b203dddf5bf0a7e06c918370cb34cb58cd6ce6a8503b49643aa66a4ef5984225fd36d723cd67ba2f84fa89d43bd1cabbe9b0de72aea70ecd2422b93e8321bb81401d4f1862dc8bcb3294676000974f3903819e969810c64e06db6bae850e1b1bc16e8a4ab7112a9714b73f7aee4438e87afbff18f1fcafc72037014a8b8f5ffc714d3f9c8"}]}, 0x6, [{0xd5, &(0x7f0000000980)=@string={0xd5, 0x3, "f209a8d1395010353a5c213a7e64b293d80d7d72e065cbfc86b7fb9c0385d80db3634e50e1e95c8ee34fc22124776215e02026d89bc3cb72527087491398e95ec087cd5ce2872b2dff407724f5b151fac73b3c5b8100794b3d700dabcab560853401181f2400728f3af23597636f20a86b3e86d182391a18bb45fcd4857a23080c2b5aec62e8329fc6e82045507f7ee423857c23168e7ea2131a945c473eb4f58caf92e36527b0003663c0df312edf6b87ed23b18db734221205e86c17d480049eb094a975d133258b68a5e74920975b5bcbbb"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x409}}, {0x79, &(0x7f0000000b40)=@string={0x79, 0x3, "263c78b920db49275509fa80254abb9adbfb4409ddf83f5050f21a51b2d7d92097354d3e7ba4a657e026b06068e308543ab479c5cdae6e2836cfa94b495f7236438ecbf80b947a98a2f820bb41befae8f96ce07c44af54743b1f99bde3a452403daa7d626252df9b9da5ede237d8ce3b8ee2075b654131"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x44b}}]}) pipe(&(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xc4, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0xa0}, 0x4000) write$binfmt_script(r0, &(0x7f0000000e80)={'#! ', './file0', [{0x20, 'ib\x00'}, {0x20, 'eth\x00'}, {0x20, 'ib\x00'}, {0x20, 'ib\x00'}, {0x20, '&[[}!.+['}, {0x20, '}\xa7'}], 0xa, "d0404eb214be830d57ca8287e74a57f02bc805d1d1b5572b255ba0216a04422dedad2f26a2fb69d101a8933837d18b60cbcf6700ffe438350654"}, 0x62) syz_usb_connect$cdc_ecm(0x6, 0x56, &(0x7f0000000f00)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0xbb, 0xc0, 0xc1, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x6, 0x9e09, 0x15}}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x80, 0x61, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xa4, 0x20, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x80, 0x80, 0xbb}}}}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x300, 0x8, 0x39, 0x4e, 0xff, 0xa4}, 0x23, &(0x7f0000000fc0)={0x5, 0xf, 0x23, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x22, 0x80, 0x7, 0x8001, 0x40}, @ssp_cap={0x10, 0x10, 0xa, 0x22, 0x1, 0x60, 0x0, 0x800, [0x30]}, @ptm_cap={0x3}]}, 0x2, [{0x40, &(0x7f0000001000)=@string={0x40, 0x3, "70b80b631849c3d634fb3c88ba2f10d3ed72b425558b35abbb9a22e38d776bd899aa0a2dfdf63b3c8e7d405060da2918c88623cb8cc726509675f9e6b42c"}}, {0x94, &(0x7f0000001040)=@string={0x94, 0x3, "fc7f29dc45ad503beed5d15c2addb3503d19d05d00e322b893abf1de564ad0d88335fb558807df12bd6e9a306c40b48edbd9f2e27e332dbd9e15b0059fb33ee471e5595bcd2afe645b78116406b2b02ea8280e39d64e9cff1b706d0a392133a60665822d30b6266f56d254877acc3472e88aed10f0eaa052fdba99f31569400740d256951c09713406357f4d944d3146f981"}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) setrlimit(0x4, &(0x7f0000001140)={0x1e, 0x5}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000001180)={{0x1, 0x1, 0x18, r3, {0xcbe, 0x5}}, './file0\x00'}) pipe(&(0x7f00000011c0)={0xffffffffffffffff}) fsetxattr$system_posix_acl(r4, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x64, 0x2) 15:33:35 executing program 5: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/84) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000080)=""/4096) semget(0x0, 0x3, 0x204) semget(0x0, 0x2, 0x2c) r0 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000001080)=""/27) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000010c0)={0x40000010}) shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffb000/0x3000)=nil) getresgid(&(0x7f0000001100), &(0x7f0000001140), &(0x7f0000001180)) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000001a40)={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x14) 15:33:35 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() migrate_pages(r3, 0x6, &(0x7f0000001740)=0xfff, &(0x7f0000001780)=0xfffffffffffffe01) r4 = syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') r5 = signalfd4(r4, &(0x7f0000001a00)={[0x1]}, 0x8, 0x868285194ec06441) clone3(&(0x7f0000001a40)={0x10900, &(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880)=0x0, {0x12}, &(0x7f00000018c0)=""/169, 0xa9, &(0x7f0000001980)=""/16, &(0x7f00000019c0)=[r3, r3], 0x2, {r5}}, 0x58) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000001ac0), &(0x7f0000001b00)={'L-', 0x4}, 0x16, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000001b40)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$BINDER_FREEZE(r7, 0x400c620e, &(0x7f0000001b80)={r6, 0x0, 0x3ed}) mq_notify(r4, &(0x7f0000001d00)={0x0, 0x2, 0x1, @thr={&(0x7f0000001bc0)="64fa5b8412812a7d553e518cda2c008980fd6dc9a7ce60d18c00d009d552f165001cec7d8ccc9c5ca22d346922bfe5f0e0ab795207717d68a722c679eacd571c4c6081e338b2696ec0693bd3496fc6ae60eab787f5007c93c14ba285ce860dd5e0d609ee945969c1555676c0cfd54ddf92acdeb3a00afcb9ea411b9dd59c40bbf4f205780fae3b2c3e86d8c63d5a12b9305b19e0d6fb156c53ba37008edb119e84274b2a8c207fc7aaf1edc3e4434b523d7edd31c35792be29baf39ca871583c22e64365fad8d9a0d8fef2a30c4e5e59a8a643c7703c0b84d5a69a43f0f3123870fc5348f665df", &(0x7f0000001cc0)="3daee951784e14af0a44bd4512ce6542f37dd5eb78b84cd12d0383685baf18ed1d3334ea9d65b326fbff4769"}}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180)=0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) sched_rr_get_interval(r8, &(0x7f0000002380)) [ 160.980678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.988145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.995847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.996720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.004582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.005462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.029611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.030541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:33:35 executing program 4: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x430000) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000080)) epoll_create1(0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000800)={0x7ff, 0x1, 0x9, 0x1}, &(0x7f0000000840)) 15:33:35 executing program 6: shmctl$SHM_LOCK(0x0, 0xb) r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_UNLOCK(r0, 0xc) r1 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000fef000/0x1000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000180)=""/110) 15:33:35 executing program 5: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/84) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000080)=""/4096) semget(0x0, 0x3, 0x204) semget(0x0, 0x2, 0x2c) r0 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000001080)=""/27) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000010c0)={0x40000010}) shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffb000/0x3000)=nil) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000001a40)={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x14) 15:33:35 executing program 4: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x430000) ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000080)) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000800)={0x7ff, 0x1, 0x9, 0x1}, &(0x7f0000000840)) 15:33:44 executing program 5: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/84) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000080)=""/4096) semget(0x0, 0x3, 0x204) semget(0x0, 0x2, 0x2c) r0 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000001080)=""/27) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f00000010c0)={0x40000010}) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000001a40)={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x14) 15:33:44 executing program 3: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) r5 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_STAT_ANY(r5, 0xf, &(0x7f0000000240)=""/109) getpgid(r1) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:33:44 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mq_timedreceive(r0, &(0x7f0000000140)=""/192, 0xc0, 0x9, &(0x7f0000000200)={0x77359400}) r1 = dup(r0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x4, 0x10001}}, './file0\x00'}) ioctl$PTP_SYS_OFFSET(r6, 0x43403d05, &(0x7f00000003c0)={0x7}) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000700)) pselect6(0x40, &(0x7f0000000740)={0x7, 0x5, 0x1, 0xbc, 0x2, 0x3, 0x8, 0x800}, &(0x7f0000000780)={0x1, 0x5dd9, 0x7fffffff, 0x2, 0xd64, 0x7, 0x20, 0x6}, &(0x7f00000007c0)={0x8423, 0x77, 0xeb1f, 0x973b, 0x9, 0x1ff, 0x8, 0xffff}, &(0x7f0000000800)={0x0, 0x3938700}, &(0x7f0000000880)={&(0x7f0000000840)={[0x3]}, 0x8}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f00000008c0)={0x2}) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x130, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x80, 0x3, "411dc5987ed354bdb0588ef22a869a425c8cc2a16bcab04bcc0ba3bb8892c8951bfafb48f10b20eb5e8b373a71d875c170dbd404f19dcd9057adf15fbaba669dbf12acffe39ab3369c271dc857c69d37ac33135e83088bf30d8905d8472ac758a9c26b49d11d40003c2b80fb53b1b3567c998ddbc264973736a2791c"}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "99e87df8f9e2b6dd3f745a8b11abe5fedc6082f3a287090f1be8b678880af2"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "2808c432ea8194b42b9c3940dc55316d0c9f2062f4a57177bb21"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf1}]}]}, 0x130}}, 0x24008804) sendmsg$nl_netfilter(r4, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8048012}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, 0xd, 0x9, 0x201, 0x70bd25, 0x25dfdbfc, {0xa, 0x0, 0x2}, [@typed={0x8, 0x81, 0x0, 0x0, @fd=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x24000094) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r7, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)) 15:33:44 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) r1 = syz_usb_connect$cdc_ecm(0x5, 0x6a, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0x5, 0x80, 0x16, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x7, 0x24, 0x6, 0x0, 0x0, "b44e"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x8000, 0x7, 0x1f}, [@mbim={0xc, 0x24, 0x1b, 0xc0, 0x8, 0xbe, 0x9, 0x4, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0xfffd, 0x6, 0x40}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0xe9, 0x8, 0x1f}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xf8, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x3f, 0x3b}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x8, 0xe9, 0x0, 0x10, 0xc5}, 0x90, &(0x7f0000000140)={0x5, 0xf, 0x90, 0x5, [@ptm_cap={0x3}, @generic={0x59, 0x10, 0x1, "8db30b0fb4a51aa2c629e620748741b59c16ee392922ac750dfa04af33709dde505c8f0fe48456f028969539f75bc660b37a2bb2290c3a31c9d14fcf0ddb7d389dc3f8b3489cc6e38fa26c46d3d1a78c9d7168172348"}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x7f, 0xf, 0x20, [0x1fe8130]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2f, 0xc1, 0xf5, 0x1f, 0x3f}, @ss_container_id={0x14, 0x10, 0x4, 0x20, "3e8d69095b656de1629ed966db0cfecf"}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x436}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000340)={0x14, &(0x7f0000000280)={0x40, 0x34, 0x59, {0x59, 0x22, "2c4060a23ff1cdca54a9f95b5d727c05e3bc0f4f2fe236abdfab899f43c32ee2a46913ea8d4436c3e96c8257eca53b979ab02ac171b80830f8e290bb9621f951a662fa88d6fc5d7af475b9053a4606487863eec58e63ac"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x1c, &(0x7f0000000380)={0x0, 0x0, 0x58, "73a798c879f2a87bc02cc09b27cc6941ba0511988a67ef3816e93ea9da4575e852b81468bfc546021a2a8295918df742aeadd4be4f4c1d7988d52403b9693ed64cba843b8444950c6e6a451264c3d9cb1979aca6b6af6183"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x41}}) syz_usb_connect$cdc_ecm(0x5, 0x14a, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x138, 0x1, 0x1, 0xc2, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0xe5, 0x2, 0x2, 0x6, 0x0, 0x5, {{0xa, 0x24, 0x6, 0x0, 0x0, "28ed18afee"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7fff, 0xff, 0x2}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x27}, @mbim={0xc, 0x24, 0x1b, 0x400, 0xa8df, 0x8, 0x1, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x59}, @mdlm_detail={0xce, 0x24, 0x13, 0x7, "21fd282f71b09f5d547028125ef2453290151510f6a7ba335585aa8a4a74b74df2b8634d597db0a12bd256f995d1d3dd6cc7a17dc21aff9ff38c497a35d8f09680b4a5ab9d86fb65b93347612b0c8306dca4e9d42e94e046b7f854f3b91479074448336f5b92de767d8ee473c000c00e26ded34ef618f903c5533743c719c9c1c277d60062ce03f2d07257bdb4ad59a1c1bb17101e27b3bba2b1b6f34cbfc26d1d6f544de144adb9d19dac3b3656e804a0539d8f2f1240156f2cad2b0b0b590fd7dbab89f4f004ce84f6"}, @ncm={0x6, 0x24, 0x1a, 0x2, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x1, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x6, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x1, 0x9}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x201, 0xcb, 0xcb, 0x9, 0x8, 0x5}, 0x20, &(0x7f0000000680)={0x5, 0xf, 0x20, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0xc, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x2, 0x6, 0x8}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x30, 0x5, 0x29f}]}, 0x1, [{0x23, &(0x7f00000006c0)=@string={0x23, 0x3, "edc7a1f6c91e28f262e010dadc8206c327a2ec66a330e1fa060f1c125af2d196ae"}}]}) syz_usb_connect$cdc_ecm(0x0, 0xd1, &(0x7f0000000740)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x1, 0x1, 0x6, 0xa0, 0xdc, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x2, {{0xb, 0x24, 0x6, 0x0, 0x0, "27f623777f34"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x0, 0x80}, [@country_functional={0xc, 0x24, 0x7, 0x81, 0x7, [0xce, 0x8000, 0x2]}, @mdlm_detail={0x61, 0x24, 0x13, 0x2, "0a8418713f5cbec56437b72cdb52a132bebbde97b998dc48c626825b86aa8e8f8455afe83d3f89a4b6b103b4e4f1bcc65b5e62efb5bb11f77bf3e783f1767fc5567f880b2a864500781b0b4d706fcad8f1cc44af0e5893a8704a260aa2"}, @country_functional={0x8, 0x24, 0x7, 0x1, 0x0, [0x0]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x1, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x7, 0x35}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x3f, 0x3}}}}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x250, 0x4, 0x3, 0x7a, 0x10, 0x1f}, 0xf2, &(0x7f0000000880)={0x5, 0xf, 0xf2, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x4, 0xcd, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x1, 0x6f, 0x9, 0x9}, @generic={0xd5, 0x10, 0x2, "26ba7f4824c7baf15fdc3e45a421a9e7ce37c736ececc2100f6109e0cdba8f5fd95412ed6c9a5eb1a592749671ed398b0af858daca6af7678aa1dfc673bfba585547197482a81525a76975e323db203dddf5bf0a7e06c918370cb34cb58cd6ce6a8503b49643aa66a4ef5984225fd36d723cd67ba2f84fa89d43bd1cabbe9b0de72aea70ecd2422b93e8321bb81401d4f1862dc8bcb3294676000974f3903819e969810c64e06db6bae850e1b1bc16e8a4ab7112a9714b73f7aee4438e87afbff18f1fcafc72037014a8b8f5ffc714d3f9c8"}]}, 0x6, [{0xd5, &(0x7f0000000980)=@string={0xd5, 0x3, "f209a8d1395010353a5c213a7e64b293d80d7d72e065cbfc86b7fb9c0385d80db3634e50e1e95c8ee34fc22124776215e02026d89bc3cb72527087491398e95ec087cd5ce2872b2dff407724f5b151fac73b3c5b8100794b3d700dabcab560853401181f2400728f3af23597636f20a86b3e86d182391a18bb45fcd4857a23080c2b5aec62e8329fc6e82045507f7ee423857c23168e7ea2131a945c473eb4f58caf92e36527b0003663c0df312edf6b87ed23b18db734221205e86c17d480049eb094a975d133258b68a5e74920975b5bcbbb"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x409}}, {0x79, &(0x7f0000000b40)=@string={0x79, 0x3, "263c78b920db49275509fa80254abb9adbfb4409ddf83f5050f21a51b2d7d92097354d3e7ba4a657e026b06068e308543ab479c5cdae6e2836cfa94b495f7236438ecbf80b947a98a2f820bb41befae8f96ce07c44af54743b1f99bde3a452403daa7d626252df9b9da5ede237d8ce3b8ee2075b654131"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x44b}}]}) pipe(&(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xc4, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0xa0}, 0x4000) write$binfmt_script(r0, &(0x7f0000000e80)={'#! ', './file0', [{0x20, 'ib\x00'}, {0x20, 'eth\x00'}, {0x20, 'ib\x00'}, {0x20, 'ib\x00'}, {0x20, '&[[}!.+['}, {0x20, '}\xa7'}], 0xa, "d0404eb214be830d57ca8287e74a57f02bc805d1d1b5572b255ba0216a04422dedad2f26a2fb69d101a8933837d18b60cbcf6700ffe438350654"}, 0x62) syz_usb_connect$cdc_ecm(0x6, 0x56, &(0x7f0000000f00)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0xbb, 0xc0, 0xc1, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x6, 0x9e09, 0x15}}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x80, 0x61, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xa4, 0x20, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x80, 0x80, 0xbb}}}}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x300, 0x8, 0x39, 0x4e, 0xff, 0xa4}, 0x23, &(0x7f0000000fc0)={0x5, 0xf, 0x23, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x22, 0x80, 0x7, 0x8001, 0x40}, @ssp_cap={0x10, 0x10, 0xa, 0x22, 0x1, 0x60, 0x0, 0x800, [0x30]}, @ptm_cap={0x3}]}, 0x2, [{0x40, &(0x7f0000001000)=@string={0x40, 0x3, "70b80b631849c3d634fb3c88ba2f10d3ed72b425558b35abbb9a22e38d776bd899aa0a2dfdf63b3c8e7d405060da2918c88623cb8cc726509675f9e6b42c"}}, {0x94, &(0x7f0000001040)=@string={0x94, 0x3, "fc7f29dc45ad503beed5d15c2addb3503d19d05d00e322b893abf1de564ad0d88335fb558807df12bd6e9a306c40b48edbd9f2e27e332dbd9e15b0059fb33ee471e5595bcd2afe645b78116406b2b02ea8280e39d64e9cff1b706d0a392133a60665822d30b6266f56d254877acc3472e88aed10f0eaa052fdba99f31569400740d256951c09713406357f4d944d3146f981"}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) setrlimit(0x4, &(0x7f0000001140)={0x1e, 0x5}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000001180)={{0x1, 0x1, 0x18, r3, {0xcbe, 0x5}}, './file0\x00'}) syz_usb_connect$cdc_ncm(0x2, 0x168, &(0x7f0000001200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x156, 0x2, 0x1, 0x0, 0x0, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "c305f87bad"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0xfeff, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@country_functional={0x12, 0x24, 0x7, 0x81, 0x40, [0x4d, 0xd7ab, 0xd392, 0x2, 0x5, 0x0]}, @mdlm_detail={0xe3, 0x24, 0x13, 0x80, "0b727a849cc3ad297332bab6507f679187d82726284d236b5008bea9062e9402029cfd82eccccc1749fafc3e268d9bd43d0cb127fca1dbb61d71b452b7ab756cf8b69e71ae8ddcbac89a6cfd195acb6caed75f41b3d551b7b716fe94f738b354d5e82933860459b520ec922a1d35f42b5d6e948a015ef85f436f228f4f0c59464cc88bd09c2c0b214151d7063b245959f452528569a200c13f053b2fa88b9f377f5ff565c8e711a5874f25ec0eb483ad98b21267cbfb1b9fef8f89f5ae3d11b8235ee25019014379915f4f30d7bee99d015667b2c95738bda9f8a299bd7177"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x4, 0xe6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x51, 0x60, 0x9}}}}}}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x110, 0x3, 0x3, 0xc8, 0x18, 0x7}, 0x78, &(0x7f00000013c0)={0x5, 0xf, 0x78, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x7a14, 0x0, 0x7f, [0xff00c0, 0xf, 0xf, 0xc0, 0xff003f, 0x5f]}, @ss_container_id={0x14, 0x10, 0x4, 0xf6, "4b93f7453647023d22b05488ab77e16a"}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x4, 0xf, 0xff6e, [0xffc0c0, 0x0, 0x3f, 0xf, 0x50, 0xc03f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d81d0f092648bb70553542bf40176aa6"}]}, 0x7, [{0xd, &(0x7f0000001440)=@string={0xd, 0x3, "052e1e85feb87567168fa5"}}, {0x78, &(0x7f0000001480)=@string={0x78, 0x3, "0d90ef59f69fcc154a9a3a83db95d54dc9cc3370b4a4c66fc239e2c307ef87eea6af19ac12db5bb3091e57c2cc81c1ec9d1acca61b99093657de3f529120b457ba7cc3974604f26374ec5f6fd9fddf1a0ab8bea2aa72825f7858d86fb71c42d98cbd75b12c3a62a571d2acb1b2800abb518c79f8e496"}}, {0x41, &(0x7f0000001500)=@string={0x41, 0x3, "2716a21ecf5a0fa83bedf2f5cb77aa7de64b3f617734bddd99a9e6fb772ea3d0f5136738985df5b6938fd87f47bce5dfa95a8d70b2ff4dc85d69c6d2592ebb"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x41d}}, {0x50, &(0x7f00000015c0)=@string={0x50, 0x3, "d738beeff3770d34addced483484c16ddde99c6dbf3a8b47ce6661a5bb3f5611d183d3fbc2e02542b50b124b1accc4aacdfea2e27ce398b2167029ef9da5d1659669be8c586729e1815ae2bc3128"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x42d}}, {0x51, &(0x7f0000001680)=@string={0x51, 0x3, "ccfe0b6cbb48b796c7a54c5019e3e301793e4d50b1f887de5ca1d56f2b4be96cc2d4821f34240f773d1e571cb6864ebbfc898fc3f3fbd2d4766577ce79d2d9d5bfeda4753ece661798bebf4f92fce0"}}]}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x64, 0x2) 15:33:44 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() migrate_pages(r3, 0x6, &(0x7f0000001740)=0xfff, &(0x7f0000001780)=0xfffffffffffffe01) r4 = syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') r5 = signalfd4(r4, &(0x7f0000001a00)={[0x1]}, 0x8, 0x868285194ec06441) clone3(&(0x7f0000001a40)={0x10900, &(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880)=0x0, {0x12}, &(0x7f00000018c0)=""/169, 0xa9, &(0x7f0000001980)=""/16, &(0x7f00000019c0)=[r3, r3], 0x2, {r5}}, 