff000, 0x8000000000000001, 0x8000, 0x4, 0x24, 0x2, 0x6158cba, 0x0, 0x1, 0x1a6, 0x3, 0x8, 0xe, 0x26ec, 0x4, 0x7ff, 0x100000001, 0x2, 0x2, 0x3, 0x80000000, 0x3, 0x10001, 0xb, 0x1, 0x4ffffffffffffffd, 0x8d0, 0x4, 0xfffffffffffffffd, 0x9, 0x6, 0x9, 0x10000, 0x5, 0x7fffffff, 0x717, 0xbe, 0x9, 0x4, 0x2, 0xa, 0xfffffffffffffffe, 0x0, 0x1, 0xffffffffffffffa3, 0xe0, 0x8000, 0x7, 0x8, 0x2, 0x4, 0x6, 0x2, 0x3, 0x4, 0x8, 0x3406c035, 0x5, 0x3, 0x1, 0x4000000000002, 0x0, 0x1, 0xfffffffffffffffe, 0x4, 0x4, 0x6, 0x6, 0x3, 0x80000000, 0x800, 0x6, 0x40000000000009, 0x4, 0x50, 0xe, 0x1000, 0x6, 0x2, 0x2, 0x80, 0xd38, 0x7, 0x3, 0xc4, 0x8, 0x101, 0x7000000000000000, 0x1, 0x6, 0x2, 0xa2, 0x6, 0x80000001, 0x8, 0x2]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000001800000000000000070000000000000001000000000000006b00000000000000c463"], 0x2de}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_genetlink_get_family_id$ethtool(0x0, r6) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x8004) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r8 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000040008b404a1bc0000000000010902240001000000000904000801030000000921040002012203000905810300"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r8, &(0x7f00000000c0)={0x14, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1100}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockname(r9, 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) 87.110838ms ago: executing program 1 (id=2927): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x802, 0x0) r1 = mmap$binder(&(0x7f00000c0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f0000000180)=[@free_buffer={0x40086303, r1}], 0xfffffffffffffeec, 0x0, &(0x7f0000000140)="f3"}) close(r0) r2 = userfaultfd(0x800) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x38}) 85.702118ms ago: executing program 1 (id=2928): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bond_slave_1\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x5, 0x8000000, 0x1, 0x3, 0x1, 0x100004, 0x8, 0xc}}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r1, 0xea) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8100, 0xa0) r3 = openat$incfs(r2, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x110) ioctl$KVM_GET_IRQCHIP(r3, 0xc058671e, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000003fc0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000003440)=ANY=[], 0xf}}], 0x1, 0x20000091) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0x2a979d) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYRES16=0x0, @ANYRES16=r8, @ANYRESHEX=0x0], 0x60}, 0x1, 0x0, 0x0, 0x20048084}, 0x20004000) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) preadv(r9, 0x0, 0x0, 0x7, 0x9c) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f0000000340)='cpuset.memory_pressure\x00', 0x275a, 0x6000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/75, 0x4b, 0x0, 0x32}, @fda={0x66646185, 0x0, 0x0, 0x16}, @fda={0x66646185, 0x5, 0x0, 0x1a}}, &(0x7f00000004c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) r12 = accept$packet(r11, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) ioctl$BTRFS_IOC_QUOTA_RESCAN(r12, 0x4040942c, &(0x7f00000002c0)={0x0, 0x3, [0x6, 0x1, 0x3, 0x9, 0x7f, 0xffffffffffffffff]}) socket$inet_tcp(0x2, 0x1, 0x0) 85.054118ms ago: executing program 1 (id=2929): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) timer_create(0x1, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={&(0x7f0000000100)="aab8f8e02eafd3152b547162f61531bb5d38507590a3021f073fa17ca1a5", &(0x7f00000002c0)="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"}}, &(0x7f0000000180)=0x0) timer_settime(r1, 0x0, &(0x7f00000003c0)={{0x77359400}}, &(0x7f0000000400)) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be06000000000000007ca2746314d1787b351f0dda2d3d656bc3a2a75e0d", 0x20}], 0x1}}], 0x2, 0x4004040) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) socket(0x840000000002, 0x3, 0xff) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) (async) timer_create(0x1, &(0x7f0000000140)={0x0, 0x12, 0x0, @thr={&(0x7f0000000100)="aab8f8e02eafd3152b547162f61531bb5d38507590a3021f073fa17ca1a5", &(0x7f00000002c0)="86b17fba94d0355bad2e4f0f8117ac4d5fbbaa3f16a83100ef1eb3d6ef23768e7b14e4903d0bb334fe1be5d5ea55cec8550036a960ef778c9de6a377977045390894f63cc0966e24bf41ceb6cf55c82343490d62a2ce69572b306b036a21c401c0e62ea0e0eabaa2882ddece1f2d52a0a4b412d8637883e73f07e9ba910cff7a278cbddd8f9e6fe3dcbde7010ac0f88dab422e00c1ae700d88ff642c579245af01e0b9673497fbd286880d7f5735772515e05e73e9d3cab18a619a210b5030ada93f0c58d426f1c25e53faa56dea9432d2c5fbe437d48589c9d82c4dc036d30a547d26a9db9eec5911374a67999134b445b37f20e0617e4b42e9c2"}}, &(0x7f0000000180)) (async) timer_settime(r1, 0x0, &(0x7f00000003c0)={{0x77359400}}, &(0x7f0000000400)) (async) sendmmsg$inet(r0, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000780)="5825be06000000000000007ca2746314d1787b351f0dda2d3d656bc3a2a75e0d", 0x20}], 0x1}}], 0x2, 0x4004040) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"]) (async) 943.649µs ago: executing program 1 (id=2930): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, &(0x7f0000000000)) write$char_usb(r0, &(0x7f0000000040)="b47906fbf8840258fbd6a759205972febe8f98cdbebba1d31dd723166f485fc40398c0b31252dfd3a30d5b1d3353ba5dcbf6ab46a5f07f2923a9374043e61b514768be0145c26693d8ea7f263efa1fffa406ba84fdee4bf7f5f859e8dfddae4349acc146176e87f41147a0e6fcf3f10c9f945f8cb7e7667f82ee4307", 0x7c) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f00000004c0)={0x1, 0x1, 0xa, 0x10, 0x184, &(0x7f00000000c0)}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000500)=0x1f, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), r0) copy_file_range(r0, &(0x7f0000000580)=0x2, r0, &(0x7f00000005c0)=0x7, 0x9, 0x0) lseek(r0, 0x3, 0x4) r1 = socket(0x27, 0x2, 0xfffff109) syz_genetlink_get_family_id$fou(&(0x7f0000000600), r1) r2 = add_key$fscrypt_v1(&(0x7f00000006c0), &(0x7f0000000700)={'fscrypt:', @desc3}, &(0x7f0000000740)={0x0, "bf5abe4a2ab3a7e40ad6ab7d61d0b44dd0e45b94da80cc7e70892b7772f14d8ec72d4233330367f8a1b5640c6ec9d6b1d78746674b86d6fd23286b6f0da3337c", 0x25}, 0x48, 0xfffffffffffffff8) r3 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$reject(0x13, r3, 0x39ad, 0x6, r2) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r1) getsockname$packet(r0, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000880)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000c80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000c40)={&(0x7f00000008c0)={0x35c, r4, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKMODES_OURS={0x2ec, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x97, 0x5, "4a35444e2b977c0d7890183f539563736ec4ecd1556d7b5193e5d3d066490f43a1db54a4f373d282b75b88d4f417d5096459b407bf198ed0a6440040a8f197216eca609807928e03888affc101ec750d35ee8527362f22baca8fb20eedd762d345d1ad955e402238e29b925a19a38417cff0403cdeb6f4551a49d6258bebc11d39788cfdcaf59aba3733df412531bc41910917"}, @ETHTOOL_A_BITSET_MASK={0x99, 0x5, "ff87794c913f934ea7f60b8c304550c8ede3cf099ae02c4ac454f8e74b243a04ed049bf877bcc4acce9c04393cef46becf346fea602351bc0a716f7e8ce125a718e405f3af43a4e0417c90df092815d1532371c6a4d1f1dbfe674531796df8091285409b62cd8f787d9e1fa64dad76504e1c6678dd6b8eb1706a60767fd34fe6ca008a81aaa562b9929be5fb9532190721edc7db6b"}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'fou\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '&,@\x1e$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'e8dab99234bb312e'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '&#[[{@}@$\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'e8dab99234bb312e'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfff}, @ETHTOOL_A_BITSET_VALUE={0xa, 0x4, "a682676c9c59"}, @ETHTOOL_A_BITSET_BITS={0x110, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff47}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'logon\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x59a}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '$\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'fscrypt:'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ']\xd0]\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'logon\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, '&\xe1\':$-*%-\':):\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'syz'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x956}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x426}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x10}]}, 0x35c}, 0x1, 0x0, 0x0, 0x4800}, 0x40) r6 = add_key$fscrypt_v1(&(0x7f0000000cc0), &(0x7f0000000d00)={'fscrypt:', @desc3}, &(0x7f0000000d40)={0x0, "4c9fe585cef12a0fb1bbfa7dccf680787673c0c7954952a48169c165e33ea957d8c91ae819bc852d93612ae4798ac76fcb7c2a90951874368e3543b4999baddc", 0x12}, 0x48, 0xfffffffffffffffe) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000dc0)={'vxcan0\x00'}) r7 = accept4$packet(r0, 0x0, &(0x7f0000000e00), 0x80000) sendto$packet(r7, &(0x7f0000000e40)="cdbe9e10da42899e7f32ef60cf6ee89eedeba1b2f5c43e8e204dde06c7a9e30ca1b665bb379a5a7e6bf82c611eaf20bbf78d5c775f320384cdac1422fcbd63a84ff04ff1a908a0a13768bf4ca13e524b89f9064e20e856f359fda741d21c9dec301da6e595c47db86e1ac8a68352391eddb3e64803c78245276218f4d80183b41f192d49ec8e0c296fe56ce8f0ad4c9576a0bf4314d83a2e314e4b5de6ad65176684c654e7b008e9a218de781f9da5a9f3c15e20fcc5a0242ccb811049ef6d23fe9edcdaab38b66e6606281906f038e7c964fbc14b323db0feab151cec", 0xdd, 0x40000, 0x0, 0x0) r8 = syz_open_procfs$userns(0x0, &(0x7f0000000f40)) read(r1, &(0x7f0000000f80)=""/162, 0xa2) syz_genetlink_get_family_id$wireguard(&(0x7f0000001040), r0) add_key$keyring(&(0x7f0000001080), &(0x7f00000010c0)={'syz', 0x2}, 0x0, 0x0, r6) add_key(&(0x7f0000001100)='rxrpc\x00', &(0x7f0000001140)={'syz', 0x3}, &(0x7f0000001180)="2d1c68ab7a716f0722587f34f891c943916e3cb25efa455ceea28151ec35d851a2c97e22d182ab833461f91dc3cba1712bd676e4db26e64e2615606e02500241bfe4e0fd2dbc82d127a41b28baa5a3ebeaf50024ca9cb46284aafe6b3fcf7df16d153e0ce1e08a12387b5eebbcf75818f4014dd9308fc9b0678af7fe772b4ba3dbd3136536a76a7a343fd67dd47aec4a9c695666543b5dfc822fe48271ed0112c9aad7", 0xa3, r2) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000012c0)=[@text32={0x20, &(0x7f0000001240)="66baa00066b8d45166ef66baf80cb8d0f30386ef66bafc0cb80f000000efc4c1fd76eb66baf80cb8686c6384ef66bafc0cb80c000000ef8fca401204b50e000000731e0000c7442400ad210000c74424020d000000c7442406000000000f011c2466baf80cb81ac2df8aef66bafc0c66b8bb0066ef2e0f32360f12ccffcf", 0x7e}], 0x1, 0xc, &(0x7f0000001300)=[@flags={0x3, 0x48000}], 0x1) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r0, 0x4068aea3, &(0x7f0000001340)) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f00000013c0)={0x0, r8, 0x400, 0x5, 0x5, 0x1}) openat$cgroup_procs(r0, &(0x7f0000001400)='cgroup.procs\x00', 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000001440), 0x403080, 0x0) 539.98µs ago: executing program 1 (id=2931): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="540100001000130700000101000000000000000000001300e0001902000010000000000000006ded00000000000000000a002000"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414bb000000000000000000000000000004d532000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000040000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000004000000000000000000000000000000000000082abd70000000000002000400220000000000000048000200656362286369706865725f6e756c6c290000000000000000"], 0x154}}, 0x0) 0s ago: executing program 1 (id=2932): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x200000000000000, 0x820b01) epoll_create(0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000000)=[@decrefs={0x40046307, 0x2}, @dead_binder_done, @release], 0x548, 0x0, &(0x7f0000000580)="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"}) kernel console output (not intermixed with test programs): t: type=1400 audit(1750776798.145:409): avc: denied { getopt } for pid=2897 comm="syz.1.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 89.042001][ T36] audit: type=1400 audit(1750776798.355:410): avc: denied { shutdown } for pid=2906 comm="syz.2.844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 89.119339][ T2915] input: syz0 as /devices/virtual/input/input6 [ 89.268229][ T2941] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 89.279705][ T36] audit: type=1400 audit(1750776798.595:411): avc: denied { relabelto } for pid=2940 comm="syz.1.856" name="224" dev="tmpfs" ino=1211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 89.321180][ T36] audit: type=1400 audit(1750776798.595:412): avc: denied { associate } for pid=2940 comm="syz.1.856" name="224" dev="tmpfs" ino=1211 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:crond_var_run_t:s0" [ 89.391350][ T36] audit: type=1400 audit(1750776798.695:413): avc: denied { write } for pid=289 comm="syz-executor" name="224" dev="tmpfs" ino=1211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 89.425472][ T36] audit: type=1400 audit(1750776798.695:414): avc: denied { remove_name } for pid=289 comm="syz-executor" name="file0" dev="tmpfs" ino=1216 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 89.454651][ T36] audit: type=1400 audit(1750776798.695:415): avc: denied { rmdir } for pid=289 comm="syz-executor" name="224" dev="tmpfs" ino=1211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:crond_var_run_t:s0" [ 89.484098][ T2953] __vm_enough_memory: pid: 2953, comm: syz.1.860, bytes: 70373039144960 not enough memory for the allocation [ 89.863855][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.863881][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.877361][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.877388][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.897542][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.931418][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.931439][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.938131][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 89.991484][ T2956] rust_binder: Error in use_page_slow: ESRCH [ 89.991513][ T2956] rust_binder: use_range failure ESRCH [ 90.011410][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.017933][ T2956] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 90.034043][ T2956] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 90.041442][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.071372][ T2956] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:26 [ 90.071429][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.111356][ T36] audit: type=1400 audit(1750776799.415:416): avc: denied { watch watch_reads } for pid=2959 comm="syz.2.862" path="/211/file0" dev="tmpfs" ino=1168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 90.142991][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.143014][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.155589][ T2966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.864'. [ 90.161638][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.175673][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.182482][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.189400][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.196162][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.203150][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.210214][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.217018][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.224719][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.256311][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.271393][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.278479][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.296437][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.307529][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.314477][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.330498][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.337830][ T2980] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.337834][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.361255][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.368538][ T2980] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:679 [ 90.368845][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.400438][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.407576][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.423801][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.430334][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.439205][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.449264][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.461957][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.471533][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.482949][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.489601][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.521376][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.523435][ T2990] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.527841][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.527858][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.558436][ T2987] netlink: 'syz.2.869': attribute type 63 has an invalid length. [ 90.571409][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.573399][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.578268][ T2987] netlink: 5 bytes leftover after parsing attributes in process `syz.2.869'. [ 90.581393][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.590385][ T2987] gretap0: entered allmulticast mode [ 90.608239][ T2987] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 90.621402][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.623807][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.632995][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.639621][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.646163][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.652702][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.671567][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.678036][ T2957] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 90.736519][ T3003] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:30 [ 90.761392][ T3004] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:30 [ 90.762659][ T36] audit: type=1400 audit(1750776800.075:417): avc: denied { setattr } for pid=3005 comm="syz.1.875" name="PACKET" dev="sockfs" ino=20452 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 90.850622][ T3008] SELinux: security_context_str_to_sid ( H H) failed with errno=-22 [ 90.978231][ T36] audit: type=1400 audit(1750776800.285:418): avc: denied { create } for pid=3012 comm="syz.5.878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 91.112111][ T36] audit: type=1400 audit(1750776800.425:419): avc: denied { bind } for pid=3023 comm="syz.2.