0x58) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000001ac0), &(0x7f0000001b00)={'L-', 0x4}, 0x16, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000001b40)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$BINDER_FREEZE(r7, 0x400c620e, &(0x7f0000001b80)={r6, 0x0, 0x3ed}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180)=0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) sched_rr_get_interval(r8, &(0x7f0000002380)) 15:33:44 executing program 4: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x430000) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000800)={0x7ff, 0x1, 0x9, 0x1}, &(0x7f0000000840)) 15:33:44 executing program 0: r0 = geteuid() getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {}, [{0x2, 0x3, r0}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x3}], {0x4, 0x1}, [{0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2, 0xee01}, {0x8, 0x7, r2}, {0x8, 0x3, 0xee01}], {0x10, 0x2}, {0x20, 0x4}}, 0x74, 0x3) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x3]) shmctl$SHM_UNLOCK(0x0, 0xc) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)) r5 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000280)={{0x3, r0, r4, r0, r1, 0x4c, 0x57}, 0x0, 0x401, 0x7, 0x0, r5, 0xffffffffffffffff, 0x3}) shmctl$SHM_UNLOCK(0x0, 0xc) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/binder0\x00', 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000380)={0x2a8, 0x6, 0x6, 0x201, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x2}, [@nested={0xc, 0x4d, 0x0, 0x1, [@typed={0x8, 0x2f, 0x0, 0x0, @fd}]}, @nested={0xf7, 0x25, 0x0, 0x1, [@typed={0x8, 0x44, 0x0, 0x0, @uid=r0}, @typed={0x8, 0x64, 0x0, 0x0, @pid=r5}, @generic="5ae66fe218a08a541c2abc86ee96b8cbec980a5ff00b3cd5f17a6833b74b5063cb47e640618ca3bf5de21ce9454e4970fc8f31a21688b8097816962a23a7d0389118813d888d1c3a880117fb157ffe9e46a30eda2947ade9e59d07653e5aa62792ee6f42c11ea715ee8a71bed8164d16eec6e112ad6ee36eece649318795fbd6a3702b29254987dc921e3c274194854022c294c2262d33573adb5cdef47056420266584981a40453cc8be945a8a6bde5f8cadbd5e28c753714f7670c729d0a9b9600d5f852940616ea4863ab4dba0a0832153482912b85831fb08d0b9fcc555a6feafe"]}, @nested={0x190, 0x5e, 0x0, 0x1, [@typed={0x8, 0x3b, 0x0, 0x0, @fd=r6}, @typed={0x14, 0x2b, 0x0, 0x0, @ipv6=@remote}, @generic="1ff9d1b65186fa7c8def0d95ae8e3a5560e4d3a02d47b72fcb817ebba1b1330b79223d142cd9455523469ce2e8defba1ee3c95266280feb290485791e097e095cb60ab2f68a6da398ae671c44c93b0a388487c20ad723249ad3673568e812739135bd59fd68eec75ff83191455c150b58b03b0d4b32427334d4b86a80d3a7eaae881b500a3520a23575a0e25150085a13bddcb5b95575b70c54c2dde4692a79ce9fecee21cddd75c97b4b4e02e6ec36a10cc06b0540d0a6155b9ea382e4b1fd05f4ada6f6270bd3d6cbd33b768e84b49bbb6004c6c95871c4ac3a8dde925b9", @generic="8c190eef2613c6b01f67133547a8e0bf17a582189759b195128fa3af0800694d9832ca65a3675b196ca3881a1a82ae28e2701d2e8e0a89f36df422f607904a4aae3b66366442855c2c69eccb99b34ef4881e5eea3968bbc8e38c00a275100f610af6ff9b9ca00870043becc707c2ae6ceaff4b93626127209e3db1e59e0f939385521128db6601f886", @typed={0x8, 0xb, 0x0, 0x0, @uid=r0}]}]}, 0x2a8}}, 0x90) keyctl$chown(0x4, 0x0, r0, r3) syz_usb_connect$cdc_ecm(0x1, 0x59, &(0x7f00000006c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x8, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0xf6, {{0x8, 0x24, 0x6, 0x0, 0x0, '\x00Bt'}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x4, 0x8, 0x8}}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x0, 0x80}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x10, 0x0, 0xd3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1f, 0x81, 0xd9}}}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x0, 0xf9, 0x6, 0x9, 0x20, 0x53}, 0x43, &(0x7f0000000780)={0x5, 0xf, 0x43, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x0, 0x0, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "1e3a4b7c4b9aae85fc5519ba871cdea4"}, @ssp_cap={0x20, 0x10, 0xa, 0x80, 0x5, 0x8, 0xf, 0x5, [0xff00c0, 0xfffff0, 0x0, 0x3fc0, 0x3f00]}]}, 0x1, [{0x91, &(0x7f0000000800)=@string={0x91, 0x3, "6f8eaabdbdf57020704d9d74234820ea911c8a5cc4dad45cb687cdf94574e44b2d6db61fda50360be7cd8c5d21e60a5314261afb18ea065d523331ed1d2dfcc4526d266f61535568c783912d8b44147938b9262cc14b06634074a5416981e0ea3b096f0d69276108fbfd31a881f5554f9ef03f6b135098e4be29d843d27c8549a2a29ae8fe0bdd0313e9a0f3220830"}}]}) socket(0x22, 0xa, 0x8001) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000009c0)=""/4096) 15:33:44 executing program 6: shmctl$SHM_LOCK(0x0, 0xb) shmget$private(0x0, 0x1000, 0x40, &(0x7f0000fff000/0x1000)=nil) r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000fef000/0x1000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000180)=""/110) [ 169.784374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.786445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.791541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.795782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.798085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.800986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.805016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.808193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:33:44 executing program 5: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/84) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000080)=""/4096) semget(0x0, 0x3, 0x204) semget(0x0, 0x2, 0x2c) r0 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000001080)=""/27) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000001a40)={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x14) 15:33:44 executing program 4: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000800)={0x7ff, 0x1, 0x9, 0x1}, &(0x7f0000000840)) 15:33:44 executing program 3: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) r5 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_STAT_ANY(r5, 0xf, &(0x7f0000000240)=""/109) getpgid(r1) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) [ 169.881736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.895399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:33:54 executing program 4: ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000800)={0x7ff, 0x1, 0x9, 0x1}, &(0x7f0000000840)) 15:33:54 executing program 3: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) r5 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) shmctl$SHM_STAT_ANY(r5, 0xf, &(0x7f0000000240)=""/109) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:33:54 executing program 0: r0 = geteuid() getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {}, [{0x2, 0x3, r0}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x3}], {0x4, 0x1}, [{0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2, 0xee01}, {0x8, 0x7, r2}, {0x8, 0x3, 0xee01}], {0x10, 0x2}, {0x20, 0x4}}, 0x74, 0x3) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x3]) shmctl$SHM_UNLOCK(0x0, 0xc) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)) r5 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000280)={{0x3, r0, r4, r0, r1, 0x4c, 0x57}, 0x0, 0x401, 0x7, 0x0, r5, 0xffffffffffffffff, 0x3}) shmctl$SHM_UNLOCK(0x0, 0xc) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/binder0\x00', 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000380)={0x2a8, 0x6, 0x6, 0x201, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x2}, [@nested={0xc, 0x4d, 0x0, 0x1, [@typed={0x8, 0x2f, 0x0, 0x0, @fd}]}, @nested={0xf7, 0x25, 0x0, 0x1, [@typed={0x8, 0x44, 0x0, 0x0, @uid=r0}, @typed={0x8, 0x64, 0x0, 0x0, @pid=r5}, @generic="5ae66fe218a08a541c2abc86ee96b8cbec980a5ff00b3cd5f17a6833b74b5063cb47e640618ca3bf5de21ce9454e4970fc8f31a21688b8097816962a23a7d0389118813d888d1c3a880117fb157ffe9e46a30eda2947ade9e59d07653e5aa62792ee6f42c11ea715ee8a71bed8164d16eec6e112ad6ee36eece649318795fbd6a3702b29254987dc921e3c274194854022c294c2262d33573adb5cdef47056420266584981a40453cc8be945a8a6bde5f8cadbd5e28c753714f7670c729d0a9b9600d5f852940616ea4863ab4dba0a0832153482912b85831fb08d0b9fcc555a6feafe"]}, @nested={0x190, 0x5e, 0x0, 0x1, [@typed={0x8, 0x3b, 0x0, 0x0, @fd=r6}, @typed={0x14, 0x2b, 0x0, 0x0, @ipv6=@remote}, @generic="1ff9d1b65186fa7c8def0d95ae8e3a5560e4d3a02d47b72fcb817ebba1b1330b79223d142cd9455523469ce2e8defba1ee3c95266280feb290485791e097e095cb60ab2f68a6da398ae671c44c93b0a388487c20ad723249ad3673568e812739135bd59fd68eec75ff83191455c150b58b03b0d4b32427334d4b86a80d3a7eaae881b500a3520a23575a0e25150085a13bddcb5b95575b70c54c2dde4692a79ce9fecee21cddd75c97b4b4e02e6ec36a10cc06b0540d0a6155b9ea382e4b1fd05f4ada6f6270bd3d6cbd33b768e84b49bbb6004c6c95871c4ac3a8dde925b9", @generic="8c190eef2613c6b01f67133547a8e0bf17a582189759b195128fa3af0800694d9832ca65a3675b196ca3881a1a82ae28e2701d2e8e0a89f36df422f607904a4aae3b66366442855c2c69eccb99b34ef4881e5eea3968bbc8e38c00a275100f610af6ff9b9ca00870043becc707c2ae6ceaff4b93626127209e3db1e59e0f939385521128db6601f886", @typed={0x8, 0xb, 0x0, 0x0, @uid=r0}]}]}, 0x2a8}}, 0x90) keyctl$chown(0x4, 0x0, r0, r3) syz_usb_connect$cdc_ecm(0x1, 0x59, &(0x7f00000006c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x47, 0x1, 0x1, 0x8, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x2, 0x3, 0x2, 0x6, 0x0, 0xf6, {{0x8, 0x24, 0x6, 0x0, 0x0, '\x00Bt'}, {0x5, 0x24, 0x0, 0x3ff}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x4, 0x8, 0x8}}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0x0, 0x80}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x10, 0x0, 0xd3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1f, 0x81, 0xd9}}}}}]}}]}}, &(0x7f00000008c0)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x0, 0xf9, 0x6, 0x9, 0x20, 0x53}, 0x43, &(0x7f0000000780)={0x5, 0xf, 0x43, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x0, 0x0, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "1e3a4b7c4b9aae85fc5519ba871cdea4"}, @ssp_cap={0x20, 0x10, 0xa, 0x80, 0x5, 0x8, 0xf, 0x5, [0xff00c0, 0xfffff0, 0x0, 0x3fc0, 0x3f00]}]}, 0x1, [{0x91, &(0x7f0000000800)=@string={0x91, 0x3, "6f8eaabdbdf57020704d9d74234820ea911c8a5cc4dad45cb687cdf94574e44b2d6db61fda50360be7cd8c5d21e60a5314261afb18ea065d523331ed1d2dfcc4526d266f61535568c783912d8b44147938b9262cc14b06634074a5416981e0ea3b096f0d69276108fbfd31a881f5554f9ef03f6b135098e4be29d843d27c8549a2a29ae8fe0bdd0313e9a0f3220830"}}]}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000009c0)=""/4096) 15:33:54 executing program 6: shmctl$SHM_LOCK(0x0, 0xb) r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000fef000/0x1000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000180)=""/110) 15:33:54 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mq_timedreceive(r0, &(0x7f0000000140)=""/192, 0xc0, 0x9, &(0x7f0000000200)={0x77359400}) r1 = dup(r0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x4, 0x10001}}, './file0\x00'}) ioctl$PTP_SYS_OFFSET(r5, 0x43403d05, &(0x7f00000003c0)={0x7}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000700)) pselect6(0x40, &(0x7f0000000740)={0x7, 0x5, 0x1, 0xbc, 0x2, 0x3, 0x8, 0x800}, &(0x7f0000000780)={0x1, 0x5dd9, 0x7fffffff, 0x2, 0xd64, 0x7, 0x20, 0x6}, &(0x7f00000007c0)={0x8423, 0x77, 0xeb1f, 0x973b, 0x9, 0x1ff, 0x8, 0xffff}, &(0x7f0000000800)={0x0, 0x3938700}, &(0x7f0000000880)={&(0x7f0000000840)={[0x3]}, 0x8}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f00000008c0)={0x2}) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x130, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x11c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x80, 0x3, "411dc5987ed354bdb0588ef22a869a425c8cc2a16bcab04bcc0ba3bb8892c8951bfafb48f10b20eb5e8b373a71d875c170dbd404f19dcd9057adf15fbaba669dbf12acffe39ab3369c271dc857c69d37ac33135e83088bf30d8905d8472ac758a9c26b49d11d40003c2b80fb53b1b3567c998ddbc264973736a2791c"}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "99e87df8f9e2b6dd3f745a8b11abe5fedc6082f3a287090f1be8b678880af2"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "2808c432ea8194b42b9c3940dc55316d0c9f2062f4a57177bb21"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf1}]}]}, 0x130}}, 0x24008804) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) sendmsg$TIPC_NL_SOCK_GET(r6, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r7, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000d80)) 15:33:54 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() migrate_pages(r3, 0x6, &(0x7f0000001740)=0xfff, &(0x7f0000001780)=0xfffffffffffffe01) r4 = syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') r5 = signalfd4(r4, &(0x7f0000001a00)={[0x1]}, 0x8, 0x868285194ec06441) clone3(&(0x7f0000001a40)={0x10900, &(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880), {0x12}, &(0x7f00000018c0)=""/169, 0xa9, &(0x7f0000001980)=""/16, &(0x7f00000019c0)=[r3, r3], 0x2, {r5}}, 0x58) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000001ac0), &(0x7f0000001b00)={'L-', 0x4}, 0x16, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000001b40)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180)=0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) sched_rr_get_interval(r6, &(0x7f0000002380)) 15:33:54 executing program 5: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/84) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000080)=""/4096) semget(0x0, 0x3, 0x204) semget(0x0, 0x2, 0x2c) shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000001a40)={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x14) 15:33:54 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) r1 = syz_usb_connect$cdc_ecm(0x5, 0x6a, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0x5, 0x80, 0x16, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x7, 0x24, 0x6, 0x0, 0x0, "b44e"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x8000, 0x7, 0x1f}, [@mbim={0xc, 0x24, 0x1b, 0xc0, 0x8, 0xbe, 0x9, 0x4, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0xfffd, 0x6, 0x40}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0xe9, 0x8, 0x1f}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xf8, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x3f, 0x3b}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x8, 0xe9, 0x0, 0x10, 0xc5}, 0x90, &(0x7f0000000140)={0x5, 0xf, 0x90, 0x5, [@ptm_cap={0x3}, @generic={0x59, 0x10, 0x1, "8db30b0fb4a51aa2c629e620748741b59c16ee392922ac750dfa04af33709dde505c8f0fe48456f028969539f75bc660b37a2bb2290c3a31c9d14fcf0ddb7d389dc3f8b3489cc6e38fa26c46d3d1a78c9d7168172348"}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x7f, 0xf, 0x20, [0x1fe8130]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2f, 0xc1, 0xf5, 0x1f, 0x3f}, @ss_container_id={0x14, 0x10, 0x4, 0x20, "3e8d69095b656de1629ed966db0cfecf"}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x436}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000340)={0x14, &(0x7f0000000280)={0x40, 0x34, 0x59, {0x59, 0x22, "2c4060a23ff1cdca54a9f95b5d727c05e3bc0f4f2fe236abdfab899f43c32ee2a46913ea8d4436c3e96c8257eca53b979ab02ac171b80830f8e290bb9621f951a662fa88d6fc5d7af475b9053a4606487863eec58e63ac"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x1c, &(0x7f0000000380)={0x0, 0x0, 0x58, "73a798c879f2a87bc02cc09b27cc6941ba0511988a67ef3816e93ea9da4575e852b81468bfc546021a2a8295918df742aeadd4be4f4c1d7988d52403b9693ed64cba843b8444950c6e6a451264c3d9cb1979aca6b6af6183"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x41}}) syz_usb_connect$cdc_ecm(0x5, 0x14a, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x138, 0x1, 0x1, 0xc2, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0xe5, 0x2, 0x2, 0x6, 0x0, 0x5, {{0xa, 0x24, 0x6, 0x0, 0x0, "28ed18afee"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7fff, 0xff, 0x2}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x27}, @mbim={0xc, 0x24, 0x1b, 0x400, 0xa8df, 0x8, 0x1, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x59}, @mdlm_detail={0xce, 0x24, 0x13, 0x7, "21fd282f71b09f5d547028125ef2453290151510f6a7ba335585aa8a4a74b74df2b8634d597db0a12bd256f995d1d3dd6cc7a17dc21aff9ff38c497a35d8f09680b4a5ab9d86fb65b93347612b0c8306dca4e9d42e94e046b7f854f3b91479074448336f5b92de767d8ee473c000c00e26ded34ef618f903c5533743c719c9c1c277d60062ce03f2d07257bdb4ad59a1c1bb17101e27b3bba2b1b6f34cbfc26d1d6f544de144adb9d19dac3b3656e804a0539d8f2f1240156f2cad2b0b0b590fd7dbab89f4f004ce84f6"}, @ncm={0x6, 0x24, 0x1a, 0x2, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x1, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x6, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x1, 0x9}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x201, 0xcb, 0xcb, 0x9, 0x8, 0x5}, 0x20, &(0x7f0000000680)={0x5, 0xf, 0x20, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0xc, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x2, 0x6, 0x8}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x30, 0x5, 0x29f}]}, 0x1, [{0x23, &(0x7f00000006c0)=@string={0x23, 0x3, "edc7a1f6c91e28f262e010dadc8206c327a2ec66a330e1fa060f1c125af2d196ae"}}]}) syz_usb_connect$cdc_ecm(0x0, 0xd1, &(0x7f0000000740)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x1, 0x1, 0x6, 0xa0, 0xdc, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x2, {{0xb, 0x24, 0x6, 0x0, 0x0, "27f623777f34"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x0, 0x80}, [@country_functional={0xc, 0x24, 0x7, 0x81, 0x7, [0xce, 0x8000, 0x2]}, @mdlm_detail={0x61, 0x24, 0x13, 0x2, "0a8418713f5cbec56437b72cdb52a132bebbde97b998dc48c626825b86aa8e8f8455afe83d3f89a4b6b103b4e4f1bcc65b5e62efb5bb11f77bf3e783f1767fc5567f880b2a864500781b0b4d706fcad8f1cc44af0e5893a8704a260aa2"}, @country_functional={0x8, 0x24, 0x7, 0x1, 0x0, [0x0]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x1, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x7, 0x35}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x3f, 0x3}}}}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x250, 0x4, 0x3, 0x7a, 0x10, 0x1f}, 0xf2, &(0x7f0000000880)={0x5, 0xf, 0xf2, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x4, 0xcd, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x1, 0x6f, 0x9, 0x9}, @generic={0xd5, 0x10, 0x2, "26ba7f4824c7baf15fdc3e45a421a9e7ce37c736ececc2100f6109e0cdba8f5fd95412ed6c9a5eb1a592749671ed398b0af858daca6af7678aa1dfc673bfba585547197482a81525a76975e323db203dddf5bf0a7e06c918370cb34cb58cd6ce6a8503b49643aa66a4ef5984225fd36d723cd67ba2f84fa89d43bd1cabbe9b0de72aea70ecd2422b93e8321bb81401d4f1862dc8bcb3294676000974f3903819e969810c64e06db6bae850e1b1bc16e8a4ab7112a9714b73f7aee4438e87afbff18f1fcafc72037014a8b8f5ffc714d3f9c8"}]}, 0x6, [{0xd5, &(0x7f0000000980)=@string={0xd5, 0x3, "f209a8d1395010353a5c213a7e64b293d80d7d72e065cbfc86b7fb9c0385d80db3634e50e1e95c8ee34fc22124776215e02026d89bc3cb72527087491398e95ec087cd5ce2872b2dff407724f5b151fac73b3c5b8100794b3d700dabcab560853401181f2400728f3af23597636f20a86b3e86d182391a18bb45fcd4857a23080c2b5aec62e8329fc6e82045507f7ee423857c23168e7ea2131a945c473eb4f58caf92e36527b0003663c0df312edf6b87ed23b18db734221205e86c17d480049eb094a975d133258b68a5e74920975b5bcbbb"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x409}}, {0x79, &(0x7f0000000b40)=@string={0x79, 0x3, "263c78b920db49275509fa80254abb9adbfb4409ddf83f5050f21a51b2d7d92097354d3e7ba4a657e026b06068e308543ab479c5cdae6e2836cfa94b495f7236438ecbf80b947a98a2f820bb41befae8f96ce07c44af54743b1f99bde3a452403daa7d626252df9b9da5ede237d8ce3b8ee2075b654131"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x44b}}]}) pipe(&(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xc4, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0xa0}, 0x4000) write$binfmt_script(r0, &(0x7f0000000e80)={'#! ', './file0', [{0x20, 'ib\x00'}, {0x20, 'eth\x00'}, {0x20, 'ib\x00'}, {0x20, 'ib\x00'}, {0x20, '&[[}!.+['}, {0x20, '}\xa7'}], 0xa, "d0404eb214be830d57ca8287e74a57f02bc805d1d1b5572b255ba0216a04422dedad2f26a2fb69d101a8933837d18b60cbcf6700ffe438350654"}, 0x62) syz_usb_connect$cdc_ecm(0x6, 0x56, &(0x7f0000000f00)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0xbb, 0xc0, 0xc1, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x6, 0x9e09, 0x15}}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x80, 0x61, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xa4, 0x20, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x80, 0x80, 0xbb}}}}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x300, 0x8, 0x39, 0x4e, 0xff, 0xa4}, 0x23, &(0x7f0000000fc0)={0x5, 0xf, 0x23, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x22, 0x80, 0x7, 0x8001, 0x40}, @ssp_cap={0x10, 0x10, 0xa, 0x22, 0x1, 0x60, 0x0, 0x800, [0x30]}, @ptm_cap={0x3}]}, 0x2, [{0x40, &(0x7f0000001000)=@string={0x40, 0x3, "70b80b631849c3d634fb3c88ba2f10d3ed72b425558b35abbb9a22e38d776bd899aa0a2dfdf63b3c8e7d405060da2918c88623cb8cc726509675f9e6b42c"}}, {0x94, &(0x7f0000001040)=@string={0x94, 0x3, "fc7f29dc45ad503beed5d15c2addb3503d19d05d00e322b893abf1de564ad0d88335fb558807df12bd6e9a306c40b48edbd9f2e27e332dbd9e15b0059fb33ee471e5595bcd2afe645b78116406b2b02ea8280e39d64e9cff1b706d0a392133a60665822d30b6266f56d254877acc3472e88aed10f0eaa052fdba99f31569400740d256951c09713406357f4d944d3146f981"}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) setrlimit(0x4, &(0x7f0000001140)={0x1e, 0x5}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000001180)={{0x1, 0x1, 0x18, r3, {0xcbe, 0x5}}, './file0\x00'}) syz_usb_connect$cdc_ncm(0x2, 0x168, &(0x7f0000001200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x156, 0x2, 0x1, 0x0, 0x0, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "c305f87bad"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0xfeff, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@country_functional={0x12, 0x24, 0x7, 0x81, 0x40, [0x4d, 0xd7ab, 0xd392, 0x2, 0x5, 0x0]}, @mdlm_detail={0xe3, 0x24, 0x13, 0x80, "0b727a849cc3ad297332bab6507f679187d82726284d236b5008bea9062e9402029cfd82eccccc1749fafc3e268d9bd43d0cb127fca1dbb61d71b452b7ab756cf8b69e71ae8ddcbac89a6cfd195acb6caed75f41b3d551b7b716fe94f738b354d5e82933860459b520ec922a1d35f42b5d6e948a015ef85f436f228f4f0c59464cc88bd09c2c0b214151d7063b245959f452528569a200c13f053b2fa88b9f377f5ff565c8e711a5874f25ec0eb483ad98b21267cbfb1b9fef8f89f5ae3d11b8235ee25019014379915f4f30d7bee99d015667b2c95738bda9f8a299bd7177"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x4, 0xe6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x51, 0x60, 0x9}}}}}}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x110, 0x3, 0x3, 0xc8, 0x18, 0x7}, 0x78, &(0x7f00000013c0)={0x5, 0xf, 0x78, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x7a14, 0x0, 0x7f, [0xff00c0, 0xf, 0xf, 0xc0, 0xff003f, 0x5f]}, @ss_container_id={0x14, 0x10, 0x4, 0xf6, "4b93f7453647023d22b05488ab77e16a"}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x4, 0xf, 0xff6e, [0xffc0c0, 0x0, 0x3f, 0xf, 0x50, 0xc03f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d81d0f092648bb70553542bf40176aa6"}]}, 0x7, [{0xd, &(0x7f0000001440)=@string={0xd, 0x3, "052e1e85feb87567168fa5"}}, {0x78, &(0x7f0000001480)=@string={0x78, 0x3, "0d90ef59f69fcc154a9a3a83db95d54dc9cc3370b4a4c66fc239e2c307ef87eea6af19ac12db5bb3091e57c2cc81c1ec9d1acca61b99093657de3f529120b457ba7cc3974604f26374ec5f6fd9fddf1a0ab8bea2aa72825f7858d86fb71c42d98cbd75b12c3a62a571d2acb1b2800abb518c79f8e496"}}, {0x41, &(0x7f0000001500)=@string={0x41, 0x3, "2716a21ecf5a0fa83bedf2f5cb77aa7de64b3f617734bddd99a9e6fb772ea3d0f5136738985df5b6938fd87f47bce5dfa95a8d70b2ff4dc85d69c6d2592ebb"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x41d}}, {0x50, &(0x7f00000015c0)=@string={0x50, 0x3, "d738beeff3770d34addced483484c16ddde99c6dbf3a8b47ce6661a5bb3f5611d183d3fbc2e02542b50b124b1accc4aacdfea2e27ce398b2167029ef9da5d1659669be8c586729e1815ae2bc3128"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x42d}}, {0x51, &(0x7f0000001680)=@string={0x51, 0x3, "ccfe0b6cbb48b796c7a54c5019e3e301793e4d50b1f887de5ca1d56f2b4be96cc2d4821f34240f773d1e571cb6864ebbfc898fc3f3fbd2d4766577ce79d2d9d5bfeda4753ece661798bebf4f92fce0"}}]}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x64, 0x2) [ 179.968397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.980432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.986714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.998367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.008289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.022407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.023348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 15:33:54 executing program 6: r0 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000fef000/0x1000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000180)=""/110) 15:33:54 executing program 5: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/84) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000080)=""/4096) semget(0x0, 0x3, 0x204) semget(0x0, 0x2, 0x2c) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000001a40)={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x14) 15:33:54 executing program 4: mq_getsetattr(0xffffffffffffffff, &(0x7f0000000800)={0x7ff, 0x1, 0x9, 0x1}, &(0x7f0000000840)) [ 180.051282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.051493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.053236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:33:54 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mq_timedreceive(r0, &(0x7f0000000140)=""/192, 0xc0, 0x9, &(0x7f0000000200)={0x77359400}) r1 = dup(r0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x4, 0x10001}}, './file0\x00'}) ioctl$PTP_SYS_OFFSET(r5, 0x43403d05, &(0x7f00000003c0)={0x7}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000700)) pselect6(0x40, &(0x7f0000000740)={0x7, 0x5, 0x1, 0xbc, 0x2, 0x3, 0x8, 0x800}, &(0x7f0000000780)={0x1, 0x5dd9, 0x7fffffff, 0x2, 0xd64, 0x7, 0x20, 0x6}, &(0x7f00000007c0)={0x8423, 0x77, 0xeb1f, 0x973b, 0x9, 0x1ff, 0x8, 0xffff}, &(0x7f0000000800)={0x0, 0x3938700}, &(0x7f0000000880)={&(0x7f0000000840)={[0x3]}, 0x8}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f00000008c0)={0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) sendmsg$TIPC_NL_SOCK_GET(r6, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r7, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000d80)) 15:33:54 executing program 4: mq_getsetattr(0xffffffffffffffff, 0x0, &(0x7f0000000840)) 15:33:54 executing program 5: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/84) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000080)=""/4096) semget(0x0, 0x3, 0x204) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000001a40)={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x14) 15:33:54 executing program 6: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fef000/0x1000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000180)=""/110) 15:33:54 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() migrate_pages(r3, 0x6, &(0x7f0000001740)=0xfff, &(0x7f0000001780)=0xfffffffffffffe01) r4 = syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') r5 = signalfd4(r4, &(0x7f0000001a00)={[0x1]}, 0x8, 0x868285194ec06441) clone3(&(0x7f0000001a40)={0x10900, &(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880), {0x12}, &(0x7f00000018c0)=""/169, 0xa9, &(0x7f0000001980)=""/16, &(0x7f00000019c0)=[r3, r3], 0x2, {r5}}, 0x58) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000001ac0), &(0x7f0000001b00)={'L-', 0x4}, 0x16, 0x1) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180)=0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) sched_rr_get_interval(r6, &(0x7f0000002380)) [ 187.775207] Bluetooth: hci5: command 0x0406 tx timeout [ 187.776947] Bluetooth: hci1: command 0x0406 tx timeout [ 187.777729] Bluetooth: hci3: command 0x0406 tx timeout [ 187.778631] Bluetooth: hci0: command 0x0406 tx timeout [ 187.779435] Bluetooth: hci2: command 0x0406 tx timeout [ 187.780243] Bluetooth: hci6: command 0x0406 tx timeout [ 187.781163] Bluetooth: hci7: command 0x0406 tx timeout [ 187.781950] Bluetooth: hci4: command 0x0406 tx timeout 15:34:03 executing program 4: mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 15:34:03 executing program 3: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:34:03 executing program 0: r0 = geteuid() getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {}, [{0x2, 0x3, r0}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x3}], {0x4, 0x1}, [{0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2, 0xee01}, {0x8, 0x7, r2}, {0x8, 0x3, 0xee01}], {0x10, 0x2}, {0x20, 0x4}}, 0x74, 0x3) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x3]) shmctl$SHM_UNLOCK(0x0, 0xc) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000240)) r5 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000280)={{0x3, r0, r4, r0, r1, 0x4c, 0x57}, 0x0, 0x401, 0x7, 0x0, r5, 0xffffffffffffffff, 0x3}) shmctl$SHM_UNLOCK(0x0, 0xc) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/binder0\x00', 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000380)={0x2a8, 0x6, 0x6, 0x201, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x2}, [@nested={0xc, 0x4d, 0x0, 0x1, [@typed={0x8, 0x2f, 0x0, 0x0, @fd}]}, @nested={0xf7, 0x25, 0x0, 0x1, [@typed={0x8, 0x44, 0x0, 0x0, @uid=r0}, @typed={0x8, 0x64, 0x0, 0x0, @pid=r5}, @generic="5ae66fe218a08a541c2abc86ee96b8cbec980a5ff00b3cd5f17a6833b74b5063cb47e640618ca3bf5de21ce9454e4970fc8f31a21688b8097816962a23a7d0389118813d888d1c3a880117fb157ffe9e46a30eda2947ade9e59d07653e5aa62792ee6f42c11ea715ee8a71bed8164d16eec6e112ad6ee36eece649318795fbd6a3702b29254987dc921e3c274194854022c294c2262d33573adb5cdef47056420266584981a40453cc8be945a8a6bde5f8cadbd5e28c753714f7670c729d0a9b9600d5f852940616ea4863ab4dba0a0832153482912b85831fb08d0b9fcc555a6feafe"]}, @nested={0x190, 0x5e, 0x0, 0x1, [@typed={0x8, 0x3b, 0x0, 0x0, @fd=r6}, @typed={0x14, 0x2b, 0x0, 0x0, @ipv6=@remote}, @generic="1ff9d1b65186fa7c8def0d95ae8e3a5560e4d3a02d47b72fcb817ebba1b1330b79223d142cd9455523469ce2e8defba1ee3c95266280feb290485791e097e095cb60ab2f68a6da398ae671c44c93b0a388487c20ad723249ad3673568e812739135bd59fd68eec75ff83191455c150b58b03b0d4b32427334d4b86a80d3a7eaae881b500a3520a23575a0e25150085a13bddcb5b95575b70c54c2dde4692a79ce9fecee21cddd75c97b4b4e02e6ec36a10cc06b0540d0a6155b9ea382e4b1fd05f4ada6f6270bd3d6cbd33b768e84b49bbb6004c6c95871c4ac3a8dde925b9", @generic="8c190eef2613c6b01f67133547a8e0bf17a582189759b195128fa3af0800694d9832ca65a3675b196ca3881a1a82ae28e2701d2e8e0a89f36df422f607904a4aae3b66366442855c2c69eccb99b34ef4881e5eea3968bbc8e38c00a275100f610af6ff9b9ca00870043becc707c2ae6ceaff4b93626127209e3db1e59e0f939385521128db6601f886", @typed={0x8, 0xb, 0x0, 0x0, @uid=r0}]}]}, 0x2a8}}, 0x90) keyctl$chown(0x4, 0x0, r0, r3) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000009c0)=""/4096) 15:34:03 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() migrate_pages(r3, 0x6, &(0x7f0000001740)=0xfff, &(0x7f0000001780)=0xfffffffffffffe01) r4 = syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') r5 = signalfd4(r4, &(0x7f0000001a00)={[0x1]}, 0x8, 0x868285194ec06441) clone3(&(0x7f0000001a40)={0x10900, &(0x7f0000001800), &(0x7f0000001840), &(0x7f0000001880), {0x12}, &(0x7f00000018c0)=""/169, 0xa9, &(0x7f0000001980)=""/16, &(0x7f00000019c0)=[r3, r3], 0x2, {r5}}, 0x58) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180)=0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) sched_rr_get_interval(r6, &(0x7f0000002380)) 15:34:03 executing program 5: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/84) semctl$SEM_INFO(0x0, 0x1, 0x13, &(0x7f0000000080)=""/4096) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000001a40)={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x14) 15:34:03 executing program 6: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fef000/0x1000)=nil) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000180)=""/110) 15:34:03 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mq_timedreceive(r0, &(0x7f0000000140)=""/192, 0xc0, 0x9, &(0x7f0000000200)={0x77359400}) r1 = dup(r0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x4, 0x10001}}, './file0\x00'}) ioctl$PTP_SYS_OFFSET(r5, 0x43403d05, &(0x7f00000003c0)={0x7}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000700)) pselect6(0x40, &(0x7f0000000740)={0x7, 0x5, 0x1, 0xbc, 0x2, 0x3, 0x8, 0x800}, &(0x7f0000000780)={0x1, 0x5dd9, 0x7fffffff, 0x2, 0xd64, 0x7, 0x20, 0x6}, &(0x7f00000007c0)={0x8423, 0x77, 0xeb1f, 0x973b, 0x9, 0x1ff, 0x8, 0xffff}, &(0x7f0000000800)={0x0, 0x3938700}, &(0x7f0000000880)={&(0x7f0000000840)={[0x3]}, 0x8}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) sendmsg$TIPC_NL_SOCK_GET(r6, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r7, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000d80)) 15:34:03 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) r1 = syz_usb_connect$cdc_ecm(0x5, 0x6a, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0x5, 0x80, 0x16, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x7, 0x24, 0x6, 0x0, 0x0, "b44e"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x8000, 0x7, 0x1f}, [@mbim={0xc, 0x24, 0x1b, 0xc0, 0x8, 0xbe, 0x9, 0x4, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0xfffd, 0x6, 0x40}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0xe9, 0x8, 0x1f}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xf8, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x3f, 0x3b}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x8, 0xe9, 0x0, 0x10, 0xc5}, 0x90, &(0x7f0000000140)={0x5, 0xf, 0x90, 0x5, [@ptm_cap={0x3}, @generic={0x59, 0x10, 0x1, "8db30b0fb4a51aa2c629e620748741b59c16ee392922ac750dfa04af33709dde505c8f0fe48456f028969539f75bc660b37a2bb2290c3a31c9d14fcf0ddb7d389dc3f8b3489cc6e38fa26c46d3d1a78c9d7168172348"}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x7f, 0xf, 0x20, [0x1fe8130]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2f, 0xc1, 0xf5, 0x1f, 0x3f}, @ss_container_id={0x14, 0x10, 0x4, 0x20, "3e8d69095b656de1629ed966db0cfecf"}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x436}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000340)={0x14, &(0x7f0000000280)={0x40, 0x34, 0x59, {0x59, 0x22, "2c4060a23ff1cdca54a9f95b5d727c05e3bc0f4f2fe236abdfab899f43c32ee2a46913ea8d4436c3e96c8257eca53b979ab02ac171b80830f8e290bb9621f951a662fa88d6fc5d7af475b9053a4606487863eec58e63ac"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x1c, &(0x7f0000000380)={0x0, 0x0, 0x58, "73a798c879f2a87bc02cc09b27cc6941ba0511988a67ef3816e93ea9da4575e852b81468bfc546021a2a8295918df742aeadd4be4f4c1d7988d52403b9693ed64cba843b8444950c6e6a451264c3d9cb1979aca6b6af6183"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x41}}) syz_usb_connect$cdc_ecm(0x5, 0x14a, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x138, 0x1, 0x1, 0xc2, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0xe5, 0x2, 0x2, 0x6, 0x0, 0x5, {{0xa, 0x24, 0x6, 0x0, 0x0, "28ed18afee"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7fff, 0xff, 0x2}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x27}, @mbim={0xc, 0x24, 0x1b, 0x400, 0xa8df, 0x8, 0x1, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x59}, @mdlm_detail={0xce, 0x24, 0x13, 0x7, "21fd282f71b09f5d547028125ef2453290151510f6a7ba335585aa8a4a74b74df2b8634d597db0a12bd256f995d1d3dd6cc7a17dc21aff9ff38c497a35d8f09680b4a5ab9d86fb65b93347612b0c8306dca4e9d42e94e046b7f854f3b91479074448336f5b92de767d8ee473c000c00e26ded34ef618f903c5533743c719c9c1c277d60062ce03f2d07257bdb4ad59a1c1bb17101e27b3bba2b1b6f34cbfc26d1d6f544de144adb9d19dac3b3656e804a0539d8f2f1240156f2cad2b0b0b590fd7dbab89f4f004ce84f6"}, @ncm={0x6, 0x24, 0x1a, 0x2, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x1, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x6, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x1, 0x9}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x201, 0xcb, 0xcb, 0x9, 0x8, 0x5}, 0x20, &(0x7f0000000680)={0x5, 0xf, 0x20, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0xc, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x2, 0x6, 0x8}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x30, 0x5, 0x29f}]}, 0x1, [{0x23, &(0x7f00000006c0)=@string={0x23, 0x3, "edc7a1f6c91e28f262e010dadc8206c327a2ec66a330e1fa060f1c125af2d196ae"}}]}) syz_usb_connect$cdc_ecm(0x0, 0xd1, &(0x7f0000000740)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x1, 0x1, 0x6, 0xa0, 0xdc, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x2, {{0xb, 0x24, 0x6, 0x0, 0x0, "27f623777f34"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x0, 0x80}, [@country_functional={0xc, 0x24, 0x7, 0x81, 0x7, [0xce, 0x8000, 0x2]}, @mdlm_detail={0x61, 0x24, 0x13, 0x2, "0a8418713f5cbec56437b72cdb52a132bebbde97b998dc48c626825b86aa8e8f8455afe83d3f89a4b6b103b4e4f1bcc65b5e62efb5bb11f77bf3e783f1767fc5567f880b2a864500781b0b4d706fcad8f1cc44af0e5893a8704a260aa2"}, @country_functional={0x8, 0x24, 0x7, 0x1, 0x0, [0x0]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x1, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x7, 0x35}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x3f, 0x3}}}}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x250, 0x4, 0x3, 0x7a, 0x10, 0x1f}, 0xf2, &(0x7f0000000880)={0x5, 0xf, 0xf2, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x4, 0xcd, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x1, 0x6f, 0x9, 0x9}, @generic={0xd5, 0x10, 0x2, "26ba7f4824c7baf15fdc3e45a421a9e7ce37c736ececc2100f6109e0cdba8f5fd95412ed6c9a5eb1a592749671ed398b0af858daca6af7678aa1dfc673bfba585547197482a81525a76975e323db203dddf5bf0a7e06c918370cb34cb58cd6ce6a8503b49643aa66a4ef5984225fd36d723cd67ba2f84fa89d43bd1cabbe9b0de72aea70ecd2422b93e8321bb81401d4f1862dc8bcb3294676000974f3903819e969810c64e06db6bae850e1b1bc16e8a4ab7112a9714b73f7aee4438e87afbff18f1fcafc72037014a8b8f5ffc714d3f9c8"}]}, 0x6, [{0xd5, &(0x7f0000000980)=@string={0xd5, 0x3, "f209a8d1395010353a5c213a7e64b293d80d7d72e065cbfc86b7fb9c0385d80db3634e50e1e95c8ee34fc22124776215e02026d89bc3cb72527087491398e95ec087cd5ce2872b2dff407724f5b151fac73b3c5b8100794b3d700dabcab560853401181f2400728f3af23597636f20a86b3e86d182391a18bb45fcd4857a23080c2b5aec62e8329fc6e82045507f7ee423857c23168e7ea2131a945c473eb4f58caf92e36527b0003663c0df312edf6b87ed23b18db734221205e86c17d480049eb094a975d133258b68a5e74920975b5bcbbb"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x409}}, {0x79, &(0x7f0000000b40)=@string={0x79, 0x3, "263c78b920db49275509fa80254abb9adbfb4409ddf83f5050f21a51b2d7d92097354d3e7ba4a657e026b06068e308543ab479c5cdae6e2836cfa94b495f7236438ecbf80b947a98a2f820bb41befae8f96ce07c44af54743b1f99bde3a452403daa7d626252df9b9da5ede237d8ce3b8ee2075b654131"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x44b}}]}) pipe(&(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xc4, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0xa0}, 0x4000) write$binfmt_script(r0, &(0x7f0000000e80)={'#! ', './file0', [{0x20, 'ib\x00'}, {0x20, 'eth\x00'}, {0x20, 'ib\x00'}, {0x20, 'ib\x00'}, {0x20, '&[[}!.