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 91.199508][ T3028] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=39 sclass=netlink_tcpdiag_socket pid=3028 comm=syz.2.885 [ 91.231471][ T3028] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=3028 comm=syz.2.885 [ 91.246375][ T3018] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 91.246412][ T3018] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:38 [ 91.270952][ T3028] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=40 sclass=netlink_tcpdiag_socket pid=3028 comm=syz.2.885 [ 91.304397][ T3038] input: syz1 as /devices/virtual/input/input7 [ 91.330340][ T3028] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=35 sclass=netlink_tcpdiag_socket pid=3028 comm=syz.2.885 [ 91.343530][ T3028] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=56 sclass=netlink_tcpdiag_socket pid=3028 comm=syz.2.885 [ 91.378947][ T36] audit: type=1400 audit(1750776800.685:420): avc: denied { create } for pid=3042 comm="syz.1.889" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 91.451033][ T3052] overlayfs: failed to clone upperpath [ 91.582189][ T3065] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 91.796258][ T3073] tmpfs: Unknown parameter 'HW.͔2$];ɩR5ZF*I<-\] ׇ!' [ 91.845632][ T3073] fuse: Bad value for 'fd' [ 92.309734][ T3107] kvm: pic: non byte read [ 92.319859][ T3107] kvm: pic: level sensitive irq not supported [ 92.319913][ T3107] kvm: pic: non byte read [ 92.337147][ T3107] kvm: pic: level sensitive irq not supported [ 92.337199][ T3107] kvm: pic: non byte read [ 92.349120][ T3107] kvm: pic: level sensitive irq not supported [ 92.349300][ T3107] kvm: pic: non byte read [ 92.360353][ T3107] kvm: pic: level sensitive irq not supported [ 92.360402][ T3107] kvm: pic: non byte read [ 92.372851][ T3107] kvm: pic: level sensitive irq not supported [ 92.372902][ T3107] kvm: pic: non byte read [ 92.384631][ T3107] kvm: pic: level sensitive irq not supported [ 92.384682][ T3107] kvm: pic: non byte read [ 92.395239][ T64] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 92.411834][ T3107] kvm: pic: level sensitive irq not supported [ 92.411885][ T3107] kvm: pic: non byte read [ 92.422838][ T3107] kvm: pic: level sensitive irq not supported [ 92.422885][ T3107] kvm: pic: non byte read [ 92.530271][ T46] bridge_slave_1: left allmulticast mode [ 92.537027][ T46] bridge_slave_1: left promiscuous mode [ 92.543443][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.551029][ T46] bridge_slave_0: left allmulticast mode [ 92.557047][ T46] bridge_slave_0: left promiscuous mode [ 92.563212][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.571159][ T64] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.582392][ T64] usb 2-1: config 0 interface 0 has no altsetting 0 [ 92.591001][ T64] usb 2-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 92.600390][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.620792][ T64] usb 2-1: config 0 descriptor?? [ 92.794988][ T3121] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.802110][ T3121] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.809297][ T3121] bridge_slave_0: entered allmulticast mode [ 92.816208][ T3121] bridge_slave_0: entered promiscuous mode [ 92.824098][ T3121] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.831246][ T3121] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.839047][ T3121] bridge_slave_1: entered allmulticast mode [ 92.845872][ T3121] bridge_slave_1: entered promiscuous mode [ 92.922602][ T3121] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.929701][ T3121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.937035][ T3121] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.944288][ T3121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.971961][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.979515][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.990874][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.997983][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.009441][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.016637][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.037409][ T64] wacom 0003:056A:00BA.0006: unknown main item tag 0x0 [ 93.044875][ T3126] netlink: 12 bytes leftover after parsing attributes in process `syz.5.918'. [ 93.051438][ T64] wacom 0003:056A:00BA.0006: unknown main item tag 0x0 [ 93.073909][ T3126] SELinux: security_context_str_to_sid () failed with errno=-22 [ 93.075886][ T64] wacom 0003:056A:00BA.0006: unknown main item tag 0x0 [ 93.108448][ T3121] veth0_vlan: entered promiscuous mode [ 93.115557][ T64] wacom 0003:056A:00BA.0006: unknown main item tag 0x0 [ 93.123065][ T3128] binder: Bad value for 'max' [ 93.127598][ T64] wacom 0003:056A:00BA.0006: unknown main item tag 0x0 [ 93.138287][ T3121] veth1_macvtap: entered promiscuous mode [ 93.144194][ T64] wacom 0003:056A:00BA.0006: unknown main item tag 0x0 [ 93.168347][ T64] wacom 0003:056A:00BA.0006: unknown main item tag 0x0 [ 93.180120][ T64] wacom 0003:056A:00BA.0006: Unknown device_type for 'HID 056a:00ba'. Assuming pen. [ 93.208894][ T64] wacom 0003:056A:00BA.0006: hidraw0: USB HID v10.00 Device [HID 056a:00ba] on usb-dummy_hcd.1-1/input0 [ 93.221372][ T3134] netlink: 8 bytes leftover after parsing attributes in process `syz.6.917'. [ 93.247887][ T64] input: Wacom Intuos4 8x13 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00BA.0006/input/input8 [ 93.272250][ T3134] overlayfs: failed to resolve './file0': -2 [ 93.284399][ T64] usb 2-1: USB disconnect, device number 21 [ 93.383215][ T3147] exFAT-fs (rnullb0): invalid boot record signature [ 93.390189][ T3147] exFAT-fs (rnullb0): failed to read boot sector [ 93.411437][ T3147] exFAT-fs (rnullb0): failed to recognize exfat type [ 93.559765][ T3167] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.594160][ T3173] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.601919][ T3173] rust_binder: Failed to allocate buffer. len:4294966472, is_oneway:false [ 93.609505][ T3173] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 93.625367][ T3173] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:96 [ 93.875989][ T3180] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 93.885772][ T3180] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 93.900588][ T3178] rust_binder: validate_parent_fixup: fixup_min_offset=50, parent_offset=26 [ 93.900615][ T3178] rust_binder: Error while translating object. [ 93.909721][ T3180] rust_binder: Write failure EINVAL in pid:734 [ 93.916048][ T3178] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 93.927662][ T3178] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:99 [ 94.612372][ T3196] overlay: filesystem on ./bus not supported as upperdir [ 94.842808][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 94.842825][ T36] audit: type=1400 audit(1750776804.155:427): avc: denied { ioctl } for pid=3206 comm="syz.5.945" path="socket:[23578]" dev="sockfs" ino=23578 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 94.917465][ T36] audit: type=1400 audit(1750776804.195:428): avc: denied { write } for pid=3206 comm="syz.5.945" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 94.930200][ T3211] SELinux: security_context_str_to_sid () failed with errno=-22 [ 95.082548][ T3224] kvm: Disabled LAPIC found during irq injection [ 95.089334][ T3224] exFAT-fs (rnullb0): invalid boot record signature [ 95.096022][ T3224] exFAT-fs (rnullb0): failed to read boot sector [ 95.102627][ T3224] exFAT-fs (rnullb0): failed to recognize exfat type [ 95.560403][ T3229] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 95.560848][ T3229] rust_binder: Error while translating object. [ 95.567524][ T3229] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 95.573881][ T3229] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:756 [ 95.837185][ T3236] cgroup: fork rejected by pids controller in /syz6 [ 95.901398][ T64] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 96.072415][ T64] usb 2-1: config 0 has no interfaces? [ 96.082755][ T64] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 96.097674][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.114059][ T64] usb 2-1: Product: syz [ 96.124215][ T64] usb 2-1: Manufacturer: syz [ 96.133272][ T64] usb 2-1: SerialNumber: syz [ 96.146904][ T64] usb 2-1: config 0 descriptor?? [ 96.561890][ T3234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.571614][ T3234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.580164][ T3234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.590546][ T3234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.668130][ T64] usb 2-1: USB disconnect, device number 22 [ 97.199748][ T3324] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.234118][ T3329] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.299015][ T3331] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:769 [ 97.305993][ T3331] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 97.315896][ T3331] rust_binder: Error while translating object. [ 97.322457][ T3331] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 97.328803][ T3331] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:769 [ 97.720203][ T36] audit: type=1400 audit(1750776807.025:429): avc: denied { nlmsg_read } for pid=3332 comm="syz.6.968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 98.120421][ T3345] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.120995][ T3345] rust_binder: Error in use_page_slow: ESRCH [ 98.127905][ T3345] rust_binder: use_range failure ESRCH [ 98.134341][ T3345] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false [ 98.139928][ T3345] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 98.151376][ T3345] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:119 [ 98.176554][ T36] audit: type=1400 audit(1750776807.485:430): avc: denied { write } for pid=3346 comm="syz.1.974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 98.315420][ T3358] can0: slcan on ttyS3. [ 98.359338][ T3358] can0 (unregistered): slcan off ttyS3. [ 98.410677][ T3373] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 98.410715][ T3373] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:132 [ 98.441358][ T292] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 98.466288][ T3378] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.466318][ T3378] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 98.621374][ T292] usb 2-1: Using ep0 maxpacket: 8 [ 98.647612][ T36] audit: type=1400 audit(1750776807.955:431): avc: denied { remount } for pid=3393 comm="syz.5.985" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 98.671722][ T292] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 98.679753][ T292] usb 2-1: can't read configurations, error -22 [ 98.811473][ T292] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 98.961391][ T292] usb 2-1: Using ep0 maxpacket: 8 [ 98.972457][ T292] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 98.980564][ T292] usb 2-1: can't read configurations, error -22 [ 98.987049][ T292] usb usb2-port1: attempt power cycle [ 99.331400][ T292] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 99.351737][ T292] usb 2-1: Using ep0 maxpacket: 8 [ 99.358541][ T292] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 99.366774][ T292] usb 2-1: can't read configurations, error -22 [ 99.511438][ T292] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 99.531686][ T292] usb 2-1: Using ep0 maxpacket: 8 [ 99.542657][ T292] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 99.550613][ T292] usb 2-1: can't read configurations, error -22 [ 99.571559][ T292] usb usb2-port1: unable to enumerate USB device [ 99.786679][ T3443] fuseblk: Unknown parameter 'fowner<00000000000000000000' [ 99.791413][ T36] audit: type=1400 audit(1750776809.095:432): avc: denied { mounton } for pid=3442 comm="syz.5.997" path="/56/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 100.081415][ T292] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 100.251354][ T292] usb 6-1: Using ep0 maxpacket: 32 [ 100.262434][ T292] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 100.280852][ T292] usb 6-1: config 0 has no interface number 0 [ 100.287019][ T292] usb 6-1: config 0 interface 184 has no altsetting 0 [ 100.302770][ T292] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 100.321356][ T292] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.329468][ T292] usb 6-1: Product: syz [ 100.339578][ T292] usb 6-1: Manufacturer: syz [ 100.349681][ T292] usb 6-1: SerialNumber: syz [ 100.360523][ T292] usb 6-1: config 0 descriptor?? [ 100.366564][ T292] smsc75xx v1.0.0 [ 100.881705][ T3468] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.888815][ T3468] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.896224][ T3468] bridge_slave_0: entered allmulticast mode [ 100.902627][ T3468] bridge_slave_0: entered promiscuous mode [ 100.909462][ T3468] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.916616][ T3468] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.924024][ T3468] bridge_slave_1: entered allmulticast mode [ 100.930677][ T3468] bridge_slave_1: entered promiscuous mode [ 100.937047][ T46] bridge_slave_1: left allmulticast mode [ 100.942821][ T46] bridge_slave_1: left promiscuous mode [ 100.948471][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.956299][ T46] bridge_slave_0: left allmulticast mode [ 100.962030][ T46] bridge_slave_0: left promiscuous mode [ 100.968341][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.051593][ T3468] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.058703][ T3468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.066018][ T3468] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.073269][ T3468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.123188][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.130639][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.140034][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.147230][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.157342][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.164611][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.196577][ T3468] veth0_vlan: entered promiscuous mode [ 101.203302][ T3480] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 101.204257][ T3480] netlink: 'syz.1.1011': attribute type 4 has an invalid length. [ 101.222604][ T3480] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1011'. [ 101.240384][ T3468] veth1_macvtap: entered promiscuous mode [ 101.292637][ T3486] rust_binder: Fixups oob 154 158 203 174 [ 101.292661][ T3486] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL } [ 101.298595][ T3486] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 101.307296][ T3486] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2 [ 101.372351][ T292] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 101.541671][ T31] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 101.578976][ T292] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 101.593735][ T292] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 101.605756][ T292] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 101.616688][ T292] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 101.626935][ T292] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 101.638771][ T292] usb 6-1: USB disconnect, device number 2 [ 101.692402][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 101.698906][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.710092][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.722077][ T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice=f8.00 [ 101.731172][ T31] usb 2-1: New USB device strings: Mfr=255, Product=0, SerialNumber=0 [ 101.739432][ T31] usb 2-1: Manufacturer: syz [ 101.744847][ T31] usb 2-1: config 0 descriptor?? [ 101.750753][ T31] usbhid 2-1:0.0: can't add hid device: -22 [ 101.756798][ T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -22 [ 101.870529][ T3497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 101.870858][ T3497] rust_binder: Error while translating object. [ 101.881097][ T3497] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 101.887503][ T3497] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11 [ 101.918822][ T3501] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1018'. [ 101.937775][ T3501] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1018'. [ 101.953404][ T3484] overlayfs: missing 'workdir' [ 101.965736][ T3503] rust_binder: Failed to allocate buffer. len:4294970576, is_oneway:false [ 102.545005][ T3529] kvm: pic: non byte write [ 102.559275][ T3529] random: crng reseeded on system resumption [ 102.663799][ T3532] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.663827][ T3532] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 102.922234][ T64] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 102.971535][ T36] audit: type=1326 audit(1750776812.285:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3563 comm="syz.7.1040" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f207e58e929 code=0x0 [ 102.995628][ T3572] batadv_slave_1: entered promiscuous mode [ 103.005628][ T3575] batadv_slave_1: left promiscuous mode [ 103.027147][ T3580] /dev/rnullb0: Can't lookup blockdev [ 103.027458][ T3581] /dev/rnullb0: Can't lookup blockdev [ 103.057462][ T36] audit: type=1400 audit(1750776812.365:434): avc: denied { watch watch_reads } for pid=3584 comm="syz.6.1048" path="/60/bus" dev="tmpfs" ino=339 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 103.081340][ T64] usb 6-1: Using ep0 maxpacket: 16 [ 103.088123][ T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.099231][ T64] usb 6-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 103.108527][ T64] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.120626][ T64] usb 6-1: config 0 descriptor?? [ 103.529308][ T64] wacom 0003:056A:037A.0007: Unknown device_type for 'HID 056a:037a'. Assuming pen. [ 103.539438][ T64] wacom 0003:056A:037A.0007: hidraw0: USB HID v0.05 Device [HID 056a:037a] on usb-dummy_hcd.5-1/input0 [ 103.551562][ T64] input: Wacom One by Wacom S Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:056A:037A.0007/input/input12 [ 103.730118][ T292] usb 6-1: USB disconnect, device number 3 [ 103.819398][ T3610] binder: Unknown parameter '' [ 103.933025][ T3623] cgroup2: Unknown parameter 'obj_user' [ 103.941529][ T3540] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:191 [ 103.943295][ T3540] rust_binder: Read failure Err(EFAULT) in pid:191 [ 103.980422][ T3637] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.987036][ T3637] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 103.993987][ T3637] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.000676][ T3637] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.008529][ T3637] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.015223][ T3637] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.022861][ T3637] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.029456][ T3637] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.095120][ T3637] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.131474][ T3637] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.137960][ T3637] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.323501][ T3637] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.346831][ T31] usb 2-1: USB disconnect, device number 27 [ 104.378578][ T3637] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.378609][ T3637] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.423181][ T3643] 9pnet: p9_errstr2errno: server reported unknown error [ 104.455967][ T3643] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.456311][ T3643] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:782 [ 104.509079][ T3647] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 104.518775][ T3647] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 104.532286][ T3655] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 104.620993][ T3660] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 104.670594][ T3665] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1074'. [ 105.341992][ T3679] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:205 [ 105.368544][ T3683] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 105.563512][ T3697] syzkaller0: entered promiscuous mode [ 105.591401][ T457] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 105.733859][ T3718] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 105.742600][ T457] usb 6-1: config 15 has an invalid interface number: 92 but max is 2 [ 105.757467][ T457] usb 6-1: config 15 has an invalid interface number: 32 but max is 2 [ 105.766040][ T457] usb 6-1: config 15 has an invalid interface number: 111 but max is 2 [ 105.774394][ T457] usb 6-1: config 15 has an invalid descriptor of length 201, skipping remainder of the config [ 105.784842][ T457] usb 6-1: config 15 has no interface number 0 [ 105.791102][ T457] usb 6-1: config 15 has no interface number 1 [ 105.797438][ T457] usb 6-1: config 15 has no interface number 2 [ 105.803800][ T457] usb 6-1: config 15 interface 92 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 105.814907][ T457] usb 6-1: config 15 interface 92 altsetting 0 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 105.840942][ T36] audit: type=1400 audit(1750776815.145:435): avc: denied { map } for pid=3720 comm="syz.7.1092" path="socket:[25589]" dev="sockfs" ino=25589 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 105.840945][ T457] usb 6-1: config 15 interface 92 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 105.840972][ T457] usb 6-1: config 15 interface 92 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 105.865586][ T3721] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 105.875701][ T457] usb 6-1: config 15 interface 92 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 105.888638][ T3721] rust_binder: Write failure EINVAL in pid:67 [ 105.891912][ T457] usb 6-1: config 15 interface 92 altsetting 0 endpoint 0x2 has an invalid bInterval 247, changing to 11 [ 105.925484][ T457] usb 6-1: config 15 interface 92 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 105.941770][ T457] usb 6-1: config 15 interface 92 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 105.952891][ T457] usb 6-1: config 15 interface 92 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 105.964036][ T457] usb 6-1: config 15 interface 32 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 105.974993][ T457] usb 6-1: config 15 interface 32 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 105.986150][ T457] usb 6-1: config 15 interface 32 altsetting 7 has an endpoint descriptor with address 0x33, changing to 0x3 [ 105.997736][ T457] usb 6-1: config 15 interface 32 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 106.008530][ T457] usb 6-1: config 15 interface 32 altsetting 7 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 106.020275][ T457] usb 6-1: config 15 interface 32 altsetting 7 endpoint 0x86 has an invalid bInterval 49, changing to 7 [ 106.031943][ T457] usb 6-1: config 15 interface 32 altsetting 7 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.045360][ T457] usb 6-1: config 15 interface 111 altsetting 5 has an invalid endpoint descriptor of length 5, skipping [ 106.057058][ T457] usb 6-1: config 15 interface 111 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 106.071262][ T457] usb 6-1: config 15 interface 32 has no altsetting 0 [ 106.078223][ T457] usb 6-1: config 15 interface 111 has no altsetting 0 [ 106.086549][ T457] usb 6-1: New USB device found, idVendor=0499, idProduct=1026, bcdDevice=4b.9f [ 106.095645][ T457] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.103687][ T457] usb 6-1: Product: 틹蛝⤃폐㧱⭂ⓢꠕ㵦跶୥걉蚻흨⟁ [ 106.111886][ T457] usb 6-1: Manufacturer: 㐁 [ 106.117109][ T457] usb 6-1: SerialNumber: Ћ [ 106.123027][ T3681] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 106.130212][ T3681] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 106.743602][ T3737] cgroup: fork rejected by pids controller in /syz7 [ 106.848610][ T457] snd-usb-audio 6-1:15.92: probe with driver snd-usb-audio failed with error -2 [ 106.871947][ T457] snd-usb-audio 6-1:15.32: probe with driver snd-usb-audio failed with error -2 [ 106.885238][ T46] bridge_slave_1: left allmulticast mode [ 106.890921][ T46] bridge_slave_1: left promiscuous mode [ 106.897438][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.911111][ T457] snd-usb-audio 6-1:15.111: probe with driver snd-usb-audio failed with error -2 [ 106.921474][ T46] bridge_slave_0: left allmulticast mode [ 106.927739][ T46] bridge_slave_0: left promiscuous mode [ 106.941134][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.949320][ T457] usb 6-1: USB disconnect, device number 4 [ 106.971818][ T309] udevd[309]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:15.111/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 107.061872][ T3857] tipc: Started in network mode [ 107.066873][ T3857] tipc: Node identity ac14142f, cluster identity 4711 [ 107.074269][ T3857] tipc: New replicast peer: 0.0.0.0 [ 107.079879][ T3857] tipc: Enabled bearer , priority 10 [ 107.090515][ T3857] netlink: 'syz.5.1106': attribute type 4 has an invalid length. [ 107.098807][ T3857] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1106'. [ 107.112388][ T46] veth1_macvtap: left promiscuous mode [ 107.117968][ T46] veth0_vlan: left promiscuous mode [ 107.156426][ T3857] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 107.192904][ T3851] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.199987][ T3851] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.207332][ T3851] bridge_slave_0: entered allmulticast mode [ 107.227363][ T3851] bridge_slave_0: entered promiscuous mode [ 107.234053][ T3851] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.241149][ T3851] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.248320][ T3851] bridge_slave_1: entered allmulticast mode [ 107.254984][ T3851] bridge_slave_1: entered promiscuous mode [ 107.295198][ T3874] random: crng reseeded on system resumption [ 107.415441][ T3884] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:826 [ 107.422804][ T3851] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.439001][ T3851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.446308][ T3851] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.453439][ T3851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.463777][ T3882] rust_binder: Write failure EINVAL in pid:216 [ 107.490888][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.505593][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.518285][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.525388][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.538106][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.545295][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.594986][ T3851] veth0_vlan: entered promiscuous mode [ 107.610352][ T3851] veth1_macvtap: entered promiscuous mode [ 107.620878][ T3902] 9pnet_fd: Insufficient options for proto=fd [ 107.771435][ T292] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 107.807769][ T3908] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 107.807799][ T3908] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 107.938784][ T3916] rust_binder: Error while translating object. [ 107.945388][ T3916] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 107.952167][ T3916] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:13 [ 108.081249][ T36] audit: type=1400 audit(1750776817.385:436): avc: denied { create } for pid=3917 comm="syz.6.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 108.191449][ T64] tipc: Node number set to 2886997039 [ 108.449537][ T3926] binder: Unknown parameter 's' [ 108.634626][ T3931] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1130'. [ 108.680464][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.680496][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.687226][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.694201][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.702320][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.711427][ T36] audit: type=1400 audit(1750776818.015:437): avc: denied { shutdown } for pid=3936 comm="syz.6.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 108.712195][ T3935] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION already set [ 108.730027][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.747640][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.756364][ T3935] rust_binder: Write failure EINVAL in pid:839 [ 108.761202][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.769128][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.775830][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.783375][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.789840][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.796768][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.799360][ T3947] tmpfs: Invalid gid '0x00000000ffffffff' [ 108.803741][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.815880][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.824493][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.831090][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.835865][ T3955] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 108.838157][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.853062][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.859742][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.866628][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.873454][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.880459][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.887772][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.894564][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.901060][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.907804][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.914496][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.920970][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.927606][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.934401][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.942476][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.949090][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.955811][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.962351][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.968800][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.975342][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.981890][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.988405][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 108.995548][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.002337][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.009049][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.015809][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.022532][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.029301][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.035184][ T3962] overlay: ./bus is not a directory [ 109.036545][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.047614][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.050734][ T36] audit: type=1326 audit(1750776818.365:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3961 comm="syz.7.