+['}, {0x20, '}\xa7'}], 0xa, "d0404eb214be830d57ca8287e74a57f02bc805d1d1b5572b255ba0216a04422dedad2f26a2fb69d101a8933837d18b60cbcf6700ffe438350654"}, 0x62) syz_usb_connect$cdc_ecm(0x6, 0x56, &(0x7f0000000f00)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0xbb, 0xc0, 0xc1, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x6, 0x9e09, 0x15}}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x80, 0x61, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xa4, 0x20, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x80, 0x80, 0xbb}}}}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x300, 0x8, 0x39, 0x4e, 0xff, 0xa4}, 0x23, &(0x7f0000000fc0)={0x5, 0xf, 0x23, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x22, 0x80, 0x7, 0x8001, 0x40}, @ssp_cap={0x10, 0x10, 0xa, 0x22, 0x1, 0x60, 0x0, 0x800, [0x30]}, @ptm_cap={0x3}]}, 0x2, [{0x40, &(0x7f0000001000)=@string={0x40, 0x3, "70b80b631849c3d634fb3c88ba2f10d3ed72b425558b35abbb9a22e38d776bd899aa0a2dfdf63b3c8e7d405060da2918c88623cb8cc726509675f9e6b42c"}}, {0x94, &(0x7f0000001040)=@string={0x94, 0x3, "fc7f29dc45ad503beed5d15c2addb3503d19d05d00e322b893abf1de564ad0d88335fb558807df12bd6e9a306c40b48edbd9f2e27e332dbd9e15b0059fb33ee471e5595bcd2afe645b78116406b2b02ea8280e39d64e9cff1b706d0a392133a60665822d30b6266f56d254877acc3472e88aed10f0eaa052fdba99f31569400740d256951c09713406357f4d944d3146f981"}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) setrlimit(0x4, &(0x7f0000001140)={0x1e, 0x5}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f0000001180)={{0x1, 0x1, 0x18, r3, {0xcbe, 0x5}}, './file0\x00'}) syz_usb_connect$cdc_ncm(0x2, 0x168, &(0x7f0000001200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x156, 0x2, 0x1, 0x0, 0x0, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "c305f87bad"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0xfeff, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@country_functional={0x12, 0x24, 0x7, 0x81, 0x40, [0x4d, 0xd7ab, 0xd392, 0x2, 0x5, 0x0]}, @mdlm_detail={0xe3, 0x24, 0x13, 0x80, "0b727a849cc3ad297332bab6507f679187d82726284d236b5008bea9062e9402029cfd82eccccc1749fafc3e268d9bd43d0cb127fca1dbb61d71b452b7ab756cf8b69e71ae8ddcbac89a6cfd195acb6caed75f41b3d551b7b716fe94f738b354d5e82933860459b520ec922a1d35f42b5d6e948a015ef85f436f228f4f0c59464cc88bd09c2c0b214151d7063b245959f452528569a200c13f053b2fa88b9f377f5ff565c8e711a5874f25ec0eb483ad98b21267cbfb1b9fef8f89f5ae3d11b8235ee25019014379915f4f30d7bee99d015667b2c95738bda9f8a299bd7177"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x4, 0xe6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x51, 0x60, 0x9}}}}}}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x110, 0x3, 0x3, 0xc8, 0x18, 0x7}, 0x78, &(0x7f00000013c0)={0x5, 0xf, 0x78, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x7a14, 0x0, 0x7f, [0xff00c0, 0xf, 0xf, 0xc0, 0xff003f, 0x5f]}, @ss_container_id={0x14, 0x10, 0x4, 0xf6, "4b93f7453647023d22b05488ab77e16a"}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x4, 0xf, 0xff6e, [0xffc0c0, 0x0, 0x3f, 0xf, 0x50, 0xc03f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d81d0f092648bb70553542bf40176aa6"}]}, 0x7, [{0xd, &(0x7f0000001440)=@string={0xd, 0x3, "052e1e85feb87567168fa5"}}, {0x78, &(0x7f0000001480)=@string={0x78, 0x3, "0d90ef59f69fcc154a9a3a83db95d54dc9cc3370b4a4c66fc239e2c307ef87eea6af19ac12db5bb3091e57c2cc81c1ec9d1acca61b99093657de3f529120b457ba7cc3974604f26374ec5f6fd9fddf1a0ab8bea2aa72825f7858d86fb71c42d98cbd75b12c3a62a571d2acb1b2800abb518c79f8e496"}}, {0x41, &(0x7f0000001500)=@string={0x41, 0x3, "2716a21ecf5a0fa83bedf2f5cb77aa7de64b3f617734bddd99a9e6fb772ea3d0f5136738985df5b6938fd87f47bce5dfa95a8d70b2ff4dc85d69c6d2592ebb"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x41d}}, {0x50, &(0x7f00000015c0)=@string={0x50, 0x3, "d738beeff3770d34addced483484c16ddde99c6dbf3a8b47ce6661a5bb3f5611d183d3fbc2e02542b50b124b1accc4aacdfea2e27ce398b2167029ef9da5d1659669be8c586729e1815ae2bc3128"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x42d}}, {0x51, &(0x7f0000001680)=@string={0x51, 0x3, "ccfe0b6cbb48b796c7a54c5019e3e301793e4d50b1f887de5ca1d56f2b4be96cc2d4821f34240f773d1e571cb6864ebbfc898fc3f3fbd2d4766577ce79d2d9d5bfeda4753ece661798bebf4f92fce0"}}]}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x64, 0x2) [ 188.983978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.003461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:34:03 executing program 4: mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 15:34:03 executing program 6: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fef000/0x1000)=nil) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000180)=""/110) 15:34:03 executing program 5: semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000000)=""/84) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000001a40)={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x14) [ 189.038854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.040506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.066907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.085328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.107957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.117496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:34:03 executing program 0: r0 = geteuid() getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {}, [{0x2, 0x3, r0}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x3}], {0x4, 0x1}, [{0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2, 0xee01}, {0x8, 0x7, r2}, {0x8, 0x3, 0xee01}], {0x10, 0x2}, {0x20, 0x4}}, 0x74, 0x3) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x3]) shmctl$SHM_UNLOCK(0x0, 0xc) getresgid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r4 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000280)={{0x3, r0, r3, r0, r1, 0x4c, 0x57}, 0x0, 0x401, 0x7, 0x0, r4, 0xffffffffffffffff, 0x3}) shmctl$SHM_UNLOCK(0x0, 0xc) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/binder0\x00', 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000640)={&(0x7f0000000380)={0x2a8, 0x6, 0x6, 0x201, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x2}, [@nested={0xc, 0x4d, 0x0, 0x1, [@typed={0x8, 0x2f, 0x0, 0x0, @fd}]}, @nested={0xf7, 0x25, 0x0, 0x1, [@typed={0x8, 0x44, 0x0, 0x0, @uid=r0}, @typed={0x8, 0x64, 0x0, 0x0, @pid=r4}, @generic="5ae66fe218a08a541c2abc86ee96b8cbec980a5ff00b3cd5f17a6833b74b5063cb47e640618ca3bf5de21ce9454e4970fc8f31a21688b8097816962a23a7d0389118813d888d1c3a880117fb157ffe9e46a30eda2947ade9e59d07653e5aa62792ee6f42c11ea715ee8a71bed8164d16eec6e112ad6ee36eece649318795fbd6a3702b29254987dc921e3c274194854022c294c2262d33573adb5cdef47056420266584981a40453cc8be945a8a6bde5f8cadbd5e28c753714f7670c729d0a9b9600d5f852940616ea4863ab4dba0a0832153482912b85831fb08d0b9fcc555a6feafe"]}, @nested={0x190, 0x5e, 0x0, 0x1, [@typed={0x8, 0x3b, 0x0, 0x0, @fd=r5}, @typed={0x14, 0x2b, 0x0, 0x0, @ipv6=@remote}, @generic="1ff9d1b65186fa7c8def0d95ae8e3a5560e4d3a02d47b72fcb817ebba1b1330b79223d142cd9455523469ce2e8defba1ee3c95266280feb290485791e097e095cb60ab2f68a6da398ae671c44c93b0a388487c20ad723249ad3673568e812739135bd59fd68eec75ff83191455c150b58b03b0d4b32427334d4b86a80d3a7eaae881b500a3520a23575a0e25150085a13bddcb5b95575b70c54c2dde4692a79ce9fecee21cddd75c97b4b4e02e6ec36a10cc06b0540d0a6155b9ea382e4b1fd05f4ada6f6270bd3d6cbd33b768e84b49bbb6004c6c95871c4ac3a8dde925b9", @generic="8c190eef2613c6b01f67133547a8e0bf17a582189759b195128fa3af0800694d9832ca65a3675b196ca3881a1a82ae28e2701d2e8e0a89f36df422f607904a4aae3b66366442855c2c69eccb99b34ef4881e5eea3968bbc8e38c00a275100f610af6ff9b9ca00870043becc707c2ae6ceaff4b93626127209e3db1e59e0f939385521128db6601f886", @typed={0x8, 0xb, 0x0, 0x0, @uid=r0}]}]}, 0x2a8}}, 0x90) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000009c0)=""/4096) 15:34:03 executing program 4: mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 15:34:03 executing program 6: shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fef000/0x1000)=nil) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000180)=""/110) 15:34:03 executing program 5: connect$802154_dgram(0xffffffffffffffff, &(0x7f0000001a40)={0x24, @short={0x2, 0x1, 0xaaa1}}, 0x14) 15:34:12 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() migrate_pages(r3, 0x6, &(0x7f0000001740)=0xfff, &(0x7f0000001780)=0xfffffffffffffe01) r4 = syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') signalfd4(r4, &(0x7f0000001a00)={[0x1]}, 0x8, 0x868285194ec06441) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180)=0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) sched_rr_get_interval(r5, &(0x7f0000002380)) 15:34:12 executing program 6: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fef000/0x1000)=nil) shmctl$SHM_STAT(r0, 0xd, 0x0) 15:34:12 executing program 0: r0 = geteuid() getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {}, [{0x2, 0x3, r0}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x3}], {0x4, 0x1}, [{0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2, 0xee01}, {0x8, 0x7, r2}, {0x8, 0x3, 0xee01}], {0x10, 0x2}, {0x20, 0x4}}, 0x74, 0x3) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x3]) shmctl$SHM_UNLOCK(0x0, 0xc) getresgid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r4 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000280)={{0x3, r0, r3, r0, r1, 0x4c, 0x57}, 0x0, 0x401, 0x7, 0x0, r4, 0xffffffffffffffff, 0x3}) shmctl$SHM_UNLOCK(0x0, 0xc) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/binder0\x00', 0x0, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000009c0)=""/4096) 15:34:12 executing program 5: connect$802154_dgram(0xffffffffffffffff, 0x0, 0x0) 15:34:12 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mq_timedreceive(r0, &(0x7f0000000140)=""/192, 0xc0, 0x9, &(0x7f0000000200)={0x77359400}) r1 = dup(r0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x4, 0x10001}}, './file0\x00'}) ioctl$PTP_SYS_OFFSET(r5, 0x43403d05, &(0x7f00000003c0)={0x7}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000700)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) sendmsg$TIPC_NL_SOCK_GET(r6, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r7, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000d80)) 15:34:12 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) r1 = syz_usb_connect$cdc_ecm(0x5, 0x6a, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0x5, 0x80, 0x16, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x7, 0x24, 0x6, 0x0, 0x0, "b44e"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x8000, 0x7, 0x1f}, [@mbim={0xc, 0x24, 0x1b, 0xc0, 0x8, 0xbe, 0x9, 0x4, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0xfffd, 0x6, 0x40}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0xe9, 0x8, 0x1f}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xf8, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x3f, 0x3b}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x8, 0xe9, 0x0, 0x10, 0xc5}, 0x90, &(0x7f0000000140)={0x5, 0xf, 0x90, 0x5, [@ptm_cap={0x3}, @generic={0x59, 0x10, 0x1, "8db30b0fb4a51aa2c629e620748741b59c16ee392922ac750dfa04af33709dde505c8f0fe48456f028969539f75bc660b37a2bb2290c3a31c9d14fcf0ddb7d389dc3f8b3489cc6e38fa26c46d3d1a78c9d7168172348"}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x7f, 0xf, 0x20, [0x1fe8130]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2f, 0xc1, 0xf5, 0x1f, 0x3f}, @ss_container_id={0x14, 0x10, 0x4, 0x20, "3e8d69095b656de1629ed966db0cfecf"}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x436}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000340)={0x14, &(0x7f0000000280)={0x40, 0x34, 0x59, {0x59, 0x22, "2c4060a23ff1cdca54a9f95b5d727c05e3bc0f4f2fe236abdfab899f43c32ee2a46913ea8d4436c3e96c8257eca53b979ab02ac171b80830f8e290bb9621f951a662fa88d6fc5d7af475b9053a4606487863eec58e63ac"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x1c, &(0x7f0000000380)={0x0, 0x0, 0x58, "73a798c879f2a87bc02cc09b27cc6941ba0511988a67ef3816e93ea9da4575e852b81468bfc546021a2a8295918df742aeadd4be4f4c1d7988d52403b9693ed64cba843b8444950c6e6a451264c3d9cb1979aca6b6af6183"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x41}}) syz_usb_connect$cdc_ecm(0x5, 0x14a, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x138, 0x1, 0x1, 0xc2, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0xe5, 0x2, 0x2, 0x6, 0x0, 0x5, {{0xa, 0x24, 0x6, 0x0, 0x0, "28ed18afee"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7fff, 0xff, 0x2}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x27}, @mbim={0xc, 0x24, 0x1b, 0x400, 0xa8df, 0x8, 0x1, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x59}, @mdlm_detail={0xce, 0x24, 0x13, 0x7, "21fd282f71b09f5d547028125ef2453290151510f6a7ba335585aa8a4a74b74df2b8634d597db0a12bd256f995d1d3dd6cc7a17dc21aff9ff38c497a35d8f09680b4a5ab9d86fb65b93347612b0c8306dca4e9d42e94e046b7f854f3b91479074448336f5b92de767d8ee473c000c00e26ded34ef618f903c5533743c719c9c1c277d60062ce03f2d07257bdb4ad59a1c1bb17101e27b3bba2b1b6f34cbfc26d1d6f544de144adb9d19dac3b3656e804a0539d8f2f1240156f2cad2b0b0b590fd7dbab89f4f004ce84f6"}, @ncm={0x6, 0x24, 0x1a, 0x2, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x1, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x6, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x1, 0x9}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x201, 0xcb, 0xcb, 0x9, 0x8, 0x5}, 0x20, &(0x7f0000000680)={0x5, 0xf, 0x20, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0xc, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x2, 0x6, 0x8}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x30, 0x5, 0x29f}]}, 0x1, [{0x23, &(0x7f00000006c0)=@string={0x23, 0x3, "edc7a1f6c91e28f262e010dadc8206c327a2ec66a330e1fa060f1c125af2d196ae"}}]}) syz_usb_connect$cdc_ecm(0x0, 0xd1, &(0x7f0000000740)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x1, 0x1, 0x6, 0xa0, 0xdc, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x2, {{0xb, 0x24, 0x6, 0x0, 0x0, "27f623777f34"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x0, 0x80}, [@country_functional={0xc, 0x24, 0x7, 0x81, 0x7, [0xce, 0x8000, 0x2]}, @mdlm_detail={0x61, 0x24, 0x13, 0x2, "0a8418713f5cbec56437b72cdb52a132bebbde97b998dc48c626825b86aa8e8f8455afe83d3f89a4b6b103b4e4f1bcc65b5e62efb5bb11f77bf3e783f1767fc5567f880b2a864500781b0b4d706fcad8f1cc44af0e5893a8704a260aa2"}, @country_functional={0x8, 0x24, 0x7, 0x1, 0x0, [0x0]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x1, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x7, 0x35}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x3f, 0x3}}}}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x250, 0x4, 0x3, 0x7a, 0x10, 0x1f}, 0xf2, &(0x7f0000000880)={0x5, 0xf, 0xf2, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x4, 0xcd, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x1, 0x6f, 0x9, 0x9}, @generic={0xd5, 0x10, 0x2, "26ba7f4824c7baf15fdc3e45a421a9e7ce37c736ececc2100f6109e0cdba8f5fd95412ed6c9a5eb1a592749671ed398b0af858daca6af7678aa1dfc673bfba585547197482a81525a76975e323db203dddf5bf0a7e06c918370cb34cb58cd6ce6a8503b49643aa66a4ef5984225fd36d723cd67ba2f84fa89d43bd1cabbe9b0de72aea70ecd2422b93e8321bb81401d4f1862dc8bcb3294676000974f3903819e969810c64e06db6bae850e1b1bc16e8a4ab7112a9714b73f7aee4438e87afbff18f1fcafc72037014a8b8f5ffc714d3f9c8"}]}, 0x6, [{0xd5, &(0x7f0000000980)=@string={0xd5, 0x3, "f209a8d1395010353a5c213a7e64b293d80d7d72e065cbfc86b7fb9c0385d80db3634e50e1e95c8ee34fc22124776215e02026d89bc3cb72527087491398e95ec087cd5ce2872b2dff407724f5b151fac73b3c5b8100794b3d700dabcab560853401181f2400728f3af23597636f20a86b3e86d182391a18bb45fcd4857a23080c2b5aec62e8329fc6e82045507f7ee423857c23168e7ea2131a945c473eb4f58caf92e36527b0003663c0df312edf6b87ed23b18db734221205e86c17d480049eb094a975d133258b68a5e74920975b5bcbbb"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x409}}, {0x79, &(0x7f0000000b40)=@string={0x79, 0x3, "263c78b920db49275509fa80254abb9adbfb4409ddf83f5050f21a51b2d7d92097354d3e7ba4a657e026b06068e308543ab479c5cdae6e2836cfa94b495f7236438ecbf80b947a98a2f820bb41befae8f96ce07c44af54743b1f99bde3a452403daa7d626252df9b9da5ede237d8ce3b8ee2075b654131"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x44b}}]}) pipe(&(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xc4, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0xa0}, 0x4000) write$binfmt_script(r0, &(0x7f0000000e80)={'#! ', './file0', [{0x20, 'ib\x00'}, {0x20, 'eth\x00'}, {0x20, 'ib\x00'}, {0x20, 'ib\x00'}, {0x20, '&[[}!.+['}, {0x20, '}\xa7'}], 0xa, "d0404eb214be830d57ca8287e74a57f02bc805d1d1b5572b255ba0216a04422dedad2f26a2fb69d101a8933837d18b60cbcf6700ffe438350654"}, 0x62) syz_usb_connect$cdc_ecm(0x6, 0x56, &(0x7f0000000f00)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0xbb, 0xc0, 0xc1, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x6, 0x9e09, 0x15}}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x80, 0x61, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xa4, 0x20, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x80, 0x80, 0xbb}}}}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x300, 0x8, 0x39, 0x4e, 0xff, 0xa4}, 0x23, &(0x7f0000000fc0)={0x5, 0xf, 0x23, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x22, 0x80, 0x7, 0x8001, 0x40}, @ssp_cap={0x10, 0x10, 0xa, 0x22, 0x1, 0x60, 0x0, 0x800, [0x30]}, @ptm_cap={0x3}]}, 0x2, [{0x40, &(0x7f0000001000)=@string={0x40, 0x3, "70b80b631849c3d634fb3c88ba2f10d3ed72b425558b35abbb9a22e38d776bd899aa0a2dfdf63b3c8e7d405060da2918c88623cb8cc726509675f9e6b42c"}}, {0x94, &(0x7f0000001040)=@string={0x94, 0x3, "fc7f29dc45ad503beed5d15c2addb3503d19d05d00e322b893abf1de564ad0d88335fb558807df12bd6e9a306c40b48edbd9f2e27e332dbd9e15b0059fb33ee471e5595bcd2afe645b78116406b2b02ea8280e39d64e9cff1b706d0a392133a60665822d30b6266f56d254877acc3472e88aed10f0eaa052fdba99f31569400740d256951c09713406357f4d944d3146f981"}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) setrlimit(0x4, &(0x7f0000001140)={0x1e, 0x5}) pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x2, 0x168, &(0x7f0000001200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x156, 0x2, 0x1, 0x0, 0x0, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "c305f87bad"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0xfeff, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@country_functional={0x12, 0x24, 0x7, 0x81, 0x40, [0x4d, 0xd7ab, 0xd392, 0x2, 0x5, 0x0]}, @mdlm_detail={0xe3, 0x24, 0x13, 0x80, "0b727a849cc3ad297332bab6507f679187d82726284d236b5008bea9062e9402029cfd82eccccc1749fafc3e268d9bd43d0cb127fca1dbb61d71b452b7ab756cf8b69e71ae8ddcbac89a6cfd195acb6caed75f41b3d551b7b716fe94f738b354d5e82933860459b520ec922a1d35f42b5d6e948a015ef85f436f228f4f0c59464cc88bd09c2c0b214151d7063b245959f452528569a200c13f053b2fa88b9f377f5ff565c8e711a5874f25ec0eb483ad98b21267cbfb1b9fef8f89f5ae3d11b8235ee25019014379915f4f30d7bee99d015667b2c95738bda9f8a299bd7177"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x4, 0xe6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x51, 0x60, 0x9}}}}}}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x110, 0x3, 0x3, 0xc8, 0x18, 0x7}, 0x78, &(0x7f00000013c0)={0x5, 0xf, 0x78, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x7a14, 0x0, 0x7f, [0xff00c0, 0xf, 0xf, 0xc0, 0xff003f, 0x5f]}, @ss_container_id={0x14, 0x10, 0x4, 0xf6, "4b93f7453647023d22b05488ab77e16a"}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x4, 0xf, 0xff6e, [0xffc0c0, 0x0, 0x3f, 0xf, 0x50, 0xc03f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d81d0f092648bb70553542bf40176aa6"}]}, 0x7, [{0xd, &(0x7f0000001440)=@string={0xd, 0x3, "052e1e85feb87567168fa5"}}, {0x78, &(0x7f0000001480)=@string={0x78, 0x3, "0d90ef59f69fcc154a9a3a83db95d54dc9cc3370b4a4c66fc239e2c307ef87eea6af19ac12db5bb3091e57c2cc81c1ec9d1acca61b99093657de3f529120b457ba7cc3974604f26374ec5f6fd9fddf1a0ab8bea2aa72825f7858d86fb71c42d98cbd75b12c3a62a571d2acb1b2800abb518c79f8e496"}}, {0x41, &(0x7f0000001500)=@string={0x41, 0x3, "2716a21ecf5a0fa83bedf2f5cb77aa7de64b3f617734bddd99a9e6fb772ea3d0f5136738985df5b6938fd87f47bce5dfa95a8d70b2ff4dc85d69c6d2592ebb"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x41d}}, {0x50, &(0x7f00000015c0)=@string={0x50, 0x3, "d738beeff3770d34addced483484c16ddde99c6dbf3a8b47ce6661a5bb3f5611d183d3fbc2e02542b50b124b1accc4aacdfea2e27ce398b2167029ef9da5d1659669be8c586729e1815ae2bc3128"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x42d}}, {0x51, &(0x7f0000001680)=@string={0x51, 0x3, "ccfe0b6cbb48b796c7a54c5019e3e301793e4d50b1f887de5ca1d56f2b4be96cc2d4821f34240f773d1e571cb6864ebbfc898fc3f3fbd2d4766577ce79d2d9d5bfeda4753ece661798bebf4f92fce0"}}]}) fsetxattr$system_posix_acl(r3, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x64, 0x2) 15:34:12 executing program 3: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:34:12 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:34:12 executing program 0: r0 = geteuid() getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {}, [{0x2, 0x3, r0}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x3}], {0x4, 0x1}, [{0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2, 0xee01}, {0x8, 0x7, r2}, {0x8, 0x3, 0xee01}], {0x10, 0x2}, {0x20, 0x4}}, 0x74, 0x3) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x3]) shmctl$SHM_UNLOCK(0x0, 0xc) getresgid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r4 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000280)={{0x3, r0, r3, r0, r1, 0x4c, 0x57}, 0x0, 0x401, 0x7, 0x0, r4, 0xffffffffffffffff, 0x3}) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000009c0)=""/4096) [ 198.278140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.281073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.301281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.305119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:34:12 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() migrate_pages(r3, 0x6, &(0x7f0000001740)=0xfff, &(0x7f0000001780)=0xfffffffffffffe01) syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180)=0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) sched_rr_get_interval(r4, &(0x7f0000002380)) [ 198.324689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.325557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:34:12 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:34:12 executing program 6: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fef000/0x1000)=nil) shmctl$SHM_STAT(r0, 0xd, 0x0) [ 198.349756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.357127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:34:12 executing program 0: r0 = geteuid() getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {}, [{0x2, 0x3, r0}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x3}], {0x4, 0x1}, [{0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2, 0xee01}, {0x8, 0x7, r2}, {0x8, 0x3, 0xee01}], {0x10, 0x2}, {0x20, 0x4}}, 0x74, 0x3) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x3]) shmctl$SHM_UNLOCK(0x0, 0xc) getresgid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) r4 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000280)={{0x3, r0, r3, r0, r1, 0x4c, 0x57}, 0x0, 0x401, 0x7, 0x0, r4, 0xffffffffffffffff, 0x3}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000009c0)=""/4096) 15:34:12 executing program 0: r0 = geteuid() getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {}, [{0x2, 0x3, r0}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x3}], {0x4, 0x1}, [{0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2, 0xee01}, {0x8, 0x7, r1}, {0x8, 0x3, 0xee01}], {0x10, 0x2}, {0x20, 0x4}}, 0x74, 0x3) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x3]) shmctl$SHM_UNLOCK(0x0, 0xc) getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) fork() shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000009c0)=""/4096) 15:34:12 executing program 6: r0 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fef000/0x1000)=nil) shmctl$SHM_STAT(r0, 0xd, 0x0) 15:34:12 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() migrate_pages(r3, 0x6, &(0x7f0000001740)=0xfff, &(0x7f0000001780)=0xfffffffffffffe01) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180)=0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) sched_rr_get_interval(r4, &(0x7f0000002380)) 15:34:21 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() migrate_pages(r3, 0x6, &(0x7f0000001740)=0xfff, &(0x7f0000001780)=0xfffffffffffffe01) syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180)=0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) sched_rr_get_interval(r4, &(0x7f0000002380)) 15:34:21 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:34:21 executing program 0: r0 = geteuid() getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {}, [{0x2, 0x3, r0}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x3}], {0x4, 0x1}, [{0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2, 0xee01}, {0x8, 0x7, r1}, {0x8, 0x3, 0xee01}], {0x10, 0x2}, {0x20, 0x4}}, 0x74, 0x3) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x3]) shmctl$SHM_UNLOCK(0x0, 0xc) getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) fork() shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000009c0)=""/4096) 15:34:21 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mq_timedreceive(r0, &(0x7f0000000140)=""/192, 0xc0, 0x9, &(0x7f0000000200)={0x77359400}) r1 = dup(r0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x4, 0x10001}}, './file0\x00'}) ioctl$PTP_SYS_OFFSET(r4, 0x43403d05, &(0x7f00000003c0)={0x7}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) sendmsg$TIPC_NL_SOCK_GET(r5, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r6, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000d80)) 15:34:21 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) r1 = syz_usb_connect$cdc_ecm(0x5, 0x6a, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0x5, 0x80, 0x16, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x7, 0x24, 0x6, 0x0, 0x0, "b44e"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x8000, 0x7, 0x1f}, [@mbim={0xc, 0x24, 0x1b, 0xc0, 0x8, 0xbe, 0x9, 0x4, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0xfffd, 0x6, 0x40}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0xe9, 0x8, 0x1f}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xf8, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x3f, 0x3b}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x8, 0xe9, 0x0, 0x10, 0xc5}, 0x90, &(0x7f0000000140)={0x5, 0xf, 0x90, 0x5, [@ptm_cap={0x3}, @generic={0x59, 0x10, 0x1, "8db30b0fb4a51aa2c629e620748741b59c16ee392922ac750dfa04af33709dde505c8f0fe48456f028969539f75bc660b37a2bb2290c3a31c9d14fcf0ddb7d389dc3f8b3489cc6e38fa26c46d3d1a78c9d7168172348"}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x7f, 0xf, 0x20, [0x1fe8130]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2f, 0xc1, 0xf5, 0x1f, 0x3f}, @ss_container_id={0x14, 0x10, 0x4, 0x20, "3e8d69095b656de1629ed966db0cfecf"}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x436}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000340)={0x14, &(0x7f0000000280)={0x40, 0x34, 0x59, {0x59, 0x22, "2c4060a23ff1cdca54a9f95b5d727c05e3bc0f4f2fe236abdfab899f43c32ee2a46913ea8d4436c3e96c8257eca53b979ab02ac171b80830f8e290bb9621f951a662fa88d6fc5d7af475b9053a4606487863eec58e63ac"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x1c, &(0x7f0000000380)={0x0, 0x0, 0x58, "73a798c879f2a87bc02cc09b27cc6941ba0511988a67ef3816e93ea9da4575e852b81468bfc546021a2a8295918df742aeadd4be4f4c1d7988d52403b9693ed64cba843b8444950c6e6a451264c3d9cb1979aca6b6af6183"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x41}}) syz_usb_connect$cdc_ecm(0x5, 0x14a, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x138, 0x1, 0x1, 0xc2, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0xe5, 0x2, 0x2, 0x6, 0x0, 0x5, {{0xa, 0x24, 0x6, 0x0, 0x0, "28ed18afee"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7fff, 0xff, 0x2}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x27}, @mbim={0xc, 0x24, 0x1b, 0x400, 0xa8df, 0x8, 0x1, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x59}, @mdlm_detail={0xce, 0x24, 0x13, 0x7, "21fd282f71b09f5d547028125ef2453290151510f6a7ba335585aa8a4a74b74df2b8634d597db0a12bd256f995d1d3dd6cc7a17dc21aff9ff38c497a35d8f09680b4a5ab9d86fb65b93347612b0c8306dca4e9d42e94e046b7f854f3b91479074448336f5b92de767d8ee473c000c00e26ded34ef618f903c5533743c719c9c1c277d60062ce03f2d07257bdb4ad59a1c1bb17101e27b3bba2b1b6f34cbfc26d1d6f544de144adb9d19dac3b3656e804a0539d8f2f1240156f2cad2b0b0b590fd7dbab89f4f004ce84f6"}, @ncm={0x6, 0x24, 0x1a, 0x2, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x1, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x6, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x1, 0x9}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x201, 0xcb, 0xcb, 0x9, 0x8, 0x5}, 0x20, &(0x7f0000000680)={0x5, 0xf, 0x20, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0xc, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x2, 0x6, 0x8}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x30, 0x5, 0x29f}]}, 0x1, [{0x23, &(0x7f00000006c0)=@string={0x23, 0x3, "edc7a1f6c91e28f262e010dadc8206c327a2ec66a330e1fa060f1c125af2d196ae"}}]}) syz_usb_connect$cdc_ecm(0x0, 0xd1, &(0x7f0000000740)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x1, 0x1, 0x6, 0xa0, 0xdc, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x2, {{0xb, 0x24, 0x6, 0x0, 0x0, "27f623777f34"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x0, 0x80}, [@country_functional={0xc, 0x24, 0x7, 0x81, 0x7, [0xce, 0x8000, 0x2]}, @mdlm_detail={0x61, 0x24, 0x13, 0x2, "0a8418713f5cbec56437b72cdb52a132bebbde97b998dc48c626825b86aa8e8f8455afe83d3f89a4b6b103b4e4f1bcc65b5e62efb5bb11f77bf3e783f1767fc5567f880b2a864500781b0b4d706fcad8f1cc44af0e5893a8704a260aa2"}, @country_functional={0x8, 0x24, 0x7, 0x1, 0x0, [0x0]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x1, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x7, 0x35}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x3f, 0x3}}}}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x250, 0x4, 0x3, 0x7a, 0x10, 0x1f}, 0xf2, &(0x7f0000000880)={0x5, 0xf, 0xf2, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x4, 0xcd, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x1, 0x6f, 0x9, 0x9}, @generic={0xd5, 0x10, 0x2, "26ba7f4824c7baf15fdc3e45a421a9e7ce37c736ececc2100f6109e0cdba8f5fd95412ed6c9a5eb1a592749671ed398b0af858daca6af7678aa1dfc673bfba585547197482a81525a76975e323db203dddf5bf0a7e06c918370cb34cb58cd6ce6a8503b49643aa66a4ef5984225fd36d723cd67ba2f84fa89d43bd1cabbe9b0de72aea70ecd2422b93e8321bb81401d4f1862dc8bcb3294676000974f3903819e969810c64e06db6bae850e1b1bc16e8a4ab7112a9714b73f7aee4438e87afbff18f1fcafc72037014a8b8f5ffc714d3f9c8"}]}, 0x6, [{0xd5, &(0x7f0000000980)=@string={0xd5, 0x3, "f209a8d1395010353a5c213a7e64b293d80d7d72e065cbfc86b7fb9c0385d80db3634e50e1e95c8ee34fc22124776215e02026d89bc3cb72527087491398e95ec087cd5ce2872b2dff407724f5b151fac73b3c5b8100794b3d700dabcab560853401181f2400728f3af23597636f20a86b3e86d182391a18bb45fcd4857a23080c2b5aec62e8329fc6e82045507f7ee423857c23168e7ea2131a945c473eb4f58caf92e36527b0003663c0df312edf6b87ed23b18db734221205e86c17d480049eb094a975d133258b68a5e74920975b5bcbbb"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x409}}, {0x79, &(0x7f0000000b40)=@string={0x79, 0x3, "263c78b920db49275509fa80254abb9adbfb4409ddf83f5050f21a51b2d7d92097354d3e7ba4a657e026b06068e308543ab479c5cdae6e2836cfa94b495f7236438ecbf80b947a98a2f820bb41befae8f96ce07c44af54743b1f99bde3a452403daa7d626252df9b9da5ede237d8ce3b8ee2075b654131"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x44b}}]}) pipe(&(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xc4, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0xa0}, 0x4000) write$binfmt_script(r0, &(0x7f0000000e80)={'#! ', './file0', [{0x20, 'ib\x00'}, {0x20, 'eth\x00'}, {0x20, 'ib\x00'}, {0x20, 'ib\x00'}, {0x20, '&[[}!.+['}, {0x20, '}\xa7'}], 0xa, "d0404eb214be830d57ca8287e74a57f02bc805d1d1b5572b255ba0216a04422dedad2f26a2fb69d101a8933837d18b60cbcf6700ffe438350654"}, 0x62) syz_usb_connect$cdc_ecm(0x6, 0x56, &(0x7f0000000f00)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0xbb, 0xc0, 0xc1, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x6, 0x9e09, 0x15}}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x80, 0x61, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xa4, 0x20, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x80, 0x80, 0xbb}}}}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x300, 0x8, 0x39, 0x4e, 0xff, 0xa4}, 0x23, &(0x7f0000000fc0)={0x5, 0xf, 0x23, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x22, 0x80, 0x7, 0x8001, 0x40}, @ssp_cap={0x10, 0x10, 0xa, 0x22, 0x1, 0x60, 0x0, 0x800, [0x30]}, @ptm_cap={0x3}]}, 0x2, [{0x40, &(0x7f0000001000)=@string={0x40, 0x3, "70b80b631849c3d634fb3c88ba2f10d3ed72b425558b35abbb9a22e38d776bd899aa0a2dfdf63b3c8e7d405060da2918c88623cb8cc726509675f9e6b42c"}}, {0x94, &(0x7f0000001040)=@string={0x94, 0x3, "fc7f29dc45ad503beed5d15c2addb3503d19d05d00e322b893abf1de564ad0d88335fb558807df12bd6e9a306c40b48edbd9f2e27e332dbd9e15b0059fb33ee471e5595bcd2afe645b78116406b2b02ea8280e39d64e9cff1b706d0a392133a60665822d30b6266f56d254877acc3472e88aed10f0eaa052fdba99f31569400740d256951c09713406357f4d944d3146f981"}}]}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x2, 0x168, &(0x7f0000001200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x156, 0x2, 0x1, 0x0, 0x0, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "c305f87bad"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0xfeff, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@country_functional={0x12, 0x24, 0x7, 0x81, 0x40, [0x4d, 0xd7ab, 0xd392, 0x2, 0x5, 0x0]}, @mdlm_detail={0xe3, 0x24, 0x13, 0x80, "0b727a849cc3ad297332bab6507f679187d82726284d236b5008bea9062e9402029cfd82eccccc1749fafc3e268d9bd43d0cb127fca1dbb61d71b452b7ab756cf8b69e71ae8ddcbac89a6cfd195acb6caed75f41b3d551b7b716fe94f738b354d5e82933860459b520ec922a1d35f42b5d6e948a015ef85f436f228f4f0c59464cc88bd09c2c0b214151d7063b245959f452528569a200c13f053b2fa88b9f377f5ff565c8e711a5874f25ec0eb483ad98b21267cbfb1b9fef8f89f5ae3d11b8235ee25019014379915f4f30d7bee99d015667b2c95738bda9f8a299bd7177"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x4, 0xe6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x51, 0x60, 0x9}}}}}}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x110, 0x3, 0x3, 0xc8, 0x18, 0x7}, 0x78, &(0x7f00000013c0)={0x5, 0xf, 0x78, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x7a14, 0x0, 0x7f, [0xff00c0, 0xf, 0xf, 0xc0, 0xff003f, 0x5f]}, @ss_container_id={0x14, 0x10, 0x4, 0xf6, "4b93f7453647023d22b05488ab77e16a"}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x4, 0xf, 0xff6e, [0xffc0c0, 0x0, 0x3f, 0xf, 0x50, 0xc03f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d81d0f092648bb70553542bf40176aa6"}]}, 0x7, [{0xd, &(0x7f0000001440)=@string={0xd, 0x3, "052e1e85feb87567168fa5"}}, {0x78, &(0x7f0000001480)=@string={0x78, 0x3, "0d90ef59f69fcc154a9a3a83db95d54dc9cc3370b4a4c66fc239e2c307ef87eea6af19ac12db5bb3091e57c2cc81c1ec9d1acca61b99093657de3f529120b457ba7cc3974604f26374ec5f6fd9fddf1a0ab8bea2aa72825f7858d86fb71c42d98cbd75b12c3a62a571d2acb1b2800abb518c79f8e496"}}, {0x41, &(0x7f0000001500)=@string={0x41, 0x3, "2716a21ecf5a0fa83bedf2f5cb77aa7de64b3f617734bddd99a9e6fb772ea3d0f5136738985df5b6938fd87f47bce5dfa95a8d70b2ff4dc85d69c6d2592ebb"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x41d}}, {0x50, &(0x7f00000015c0)=@string={0x50, 0x3, "d738beeff3770d34addced483484c16ddde99c6dbf3a8b47ce6661a5bb3f5611d183d3fbc2e02542b50b124b1accc4aacdfea2e27ce398b2167029ef9da5d1659669be8c586729e1815ae2bc3128"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x42d}}, {0x51, &(0x7f0000001680)=@string={0x51, 0x3, "ccfe0b6cbb48b796c7a54c5019e3e301793e4d50b1f887de5ca1d56f2b4be96cc2d4821f34240f773d1e571cb6864ebbfc898fc3f3fbd2d4766577ce79d2d9d5bfeda4753ece661798bebf4f92fce0"}}]}) fsetxattr$system_posix_acl(r3, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x64, 0x2) 15:34:21 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:34:21 executing program 3: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) geteuid() waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:34:21 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180)=0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) sched_rr_get_interval(r4, &(0x7f0000002380)) [ 207.309463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.319458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.344387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.361339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.373142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 15:34:21 executing program 0: r0 = geteuid() getresgid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {}, [{0x2, 0x3, r0}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x3}], {0x4, 0x1}, [{0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2, 0xee01}, {0x8, 0x7, r1}, {0x8, 0x3, 0xee01}], {0x10, 0x2}, {0x20, 0x4}}, 0x74, 0x3) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x3]) shmctl$SHM_UNLOCK(0x0, 0xc) getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) fork() shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000009c0)=""/4096) [ 207.387687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.407683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.409478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:34:22 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180)=0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) sched_rr_get_interval(r3, &(0x7f0000002380)) 15:34:22 executing program 0: r0 = geteuid() getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {}, [{0x2, 0x3, r0}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x3}], {0x4, 0x1}, [{0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2, 0xee01}, {0x8, 0x7, r2}, {0x8, 0x3, 0xee01}], {0x10, 0x2}, {0x20, 0x4}}, 0x74, 0x3) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x3]) shmctl$SHM_UNLOCK(0x0, 0xc) getresgid(&(0x7f00000001c0), &(0x7f0000000200)=0x0, &(0x7f0000000240)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000280)={{0x3, r0, r3, r0, r1, 0x4c, 0x57}, 0x0, 0x401, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x3}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000009c0)=""/4096) 15:34:22 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() migrate_pages(r3, 0x6, &(0x7f0000001740)=0xfff, &(0x7f0000001780)=0xfffffffffffffe01) syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180)=0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) sched_rr_get_interval(r4, &(0x7f0000002380)) 15:34:22 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mq_timedreceive(r0, &(0x7f0000000140)=""/192, 0xc0, 0x9, &(0x7f0000000200)={0x77359400}) r1 = dup(r0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x4, 0x10001}}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r5, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000d80)) 15:34:22 executing program 0: r0 = geteuid() getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {}, [{0x2, 0x3, r0}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x3}], {0x4, 0x1}, [{0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2, 0xee01}, {0x8, 0x7, r2}, {0x8, 0x3, 0xee01}], {0x10, 0x2}, {0x20, 0x4}}, 0x74, 0x3) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x3]) shmctl$SHM_UNLOCK(0x0, 0xc) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000280)={{0x3, r0, 0x0, r0, r1, 0x4c, 0x57}, 0x0, 0x401, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x3}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000009c0)=""/4096) 15:34:22 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180)=0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) sched_rr_get_interval(r3, &(0x7f0000002380)) 15:34:30 executing program 3: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:34:30 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mq_timedreceive(r0, &(0x7f0000000140)=""/192, 0xc0, 0x9, &(0x7f0000000200)={0x77359400}) dup(r0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000340)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r4, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000d80)) 15:34:30 executing program 0: r0 = geteuid() getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {}, [{0x2, 0x3, r0}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x3}], {0x4, 0x1}, [{0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2, 0xee01}, {0x8, 0x7, r2}, {0x8, 0x3, 0xee01}], {0x10, 0x2}, {0x20, 0x4}}, 0x74, 0x3) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000180)=[0x3]) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000280)={{0x3, r0, 0x0, r0, r1, 0x4c, 0x57}, 0x0, 0x401, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x3}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000009c0)=""/4096) 15:34:30 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() migrate_pages(r3, 0x6, &(0x7f0000001740)=0xfff, &(0x7f0000001780)=0xfffffffffffffe01) syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180)=0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) sched_rr_get_interval(r4, &(0x7f0000002380)) 15:34:30 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:34:30 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180)=0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) sched_rr_get_interval(r2, &(0x7f0000002380)) 15:34:30 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) r1 = syz_usb_connect$cdc_ecm(0x5, 0x6a, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0x5, 0x80, 0x16, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x7, 0x24, 0x6, 0x0, 0x0, "b44e"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x8000, 0x7, 0x1f}, [@mbim={0xc, 0x24, 0x1b, 0xc0, 0x8, 0xbe, 0x9, 0x4, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0xfffd, 0x6, 0x40}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0xe9, 0x8, 0x1f}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xf8, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x3f, 0x3b}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x8, 0xe9, 0x0, 0x10, 0xc5}, 0x90, &(0x7f0000000140)={0x5, 0xf, 0x90, 0x5, [@ptm_cap={0x3}, @generic={0x59, 0x10, 0x1, "8db30b0fb4a51aa2c629e620748741b59c16ee392922ac750dfa04af33709dde505c8f0fe48456f028969539f75bc660b37a2bb2290c3a31c9d14fcf0ddb7d389dc3f8b3489cc6e38fa26c46d3d1a78c9d7168172348"}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x7f, 0xf, 0x20, [0x1fe8130]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2f, 0xc1, 0xf5, 0x1f, 0x3f}, @ss_container_id={0x14, 0x10, 0x4, 0x20, "3e8d69095b656de1629ed966db0cfecf"}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x436}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000340)={0x14, &(0x7f0000000280)={0x40, 0x34, 0x59, {0x59, 0x22, "2c4060a23ff1cdca54a9f95b5d727c05e3bc0f4f2fe236abdfab899f43c32ee2a46913ea8d4436c3e96c8257eca53b979ab02ac171b80830f8e290bb9621f951a662fa88d6fc5d7af475b9053a4606487863eec58e63ac"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x1c, &(0x7f0000000380)={0x0, 0x0, 0x58, "73a798c879f2a87bc02cc09b27cc6941ba0511988a67ef3816e93ea9da4575e852b81468bfc546021a2a8295918df742aeadd4be4f4c1d7988d52403b9693ed64cba843b8444950c6e6a451264c3d9cb1979aca6b6af6183"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x41}}) syz_usb_connect$cdc_ecm(0x5, 0x14a, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x138, 0x1, 0x1, 0xc2, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0xe5, 0x2, 0x2, 0x6, 0x0, 0x5, {{0xa, 0x24, 0x6, 0x0, 0x0, "28ed18afee"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7fff, 0xff, 0x2}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x27}, @mbim={0xc, 0x24, 0x1b, 0x400, 0xa8df, 0x8, 0x1, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x59}, @mdlm_detail={0xce, 0x24, 0x13, 0x7, "21fd282f71b09f5d547028125ef2453290151510f6a7ba335585aa8a4a74b74df2b8634d597db0a12bd256f995d1d3dd6cc7a17dc21aff9ff38c497a35d8f09680b4a5ab9d86fb65b93347612b0c8306dca4e9d42e94e046b7f854f3b91479074448336f5b92de767d8ee473c000c00e26ded34ef618f903c5533743c719c9c1c277d60062ce03f2d07257bdb4ad59a1c1bb17101e27b3bba2b1b6f34cbfc26d1d6f544de144adb9d19dac3b3656e804a0539d8f2f1240156f2cad2b0b0b590fd7dbab89f4f004ce84f6"}, @ncm={0x6, 0x24, 0x1a, 0x2, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x1, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x6, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x1, 0x9}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x201, 