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061978e929 code=0x7ffc0000 [ 109.054084][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.054101][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.064049][ T36] audit: type=1326 audit(1750776818.375:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3961 comm="syz.7.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061978e929 code=0x7ffc0000 [ 109.084018][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.090692][ T36] audit: type=1326 audit(1750776818.375:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3961 comm="syz.7.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f061978e929 code=0x7ffc0000 [ 109.098127][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.120825][ T36] audit: type=1326 audit(1750776818.375:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3961 comm="syz.7.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061978e929 code=0x7ffc0000 [ 109.127221][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.158782][ T36] audit: type=1326 audit(1750776818.375:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3961 comm="syz.7.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061978e929 code=0x7ffc0000 [ 109.182848][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.206104][ T36] audit: type=1326 audit(1750776818.375:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3961 comm="syz.7.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061978e929 code=0x7ffc0000 [ 109.213157][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.222289][ T36] audit: type=1326 audit(1750776818.375:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3961 comm="syz.7.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f061978e929 code=0x7ffc0000 [ 109.253145][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.277167][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.280408][ T36] audit: type=1326 audit(1750776818.375:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3961 comm="syz.7.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f061978e929 code=0x7ffc0000 [ 109.284660][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.315832][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.317598][ T3970] rust_binder: Error while translating object. [ 109.322675][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.329309][ T3970] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 109.335732][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.342778][ T3970] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:32 [ 109.358653][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.358918][ T3969] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.368021][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.368044][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.368058][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.368070][ T3934] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 109.416411][ T3974] binder: Unknown parameter ';ҏ^Ardef\ont5Lext' [ 109.444826][ T3979] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 109.613166][ T3994] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:245 [ 109.646989][ T3990] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1147'. [ 109.661461][ T307] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 109.666736][ T3990] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1147'. [ 109.701048][ T4002] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742) [ 109.701072][ T4002] rust_binder: Error while translating object. [ 109.714403][ T4002] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 109.720712][ T4002] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:249 [ 109.750082][ T4007] rust_binder: Failed copying remainder into alloc: EFAULT [ 109.759420][ T4007] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 109.766882][ T4007] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 109.775506][ T4007] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:253 [ 109.823446][ T307] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 109.844503][ T307] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 109.857968][ T307] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.861634][ T4011] rust_binder: Failed to allocate buffer. len:40, is_oneway:false [ 109.875401][ T307] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 109.901067][ T307] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.911673][ T307] usb 8-1: Product: syz [ 109.917685][ T307] usb 8-1: Manufacturer: 㰁 [ 109.923871][ T307] usb 8-1: SerialNumber: syz [ 110.095795][ T4043] kvm: pic: non byte write [ 110.138214][ T307] usb 8-1: 0:2 : does not exist [ 110.145762][ T307] usb 8-1: USB disconnect, device number 2 [ 110.193812][ T4053] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.194607][ T4053] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 110.201273][ T4053] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:861 [ 110.268396][ T4057] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.277952][ T4057] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.292572][ T4059] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 110.378211][ T4068] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.379182][ T4068] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 110.386086][ T4068] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:876 [ 110.409703][ T4073] binder: Unknown parameter '?Oυf->rw(' [ 110.441033][ T4077] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.441674][ T4077] rust_binder: validate_parent_fixup: new_min_offset=96, sg_entry.length=0 [ 110.448113][ T4077] rust_binder: Error while translating object. [ 110.456993][ T4077] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 110.463392][ T4077] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:885 [ 110.482360][ T4079] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 110.493092][ T4079] tipc: Enabling of bearer rejected, failed to enable media [ 110.741363][ T64] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 110.892477][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.903474][ T64] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.913473][ T64] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 110.923205][ T64] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.936512][ T64] usb 2-1: config 0 descriptor?? [ 111.646786][ T4140] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 111.646894][ T4140] rust_binder: Failed to allocate buffer. len:16, is_oneway:false [ 111.675334][ T4142] SELinux: security_context_str_to_sid (sytem_uGй) failed with errno=-22 [ 112.262082][ T4189] rust_binder: Write failure EINVAL in pid:284 [ 112.262950][ T4189] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 112.713557][ T4203] incfs: iterate_incfs_dir / -22 [ 112.718553][ T4203] incfs: iterate_incfs_dir / -22 [ 113.157149][ T36] kauditd_printk_skb: 27 callbacks suppressed [ 113.157165][ T36] audit: type=1400 audit(1750776822.465:473): avc: denied { relabelfrom } for pid=4215 comm="syz.5.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 113.158003][ T4216] rust_binder: Error while translating object. [ 113.163731][ T36] audit: type=1400 audit(1750776822.465:474): avc: denied { relabelto } for pid=4215 comm="syz.5.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 113.183372][ T4216] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 113.183402][ T4216] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:293 [ 113.337708][ T4221] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 113.347659][ T4221] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:297 [ 113.487883][ T64] usbhid 2-1:0.0: can't add hid device: -71 [ 113.503129][ T64] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 113.512032][ T64] usb 2-1: USB disconnect, device number 29 [ 113.524187][ T4230] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.524399][ T4230] rust_binder: Error in use_page_slow: ESRCH [ 113.530887][ T4230] rust_binder: use_range failure ESRCH [ 113.536931][ T4230] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 113.542596][ T4230] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 113.551812][ T4230] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:894 [ 113.562357][ T4231] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.572873][ T4232] rust_binder: Error in use_page_slow: ESRCH [ 113.580015][ T4232] rust_binder: use_range failure ESRCH [ 113.586568][ T4232] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 113.592105][ T4232] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 113.600264][ T4232] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:894 [ 113.771914][ T4236] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 113.782829][ T4236] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:900 [ 113.796204][ T4238] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.051393][ T31] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 114.212497][ T31] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 114.220733][ T31] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 114.232486][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 114.243456][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 114.254601][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 114.267497][ T31] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 114.276544][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.285159][ T31] usb 2-1: config 0 descriptor?? [ 114.290374][ T4243] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 114.704850][ T31] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 114.715195][ T31] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 114.727326][ T31] plantronics 0003:047F:FFFF.0008: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 114.908118][ T64] usb 2-1: USB disconnect, device number 30 [ 115.518857][ T4280] random: crng reseeded on system resumption [ 115.551359][ T4284] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 115.556325][ T4284] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 208, limit: 224, size: 129) [ 115.562863][ T4284] rust_binder: Error while translating object. [ 115.573614][ T4284] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 115.579888][ T4284] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:920 [ 115.641091][ T4286] syz.1.1251: attempt to access beyond end of device [ 115.641091][ T4286] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 115.663055][ T4286] exFAT-fs (loop1): unable to read boot sector [ 115.669212][ T4286] exFAT-fs (loop1): failed to read boot sector [ 115.675393][ T4286] exFAT-fs (loop1): failed to recognize exfat type [ 115.690822][ T4288] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 115.917097][ T4301] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 115.924606][ T4301] rust_binder: Failed to allocate buffer. len:18446744073709551608, is_oneway:false [ 115.931168][ T4301] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC } [ 115.941336][ T4301] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:91 [ 116.069261][ T36] audit: type=1400 audit(1750776825.375:475): avc: denied { lock } for pid=4309 comm="syz.7.1260" path="socket:[29875]" dev="sockfs" ino=29875 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 116.476467][ T4318] fuse: Unknown parameter 'nd' [ 116.549352][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 116.879004][ T4327] binder: Bad value for 'max' [ 116.940045][ T4334] rust_binder: Write failure EFAULT in pid:306 [ 116.940223][ T4334] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:306 [ 117.016838][ T36] audit: type=1400 audit(1750776826.325:476): avc: denied { execute } for pid=4340 comm="syz.6.1271" name="file0" dev="tmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 117.052476][ T36] audit: type=1400 audit(1750776826.325:477): avc: denied { execute_no_trans } for pid=4340 comm="syz.6.1271" path="/138/file0" dev="tmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 117.095485][ T4348] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.095776][ T4348] cgroup: Invalid name [ 117.107041][ T4348] rust_binder: Error in use_page_slow: ESRCH [ 117.107058][ T4348] rust_binder: use_range failure ESRCH [ 117.113151][ T4348] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 117.118724][ T4348] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 117.127159][ T4348] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:108 [ 117.231957][ T4361] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.242386][ T4361] rust_binder: Error in use_page_slow: ESRCH [ 117.248801][ T4361] rust_binder: use_range failure ESRCH [ 117.254977][ T4361] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false [ 117.260438][ T4361] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 117.268541][ T4361] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:121 [ 117.287905][ T36] audit: type=1400 audit(1750776826.595:478): avc: denied { map } for pid=4362 comm="syz.7.1279" path="socket:[29572]" dev="sockfs" ino=29572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 117.305771][ T4367] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.320011][ T36] audit: type=1400 audit(1750776826.595:479): avc: denied { read } for pid=4362 comm="syz.7.1279" path="socket:[29572]" dev="sockfs" ino=29572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 117.324423][ T4367] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 117.654330][ T36] audit: type=1400 audit(1750776826.965:480): avc: denied { mount } for pid=4370 comm="syz.6.1282" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 117.654603][ T4371] overlay: ./file0 is not a directory [ 117.739663][ T4375] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1283'. [ 118.150052][ T36] audit: type=1400 audit(1750776827.455:481): avc: denied { read } for pid=4380 comm="syz.7.1285" path="socket:[30026]" dev="sockfs" ino=30026 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 118.621564][ T2374] Bluetooth: hci0: command 0x1003 tx timeout [ 118.621914][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 118.748940][ T4397] tipc: Enabled bearer , priority 10 [ 119.143611][ T4422] netlink: 9 bytes leftover after parsing attributes in process `syz.7.1299'. [ 119.153110][ T4422] gretap0: entered promiscuous mode [ 119.159805][ T4422] netlink: 5 bytes leftover after parsing attributes in process `syz.7.1299'. [ 119.168874][ T4422] 0{X: renamed from gretap0 [ 119.174474][ T4422] 0{X: left promiscuous mode [ 119.179584][ T4422] 0{X: entered allmulticast mode [ 119.186412][ T4422] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 119.283982][ T4439] /dev/rnullb0: Can't lookup blockdev [ 119.303018][ T4444] overlayfs: failed to clone upperpath [ 119.311497][ T4444] 9pnet_fd: Insufficient options for proto=fd [ 119.341571][ T4452] overlay: ./bus is not a directory [ 119.543550][ T4459] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.544590][ T4459] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 119.980524][ T4461] rust_binder: Error while translating object. [ 119.987155][ T4461] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 119.993628][ T4461] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:311 [ 120.671342][ T1376] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 120.831343][ T1376] usb 2-1: Using ep0 maxpacket: 32 [ 120.837017][ T1376] usb 2-1: too many configurations: 190, using maximum allowed: 8 [ 120.846135][ T1376] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 120.853756][ T1376] usb 2-1: can't read configurations, error -61 [ 120.981405][ T1376] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 121.131368][ T1376] usb 2-1: Using ep0 maxpacket: 32 [ 121.136960][ T1376] usb 2-1: too many configurations: 190, using maximum allowed: 8 [ 121.146014][ T1376] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 121.153653][ T1376] usb 2-1: can't read configurations, error -61 [ 121.160037][ T1376] usb usb2-port1: attempt power cycle [ 121.240303][ T4544] fuse: Unknown parameter '' [ 121.245748][ T4544] /dev/loop0: Can't lookup blockdev [ 121.268437][ T4546] /dev/rnullb0: Can't lookup blockdev [ 121.501443][ T1376] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 121.521761][ T1376] usb 2-1: Using ep0 maxpacket: 32 [ 121.527304][ T1376] usb 2-1: too many configurations: 190, using maximum allowed: 8 [ 121.536238][ T1376] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 121.544277][ T1376] usb 2-1: can't read configurations, error -61 [ 121.681400][ T1376] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 121.701777][ T1376] usb 2-1: Using ep0 maxpacket: 32 [ 121.707429][ T1376] usb 2-1: too many configurations: 190, using maximum allowed: 8 [ 121.717395][ T1376] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 121.725662][ T1376] usb 2-1: can't read configurations, error -61 [ 121.732134][ T1376] usb usb2-port1: unable to enumerate USB device [ 122.676016][ T4556] /dev/rnullb0: Can't lookup blockdev [ 123.174128][ T4564] vcan0: entered allmulticast mode [ 123.179487][ T4564] vcan0: left allmulticast mode [ 123.459861][ T4594] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 123.777253][ T4608] overlayfs: failed to clone upperpath [ 123.862014][ T4612] overlay: Unknown parameter 'smackfsdef' [ 124.014521][ T4623] netlink: 468 bytes leftover after parsing attributes in process `syz.5.1373'. [ 124.024995][ T4623] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.045077][ T4623] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1373'. [ 124.065450][ T4624] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1373'. [ 124.204570][ T36] audit: type=1400 audit(1750776833.525:482): avc: denied { read } for pid=4631 comm="syz.5.1375" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 124.228696][ T36] audit: type=1400 audit(1750776833.525:483): avc: denied { ioctl } for pid=4631 comm="syz.5.1375" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 124.312389][ T4635] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.313082][ T36] audit: type=1400 audit(1750776833.625:484): avc: denied { validate_trans } for pid=4634 comm="syz.1.1376" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 124.313879][ T4635] rust_binder: Error while translating object. [ 124.340130][ T4635] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 124.346438][ T4635] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:964 [ 124.410007][ T4651] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.421698][ T4651] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 124.428320][ T4651] rust_binder: Error while translating object. [ 124.437291][ T4651] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 124.443636][ T4651] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:966 [ 124.556154][ T4661] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 124.575374][ T4675] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1389'. [ 124.591946][ T4675] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1389'. [ 124.630987][ T4670] fuse: Unknown parameter '' [ 124.642228][ T4670] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:968 [ 124.962085][ T36] audit: type=1400 audit(1750776834.275:485): avc: denied { create } for pid=4696 comm="syz.6.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 125.026053][ T36] audit: type=1400 audit(1750776834.335:486): avc: denied { ioctl } for pid=4710 comm="syz.6.1403" path="socket:[31801]" dev="sockfs" ino=31801 ioctlcmd=0xf50e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 125.169441][ T4723] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1409'. [ 125.534783][ T4741] kvm: pic: non byte write [ 125.539776][ T4741] random: crng reseeded on system resumption [ 125.634488][ T36] audit: type=1326 audit(1750776834.945:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4743 comm="syz.1.1417" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62b3f8e929 code=0x0 [ 125.718727][ T4746] raw_sendmsg: syz.6.1418 forgot to set AF_INET. Fix it! [ 125.753242][ T4757] fuse: Bad value for 'rootmode' [ 125.781332][ T4755] fuse: Unknown parameter '' [ 125.786358][ T4755] /dev/loop0: Can't lookup blockdev [ 125.810748][ T36] audit: type=1326 audit(1750776835.115:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4758 comm="syz.6.1423" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd71018e929 code=0x0 [ 125.964984][ T4762] can0: slcan on ttyS3. [ 126.015659][ T36] audit: type=1400 audit(1750776835.325:489): avc: denied { map } for pid=4761 comm="syz.5.1424" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 126.043889][ T4763] can0 (unregistered): slcan off ttyS3. [ 126.474287][ T4803] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 126.474782][ T4804] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 126.488785][ T4803] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 126.511490][ T4803] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 126.532350][ T4806] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 126.532374][ T4806] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:992 [ 126.542040][ T4806] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 126.551330][ T4806] rust_binder: Read failure Err(EFAULT) in pid:992 [ 126.592177][ T4809] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 126.650583][ T36] audit: type=1400 audit(1750776835.965:490): avc: denied { accept } for pid=4810 comm="syz.6.1432" path="socket:[31514]" dev="sockfs" ino=31514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 126.670902][ T4812] fuse: Unknown parameter '' [ 126.728918][ T4814] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1433'. [ 126.836618][ T4824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4824 comm=syz.7.1437 [ 126.849290][ T4824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4824 comm=syz.7.1437 [ 126.862311][ T4824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4824 comm=syz.7.1437 [ 126.875239][ T4824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4824 comm=syz.7.1437 [ 126.887918][ T4824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4824 comm=syz.7.1437 [ 126.900623][ T4824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4824 comm=syz.7.1437 [ 127.612285][ T4845] overlayfs: failed to resolve './file0': -2 [ 127.651392][ T4853] fuse: Unknown parameter '' [ 127.656634][ T4853] /dev/loop0: Can't lookup blockdev [ 127.684341][ T4859] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1450'. [ 128.229507][ T4874] fuse: Unknown parameter '' [ 128.230551][ T4872] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1456'. [ 128.234585][ T4874] /dev/loop0: Can't lookup blockdev [ 128.244906][ T4872] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1456'. [ 128.380351][ T4897] 9pnet_fd: Insufficient options for proto=fd [ 128.401855][ T36] audit: type=1400 audit(1750776837.715:491): avc: denied { mounton } for pid=4898 comm="syz.6.1466" path="/200/file0" dev="tmpfs" ino=1111 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 128.401889][ T4899] fuse: Bad value for 'group_id' [ 128.430041][ T4899] fuse: Bad value for 'group_id' [ 128.974735][ T4916] overlayfs: failed to clone upperpath [ 129.097969][ T4946] overlayfs: failed to clone upperpath [ 129.106765][ T4948] fuse: Unknown parameter 'up_id' [ 129.232769][ T4961] rust_binder: Failed to allocate buffer. len:64, is_oneway:false [ 129.323307][ T36] audit: type=1400 audit(1750776838.635:492): avc: denied { setattr } for pid=4970 comm="syz.5.1490" name="TIPC" dev="sockfs" ino=32775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.360003][ T36] audit: type=1400 audit(1750776838.665:493): avc: granted { setsecparam } for pid=4976 comm="syz.5.1492" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 129.379348][ T36] audit: type=1400 audit(1750776838.665:494): avc: granted { setsecparam } for pid=4976 comm="syz.5.1492" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 129.398527][ T36] audit: type=1326 audit(1750776838.665:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4976 comm="syz.5.1492" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb227f8e929 code=0x0 [ 129.521634][ T36] audit: type=1326 audit(1750776838.835:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4988 comm="syz.6.1496" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd71018e929 code=0x0 [ 129.653939][ T36] audit: type=1400 audit(1750776838.965:497): avc: denied { connect } for pid=4992 comm="syz.7.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 129.656313][ T4993] binder: Unknown parameter 'audit' [ 129.675170][ T36] audit: type=1400 audit(1750776838.965:498): avc: denied { bind } for pid=4992 comm="syz.7.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 129.698756][ T36] audit: type=1400 audit(1750776838.965:499): avc: denied { getopt } for pid=4992 comm="syz.7.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 129.741508][ T4997] /dev/loop0: Can't lookup blockdev [ 129.765836][ T5001] fuse: Bad value for 'user_id' [ 129.771596][ T5001] fuse: Bad value for 'user_id' [ 129.899525][ T36] audit: type=1400 audit(1750776839.205:500): avc: denied { setattr } for pid=5005 comm="syz.7.1503" name="NETLINK" dev="sockfs" ino=32324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 129.939436][ T36] audit: type=1400 audit(1750776839.245:501): avc: denied { create } for pid=5009 comm="syz.7.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 129.992197][ T5019] /dev/loop0: Can't lookup blockdev [ 130.020024][ T5026] overlayfs: failed to clone upperpath [ 130.089112][ T5036] netlink: 220 bytes leftover after parsing attributes in process `syz.1.1516'. [ 130.512794][ T5069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5069 comm=syz.6.1528 [ 131.250504][ T5124] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1547'. [ 131.286700][ T5131] futex_wake_op: syz.5.1549 tries to shift op by -1; fix this program [ 131.420723][ T5139] netlink: 'syz.6.1553': attribute type 12 has an invalid length. [ 131.429014][ T5140] netlink: 'syz.6.1553': attribute type 12 has an invalid length. [ 131.438318][ T5139] netlink: 25 bytes leftover after parsing attributes in process `syz.6.1553'. [ 131.817777][ T5159] rust_binder: Read failure Err(EFAULT) in pid:405 [ 133.081940][ T5247] /dev/loop0: Can't lookup blockdev [ 133.226314][ T5265] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1597'. [ 133.288322][ T5274] 9pnet_fd: Insufficient options for proto=fd [ 133.295149][ T5272] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1600'. [ 133.566560][ T5300] overlayfs: failed to clone upperpath [ 146.898422][ T5312] overlayfs: failed to clone upperpath [ 146.939687][ T5320] 9pnet_fd: Insufficient options for proto=fd [ 146.955017][ T5324] 9pnet_fd: Insufficient options for proto=fd [ 147.428773][ T5349] netlink: 3156 bytes leftover after parsing attributes in process `syz.7.1628'. [ 147.974289][ T5381] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1641'. [ 148.112659][ T5406] overlayfs: failed to resolve './file0': -2 [ 148.121846][ T5405] overlayfs: failed to resolve './file0': -2 [ 148.135389][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 148.135407][ T36] audit: type=1326 audit(1750776857.445:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5415 comm="syz.6.1655" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd71018e929 code=0x0 [ 148.171130][ T5419] fuse: Bad value for 'rootmode' [ 148.200746][ T5423] tipc: Enabling of bearer rejected, already enabled [ 148.212463][ T5423] overlayfs: failed to clone upperpath [ 148.247764][ T5426] overlayfs: failed to clone upperpath [ 148.297935][ T5433] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1660'. [ 148.346028][ T36] audit: type=1400 audit(1750776857.665:516): avc: denied { lock } for pid=5434 comm="syz.1.1661" path="socket:[33906]" dev="sockfs" ino=33906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 148.383268][ T5445] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1664'. [ 148.476144][ T5472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1673'. [ 148.492896][ T36] audit: type=1400 audit(1750776857.805:517): avc: denied { create } for pid=5473 comm="syz.1.1674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 148.590404][ T5484] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1678'. [ 148.600099][ T5484] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1678'. [ 148.621856][ T5487] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2856 sclass=netlink_route_socket pid=5487 comm=syz.7.1680 [ 148.644983][ T5489] overlayfs: failed to clone upperpath [ 148.669493][ T5494] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1683'. [ 148.794198][ T5514] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 148.812995][ T5516] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1693'. [ 148.987781][ T5526] overlayfs: failed to clone upperpath [ 149.187726][ T5583] overlayfs: failed to clone upperpath [ 149.201023][ T5587] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1718'. [ 149.209322][ T5589] 8021q: VLANs not supported on lo [ 149.440763][ T36] audit: type=1326 audit(1750776858.745:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5615 comm="syz.1.1731" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f62b3f8e929 code=0x0 [ 149.742350][ T36] audit: type=1400 audit(1750776859.055:519): avc: denied { create } for pid=5619 comm="syz.5.1732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 150.082936][ T5640] /dev/loop0: Can't lookup blockdev [ 150.257140][ T5668] fuseblk: Unknown parameter 'rotmode' [ 150.299866][ T36] audit: type=1400 audit(1750776859.605:520): avc: denied { sqpoll } for pid=5669 comm="syz.6.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 150.339711][ T36] audit: type=1326 audit(1750776859.635:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5671 comm="syz.5.1755" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb227f8e929 code=0x0 [ 150.382387][ T5688] overlayfs: failed to clone upperpath [ 150.412807][ T5692] /dev/loop0: Can't lookup blockdev [ 150.439583][ T5695] /dev/loop0: Can't lookup blockdev [ 150.483549][ T36] audit: type=1326 audit(1750776859.795:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5708 comm="syz.7.1767" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f061978e929 code=0x0 [ 150.528947][ T5715] overlayfs: failed to clone upperpath [ 150.864978][ T5722] netlink: 'syz.6.1771': attribute type 19 has an invalid length. [ 151.053497][ T5724] overlayfs: failed to clone upperpath [ 151.060306][ T5724] /dev/loop0: Can't lookup blockdev [ 151.170894][ T5737] netlink: 'syz.1.1777': attribute type 4 has an invalid length. [ 151.178717][ T5737] netlink: 'syz.1.1777': attribute type 5 has an invalid length. [ 151.348746][ T5762] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 151.357374][ T5761] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 152.221220][ T5827] overlayfs: failed to clone upperpath [ 152.895008][ T36] audit: type=1400 audit(1750776862.205:523): avc: denied { create } for pid=5888 comm="syz.7.