0xcb, 0xcb, 0x9, 0x8, 0x5}, 0x20, &(0x7f0000000680)={0x5, 0xf, 0x20, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0xc, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x2, 0x6, 0x8}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x30, 0x5, 0x29f}]}, 0x1, [{0x23, &(0x7f00000006c0)=@string={0x23, 0x3, "edc7a1f6c91e28f262e010dadc8206c327a2ec66a330e1fa060f1c125af2d196ae"}}]}) syz_usb_connect$cdc_ecm(0x0, 0xd1, &(0x7f0000000740)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x1, 0x1, 0x6, 0xa0, 0xdc, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x2, {{0xb, 0x24, 0x6, 0x0, 0x0, "27f623777f34"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x0, 0x80}, [@country_functional={0xc, 0x24, 0x7, 0x81, 0x7, [0xce, 0x8000, 0x2]}, @mdlm_detail={0x61, 0x24, 0x13, 0x2, "0a8418713f5cbec56437b72cdb52a132bebbde97b998dc48c626825b86aa8e8f8455afe83d3f89a4b6b103b4e4f1bcc65b5e62efb5bb11f77bf3e783f1767fc5567f880b2a864500781b0b4d706fcad8f1cc44af0e5893a8704a260aa2"}, @country_functional={0x8, 0x24, 0x7, 0x1, 0x0, [0x0]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x1, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x7, 0x35}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x3f, 0x3}}}}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x250, 0x4, 0x3, 0x7a, 0x10, 0x1f}, 0xf2, &(0x7f0000000880)={0x5, 0xf, 0xf2, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x4, 0xcd, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x1, 0x6f, 0x9, 0x9}, @generic={0xd5, 0x10, 0x2, "26ba7f4824c7baf15fdc3e45a421a9e7ce37c736ececc2100f6109e0cdba8f5fd95412ed6c9a5eb1a592749671ed398b0af858daca6af7678aa1dfc673bfba585547197482a81525a76975e323db203dddf5bf0a7e06c918370cb34cb58cd6ce6a8503b49643aa66a4ef5984225fd36d723cd67ba2f84fa89d43bd1cabbe9b0de72aea70ecd2422b93e8321bb81401d4f1862dc8bcb3294676000974f3903819e969810c64e06db6bae850e1b1bc16e8a4ab7112a9714b73f7aee4438e87afbff18f1fcafc72037014a8b8f5ffc714d3f9c8"}]}, 0x6, [{0xd5, &(0x7f0000000980)=@string={0xd5, 0x3, "f209a8d1395010353a5c213a7e64b293d80d7d72e065cbfc86b7fb9c0385d80db3634e50e1e95c8ee34fc22124776215e02026d89bc3cb72527087491398e95ec087cd5ce2872b2dff407724f5b151fac73b3c5b8100794b3d700dabcab560853401181f2400728f3af23597636f20a86b3e86d182391a18bb45fcd4857a23080c2b5aec62e8329fc6e82045507f7ee423857c23168e7ea2131a945c473eb4f58caf92e36527b0003663c0df312edf6b87ed23b18db734221205e86c17d480049eb094a975d133258b68a5e74920975b5bcbbb"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x409}}, {0x79, &(0x7f0000000b40)=@string={0x79, 0x3, "263c78b920db49275509fa80254abb9adbfb4409ddf83f5050f21a51b2d7d92097354d3e7ba4a657e026b06068e308543ab479c5cdae6e2836cfa94b495f7236438ecbf80b947a98a2f820bb41befae8f96ce07c44af54743b1f99bde3a452403daa7d626252df9b9da5ede237d8ce3b8ee2075b654131"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x44b}}]}) pipe(&(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xc4, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0xa0}, 0x4000) write$binfmt_script(r0, &(0x7f0000000e80)={'#! ', './file0', [{0x20, 'ib\x00'}, {0x20, 'eth\x00'}, {0x20, 'ib\x00'}, {0x20, 'ib\x00'}, {0x20, '&[[}!.+['}, {0x20, '}\xa7'}], 0xa, "d0404eb214be830d57ca8287e74a57f02bc805d1d1b5572b255ba0216a04422dedad2f26a2fb69d101a8933837d18b60cbcf6700ffe438350654"}, 0x62) syz_usb_connect$cdc_ecm(0x6, 0x56, &(0x7f0000000f00)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0xbb, 0xc0, 0xc1, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x9, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x6, 0x9e09, 0x15}}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x80, 0x61, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xa4, 0x20, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x80, 0x80, 0xbb}}}}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x300, 0x8, 0x39, 0x4e, 0xff, 0xa4}, 0x23, &(0x7f0000000fc0)={0x5, 0xf, 0x23, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x22, 0x80, 0x7, 0x8001, 0x40}, @ssp_cap={0x10, 0x10, 0xa, 0x22, 0x1, 0x60, 0x0, 0x800, [0x30]}, @ptm_cap={0x3}]}, 0x2, [{0x40, &(0x7f0000001000)=@string={0x40, 0x3, "70b80b631849c3d634fb3c88ba2f10d3ed72b425558b35abbb9a22e38d776bd899aa0a2dfdf63b3c8e7d405060da2918c88623cb8cc726509675f9e6b42c"}}, {0x94, &(0x7f0000001040)=@string={0x94, 0x3, "fc7f29dc45ad503beed5d15c2addb3503d19d05d00e322b893abf1de564ad0d88335fb558807df12bd6e9a306c40b48edbd9f2e27e332dbd9e15b0059fb33ee471e5595bcd2afe645b78116406b2b02ea8280e39d64e9cff1b706d0a392133a60665822d30b6266f56d254877acc3472e88aed10f0eaa052fdba99f31569400740d256951c09713406357f4d944d3146f981"}}]}) pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x2, 0x168, &(0x7f0000001200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x156, 0x2, 0x1, 0x0, 0x0, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "c305f87bad"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0xfeff, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@country_functional={0x12, 0x24, 0x7, 0x81, 0x40, [0x4d, 0xd7ab, 0xd392, 0x2, 0x5, 0x0]}, @mdlm_detail={0xe3, 0x24, 0x13, 0x80, "0b727a849cc3ad297332bab6507f679187d82726284d236b5008bea9062e9402029cfd82eccccc1749fafc3e268d9bd43d0cb127fca1dbb61d71b452b7ab756cf8b69e71ae8ddcbac89a6cfd195acb6caed75f41b3d551b7b716fe94f738b354d5e82933860459b520ec922a1d35f42b5d6e948a015ef85f436f228f4f0c59464cc88bd09c2c0b214151d7063b245959f452528569a200c13f053b2fa88b9f377f5ff565c8e711a5874f25ec0eb483ad98b21267cbfb1b9fef8f89f5ae3d11b8235ee25019014379915f4f30d7bee99d015667b2c95738bda9f8a299bd7177"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x4, 0xe6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x51, 0x60, 0x9}}}}}}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x110, 0x3, 0x3, 0xc8, 0x18, 0x7}, 0x78, &(0x7f00000013c0)={0x5, 0xf, 0x78, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x7a14, 0x0, 0x7f, [0xff00c0, 0xf, 0xf, 0xc0, 0xff003f, 0x5f]}, @ss_container_id={0x14, 0x10, 0x4, 0xf6, "4b93f7453647023d22b05488ab77e16a"}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x4, 0xf, 0xff6e, [0xffc0c0, 0x0, 0x3f, 0xf, 0x50, 0xc03f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d81d0f092648bb70553542bf40176aa6"}]}, 0x7, [{0xd, &(0x7f0000001440)=@string={0xd, 0x3, "052e1e85feb87567168fa5"}}, {0x78, &(0x7f0000001480)=@string={0x78, 0x3, "0d90ef59f69fcc154a9a3a83db95d54dc9cc3370b4a4c66fc239e2c307ef87eea6af19ac12db5bb3091e57c2cc81c1ec9d1acca61b99093657de3f529120b457ba7cc3974604f26374ec5f6fd9fddf1a0ab8bea2aa72825f7858d86fb71c42d98cbd75b12c3a62a571d2acb1b2800abb518c79f8e496"}}, {0x41, &(0x7f0000001500)=@string={0x41, 0x3, "2716a21ecf5a0fa83bedf2f5cb77aa7de64b3f617734bddd99a9e6fb772ea3d0f5136738985df5b6938fd87f47bce5dfa95a8d70b2ff4dc85d69c6d2592ebb"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x41d}}, {0x50, &(0x7f00000015c0)=@string={0x50, 0x3, "d738beeff3770d34addced483484c16ddde99c6dbf3a8b47ce6661a5bb3f5611d183d3fbc2e02542b50b124b1accc4aacdfea2e27ce398b2167029ef9da5d1659669be8c586729e1815ae2bc3128"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x42d}}, {0x51, &(0x7f0000001680)=@string={0x51, 0x3, "ccfe0b6cbb48b796c7a54c5019e3e301793e4d50b1f887de5ca1d56f2b4be96cc2d4821f34240f773d1e571cb6864ebbfc898fc3f3fbd2d4766577ce79d2d9d5bfeda4753ece661798bebf4f92fce0"}}]}) fsetxattr$system_posix_acl(r3, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x64, 0x2) 15:34:30 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) [ 215.984211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.991422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.999970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.004425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.013518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.020420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:34:30 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180)=0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) sched_rr_get_interval(r2, &(0x7f0000002380)) [ 216.039791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.046431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:34:30 executing program 0: r0 = geteuid() getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {}, [{0x2, 0x3, r0}, {0x2, 0x0, 0xee01}, {0x2, 0x2, 0xffffffffffffffff}, {0x2, 0x1}, {0x2, 0x4}, {0x2, 0x3}], {0x4, 0x1}, [{0x8, 0x0, 0xffffffffffffffff}, {0x8, 0x2, 0xee01}, {0x8, 0x7, r2}, {0x8, 0x3, 0xee01}], {0x10, 0x2}, {0x20, 0x4}}, 0x74, 0x3) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000280)={{0x3, r0, 0x0, r0, r1, 0x4c, 0x57}, 0x0, 0x401, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x3}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000009c0)=""/4096) 15:34:30 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() migrate_pages(r3, 0x6, &(0x7f0000001740)=0xfff, &(0x7f0000001780)=0xfffffffffffffe01) syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:34:30 executing program 0: r0 = geteuid() getresgid(&(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0)) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000280)={{0x3, r0, 0x0, r0, r1, 0x4c, 0x57}, 0x0, 0x401, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x3}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000009c0)=""/4096) 15:34:30 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mq_timedreceive(r0, &(0x7f0000000140)=""/192, 0xc0, 0x9, &(0x7f0000000200)={0x77359400}) dup(r0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000d80)) 15:34:30 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180)=0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) sched_rr_get_interval(r2, &(0x7f0000002380)) 15:34:30 executing program 0: r0 = geteuid() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000280)={{0x3, r0, 0x0, r0, 0x0, 0x4c, 0x57}, 0x0, 0x401, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x3}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000009c0)=""/4096) 15:34:39 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) 15:34:39 executing program 0: shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x57}, 0x0, 0x401, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x3}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000009c0)=""/4096) 15:34:39 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) 15:34:39 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180)=0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) sched_rr_get_interval(r0, &(0x7f0000002380)) 15:34:39 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() migrate_pages(r3, 0x6, &(0x7f0000001740)=0xfff, &(0x7f0000001780)=0xfffffffffffffe01) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:34:39 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mq_timedreceive(r0, &(0x7f0000000140)=""/192, 0xc0, 0x9, &(0x7f0000000200)={0x77359400}) dup(r0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000d80)) 15:34:39 executing program 3: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:34:39 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) r1 = syz_usb_connect$cdc_ecm(0x5, 0x6a, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0x5, 0x80, 0x16, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x7, 0x24, 0x6, 0x0, 0x0, "b44e"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x8000, 0x7, 0x1f}, [@mbim={0xc, 0x24, 0x1b, 0xc0, 0x8, 0xbe, 0x9, 0x4, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0xfffd, 0x6, 0x40}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0xe9, 0x8, 0x1f}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xf8, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x3f, 0x3b}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x8, 0xe9, 0x0, 0x10, 0xc5}, 0x90, &(0x7f0000000140)={0x5, 0xf, 0x90, 0x5, [@ptm_cap={0x3}, @generic={0x59, 0x10, 0x1, "8db30b0fb4a51aa2c629e620748741b59c16ee392922ac750dfa04af33709dde505c8f0fe48456f028969539f75bc660b37a2bb2290c3a31c9d14fcf0ddb7d389dc3f8b3489cc6e38fa26c46d3d1a78c9d7168172348"}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x7f, 0xf, 0x20, [0x1fe8130]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2f, 0xc1, 0xf5, 0x1f, 0x3f}, @ss_container_id={0x14, 0x10, 0x4, 0x20, "3e8d69095b656de1629ed966db0cfecf"}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x436}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000340)={0x14, &(0x7f0000000280)={0x40, 0x34, 0x59, {0x59, 0x22, "2c4060a23ff1cdca54a9f95b5d727c05e3bc0f4f2fe236abdfab899f43c32ee2a46913ea8d4436c3e96c8257eca53b979ab02ac171b80830f8e290bb9621f951a662fa88d6fc5d7af475b9053a4606487863eec58e63ac"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x1c, &(0x7f0000000380)={0x0, 0x0, 0x58, "73a798c879f2a87bc02cc09b27cc6941ba0511988a67ef3816e93ea9da4575e852b81468bfc546021a2a8295918df742aeadd4be4f4c1d7988d52403b9693ed64cba843b8444950c6e6a451264c3d9cb1979aca6b6af6183"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x41}}) syz_usb_connect$cdc_ecm(0x5, 0x14a, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x138, 0x1, 0x1, 0xc2, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0xe5, 0x2, 0x2, 0x6, 0x0, 0x5, {{0xa, 0x24, 0x6, 0x0, 0x0, "28ed18afee"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7fff, 0xff, 0x2}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x27}, @mbim={0xc, 0x24, 0x1b, 0x400, 0xa8df, 0x8, 0x1, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x59}, @mdlm_detail={0xce, 0x24, 0x13, 0x7, "21fd282f71b09f5d547028125ef2453290151510f6a7ba335585aa8a4a74b74df2b8634d597db0a12bd256f995d1d3dd6cc7a17dc21aff9ff38c497a35d8f09680b4a5ab9d86fb65b93347612b0c8306dca4e9d42e94e046b7f854f3b91479074448336f5b92de767d8ee473c000c00e26ded34ef618f903c5533743c719c9c1c277d60062ce03f2d07257bdb4ad59a1c1bb17101e27b3bba2b1b6f34cbfc26d1d6f544de144adb9d19dac3b3656e804a0539d8f2f1240156f2cad2b0b0b590fd7dbab89f4f004ce84f6"}, @ncm={0x6, 0x24, 0x1a, 0x2, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x1, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x6, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x1, 0x9}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x201, 0xcb, 0xcb, 0x9, 0x8, 0x5}, 0x20, &(0x7f0000000680)={0x5, 0xf, 0x20, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0xc, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x2, 0x6, 0x8}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x30, 0x5, 0x29f}]}, 0x1, [{0x23, &(0x7f00000006c0)=@string={0x23, 0x3, "edc7a1f6c91e28f262e010dadc8206c327a2ec66a330e1fa060f1c125af2d196ae"}}]}) syz_usb_connect$cdc_ecm(0x0, 0xd1, &(0x7f0000000740)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x1, 0x1, 0x6, 0xa0, 0xdc, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x2, {{0xb, 0x24, 0x6, 0x0, 0x0, "27f623777f34"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x0, 0x80}, [@country_functional={0xc, 0x24, 0x7, 0x81, 0x7, [0xce, 0x8000, 0x2]}, @mdlm_detail={0x61, 0x24, 0x13, 0x2, "0a8418713f5cbec56437b72cdb52a132bebbde97b998dc48c626825b86aa8e8f8455afe83d3f89a4b6b103b4e4f1bcc65b5e62efb5bb11f77bf3e783f1767fc5567f880b2a864500781b0b4d706fcad8f1cc44af0e5893a8704a260aa2"}, @country_functional={0x8, 0x24, 0x7, 0x1, 0x0, [0x0]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x1, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x7, 0x35}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x3f, 0x3}}}}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x250, 0x4, 0x3, 0x7a, 0x10, 0x1f}, 0xf2, &(0x7f0000000880)={0x5, 0xf, 0xf2, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x4, 0xcd, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x1, 0x6f, 0x9, 0x9}, @generic={0xd5, 0x10, 0x2, "26ba7f4824c7baf15fdc3e45a421a9e7ce37c736ececc2100f6109e0cdba8f5fd95412ed6c9a5eb1a592749671ed398b0af858daca6af7678aa1dfc673bfba585547197482a81525a76975e323db203dddf5bf0a7e06c918370cb34cb58cd6ce6a8503b49643aa66a4ef5984225fd36d723cd67ba2f84fa89d43bd1cabbe9b0de72aea70ecd2422b93e8321bb81401d4f1862dc8bcb3294676000974f3903819e969810c64e06db6bae850e1b1bc16e8a4ab7112a9714b73f7aee4438e87afbff18f1fcafc72037014a8b8f5ffc714d3f9c8"}]}, 0x6, [{0xd5, &(0x7f0000000980)=@string={0xd5, 0x3, "f209a8d1395010353a5c213a7e64b293d80d7d72e065cbfc86b7fb9c0385d80db3634e50e1e95c8ee34fc22124776215e02026d89bc3cb72527087491398e95ec087cd5ce2872b2dff407724f5b151fac73b3c5b8100794b3d700dabcab560853401181f2400728f3af23597636f20a86b3e86d182391a18bb45fcd4857a23080c2b5aec62e8329fc6e82045507f7ee423857c23168e7ea2131a945c473eb4f58caf92e36527b0003663c0df312edf6b87ed23b18db734221205e86c17d480049eb094a975d133258b68a5e74920975b5bcbbb"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x409}}, {0x79, &(0x7f0000000b40)=@string={0x79, 0x3, "263c78b920db49275509fa80254abb9adbfb4409ddf83f5050f21a51b2d7d92097354d3e7ba4a657e026b06068e308543ab479c5cdae6e2836cfa94b495f7236438ecbf80b947a98a2f820bb41befae8f96ce07c44af54743b1f99bde3a452403daa7d626252df9b9da5ede237d8ce3b8ee2075b654131"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x44b}}]}) pipe(&(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xc4, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0xa0}, 0x4000) write$binfmt_script(r0, &(0x7f0000000e80)={'#! ', './file0', [{0x20, 'ib\x00'}, {0x20, 'eth\x00'}, {0x20, 'ib\x00'}, {0x20, 'ib\x00'}, {0x20, '&[[}!.+['}, {0x20, '}\xa7'}], 0xa, "d0404eb214be830d57ca8287e74a57f02bc805d1d1b5572b255ba0216a04422dedad2f26a2fb69d101a8933837d18b60cbcf6700ffe438350654"}, 0x62) pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x2, 0x168, &(0x7f0000001200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x156, 0x2, 0x1, 0x0, 0x0, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "c305f87bad"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0xfeff, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@country_functional={0x12, 0x24, 0x7, 0x81, 0x40, [0x4d, 0xd7ab, 0xd392, 0x2, 0x5, 0x0]}, @mdlm_detail={0xe3, 0x24, 0x13, 0x80, "0b727a849cc3ad297332bab6507f679187d82726284d236b5008bea9062e9402029cfd82eccccc1749fafc3e268d9bd43d0cb127fca1dbb61d71b452b7ab756cf8b69e71ae8ddcbac89a6cfd195acb6caed75f41b3d551b7b716fe94f738b354d5e82933860459b520ec922a1d35f42b5d6e948a015ef85f436f228f4f0c59464cc88bd09c2c0b214151d7063b245959f452528569a200c13f053b2fa88b9f377f5ff565c8e711a5874f25ec0eb483ad98b21267cbfb1b9fef8f89f5ae3d11b8235ee25019014379915f4f30d7bee99d015667b2c95738bda9f8a299bd7177"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x4, 0xe6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x51, 0x60, 0x9}}}}}}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x110, 0x3, 0x3, 0xc8, 0x18, 0x7}, 0x78, &(0x7f00000013c0)={0x5, 0xf, 0x78, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x7a14, 0x0, 0x7f, [0xff00c0, 0xf, 0xf, 0xc0, 0xff003f, 0x5f]}, @ss_container_id={0x14, 0x10, 0x4, 0xf6, "4b93f7453647023d22b05488ab77e16a"}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x4, 0xf, 0xff6e, [0xffc0c0, 0x0, 0x3f, 0xf, 0x50, 0xc03f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d81d0f092648bb70553542bf40176aa6"}]}, 0x7, [{0xd, &(0x7f0000001440)=@string={0xd, 0x3, "052e1e85feb87567168fa5"}}, {0x78, &(0x7f0000001480)=@string={0x78, 0x3, "0d90ef59f69fcc154a9a3a83db95d54dc9cc3370b4a4c66fc239e2c307ef87eea6af19ac12db5bb3091e57c2cc81c1ec9d1acca61b99093657de3f529120b457ba7cc3974604f26374ec5f6fd9fddf1a0ab8bea2aa72825f7858d86fb71c42d98cbd75b12c3a62a571d2acb1b2800abb518c79f8e496"}}, {0x41, &(0x7f0000001500)=@string={0x41, 0x3, "2716a21ecf5a0fa83bedf2f5cb77aa7de64b3f617734bddd99a9e6fb772ea3d0f5136738985df5b6938fd87f47bce5dfa95a8d70b2ff4dc85d69c6d2592ebb"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x41d}}, {0x50, &(0x7f00000015c0)=@string={0x50, 0x3, "d738beeff3770d34addced483484c16ddde99c6dbf3a8b47ce6661a5bb3f5611d183d3fbc2e02542b50b124b1accc4aacdfea2e27ce398b2167029ef9da5d1659669be8c586729e1815ae2bc3128"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x42d}}, {0x51, &(0x7f0000001680)=@string={0x51, 0x3, "ccfe0b6cbb48b796c7a54c5019e3e301793e4d50b1f887de5ca1d56f2b4be96cc2d4821f34240f773d1e571cb6864ebbfc898fc3f3fbd2d4766577ce79d2d9d5bfeda4753ece661798bebf4f92fce0"}}]}) fsetxattr$system_posix_acl(r3, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x64, 0x2) [ 225.015377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.024885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.032318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.039371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.046484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.058398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.075688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 15:34:39 executing program 0: shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000009c0)=""/4096) [ 225.087386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:34:39 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) 15:34:39 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) 15:34:39 executing program 2: clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180)=0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) sched_rr_get_interval(r0, &(0x7f0000002380)) 15:34:39 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) 15:34:39 executing program 0: shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000009c0)=""/4096) 15:34:39 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) 15:34:39 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() migrate_pages(r3, 0x6, &(0x7f0000001740)=0xfff, &(0x7f0000001780)=0xfffffffffffffe01) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:34:39 executing program 2: clone3(0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000002380)) 15:34:39 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mq_timedreceive(r0, &(0x7f0000000140)=""/192, 0xc0, 0x9, &(0x7f0000000200)={0x77359400}) dup(r0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000d80)) 15:34:39 executing program 0: shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000009c0)=""/4096) 15:34:39 executing program 2: clone3(0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000002380)) 15:34:39 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:34:39 executing program 0: shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000280)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}, 0x0, 0x401, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x3}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000009c0)=""/4096) 15:34:49 executing program 2: clone3(0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000002380)) 15:34:49 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() migrate_pages(r3, 0x6, &(0x7f0000001740)=0xfff, &(0x7f0000001780)=0xfffffffffffffe01) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:34:49 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:34:49 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:34:49 executing program 3: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') geteuid() waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:34:49 executing program 0: shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000280)={{0x3}, 0x0, 0x401, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x3}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000009c0)=""/4096) 15:34:49 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mq_timedreceive(r0, &(0x7f0000000140)=""/192, 0xc0, 0x9, &(0x7f0000000200)={0x77359400}) dup(r0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000d80)) 15:34:49 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) r1 = syz_usb_connect$cdc_ecm(0x5, 0x6a, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0x5, 0x80, 0x16, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x7, 0x24, 0x6, 0x0, 0x0, "b44e"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x8000, 0x7, 0x1f}, [@mbim={0xc, 0x24, 0x1b, 0xc0, 0x8, 0xbe, 0x9, 0x4, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0xfffd, 0x6, 0x40}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0xe9, 0x8, 0x1f}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xf8, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x3f, 0x3b}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x8, 0xe9, 0x0, 0x10, 0xc5}, 0x90, &(0x7f0000000140)={0x5, 0xf, 0x90, 0x5, [@ptm_cap={0x3}, @generic={0x59, 0x10, 0x1, "8db30b0fb4a51aa2c629e620748741b59c16ee392922ac750dfa04af33709dde505c8f0fe48456f028969539f75bc660b37a2bb2290c3a31c9d14fcf0ddb7d389dc3f8b3489cc6e38fa26c46d3d1a78c9d7168172348"}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x7f, 0xf, 0x20, [0x1fe8130]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2f, 0xc1, 0xf5, 0x1f, 0x3f}, @ss_container_id={0x14, 0x10, 0x4, 0x20, "3e8d69095b656de1629ed966db0cfecf"}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x436}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000340)={0x14, &(0x7f0000000280)={0x40, 0x34, 0x59, {0x59, 0x22, "2c4060a23ff1cdca54a9f95b5d727c05e3bc0f4f2fe236abdfab899f43c32ee2a46913ea8d4436c3e96c8257eca53b979ab02ac171b80830f8e290bb9621f951a662fa88d6fc5d7af475b9053a4606487863eec58e63ac"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x1c, &(0x7f0000000380)={0x0, 0x0, 0x58, "73a798c879f2a87bc02cc09b27cc6941ba0511988a67ef3816e93ea9da4575e852b81468bfc546021a2a8295918df742aeadd4be4f4c1d7988d52403b9693ed64cba843b8444950c6e6a451264c3d9cb1979aca6b6af6183"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x41}}) syz_usb_connect$cdc_ecm(0x5, 0x14a, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x138, 0x1, 0x1, 0xc2, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0xe5, 0x2, 0x2, 0x6, 0x0, 0x5, {{0xa, 0x24, 0x6, 0x0, 0x0, "28ed18afee"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7fff, 0xff, 0x2}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x27}, @mbim={0xc, 0x24, 0x1b, 0x400, 0xa8df, 0x8, 0x1, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x59}, @mdlm_detail={0xce, 0x24, 0x13, 0x7, "21fd282f71b09f5d547028125ef2453290151510f6a7ba335585aa8a4a74b74df2b8634d597db0a12bd256f995d1d3dd6cc7a17dc21aff9ff38c497a35d8f09680b4a5ab9d86fb65b93347612b0c8306dca4e9d42e94e046b7f854f3b91479074448336f5b92de767d8ee473c000c00e26ded34ef618f903c5533743c719c9c1c277d60062ce03f2d07257bdb4ad59a1c1bb17101e27b3bba2b1b6f34cbfc26d1d6f544de144adb9d19dac3b3656e804a0539d8f2f1240156f2cad2b0b0b590fd7dbab89f4f004ce84f6"}, @ncm={0x6, 0x24, 0x1a, 0x2, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x1, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x6, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x1, 0x9}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x201, 0xcb, 0xcb, 0x9, 0x8, 0x5}, 0x20, &(0x7f0000000680)={0x5, 0xf, 0x20, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0xc, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x2, 0x6, 0x8}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x30, 0x5, 0x29f}]}, 0x1, [{0x23, &(0x7f00000006c0)=@string={0x23, 0x3, "edc7a1f6c91e28f262e010dadc8206c327a2ec66a330e1fa060f1c125af2d196ae"}}]}) syz_usb_connect$cdc_ecm(0x0, 0xd1, &(0x7f0000000740)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x1, 0x1, 0x6, 0xa0, 0xdc, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x2, {{0xb, 0x24, 0x6, 0x0, 0x0, "27f623777f34"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x0, 0x80}, [@country_functional={0xc, 0x24, 0x7, 0x81, 0x7, [0xce, 0x8000, 0x2]}, @mdlm_detail={0x61, 0x24, 0x13, 0x2, "0a8418713f5cbec56437b72cdb52a132bebbde97b998dc48c626825b86aa8e8f8455afe83d3f89a4b6b103b4e4f1bcc65b5e62efb5bb11f77bf3e783f1767fc5567f880b2a864500781b0b4d706fcad8f1cc44af0e5893a8704a260aa2"}, @country_functional={0x8, 0x24, 0x7, 0x1, 0x0, [0x0]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x1, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x7, 0x35}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x3f, 0x3}}}}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x250, 0x4, 0x3, 0x7a, 0x10, 0x1f}, 0xf2, &(0x7f0000000880)={0x5, 0xf, 0xf2, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x4, 0xcd, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x1, 0x6f, 0x9, 0x9}, @generic={0xd5, 0x10, 0x2, "26ba7f4824c7baf15fdc3e45a421a9e7ce37c736ececc2100f6109e0cdba8f5fd95412ed6c9a5eb1a592749671ed398b0af858daca6af7678aa1dfc673bfba585547197482a81525a76975e323db203dddf5bf0a7e06c918370cb34cb58cd6ce6a8503b49643aa66a4ef5984225fd36d723cd67ba2f84fa89d43bd1cabbe9b0de72aea70ecd2422b93e8321bb81401d4f1862dc8bcb3294676000974f3903819e969810c64e06db6bae850e1b1bc16e8a4ab7112a9714b73f7aee4438e87afbff18f1fcafc72037014a8b8f5ffc714d3f9c8"}]}, 0x6, [{0xd5, &(0x7f0000000980)=@string={0xd5, 0x3, "f209a8d1395010353a5c213a7e64b293d80d7d72e065cbfc86b7fb9c0385d80db3634e50e1e95c8ee34fc22124776215e02026d89bc3cb72527087491398e95ec087cd5ce2872b2dff407724f5b151fac73b3c5b8100794b3d700dabcab560853401181f2400728f3af23597636f20a86b3e86d182391a18bb45fcd4857a23080c2b5aec62e8329fc6e82045507f7ee423857c23168e7ea2131a945c473eb4f58caf92e36527b0003663c0df312edf6b87ed23b18db734221205e86c17d480049eb094a975d133258b68a5e74920975b5bcbbb"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x409}}, {0x79, &(0x7f0000000b40)=@string={0x79, 0x3, "263c78b920db49275509fa80254abb9adbfb4409ddf83f5050f21a51b2d7d92097354d3e7ba4a657e026b06068e308543ab479c5cdae6e2836cfa94b495f7236438ecbf80b947a98a2f820bb41befae8f96ce07c44af54743b1f99bde3a452403daa7d626252df9b9da5ede237d8ce3b8ee2075b654131"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x44b}}]}) pipe(&(0x7f0000000c80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xc4, 0x0, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0xa4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0xa0}, 0x4000) pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x2, 0x168, &(0x7f0000001200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x156, 0x2, 0x1, 0x0, 0x0, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "c305f87bad"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0xfeff, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@country_functional={0x12, 0x24, 0x7, 0x81, 0x40, [0x4d, 0xd7ab, 0xd392, 0x2, 0x5, 0x0]}, @mdlm_detail={0xe3, 0x24, 0x13, 0x80, "0b727a849cc3ad297332bab6507f679187d82726284d236b5008bea9062e9402029cfd82eccccc1749fafc3e268d9bd43d0cb127fca1dbb61d71b452b7ab756cf8b69e71ae8ddcbac89a6cfd195acb6caed75f41b3d551b7b716fe94f738b354d5e82933860459b520ec922a1d35f42b5d6e948a015ef85f436f228f4f0c59464cc88bd09c2c0b214151d7063b245959f452528569a200c13f053b2fa88b9f377f5ff565c8e711a5874f25ec0eb483ad98b21267cbfb1b9fef8f89f5ae3d11b8235ee25019014379915f4f30d7bee99d015667b2c95738bda9f8a299bd7177"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x4, 0xe6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x51, 0x60, 0x9}}}}}}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x110, 0x3, 0x3, 0xc8, 0x18, 0x7}, 0x78, &(0x7f00000013c0)={0x5, 0xf, 0x78, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x7a14, 0x0, 0x7f, [0xff00c0, 0xf, 0xf, 0xc0, 0xff003f, 0x5f]}, @ss_container_id={0x14, 0x10, 0x4, 0xf6, "4b93f7453647023d22b05488ab77e16a"}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x4, 0xf, 0xff6e, [0xffc0c0, 0x0, 0x3f, 0xf, 0x50, 0xc03f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d81d0f092648bb70553542bf40176aa6"}]}, 0x7, [{0xd, &(0x7f0000001440)=@string={0xd, 0x3, "052e1e85feb87567168fa5"}}, {0x78, &(0x7f0000001480)=@string={0x78, 0x3, "0d90ef59f69fcc154a9a3a83db95d54dc9cc3370b4a4c66fc239e2c307ef87eea6af19ac12db5bb3091e57c2cc81c1ec9d1acca61b99093657de3f529120b457ba7cc3974604f26374ec5f6fd9fddf1a0ab8bea2aa72825f7858d86fb71c42d98cbd75b12c3a62a571d2acb1b2800abb518c79f8e496"}}, {0x41, &(0x7f0000001500)=@string={0x41, 0x3, "2716a21ecf5a0fa83bedf2f5cb77aa7de64b3f617734bddd99a9e6fb772ea3d0f5136738985df5b6938fd87f47bce5dfa95a8d70b2ff4dc85d69c6d2592ebb"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x41d}}, {0x50, &(0x7f00000015c0)=@string={0x50, 0x3, "d738beeff3770d34addced483484c16ddde99c6dbf3a8b47ce6661a5bb3f5611d183d3fbc2e02542b50b124b1accc4aacdfea2e27ce398b2167029ef9da5d1659669be8c586729e1815ae2bc3128"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x42d}}, {0x51, &(0x7f0000001680)=@string={0x51, 0x3, "ccfe0b6cbb48b796c7a54c5019e3e301793e4d50b1f887de5ca1d56f2b4be96cc2d4821f34240f773d1e571cb6864ebbfc898fc3f3fbd2d4766577ce79d2d9d5bfeda4753ece661798bebf4f92fce0"}}]}) fsetxattr$system_posix_acl(r3, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x64, 0x2) 15:34:49 executing program 0: shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000280)={{0x3}, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x3}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000009c0)=""/4096) [ 234.892218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 15:34:49 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) [ 234.914169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.923077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.934022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:34:49 executing program 2: clone3(&(0x7f0000002300)={0x0, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180)=0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) sched_rr_get_interval(r0, &(0x7f0000002380)) [ 234.936735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.937684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:34:49 executing program 0: shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000280)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000009c0)=""/4096) [ 234.970246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.981004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:34:49 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mq_timedreceive(r0, &(0x7f0000000140)=""/192, 0xc0, 0x9, &(0x7f0000000200)={0x77359400}) dup(r0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000d80)) 15:34:59 executing program 3: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:34:59 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:34:59 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:34:59 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mq_timedreceive(r0, &(0x7f0000000140)=""/192, 0xc0, 0x9, &(0x7f0000000200)={0x77359400}) dup(r0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000d80)) 15:34:59 executing program 0: shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000280)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000009c0)=""/4096) 15:34:59 executing program 2: clone3(&(0x7f0000002300)={0x0, 0x0, &(0x7f0000002140), &(0x7f0000002180)=0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) sched_rr_get_interval(r0, &(0x7f0000002380)) 15:34:59 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) r1 = syz_usb_connect$cdc_ecm(0x5, 0x6a, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0x5, 0x80, 0x16, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x7, 0x24, 0x6, 0x0, 0x0, "b44e"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x8000, 0x7, 0x1f}, [@mbim={0xc, 0x24, 0x1b, 0xc0, 0x8, 0xbe, 0x9, 0x4, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0xfffd, 0x6, 0x40}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0xe9, 0x8, 0x1f}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xf8, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x3f, 0x3b}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x8, 0xe9, 0x0, 0x10, 0xc5}, 0x90, &(0x7f0000000140)={0x5, 0xf, 0x90, 0x5, [@ptm_cap={0x3}, @generic={0x59, 0x10, 0x1, "8db30b0fb4a51aa2c629e620748741b59c16ee392922ac750dfa04af33709dde505c8f0fe48456f028969539f75bc660b37a2bb2290c3a31c9d14fcf0ddb7d389dc3f8b3489cc6e38fa26c46d3d1a78c9d7168172348"}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x7f, 0xf, 0x20, [0x1fe8130]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2f, 0xc1, 0xf5, 0x1f, 0x3f}, @ss_container_id={0x14, 0x10, 0x4, 0x20, "3e8d69095b656de1629ed966db0cfecf"}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x436}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000340)={0x14, &(0x7f0000000280)={0x40, 0x34, 0x59, {0x59, 0x22, "2c4060a23ff1cdca54a9f95b5d727c05e3bc0f4f2fe236abdfab899f43c32ee2a46913ea8d4436c3e96c8257eca53b979ab02ac171b80830f8e290bb9621f951a662fa88d6fc5d7af475b9053a4606487863eec58e63ac"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x1c, &(0x7f0000000380)={0x0, 0x0, 0x58, "73a798c879f2a87bc02cc09b27cc6941ba0511988a67ef3816e93ea9da4575e852b81468bfc546021a2a8295918df742aeadd4be4f4c1d7988d52403b9693ed64cba843b8444950c6e6a451264c3d9cb1979aca6b6af6183"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x41}}) syz_usb_connect$cdc_ecm(0x5, 0x14a, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x138, 0x1, 0x1, 0xc2, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0xe5, 0x2, 0x2, 0x6, 0x0, 0x5, {{0xa, 0x24, 0x6, 0x0, 0x0, "28ed18afee"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7fff, 0xff, 0x2}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x27}, @mbim={0xc, 0x24, 0x1b, 0x400, 0xa8df, 0x8, 0x1, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x59}, @mdlm_detail={0xce, 0x24, 0x13, 0x7, "21fd282f71b09f5d547028125ef2453290151510f6a7ba335585aa8a4a74b74df2b8634d597db0a12bd256f995d1d3dd6cc7a17dc21aff9ff38c497a35d8f09680b4a5ab9d86fb65b93347612b0c8306dca4e9d42e94e046b7f854f3b91479074448336f5b92de767d8ee473c000c00e26ded34ef618f903c5533743c719c9c1c277d60062ce03f2d07257bdb4ad59a1c1bb17101e27b3bba2b1b6f34cbfc26d1d6f544de144adb9d19dac3b3656e804a0539d8f2f1240156f2cad2b0b0b590fd7dbab89f4f004ce84f6"}, @ncm={0x6, 0x24, 0x1a, 0x2, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x1, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x6, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x1, 0x9}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x201, 0xcb, 0xcb, 0x9, 0x8, 0x5}, 0x20, &(0x7f0000000680)={0x5, 0xf, 0x20, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0xc, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x2, 0x6, 0x8}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x30, 0x5, 0x29f}]}, 0x1, [{0x23, &(0x7f00000006c0)=@string={0x23, 0x3, "edc7a1f6c91e28f262e010dadc8206c327a2ec66a330e1fa060f1c125af2d196ae"}}]}) syz_usb_connect$cdc_ecm(0x0, 0xd1, &(0x7f0000000740)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x1, 0x1, 0x6, 0xa0, 0xdc, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x2, {{0xb, 0x24, 0x6, 0x0, 0x0, "27f623777f34"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x0, 0x80}, [@country_functional={0xc, 0x24, 0x7, 0x81, 0x7, [0xce, 0x8000, 0x2]}, @mdlm_detail={0x61, 0x24, 0x13, 0x2, "0a8418713f5cbec56437b72cdb52a132bebbde97b998dc48c626825b86aa8e8f8455afe83d3f89a4b6b103b4e4f1bcc65b5e62efb5bb11f77bf3e783f1767fc5567f880b2a864500781b0b4d706fcad8f1cc44af0e5893a8704a260aa2"}, @country_functional={0x8, 0x24, 0x7, 0x1, 0x0, [0x0]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x1, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x7, 0x35}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x3f, 0x3}}}}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x250, 0x4, 0x3, 0x7a, 0x10, 0x1f}, 0xf2, &(0x7f0000000880)={0x5, 0xf, 0xf2, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x4, 0xcd, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x1, 0x6f, 0x9, 0x9}, @generic={0xd5, 0x10, 0x2, "26ba7f4824c7baf15fdc3e45a421a9e7ce37c736ececc2100f6109e0cdba8f5fd95412ed6c9a5eb1a592749671ed398b0af858daca6af7678aa1dfc673bfba585547197482a81525a76975e323db203dddf5bf0a7e06c918370cb34cb58cd6ce6a8503b49643aa66a4ef5984225fd36d723cd67ba2f84fa89d43bd1cabbe9b0de72aea70ecd2422b93e8321bb81401d4f1862dc8bcb3294676000974f3903819e969810c64e06db6bae850e1b1bc16e8a4ab7112a9714b73f7aee4438e87afbff18f1fcafc72037014a8b8f5ffc714d3f9c8"}]}, 0x6, [{0xd5, &(0x7f0000000980)=@string={0xd5, 0x3, "f209a8d1395010353a5c213a7e64b293d80d7d72e065cbfc86b7fb9c0385d80db3634e50e1e95c8ee34fc22124776215e02026d89bc3cb72527087491398e95ec087cd5ce2872b2dff407724f5b151fac73b3c5b8100794b3d700dabcab560853401181f2400728f3af23597636f20a86b3e86d182391a18bb45fcd4857a23080c2b5aec62e8329fc6e82045507f7ee423857c23168e7ea2131a945c473eb4f58caf92e36527b0003663c0df312edf6b87ed23b18db734221205e86c17d480049eb094a975d133258b68a5e74920975b5bcbbb"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x409}}, {0x79, &(0x7f0000000b40)=@string={0x79, 0x3, "263c78b920db49275509fa80254abb9adbfb4409ddf83f5050f21a51b2d7d92097354d3e7ba4a657e026b06068e308543ab479c5cdae6e2836cfa94b495f7236438ecbf80b947a98a2f820bb41befae8f96ce07c44af54743b1f99bde3a452403daa7d626252df9b9da5ede237d8ce3b8ee2075b654131"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x44b}}]}) pipe(&(0x7f0000000c80)) pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x2, 0x168, &(0x7f0000001200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x156, 0x2, 0x1, 0x0, 0x0, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "c305f87bad"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0xfeff, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@country_functional={0x12, 0x24, 0x7, 0x81, 0x40, [0x4d, 0xd7ab, 0xd392, 0x2, 0x5, 0x0]}, @mdlm_detail={0xe3, 0x24, 0x13, 0x80, "0b727a849cc3ad297332bab6507f679187d82726284d236b5008bea9062e9402029cfd82eccccc1749fafc3e268d9bd43d0cb127fca1dbb61d71b452b7ab756cf8b69e71ae8ddcbac89a6cfd195acb6caed75f41b3d551b7b716fe94f738b354d5e82933860459b520ec922a1d35f42b5d6e948a015ef85f436f228f4f0c59464cc88bd09c2c0b214151d7063b245959f452528569a200c13f053b2fa88b9f377f5ff565c8e711a5874f25ec0eb483ad98b21267cbfb1b9fef8f89f5ae3d11b8235ee25019014379915f4f30d7bee99d015667b2c95738bda9f8a299bd7177"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x4, 0xe6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x51, 0x60, 0x9}}}}}}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x110, 0x3, 0x3, 0xc8, 0x18, 0x7}, 0x78, &(0x7f00000013c0)={0x5, 0xf, 0x78, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x7a14, 0x0, 0x7f, [0xff00c0, 0xf, 0xf, 0xc0, 