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 153.026099][ T5903] __nla_validate_parse: 3 callbacks suppressed [ 153.026119][ T5903] netlink: 393 bytes leftover after parsing attributes in process `syz.7.1835'. [ 153.057140][ T36] audit: type=1326 audit(1750776862.365:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5906 comm="syz.7.1837" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f061978e929 code=0x0 [ 153.353777][ T5925] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5925 comm=syz.1.1841 [ 153.434089][ T36] audit: type=1400 audit(1750776862.745:525): avc: denied { create } for pid=5931 comm="syz.1.1846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 153.472999][ T5935] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1847'. [ 153.482273][ T5935] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1847'. [ 153.492381][ T5935] netlink: 'syz.1.1847': attribute type 6 has an invalid length. [ 153.505590][ T5935] netlink: 'syz.1.1847': attribute type 5 has an invalid length. [ 153.516329][ T5935] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1847'. [ 153.516363][ T5937] cgroup: Unknown subsys name 'measure' [ 154.065480][ T5965] netlink: 37 bytes leftover after parsing attributes in process `syz.5.1858'. [ 154.094622][ T5969] overlay: Unknown parameter 'uid<00000000000000016384' [ 154.114652][ T5975] sit0: entered promiscuous mode [ 154.121136][ T5975] netlink: 'syz.5.1863': attribute type 1 has an invalid length. [ 154.125333][ T5977] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1864'. [ 154.132194][ T5975] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1863'. [ 154.152148][ T36] audit: type=1400 audit(1750776863.465:526): avc: denied { setopt } for pid=5978 comm="syz.1.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 154.273367][ T5990] /dev/loop0: Can't lookup blockdev [ 154.362728][ T6006] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1873'. [ 154.431322][ T6019] netlink: 5308 bytes leftover after parsing attributes in process `syz.6.1878'. [ 154.771432][ T6045] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1886'. [ 154.951903][ T6080] overlayfs: failed to clone upperpath [ 155.238880][ T36] audit: type=1400 audit(1750776864.545:527): avc: denied { listen } for pid=6107 comm="syz.5.1910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 155.279057][ T36] audit: type=1400 audit(1750776864.545:528): avc: denied { lock } for pid=6107 comm="syz.5.1910" path="socket:[35506]" dev="sockfs" ino=35506 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 155.476555][ T6134] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 155.486127][ T6134] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 155.498778][ T6134] overlayfs: missing 'lowerdir' [ 156.529619][ T6221] tmpfs: Unknown parameter 'hge' [ 156.548193][ T6224] tmpfs: Bad value for 'huge' [ 157.026839][ T6237] overlayfs: failed to resolve './file1/file0': -2 [ 157.080680][ T6245] /dev/loop0: Can't lookup blockdev [ 157.435362][ T6256] bridge_slave_1: left allmulticast mode [ 157.441828][ T6256] bridge_slave_1: left promiscuous mode [ 157.447947][ T6256] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.455962][ T6256] bridge_slave_0: left allmulticast mode [ 157.461751][ T6256] bridge_slave_0: left promiscuous mode [ 157.467495][ T6256] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.601267][ T6272] overlayfs: failed to resolve './file1': -2 [ 157.687588][ T36] audit: type=1400 audit(1750776866.995:529): avc: denied { create } for pid=6278 comm="syz.7.1975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 158.248453][ T6296] /dev/loop0: Can't lookup blockdev [ 158.463865][ T6300] fuse: Bad value for 'user_id' [ 158.469450][ T6300] fuse: Bad value for 'user_id' [ 158.493054][ T6307] __nla_validate_parse: 6 callbacks suppressed [ 158.493069][ T6307] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1984'. [ 158.919275][ T36] audit: type=1400 audit(1750776868.225:530): avc: denied { ioctl } for pid=6326 comm="syz.1.1992" path="socket:[36898]" dev="sockfs" ino=36898 ioctlcmd=0x8953 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 159.318406][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2015'. [ 159.438681][ T36] audit: type=1400 audit(1750776868.745:531): avc: denied { search } for pid=6401 comm="syz.1.2019" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 159.490886][ T36] audit: type=1400 audit(1750776868.795:532): avc: denied { read } for pid=6401 comm="syz.1.2019" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 159.522843][ T36] audit: type=1400 audit(1750776868.825:533): avc: denied { open } for pid=6401 comm="syz.1.2019" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 159.589423][ T6414] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2023'. [ 159.598684][ T6414] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2023'. [ 159.621709][ T6422] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2025'. [ 159.712855][ T6454] netlink: 100 bytes leftover after parsing attributes in process `syz.7.2035'. [ 159.771051][ T6466] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=19 sclass=netlink_audit_socket pid=6466 comm=syz.7.2040 [ 159.784150][ T6466] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=61 sclass=netlink_audit_socket pid=6466 comm=syz.7.2040 [ 159.796797][ T6466] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=35 sclass=netlink_audit_socket pid=6466 comm=syz.7.2040 [ 159.809505][ T6466] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=6466 comm=syz.7.2040 [ 159.822839][ T6466] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=52 sclass=netlink_audit_socket pid=6466 comm=syz.7.2040 [ 160.048642][ T6481] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2045'. [ 160.085535][ T6485] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2047'. [ 160.202759][ T6500] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2054'. [ 160.238126][ T6507] overlayfs: failed to clone upperpath [ 160.523916][ T6554] fuse: Unknown parameter 'fd0x0000000000000004' [ 160.530810][ T6555] fuse: Unknown parameter 'fd0x0000000000000004' [ 160.594471][ T6568] netlink: 'syz.1.2079': attribute type 12 has an invalid length. [ 160.623730][ T6577] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2082'. [ 161.152999][ T6632] bridge0: port 3(veth1_macvtap) entered blocking state [ 161.160068][ T6632] bridge0: port 3(veth1_macvtap) entered disabled state [ 161.167162][ T6632] veth1_macvtap: entered allmulticast mode [ 161.173392][ T6632] veth1_macvtap: left allmulticast mode [ 161.240140][ T6636] fuseblk: Bad value for 'user_id' [ 161.245475][ T6636] fuseblk: Bad value for 'user_id' [ 162.317178][ T6672] /dev/loop0: Can't lookup blockdev [ 162.355963][ T6677] overlayfs: failed to clone lowerpath [ 162.378757][ T6687] tmpfs: Bad value for 'uid' [ 162.384090][ T6687] tmpfs: Bad value for 'uid' [ 162.492656][ T6701] /dev/loop0: Can't lookup blockdev [ 162.657901][ T6727] /dev/loop0: Can't lookup blockdev [ 162.973617][ T6759] fuseblk: Unknown parameter '000000000000000000000100x0000000000000008' [ 163.600001][ T6787] incfs: Error accessing: ./file0. [ 163.605591][ T6787] incfs: mount failed -20 [ 163.610880][ T6787] fuseblk: Bad value for 'fd' [ 163.709765][ T6793] __nla_validate_parse: 4 callbacks suppressed [ 163.709780][ T6793] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2158'. [ 166.343512][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2207'. [ 166.742541][ T6963] fuse: Bad value for 'fd' [ 166.748538][ T6963] fuse: Bad value for 'fd' [ 167.434875][ T6986] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2224'. [ 167.458420][ T6990] overlayfs: failed to clone upperpath [ 167.652428][ T6994] overlayfs: failed to clone upperpath [ 167.680867][ T6996] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2228'. [ 167.958387][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2232'. [ 167.967405][ T7004] bridge_slave_1: left allmulticast mode [ 167.973612][ T7004] bridge_slave_1: left promiscuous mode [ 167.979521][ T7004] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.987475][ T7004] bridge_slave_0: left allmulticast mode [ 167.993254][ T7004] bridge_slave_0: left promiscuous mode [ 167.999032][ T7004] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.010344][ T7007] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1012 sclass=netlink_route_socket pid=7007 comm=syz.5.2232 [ 168.141943][ T7012] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2235'. [ 168.186660][ T7023] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0 [ 168.563369][ T7032] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2242'. [ 168.641519][ T7037] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2244'. [ 169.116689][ T7069] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=43 sclass=netlink_tcpdiag_socket pid=7069 comm=syz.1.2256 [ 169.290980][ T7082] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2260'. [ 169.302009][ T7083] overlayfs: missing 'workdir' [ 169.320633][ T7085] overlayfs: failed to clone upperpath [ 169.522165][ T7113] overlayfs: failed to clone upperpath [ 169.559794][ T7119] netlink: 'syz.7.2273': attribute type 4 has an invalid length. [ 169.616966][ T7133] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2278'. [ 170.026127][ T7156] overlayfs: failed to clone upperpath [ 170.126357][ T7170] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2290'. [ 170.155588][ T7174] netlink: 'syz.1.2292': attribute type 11 has an invalid length. [ 170.163890][ T7174] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2292'. [ 170.163895][ T7175] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2292'. [ 170.478833][ T36] audit: type=1400 audit(2000000009.949:534): avc: denied { accept } for pid=7185 comm="syz.7.2296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 170.728229][ T7197] fuse: Unknown parameter '' [ 170.882140][ T7202] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2301'. [ 170.948370][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2302'. [ 170.972670][ T7209] overlayfs: option "workdir=./file1" is useless in a non-upper mount, ignore [ 170.981661][ T7209] overlayfs: missing 'lowerdir' [ 171.003399][ T7211] overlayfs: failed to clone upperpath [ 171.043720][ T36] audit: type=1400 audit(2000000010.519:535): avc: denied { create } for pid=7225 comm="syz.1.2311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 171.911902][ T7264] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2323'. [ 171.915842][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2322'. [ 171.948266][ T7269] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2324'. [ 172.003454][ T36] audit: type=1400 audit(2000000011.479:536): avc: denied { mount } for pid=7286 comm="syz.1.2331" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 172.088653][ T36] audit: type=1326 audit(2000000011.559:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7297 comm="syz.6.2336" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd71018e929 code=0x0 [ 172.190979][ T7300] overlayfs: failed to clone upperpath [ 173.004254][ T36] audit: type=1400 audit(2000000012.479:538): avc: denied { write } for pid=7364 comm="syz.7.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 173.847522][ T7419] overlayfs: failed to clone upperpath [ 173.872375][ T7427] overlayfs: failed to clone upperpath [ 174.411186][ T7453] __nla_validate_parse: 7 callbacks suppressed [ 174.411208][ T7453] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2389'. [ 174.478102][ T7467] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2395'. [ 174.495771][ T7470] 9pnet_fd: Insufficient options for proto=fd [ 174.929563][ T36] audit: type=1400 audit(2000000014.399:539): avc: denied { listen } for pid=7478 comm="syz.6.2400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 175.038266][ T7492] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2404'. [ 175.445252][ T7503] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.452514][ T7503] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.459587][ T7503] bridge_slave_0: entered allmulticast mode [ 175.466155][ T7503] bridge_slave_0: entered promiscuous mode [ 175.472796][ T7503] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.479855][ T7503] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.487021][ T7503] bridge_slave_1: entered allmulticast mode [ 175.493308][ T7503] bridge_slave_1: entered promiscuous mode [ 175.542392][ T7503] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.549475][ T7503] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.556832][ T7503] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.563906][ T7503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.590858][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.599599][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.599604][ T7519] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2414'. [ 175.618818][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.625931][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.637856][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.644960][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.680987][ T7503] veth0_vlan: entered promiscuous mode [ 175.682330][ T7532] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=45328 sclass=netlink_xfrm_socket pid=7532 comm=syz.5.2419 [ 175.694506][ T7503] veth1_macvtap: entered promiscuous mode [ 175.718117][ T7536] overlay: Unknown parameter 'mounts' [ 175.934647][ T7576] can0: slcan on ttyS3. [ 176.001940][ T7576] can0 (unregistered): slcan off ttyS3. [ 176.020964][ T7595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2436'. [ 176.030221][ T7596] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2436'. [ 176.040431][ T36] audit: type=1400 audit(2000000015.509:540): avc: denied { setopt } for pid=7594 comm="syz.1.2436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 176.314596][ T7646] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2447'. [ 176.633320][ T7675] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2456'. [ 176.652028][ T7677] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2457'. [ 177.013970][ T7702] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 177.022980][ T7702] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 177.062427][ T7713] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2469'. [ 177.276093][ T36] audit: type=1326 audit(2000000016.749:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7741 comm="syz.6.2479" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd71018e929 code=0x0 [ 177.340486][ T7756] overlayfs: failed to resolve './file0': -2 [ 177.376763][ T7763] 9pnet_virtio: no channels available for device syz [ 178.888181][ T7808] overlayfs: failed to clone upperpath [ 179.818152][ T7865] overlayfs: failed to clone upperpath [ 180.451493][ T36] audit: type=1400 audit(2000000019.844:542): avc: denied { mounton } for pid=7894 comm="syz.1.2529" path="/12/bus" dev="tmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 180.451536][ T7895] /dev/nullb0: Can't lookup blockdev [ 180.484571][ T7895] binder: Bad value for 'max' [ 180.489557][ T7897] overlayfs: failed to clone upperpath [ 180.511522][ T7899] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 3 [ 180.518870][ T7899] rust_binder: Write failure EINVAL in pid:44 [ 180.527974][ T7901] TCP: TCP_TX_DELAY enabled [ 180.540266][ T7901] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 180.659793][ T7906] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 180.666325][ T7906] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:48 [ 180.707477][ T7908] binder: Unknown parameter 'contex|' [ 180.881735][ T7926] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 181.018502][ T7936] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2542'. [ 181.088316][ T7949] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2546'. [ 181.302632][ T7961] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2551'. [ 181.325173][ T7963] overlayfs: failed to clone upperpath [ 181.576600][ T424] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 181.672928][ T7984] 9pnet_fd: Insufficient options for proto=fd [ 181.730363][ T424] usb 2-1: Invalid ep0 maxpacket: 16 [ 181.863578][ T424] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 182.017307][ T424] usb 2-1: Invalid ep0 maxpacket: 16 [ 182.022729][ T424] usb usb2-port1: attempt power cycle [ 182.084686][ T8016] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2572'. [ 182.181516][ T8039] overlayfs: unescaped trailing colons in lowerdir mount option. [ 182.191148][ T36] audit: type=1326 audit(2000000021.530:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8038 comm="syz.5.2582" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb227f8e929 code=0x0 [ 182.214145][ T36] audit: type=1326 audit(2000000021.530:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8038 comm="syz.5.2582" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb227f8e929 code=0x0 [ 182.376004][ T424] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 182.397130][ T424] usb 2-1: Invalid ep0 maxpacket: 16 [ 182.539925][ T424] usb 2-1: new low-speed USB device number 38 using dummy_hcd [ 182.556255][ T8068] overlayfs: failed to clone upperpath [ 182.562283][ T424] usb 2-1: Invalid ep0 maxpacket: 16 [ 182.567758][ T424] usb usb2-port1: unable to enumerate USB device [ 182.781505][ T36] audit: type=1400 audit(2000000022.115:545): avc: denied { create } for pid=8079 comm="syz.5.2591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 182.802373][ T8080] vcan0: entered allmulticast mode [ 182.828415][ T36] audit: type=1400 audit(2000000022.164:546): avc: denied { map } for pid=8083 comm="syz.5.2593" path="socket:[40559]" dev="sockfs" ino=40559 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 183.017198][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2610'. [ 183.173150][ T8148] fuse: Unknown parameter 'wroup_iD' [ 183.210919][ T8166] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 183.217060][ T8167] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 184.091329][ T8203] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 184.091353][ T8203] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:81 [ 184.156257][ T8205] rust_binder: Write failure EFAULT in pid:83 [ 184.175993][ T8207] incfs: Error accessing: ./file0. [ 184.187715][ T306] tipc: Subscription rejected, illegal request [ 184.188300][ T8207] incfs: mount failed -20 [ 184.442082][ T424] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 184.595351][ T424] usb 2-1: Using ep0 maxpacket: 16 [ 184.603431][ T424] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.613638][ T424] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.623979][ T424] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.633103][ T424] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.641184][ T424] usb 2-1: Product: syz [ 184.645342][ T424] usb 2-1: Manufacturer: syz [ 184.649952][ T424] usb 2-1: SerialNumber: syz [ 184.862566][ T424] usb 2-1: USB disconnect, device number 39 [ 185.292462][ T8245] overlayfs: failed to clone upperpath [ 185.551476][ T8268] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.558583][ T8268] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.565737][ T8268] bridge_slave_0: entered allmulticast mode [ 185.571926][ T8268] bridge_slave_0: entered promiscuous mode [ 185.578480][ T8268] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.585552][ T8268] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.592632][ T8268] bridge_slave_1: entered allmulticast mode [ 185.598969][ T8268] bridge_slave_1: entered promiscuous mode [ 185.644800][ T8268] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.651913][ T8268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.659205][ T8268] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.666222][ T8268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.686030][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.693391][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.702793][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.709918][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.719347][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.726502][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.750845][ T8268] veth0_vlan: entered promiscuous mode [ 185.761460][ T8268] veth1_macvtap: entered promiscuous mode [ 185.836350][ T8281] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2663'. [ 185.865177][ T8286] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:12 [ 186.055406][ T8293] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 186.064846][ T8293] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 186.071196][ T8293] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 186.077771][ T8293] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 186.084210][ T8293] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 186.090849][ T8293] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 186.097593][ T8293] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 186.104022][ T8293] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 186.110614][ T8293] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 186.117216][ T8293] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 186.204911][ T8298] rust_binder: Write failure EINVAL in pid:24 [ 186.211752][ T8298] rust_binder: Write failure EINVAL in pid:24 [ 186.223057][ T8298] rust_binder: Write failure EINVAL in pid:24 [ 187.190951][ T8333] netlink: 'syz.8.2680': attribute type 63 has an invalid length. [ 187.204906][ T8333] netlink: 5 bytes leftover after parsing attributes in process `syz.8.2680'. [ 187.213785][ T8333] gretap0: entered allmulticast mode [ 187.219215][ T8333] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 187.235637][ T8333] binder: Bad value for 'max' [ 187.294757][ T8337] rust_binder: Error while translating object. [ 187.294800][ T8337] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 187.301314][ T8337] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:115 [ 187.382644][ T8346] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:119 [ 187.396094][ T8344] overlayfs: failed to clone upperpath [ 187.425800][ T8346] rust_binder: Read failure Err(EFAULT) in pid:119 [ 187.483109][ T36] audit: type=1400 audit(2000000026.744:547): avc: denied { execute } for pid=8334 comm="syz.8.2681" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 187.540921][ T8364] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:127 [ 187.653619][ T8367] rust_binder: Failed to allocate buffer. len:136, is_oneway:false [ 187.675261][ T8369] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2692'. [ 187.831709][ T8403] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 187.839067][ T8403] rust_binder: Write failure EINVAL in pid:144 [ 187.839301][ T8403] rust_binder: Write failure EFAULT in pid:144 [ 187.912921][ T8412] rust_binder: Write failure EINVAL in pid:148 [ 187.949460][ T31] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 188.119401][ T31] usb 9-1: Using ep0 maxpacket: 32 [ 188.130721][ T31] usb 9-1: config 0 has an invalid interface number: 196 but max is 0 [ 188.139022][ T31] usb 9-1: config 0 has no interface number 0 [ 188.150680][ T31] usb 9-1: too many endpoints for config 0 interface 196 altsetting 1: 132, using maximum allowed: 30 [ 188.162177][ T31] usb 9-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 132 [ 188.176173][ T31] usb 9-1: config 0 interface 196 has no altsetting 0 [ 188.191155][ T31] usb 9-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 188.200730][ T31] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 188.209152][ T31] usb 9-1: Product: syz [ 188.213511][ T31] usb 9-1: Manufacturer: syz [ 188.218119][ T31] usb 9-1: SerialNumber: syz [ 188.229302][ T31] usb 9-1: config 0 descriptor?? [ 188.250451][ T36] audit: type=1400 audit(2000000027.514:548): avc: denied { create } for pid=8445 comm="syz.7.2721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 188.511732][ T31] usb 9-1: USB disconnect, device number 2 [ 188.518971][ T8476] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:157 [ 188.603221][ T306] bridge_slave_1: left allmulticast mode [ 188.618188][ T306] bridge_slave_1: left promiscuous mode [ 188.624096][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.632134][ T306] bridge_slave_0: left allmulticast mode [ 188.637872][ T306] bridge_slave_0: left promiscuous mode [ 188.643628][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.731232][ T306] tipc: Disabling bearer [ 188.736378][ T306] tipc: Left network mode [ 188.741693][ T306] veth1_macvtap: left promiscuous mode [ 188.747281][ T306] veth0_vlan: left promiscuous mode [ 188.875618][ T8480] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 189.050193][ T8499] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1 [ 189.057335][ T8499] rust_binder: Write failure EINVAL in pid:52 [ 189.358680][ T8518] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 189.364866][ T8518] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:161 [ 189.609429][ T424] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 189.629566][ T64] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 189.769446][ T424] usb 9-1: Using ep0 maxpacket: 32 [ 189.776088][ T424] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.787063][ T64] usb 2-1: Using ep0 maxpacket: 32 [ 189.792226][ T424] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.802053][ T424] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 189.811157][ T424] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.820001][ T64] usb 2-1: config 1 has an invalid interface number: 4 but max is 2 [ 189.828269][ T64] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.838643][ T424] usb 9-1: config 0 descriptor?? [ 189.843685][ T64] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 189.852684][ T64] usb 2-1: config 1 has no interface number 1 [ 189.859408][ T424] hub 9-1:0.0: USB hub found [ 189.864156][ T64] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 189.877144][ T64] usb 2-1: too many endpoints for config 1 interface 4 altsetting 1: 186, using maximum allowed: 30 [ 189.888601][ T64] usb 2-1: config 1 interface 4 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 186 [ 189.901847][ T64] usb 2-1: config 1 interface 4 has no altsetting 0 [ 189.909915][ T64] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 189.919004][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.927050][ T64] usb 2-1: Product: syz [ 189.931253][ T64] usb 2-1: Manufacturer: ᇰꞗ㭗䢲ဎ荱匴봍欷숚訳㋽ሢ룠㺈⵷뙘㖧奆龖钑ۓ蕸똞ꄛ⍻ኇ휋॥볓㩣 [ 189.944459][ T64] usb 2-1: SerialNumber: syz [ 190.031702][ T8530] overlayfs: failed to clone upperpath [ 190.059400][ T424] hub 9-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 190.202346][ T8535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.211008][ T8535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.421007][ T8535] rust_binder: Error while translating object. [ 190.421045][ T8535] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 190.427411][ T8535] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:165 [ 190.438614][ T8535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.456323][ T8535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.465865][ T424] hid-generic 0003:046D:C31C.0009: item fetching failed at offset 0/1 [ 190.474203][ T424] hid-generic 0003:046D:C31C.0009: probe with driver hid-generic failed with error -22 [ 190.769509][ T424] usb 9-1: USB disconnect, device number 3 [ 191.101421][ T8552] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=14 sclass=netlink_xfrm_socket pid=8552 comm=syz.7.2761 [ 192.341513][ T8570] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 192.403158][ T64] usb 2-1: 0:2 : does not exist [ 192.416000][ T36] audit: type=1400 audit(2000000031.664:549): avc: denied { append } for pid=8573 comm="syz.1.2769" name="vsock" dev="devtmpfs" ino=207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 192.441979][ T64] usb 2-1: USB disconnect, device number 40 [ 192.444641][ T8575] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 192.460271][ T7934] udevd[7934]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 192.599645][ T307] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 192.749407][ T307] usb 9-1: Invalid ep0 maxpacket: 32 [ 192.879408][ T307] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 193.029462][ T307] usb 9-1: Invalid ep0 maxpacket: 32 [ 193.035011][ T307] usb usb9-port1: attempt power cycle [ 193.076804][ T36] audit: type=1326 audit(2000000032.334:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8597 comm="syz.5.2777" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb227f8e929 code=0x0 [ 193.370129][ T8604] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 193.370159][ T8604] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:172 [ 193.379777][ T307] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 193.409815][ T307] usb 9-1: Invalid ep0 maxpacket: 32 [ 193.539423][ T307] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 193.559754][ T307] usb 9-1: Invalid ep0 maxpacket: 32 [ 193.565190][ T307] usb usb9-port1: unable to enumerate USB device [ 194.214149][ T8618] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2784'. [ 194.357554][ T8626] rust_binder: Error in use_page_slow: ESRCH [ 194.357580][ T8626] rust_binder: use_range failure ESRCH [ 194.363710][ T8626] rust_binder: Failed to allocate buffer. len:4216, is_oneway:false [ 194.369200][ T8626] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH } [ 194.377316][ T8626] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:182 [ 194.434017][ T8633] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.443298][ T8634] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 194.450033][ T8633] rust_binder: Write failure EINVAL in pid:188 [ 194.471109][ T8636] 9p: Unknown Cache mode or invalid value ;j~.rM09]~ށa΋!B\nz\A/ [ 194.656096][ T8636] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0 [ 194.663551][ T8636] rust_binder: Write failure EINVAL in pid:191 [ 195.143160][ T8649] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2794'. [ 195.167335][ T8651] tmpfs: Unknown parameter 'Uid0x0000000000000000' [ 195.569398][ T64] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 195.719522][ T64] usb 2-1: Using ep0 maxpacket: 16 [ 195.725803][ T64] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 195.734197][ T64] usb 2-1: config 1 has no interface number 0 [ 195.740339][ T64] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 195.750288][ T64] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 195.760318][ T64] usb 2-1: config 1 interface 105 has no altsetting 0 [ 195.769745][ T64] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 195.778813][ T64] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.786896][ T64] usb 2-1: Product: syz [ 195.791306][ T64] usb 2-1: Manufacturer: syz [ 195.795909][ T64] usb 2-1: SerialNumber: syz [ 195.801499][ T8658] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 195.808677][ T8658] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 196.019468][ T8658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.028036][ T8658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.088009][ T8672] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2803'. [ 196.213572][ T8695] rust_binder: Read failure Err(EAGAIN) in pid:86 [ 196.213669][ T8695] rust_binder: Read failure Err(EAGAIN) in pid:86 [ 196.236906][ T8658] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 196.250686][ T8658] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 196.261793][ T8700] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2812'. [ 196.460547][ T8658] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:198 [ 196.509463][ T432] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 196.560036][ T64] aqc111 2-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 196.570952][ T64] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 196.579905][ T64] usb 2-1: USB disconnect, device number 41 [ 196.669391][ T432] usb 9-1: Using ep0 maxpacket: 16 [ 196.675834][ T432] usb 9-1: config 6 has an invalid interface number: 52 but max is 0 [ 196.684109][ T432] usb 9-1: config 6 has no interface number 0 [ 196.690297][ T432] usb 9-1: config 6 interface 52 has no altsetting 0 [ 196.698549][ T432] usb 9-1: New USB device found, idVendor=2c7c, idProduct=0314, bcdDevice=f8.72 [ 196.707735][ T432] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.715774][ T432] usb 9-1: Product: syz [ 196.719953][ T432] usb 9-1: Manufacturer: syz [ 196.724719][ T432] usb 9-1: SerialNumber: syz [ 196.937203][ T432] usb 9-1: USB disconnect, device number 8 [ 197.022613][ T36] audit: type=1400 audit(2000000037.287:551): avc: denied { getopt } for pid=8724 comm="syz.5.2821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 197.075417][ T8734] rust_binder: validate_parent_fixup: new_min_offset=56, sg_entry.length=0 [ 197.075441][ T8734] rust_binder: Error while translating object. [ 197.084551][ T8734] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 197.091030][ T8734] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:200 [ 197.165477][ T8742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2827'. [ 197.468939][ T8749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2830'. [ 197.709432][ T432] usb 9-1: new full-speed USB device number 9 using dummy_hcd [ 197.860592][ T432] usb 9-1: config 0 has an invalid descriptor of length 88, skipping remainder of the config [ 197.871545][ T432] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x63, changing to 0x3 [ 197.882977][ T432] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 48367, setting to 64 [ 197.896436][ T432] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 197.905525][ T432] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.913527][ T432] usb 9-1: Product: syz [ 197.917670][ T432] usb 9-1: Manufacturer: syz [ 197.922299][ T432] usb 9-1: SerialNumber: syz [ 197.927403][ T432] usb 9-1: config 0 descriptor?? [ 197.932895][ T8751] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 197.999941][ T36] audit: type=1400 audit(2000000038.267:552): avc: denied { lock } for pid=8757 comm="syz.1.2834" path="socket:[44604]" dev="sockfs" ino=44604 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 198.143352][ T292] usb 9-1: USB disconnect, device number 9 [ 198.299433][ T307] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 198.449407][ T307] usb 2-1: Using ep0 maxpacket: 16 [ 198.455783][ T307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.466856][ T307] usb 2-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 198.475925][ T307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.485117][ T307] usb 2-1: config 0 descriptor?? [ 198.666175][ T36] audit: type=1326 audit(2000000038.927:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8796 comm="syz.8.2850" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4ad38e929 code=0x7ffc0000 [ 198.901058][ T307] wacom 0003:056A:037A.000A: Unknown device_type for 'HID 056a:037a'. Assuming pen. [ 198.914178][ T307] wacom 0003:056A:037A.000A: hidraw0: USB HID v0.05 Device [HID 056a:037a] on usb-dummy_hcd.1-1/input0 [ 198.931162][ T307] input: Wacom One by Wacom S Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:037A.000A/input/input17 [ 199.094777][ T424] usb 2-1: USB disconnect, device number 42 [ 199.296340][ T8760] binder: Bad value for 'stats' [ 199.465298][ T8846] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 199.484900][ T8846] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 199.794521][ T8848] netlink: 'syz.5.2864': attribute type 11 has an invalid length. [ 200.137849][ T8874] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2873'. [ 200.149394][ T307] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 200.184983][ T8886] /dev/rnullb0: Can't lookup blockdev [ 200.299544][ T307] usb 9-1: Using ep0 maxpacket: 16 [ 200.306157][ T307] usb 9-1: config 247 has an invalid interface number: 79 but max is 0 [ 200.314980][ T307] usb 9-1: config 247 has no interface number 0 [ 200.321428][ T307] usb 9-1: config 247 interface 79 has no altsetting 0 [ 200.330073][ T307] usb 9-1: New USB device found, idVendor=03eb, idProduct=2002, bcdDevice= 1.18 [ 200.339558][ T307] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.347727][ T307] usb 9-1: Product: syz [ 200.351960][ T307] usb 9-1: Manufacturer: syz [ 200.356557][ T307] usb 9-1: SerialNumber: syz [ 200.563178][ T8858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.571844][ T8858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.580035][ T8858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.588623][ T8858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.597027][ T8858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.605565][ T8858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.613876][ T8858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.622413][ T8858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.630688][ T8858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.639207][ T8858] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.652702][ T307] usb 9-1: USB disconnect, device number 10 [ 200.717256][ T8890] overlayfs: failed to clone upperpath [ 200.746050][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2880'. [ 200.760591][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2880'. [ 200.790873][ T8904] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 200.835081][ T8920] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2890'. [ 201.184670][ T8939] netlink: 188 bytes leftover after parsing attributes in process `syz.8.2896'. [ 201.194475][ T8939] netlink: 'syz.8.2896': attribute type 4 has an invalid length. [ 201.202241][ T8939] netlink: 'syz.8.2896': attribute type 21 has an invalid length. [ 201.210490][ T8939] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.2896'. [ 201.221039][ T8939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8939 comm=syz.8.2896 [ 201.397772][ T8950] overlay: Unknown parameter 'mounts' [ 201.489462][ T307] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 201.619387][ T307] usb 9-1: device descriptor read/64, error -71 [ 201.859456][ T307] usb 9-1: device descriptor read/64, error -71 [ 201.869604][ T432] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 202.021282][ T432] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.031224][ T432] usb 2-1: config 0 interface 0 has no altsetting 0 [ 202.038079][ T432] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 202.047353][ T432] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.059120][ T432] usb 2-1: config 0 descriptor?? [ 202.099413][ T307] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 202.239652][ T307] usb 9-1: device descriptor read/64, error -71 [ 202.475232][ T432] sunplus 0003:04FC:05D8.000B: unknown main item tag 0x0 [ 202.480505][ T307] usb 9-1: device descriptor read/64, error -71 [ 202.489189][ T432] sunplus 0003:04FC:05D8.000B: unknown main item tag 0x0 [ 202.496457][ T432] sunplus 0003:04FC:05D8.000B: unknown main item tag 0x0 [ 202.503719][ T432] sunplus 0003:04FC:05D8.000B: unknown main item tag 0x0 [ 202.511104][ T432] sunplus 0003:04FC:05D8.000B: unknown main item tag 0x0 [ 202.518438][ T432] sunplus 0003:04FC:05D8.000B: unknown main item tag 0x0 [ 202.525690][ T432] sunplus 0003:04FC:05D8.000B: unknown main item tag 0x0 [ 202.533106][ T432] sunplus 0003:04FC:05D8.000B: unknown main item tag 0x0 [ 202.540415][ T432] sunplus 0003:04FC:05D8.000B: unknown main item tag 0x0 [ 202.547660][ T432] sunplus 0003:04FC:05D8.000B: unknown main item tag 0x0 [ 202.554899][ T432] sunplus 0003:04FC:05D8.000B: unknown main item tag 0x0 [ 202.568460][ T432] sunplus 0003:04FC:05D8.000B: hidraw0: USB HID v0.05 Device [HID 04fc:05d8] on usb-dummy_hcd.1-1/input0 [ 202.623556][ T307] usb usb9-port1: attempt power cycle [ 202.670507][ T8957] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 202.670534][ T8957] rust_binder: Read failure Err(EFAULT) in pid:233 [ 202.679658][ T432] usb 2-1: USB disconnect, device number 43 [ 202.969464][ T307] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 202.990565][ T307] usb 9-1: device descriptor read/8, error -71 [ 203.108426][ T8992] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 203.122635][ T8992] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 203.136727][ T8992] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 203.146650][ T8992] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 203.156221][ T307] usb 9-1: device descriptor read/8, error -71 [ 203.189314][ T9011] binder: Bad value for 'max' [ 203.201354][ T9013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2922'. [ 203.308583][ T36] audit: type=1400 audit(2000000044.560:554): avc: denied { setattr } for pid=9019 comm="syz.1.2924" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 203.370663][ T9030] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false [ 203.379070][ T9032] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 203.397980][ T9033] SELinux: security_context_str_to_sid (sytem_uGй :) failed with errno=-22 [ 203.409452][ T307] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 203.428087][ T9038] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2931'. [ 203.438219][ T307] usb 9-1: device descriptor read/8, error -71 [ 203.448252][ T9040] rust_kernel: panicked at rust/kernel/sync/poll.rs:54:18: [ 203.448252][ T9040] null pointer dereference occurred [ 203.450500][ T36] audit: type=1400 audit(2000000044.710:555): avc: denied { read } for pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 203.460850][ T9040] ------------[ cut here ]------------ [ 203.483424][ T36] audit: type=1400 audit(2000000044.710:556): avc: denied { search } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.488072][ T9040] kernel BUG at rust/helpers/bug.c:7! [ 203.488513][ T9040] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 203.510240][ T36] audit: type=1400 audit(2000000044.710:557): avc: denied { write } for pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.514924][ T9040] CPU: 0 UID: 0 PID: 9040 Comm: syz.1.2932 Not tainted 6.12.30-syzkaller-g9d80e3254812 #0 0af3bb1b2b1f0d17039a87b1bb907b41f79d5270 [ 203.522126][ T36] audit: type=1400 audit(2000000044.710:558): avc: denied { add_name } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.543260][ T9040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 203.543281][ T9040] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 203.543309][ T9040] Code: 3e ca e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 99 48 0a 18 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 d3 8c 43 94 90 90 90 90 90 90 90 90 90 [ 203.543325][ T9040] RSP: 0018:ffffc90000fff1b0 EFLAGS: 00010246 [ 203.543342][ T9040] RAX: 000000000000005a RBX: 1ffff920001ffe38 RCX: a5aa3988b04ed000 [ 203.543355][ T9040] RDX: ffffc90007e3a000 RSI: 0000000000004541 RDI: 0000000000004542 [ 203.543367][ T9040] RBP: ffffc90000fff1b0 R08: ffffc90000ffeea7 R09: 1ffff920001ffdd4 [ 203.543378][ T9040] R10: dffffc0000000000 R11: fffff520001ffdd5 R12: 0000000000000000 [ 203.543390][ T9040] R13: dffffc0000000000 R14: ffffc90000fff1e0 R15: ffffc90000fff210 [ 203.543421][ T9040] FS: 00007f64875216c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 203.543438][ T9040] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 203.543449][ T9040] CR2: 0000200000001000 CR3: 000000013e020000 CR4: 00000000003526b0 [ 203.543466][ T9040] Call Trace: [ 203.543473][ T9040] [ 203.557722][ T36] audit: type=1400 audit(2000000044.710:559): avc: denied { create } for pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 203.577686][ T9040] _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160 [ 203.577723][ T9040] ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10 [ 203.577748][ T9040] ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10 [ 203.588313][ T36] audit: type=1400 audit(2000000044.710:560): avc: denied { append open } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 203.593067][ T9040] ? p9pdu_vwritef+0x2720/0x2720 [ 203.593101][ T9040] ? radix_tree_node_alloc+0x1af/0x400 [ 203.593123][ T9040] ? _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xa2/0xf0 [ 203.618699][ T36] audit: type=1400 audit(2000000044.710:561): avc: denied { getattr } for pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 203.619911][ T9040] ? __asan_memcpy+0x5a/0x80 [ 203.619944][ T9040] _RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0xec/0xf0 [ 203.619974][ T9040] ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking18panic_nounwind_fmt+0x10/0x10 [ 203.620002][ T9040] ? p9pdu_writef+0xdb/0x130 [ 203.628058][ T307] usb 9-1: device descriptor read/8, error -71 [ 203.636021][ T9040] ? p9pdu_vwritef+0x2720/0x2720 [ 203.636058][ T9040] _RNvNtCs9jEwPDbx20M_4core9panicking30panic_null_pointer_dereference+0x49/0x4c [ 203.636090][ T9040] _RNvMNtNtCs43vyB533jt3_6kernel4sync4pollNtB2_9PollTable8from_ptr+0x40/0x40 [ 203.645463][ T9041] rust_binder: Write failure EFAULT in pid:264 [ 203.652675][ T9040] ? _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xce/0x570 [ 203.652725][ T9040] _RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0xe2/0x570 [ 203.652751][ T9040] ? p9_client_prepare_req+0x732/0xa10 [ 203.749539][ T307] usb usb9-port1: unable to enumerate USB device [ 203.763743][ T9040] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 203.763788][ T9040] ? __kasan_check_write+0x18/0x20 [ 203.763809][ T9040] ? _raw_spin_lock+0x8c/0x120 [ 203.913547][ T9040] ? __cfi__raw_spin_lock+0x10/0x10 [ 203.918747][ T9040] ? __kasan_check_write+0x18/0x20 [ 203.923944][ T9040] ? _raw_spin_lock+0x8c/0x120 [ 203.928724][ T9040] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 203.936999][ T9040] p9_fd_request+0x38d/0x500 [ 203.941588][ T9040] p9_client_rpc+0x2f9/0xb40 [ 203.946168][ T9040] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 203.954416][ T9040] ? p9_fid_create+0x3d0/0x3d0 [ 203.959173][ T9040] ? __cfi__RNvCshgDM7dBCdno_11rust_binder16rust_binder_poll+0x10/0x10 [ 203.967412][ T9040] ? p9_conn_create+0x4c9/0x570 [ 203.972655][ T9040] ? p9_fd_create+0x2f3/0x4c0 [ 203.977324][ T9040] p9_client_create+0x96a/0x1190 [ 203.982269][ T9040] ? __cfi_p9_client_create+0x10/0x10 [ 203.987663][ T9040] ? kasan_save_alloc_info+0x40/0x50 [ 203.992966][ T9040] ? __kasan_kmalloc+0x96/0xb0 [ 203.997726][ T9040] ? kstrdup+0x7b/0x140 [ 204.001872][ T9040] ? __kasan_check_write+0x18/0x20 [ 204.006972][ T9040] v9fs_session_init+0x1e1/0x1820 [ 204.012190][ T9040] ? __cfi_v9fs_session_init+0x10/0x10 [ 204.017761][ T9040] ? kasan_save_alloc_info+0x40/0x50 [ 204.023041][ T9040] ? __kasan_kmalloc+0x96/0xb0 [ 204.027832][ T9040] ? v9fs_mount+0xbd/0xa00 [ 204.032246][ T9040] v9fs_mount+0xd7/0xa00 [ 204.036488][ T9040] ? __cfi_v9fs_mount+0x10/0x10 [ 204.041385][ T9040] ? selinux_capable+0x38/0x50 [ 204.046523][ T9040] legacy_get_tree+0x103/0x1b0 [ 204.051904][ T9040] ? __cfi_v9fs_mount+0x10/0x10 [ 204.056876][ T9040] vfs_get_tree+0x9e/0x290 [ 204.061733][ T9040] do_new_mount+0x251/0xb40 [ 204.066421][ T9040] ? security_capable+0xcf/0xf0 [ 204.071291][ T9040] path_mount+0x688/0x1050 [ 204.075721][ T9040] ? putname+0x113/0x150 [ 204.079965][ T9040] __se_sys_mount+0x2bd/0x480 [ 204.085893][ T9040] ? __x64_sys_mount+0xf0/0xf0 [ 204.090712][ T9040] ? __kasan_check_write+0x18/0x20 [ 204.097096][ T9040] ? fpregs_restore_userregs+0x11d/0x260 [ 204.102827][ T9040] __x64_sys_mount+0xc3/0xf0 [ 204.107443][ T9040] x64_sys_call+0x2021/0x2ee0 [ 204.112447][ T9040] do_syscall_64+0x58/0xf0 [ 204.116867][ T9040] ? clear_bhb_loop+0x50/0xa0 [ 204.121560][ T9040] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 204.127555][ T9040] RIP: 0033:0x7f648678e929 [ 204.131987][ T9040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 204.151583][ T9040] RSP: 002b:00007f6487521038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 204.159983][ T9040] RAX: ffffffffffffffda RBX: 00007f64869b5fa0 RCX: 00007f648678e929 [ 204.168377][ T9040] RDX: 0000200000000040 RSI: 0000200000000100 RDI: 0000000000000000 [ 204.176519][ T9040] RBP: 00007f6486810b39 R08: 0000200000000140 R09: 0000000000000000 [ 204.185109][ T9040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.193167][ T9040] R13: 0000000000000000 R14: 00007f64869b5fa0 R15: 00007ffc88c279f8 [ 204.201231][ T9040] [ 204.204340][ T9040] Modules linked in: [ 204.209304][ T9040] ---[ end trace 0000000000000000 ]--- [ 204.215421][ T9040] RIP: 0010:rust_helper_BUG+0x8/0x10 [ 204.220817][ T9040] Code: 3e ca e7 02 cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 99 48 0a 18 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 d3 8c 43 94 90 90 90 90 90 90 90 90 90 [ 204.242077][ T9040] RSP: 0018:ffffc90000fff1b0 EFLAGS: 00010246 [ 204.249928][ T9040] RAX: 000000000000005a RBX: 1ffff920001ffe38 RCX: a5aa3988b04ed000 [ 204.257955][ T9040] RDX: ffffc90007e3a000 RSI: 0000000000004541 RDI: 0000000000004542 [ 204.266013][ T9040] RBP: ffffc90000fff1b0 R08: ffffc90000ffeea7 R09: 1ffff920001ffdd4 [ 204.274023][ T9040] R10: dffffc0000000000 R11: fffff520001ffdd5 R12: 0000000000000000 [ 204.282069][ T9040] R13: dffffc0000000000 R14: ffffc90000fff1e0 R15: ffffc90000fff210 [ 204.290117][ T9040] FS: 00007f64875216c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 204.299725][ T9040] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 204.306414][ T9040] CR2: 00007fe4ad581178 CR3: 000000013e020000 CR4: 00000000003526b0 [ 204.314559][ T9040] Kernel panic - not syncing: Fatal exception [ 204.320944][ T9040] Kernel Offset: disabled [ 204.325262][ T9040] Rebooting in 86400 seconds..