0xff003f, 0x5f]}, @ss_container_id={0x14, 0x10, 0x4, 0xf6, "4b93f7453647023d22b05488ab77e16a"}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x4, 0xf, 0xff6e, [0xffc0c0, 0x0, 0x3f, 0xf, 0x50, 0xc03f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d81d0f092648bb70553542bf40176aa6"}]}, 0x7, [{0xd, &(0x7f0000001440)=@string={0xd, 0x3, "052e1e85feb87567168fa5"}}, {0x78, &(0x7f0000001480)=@string={0x78, 0x3, "0d90ef59f69fcc154a9a3a83db95d54dc9cc3370b4a4c66fc239e2c307ef87eea6af19ac12db5bb3091e57c2cc81c1ec9d1acca61b99093657de3f529120b457ba7cc3974604f26374ec5f6fd9fddf1a0ab8bea2aa72825f7858d86fb71c42d98cbd75b12c3a62a571d2acb1b2800abb518c79f8e496"}}, {0x41, &(0x7f0000001500)=@string={0x41, 0x3, "2716a21ecf5a0fa83bedf2f5cb77aa7de64b3f617734bddd99a9e6fb772ea3d0f5136738985df5b6938fd87f47bce5dfa95a8d70b2ff4dc85d69c6d2592ebb"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x41d}}, {0x50, &(0x7f00000015c0)=@string={0x50, 0x3, "d738beeff3770d34addced483484c16ddde99c6dbf3a8b47ce6661a5bb3f5611d183d3fbc2e02542b50b124b1accc4aacdfea2e27ce398b2167029ef9da5d1659669be8c586729e1815ae2bc3128"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x42d}}, {0x51, &(0x7f0000001680)=@string={0x51, 0x3, "ccfe0b6cbb48b796c7a54c5019e3e301793e4d50b1f887de5ca1d56f2b4be96cc2d4821f34240f773d1e571cb6864ebbfc898fc3f3fbd2d4766577ce79d2d9d5bfeda4753ece661798bebf4f92fce0"}}]}) fsetxattr$system_posix_acl(r2, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x64, 0x2) 15:34:59 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) [ 245.445409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.467781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.478640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.490490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.499246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.508796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.524689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.530471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:35:00 executing program 0: shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000280)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$IPC_INFO(0x0, 0x3, 0x0) 15:35:00 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:35:00 executing program 0: shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000280)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$IPC_INFO(0x0, 0x3, 0x0) 15:35:00 executing program 2: clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, &(0x7f0000002180)=0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) sched_rr_get_interval(r0, &(0x7f0000002380)) 15:35:00 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mq_timedreceive(r0, &(0x7f0000000140)=""/192, 0xc0, 0x9, &(0x7f0000000200)={0x77359400}) dup(r0) pipe(&(0x7f0000000240)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000d80)) 15:35:00 executing program 0: shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000280)={{0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmctl$IPC_INFO(0x0, 0x3, 0x0) 15:35:00 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:35:00 executing program 2: clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) sched_rr_get_interval(0x0, &(0x7f0000002380)) 15:35:08 executing program 3: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:35:08 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mq_timedreceive(r0, &(0x7f0000000140)=""/192, 0xc0, 0x9, &(0x7f0000000200)={0x77359400}) dup(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000d80)) 15:35:08 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) geteuid() waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:35:08 executing program 2: clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) sched_rr_get_interval(0x0, &(0x7f0000002380)) 15:35:08 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:35:08 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:35:08 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mq_timedreceive(r0, &(0x7f0000000140)=""/192, 0xc0, 0x9, &(0x7f0000000200)={0x77359400}) dup(r0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000d80)) 15:35:08 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) r1 = syz_usb_connect$cdc_ecm(0x5, 0x6a, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0x5, 0x80, 0x16, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x7, 0x24, 0x6, 0x0, 0x0, "b44e"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x8000, 0x7, 0x1f}, [@mbim={0xc, 0x24, 0x1b, 0xc0, 0x8, 0xbe, 0x9, 0x4, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0xfffd, 0x6, 0x40}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0xe9, 0x8, 0x1f}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xf8, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x3f, 0x3b}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x8, 0xe9, 0x0, 0x10, 0xc5}, 0x90, &(0x7f0000000140)={0x5, 0xf, 0x90, 0x5, [@ptm_cap={0x3}, @generic={0x59, 0x10, 0x1, "8db30b0fb4a51aa2c629e620748741b59c16ee392922ac750dfa04af33709dde505c8f0fe48456f028969539f75bc660b37a2bb2290c3a31c9d14fcf0ddb7d389dc3f8b3489cc6e38fa26c46d3d1a78c9d7168172348"}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x7f, 0xf, 0x20, [0x1fe8130]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2f, 0xc1, 0xf5, 0x1f, 0x3f}, @ss_container_id={0x14, 0x10, 0x4, 0x20, "3e8d69095b656de1629ed966db0cfecf"}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x436}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000340)={0x14, &(0x7f0000000280)={0x40, 0x34, 0x59, {0x59, 0x22, "2c4060a23ff1cdca54a9f95b5d727c05e3bc0f4f2fe236abdfab899f43c32ee2a46913ea8d4436c3e96c8257eca53b979ab02ac171b80830f8e290bb9621f951a662fa88d6fc5d7af475b9053a4606487863eec58e63ac"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x1c, &(0x7f0000000380)={0x0, 0x0, 0x58, "73a798c879f2a87bc02cc09b27cc6941ba0511988a67ef3816e93ea9da4575e852b81468bfc546021a2a8295918df742aeadd4be4f4c1d7988d52403b9693ed64cba843b8444950c6e6a451264c3d9cb1979aca6b6af6183"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x41}}) syz_usb_connect$cdc_ecm(0x5, 0x14a, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x138, 0x1, 0x1, 0xc2, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0xe5, 0x2, 0x2, 0x6, 0x0, 0x5, {{0xa, 0x24, 0x6, 0x0, 0x0, "28ed18afee"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7fff, 0xff, 0x2}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x27}, @mbim={0xc, 0x24, 0x1b, 0x400, 0xa8df, 0x8, 0x1, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x59}, @mdlm_detail={0xce, 0x24, 0x13, 0x7, "21fd282f71b09f5d547028125ef2453290151510f6a7ba335585aa8a4a74b74df2b8634d597db0a12bd256f995d1d3dd6cc7a17dc21aff9ff38c497a35d8f09680b4a5ab9d86fb65b93347612b0c8306dca4e9d42e94e046b7f854f3b91479074448336f5b92de767d8ee473c000c00e26ded34ef618f903c5533743c719c9c1c277d60062ce03f2d07257bdb4ad59a1c1bb17101e27b3bba2b1b6f34cbfc26d1d6f544de144adb9d19dac3b3656e804a0539d8f2f1240156f2cad2b0b0b590fd7dbab89f4f004ce84f6"}, @ncm={0x6, 0x24, 0x1a, 0x2, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x1, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x6, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x1, 0x9}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x201, 0xcb, 0xcb, 0x9, 0x8, 0x5}, 0x20, &(0x7f0000000680)={0x5, 0xf, 0x20, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0xc, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x2, 0x6, 0x8}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x30, 0x5, 0x29f}]}, 0x1, [{0x23, &(0x7f00000006c0)=@string={0x23, 0x3, "edc7a1f6c91e28f262e010dadc8206c327a2ec66a330e1fa060f1c125af2d196ae"}}]}) syz_usb_connect$cdc_ecm(0x0, 0xd1, &(0x7f0000000740)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x1, 0x1, 0x6, 0xa0, 0xdc, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x2, 0x6, 0x0, 0x2, {{0xb, 0x24, 0x6, 0x0, 0x0, "27f623777f34"}, {0x5, 0x24, 0x0, 0x100}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x4, 0x0, 0x80}, [@country_functional={0xc, 0x24, 0x7, 0x81, 0x7, [0xce, 0x8000, 0x2]}, @mdlm_detail={0x61, 0x24, 0x13, 0x2, "0a8418713f5cbec56437b72cdb52a132bebbde97b998dc48c626825b86aa8e8f8455afe83d3f89a4b6b103b4e4f1bcc65b5e62efb5bb11f77bf3e783f1767fc5567f880b2a864500781b0b4d706fcad8f1cc44af0e5893a8704a260aa2"}, @country_functional={0x8, 0x24, 0x7, 0x1, 0x0, [0x0]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x2, 0x1, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0x7, 0x35}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x4, 0x3f, 0x3}}}}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000840)={0xa, 0x6, 0x250, 0x4, 0x3, 0x7a, 0x10, 0x1f}, 0xf2, &(0x7f0000000880)={0x5, 0xf, 0xf2, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0x4, 0xcd, 0x4}, @wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x1, 0x6f, 0x9, 0x9}, @generic={0xd5, 0x10, 0x2, "26ba7f4824c7baf15fdc3e45a421a9e7ce37c736ececc2100f6109e0cdba8f5fd95412ed6c9a5eb1a592749671ed398b0af858daca6af7678aa1dfc673bfba585547197482a81525a76975e323db203dddf5bf0a7e06c918370cb34cb58cd6ce6a8503b49643aa66a4ef5984225fd36d723cd67ba2f84fa89d43bd1cabbe9b0de72aea70ecd2422b93e8321bb81401d4f1862dc8bcb3294676000974f3903819e969810c64e06db6bae850e1b1bc16e8a4ab7112a9714b73f7aee4438e87afbff18f1fcafc72037014a8b8f5ffc714d3f9c8"}]}, 0x6, [{0xd5, &(0x7f0000000980)=@string={0xd5, 0x3, "f209a8d1395010353a5c213a7e64b293d80d7d72e065cbfc86b7fb9c0385d80db3634e50e1e95c8ee34fc22124776215e02026d89bc3cb72527087491398e95ec087cd5ce2872b2dff407724f5b151fac73b3c5b8100794b3d700dabcab560853401181f2400728f3af23597636f20a86b3e86d182391a18bb45fcd4857a23080c2b5aec62e8329fc6e82045507f7ee423857c23168e7ea2131a945c473eb4f58caf92e36527b0003663c0df312edf6b87ed23b18db734221205e86c17d480049eb094a975d133258b68a5e74920975b5bcbbb"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x409}}, {0x79, &(0x7f0000000b40)=@string={0x79, 0x3, "263c78b920db49275509fa80254abb9adbfb4409ddf83f5050f21a51b2d7d92097354d3e7ba4a657e026b06068e308543ab479c5cdae6e2836cfa94b495f7236438ecbf80b947a98a2f820bb41befae8f96ce07c44af54743b1f99bde3a452403daa7d626252df9b9da5ede237d8ce3b8ee2075b654131"}}, {0x4, &(0x7f0000000bc0)=@lang_id={0x4, 0x3, 0x44b}}]}) pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x2, 0x168, &(0x7f0000001200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x156, 0x2, 0x1, 0x0, 0x0, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "c305f87bad"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0xfeff, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@country_functional={0x12, 0x24, 0x7, 0x81, 0x40, [0x4d, 0xd7ab, 0xd392, 0x2, 0x5, 0x0]}, @mdlm_detail={0xe3, 0x24, 0x13, 0x80, "0b727a849cc3ad297332bab6507f679187d82726284d236b5008bea9062e9402029cfd82eccccc1749fafc3e268d9bd43d0cb127fca1dbb61d71b452b7ab756cf8b69e71ae8ddcbac89a6cfd195acb6caed75f41b3d551b7b716fe94f738b354d5e82933860459b520ec922a1d35f42b5d6e948a015ef85f436f228f4f0c59464cc88bd09c2c0b214151d7063b245959f452528569a200c13f053b2fa88b9f377f5ff565c8e711a5874f25ec0eb483ad98b21267cbfb1b9fef8f89f5ae3d11b8235ee25019014379915f4f30d7bee99d015667b2c95738bda9f8a299bd7177"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x4, 0xe6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x51, 0x60, 0x9}}}}}}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x110, 0x3, 0x3, 0xc8, 0x18, 0x7}, 0x78, &(0x7f00000013c0)={0x5, 0xf, 0x78, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x7a14, 0x0, 0x7f, [0xff00c0, 0xf, 0xf, 0xc0, 0xff003f, 0x5f]}, @ss_container_id={0x14, 0x10, 0x4, 0xf6, "4b93f7453647023d22b05488ab77e16a"}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x4, 0xf, 0xff6e, [0xffc0c0, 0x0, 0x3f, 0xf, 0x50, 0xc03f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d81d0f092648bb70553542bf40176aa6"}]}, 0x7, [{0xd, &(0x7f0000001440)=@string={0xd, 0x3, "052e1e85feb87567168fa5"}}, {0x78, &(0x7f0000001480)=@string={0x78, 0x3, "0d90ef59f69fcc154a9a3a83db95d54dc9cc3370b4a4c66fc239e2c307ef87eea6af19ac12db5bb3091e57c2cc81c1ec9d1acca61b99093657de3f529120b457ba7cc3974604f26374ec5f6fd9fddf1a0ab8bea2aa72825f7858d86fb71c42d98cbd75b12c3a62a571d2acb1b2800abb518c79f8e496"}}, {0x41, &(0x7f0000001500)=@string={0x41, 0x3, "2716a21ecf5a0fa83bedf2f5cb77aa7de64b3f617734bddd99a9e6fb772ea3d0f5136738985df5b6938fd87f47bce5dfa95a8d70b2ff4dc85d69c6d2592ebb"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x41d}}, {0x50, &(0x7f00000015c0)=@string={0x50, 0x3, "d738beeff3770d34addced483484c16ddde99c6dbf3a8b47ce6661a5bb3f5611d183d3fbc2e02542b50b124b1accc4aacdfea2e27ce398b2167029ef9da5d1659669be8c586729e1815ae2bc3128"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x42d}}, {0x51, &(0x7f0000001680)=@string={0x51, 0x3, "ccfe0b6cbb48b796c7a54c5019e3e301793e4d50b1f887de5ca1d56f2b4be96cc2d4821f34240f773d1e571cb6864ebbfc898fc3f3fbd2d4766577ce79d2d9d5bfeda4753ece661798bebf4f92fce0"}}]}) fsetxattr$system_posix_acl(r2, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x64, 0x2) [ 253.665614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.666552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.676664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.681646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.685512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.695669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.700693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.701667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:35:08 executing program 2: clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) sched_rr_get_interval(0x0, &(0x7f0000002380)) 15:35:08 executing program 2: clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) sched_rr_get_interval(0x0, &(0x7f0000002380)) 15:35:08 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:35:08 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mq_timedreceive(r0, &(0x7f0000000140)=""/192, 0xc0, 0x9, &(0x7f0000000200)={0x77359400}) dup(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000d80)) 15:35:08 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:35:08 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mq_timedreceive(r0, &(0x7f0000000140)=""/192, 0xc0, 0x9, &(0x7f0000000200)={0x77359400}) dup(r0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000d80)) 15:35:08 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mq_timedreceive(r0, &(0x7f0000000140)=""/192, 0xc0, 0x9, &(0x7f0000000200)={0x77359400}) dup(r0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) sendmsg$TIPC_NL_SOCK_GET(r2, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000d80)) 15:35:08 executing program 2: clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) sched_rr_get_interval(0x0, &(0x7f0000002380)) 15:35:17 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mq_timedreceive(r0, &(0x7f0000000140)=""/192, 0xc0, 0x9, &(0x7f0000000200)={0x77359400}) dup(r0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000d80)) 15:35:17 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:35:17 executing program 3: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) getpgid(0x0) r0 = fork() waitid(0x1, r0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:35:17 executing program 2: clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sched_rr_get_interval(0x0, &(0x7f0000002380)) 15:35:17 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) geteuid() shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:35:17 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mq_timedreceive(r0, &(0x7f0000000140)=""/192, 0xc0, 0x9, &(0x7f0000000200)={0x77359400}) dup(r0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000d80)) 15:35:17 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) geteuid() waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:35:17 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) r1 = syz_usb_connect$cdc_ecm(0x5, 0x6a, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0x5, 0x80, 0x16, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x7, 0x24, 0x6, 0x0, 0x0, "b44e"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x8000, 0x7, 0x1f}, [@mbim={0xc, 0x24, 0x1b, 0xc0, 0x8, 0xbe, 0x9, 0x4, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0xfffd, 0x6, 0x40}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0xe9, 0x8, 0x1f}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xf8, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x3f, 0x3b}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x8, 0xe9, 0x0, 0x10, 0xc5}, 0x90, &(0x7f0000000140)={0x5, 0xf, 0x90, 0x5, [@ptm_cap={0x3}, @generic={0x59, 0x10, 0x1, "8db30b0fb4a51aa2c629e620748741b59c16ee392922ac750dfa04af33709dde505c8f0fe48456f028969539f75bc660b37a2bb2290c3a31c9d14fcf0ddb7d389dc3f8b3489cc6e38fa26c46d3d1a78c9d7168172348"}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x7f, 0xf, 0x20, [0x1fe8130]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2f, 0xc1, 0xf5, 0x1f, 0x3f}, @ss_container_id={0x14, 0x10, 0x4, 0x20, "3e8d69095b656de1629ed966db0cfecf"}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x436}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000340)={0x14, &(0x7f0000000280)={0x40, 0x34, 0x59, {0x59, 0x22, "2c4060a23ff1cdca54a9f95b5d727c05e3bc0f4f2fe236abdfab899f43c32ee2a46913ea8d4436c3e96c8257eca53b979ab02ac171b80830f8e290bb9621f951a662fa88d6fc5d7af475b9053a4606487863eec58e63ac"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x1c, &(0x7f0000000380)={0x0, 0x0, 0x58, "73a798c879f2a87bc02cc09b27cc6941ba0511988a67ef3816e93ea9da4575e852b81468bfc546021a2a8295918df742aeadd4be4f4c1d7988d52403b9693ed64cba843b8444950c6e6a451264c3d9cb1979aca6b6af6183"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x41}}) syz_usb_connect$cdc_ecm(0x5, 0x14a, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x138, 0x1, 0x1, 0xc2, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0xe5, 0x2, 0x2, 0x6, 0x0, 0x5, {{0xa, 0x24, 0x6, 0x0, 0x0, "28ed18afee"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7fff, 0xff, 0x2}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x27}, @mbim={0xc, 0x24, 0x1b, 0x400, 0xa8df, 0x8, 0x1, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x59}, @mdlm_detail={0xce, 0x24, 0x13, 0x7, "21fd282f71b09f5d547028125ef2453290151510f6a7ba335585aa8a4a74b74df2b8634d597db0a12bd256f995d1d3dd6cc7a17dc21aff9ff38c497a35d8f09680b4a5ab9d86fb65b93347612b0c8306dca4e9d42e94e046b7f854f3b91479074448336f5b92de767d8ee473c000c00e26ded34ef618f903c5533743c719c9c1c277d60062ce03f2d07257bdb4ad59a1c1bb17101e27b3bba2b1b6f34cbfc26d1d6f544de144adb9d19dac3b3656e804a0539d8f2f1240156f2cad2b0b0b590fd7dbab89f4f004ce84f6"}, @ncm={0x6, 0x24, 0x1a, 0x2, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x1, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x8, 0x6, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x1, 0x9}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x201, 0xcb, 0xcb, 0x9, 0x8, 0x5}, 0x20, &(0x7f0000000680)={0x5, 0xf, 0x20, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0xc, 0x6}, @ext_cap={0x7, 0x10, 0x2, 0x18, 0x2, 0x6, 0x8}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0x30, 0x5, 0x29f}]}, 0x1, [{0x23, &(0x7f00000006c0)=@string={0x23, 0x3, "edc7a1f6c91e28f262e010dadc8206c327a2ec66a330e1fa060f1c125af2d196ae"}}]}) pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x2, 0x168, &(0x7f0000001200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x156, 0x2, 0x1, 0x0, 0x0, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "c305f87bad"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0xfeff, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@country_functional={0x12, 0x24, 0x7, 0x81, 0x40, [0x4d, 0xd7ab, 0xd392, 0x2, 0x5, 0x0]}, @mdlm_detail={0xe3, 0x24, 0x13, 0x80, "0b727a849cc3ad297332bab6507f679187d82726284d236b5008bea9062e9402029cfd82eccccc1749fafc3e268d9bd43d0cb127fca1dbb61d71b452b7ab756cf8b69e71ae8ddcbac89a6cfd195acb6caed75f41b3d551b7b716fe94f738b354d5e82933860459b520ec922a1d35f42b5d6e948a015ef85f436f228f4f0c59464cc88bd09c2c0b214151d7063b245959f452528569a200c13f053b2fa88b9f377f5ff565c8e711a5874f25ec0eb483ad98b21267cbfb1b9fef8f89f5ae3d11b8235ee25019014379915f4f30d7bee99d015667b2c95738bda9f8a299bd7177"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x4, 0xe6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x51, 0x60, 0x9}}}}}}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x110, 0x3, 0x3, 0xc8, 0x18, 0x7}, 0x78, &(0x7f00000013c0)={0x5, 0xf, 0x78, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x7a14, 0x0, 0x7f, [0xff00c0, 0xf, 0xf, 0xc0, 0xff003f, 0x5f]}, @ss_container_id={0x14, 0x10, 0x4, 0xf6, "4b93f7453647023d22b05488ab77e16a"}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x4, 0xf, 0xff6e, [0xffc0c0, 0x0, 0x3f, 0xf, 0x50, 0xc03f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d81d0f092648bb70553542bf40176aa6"}]}, 0x7, [{0xd, &(0x7f0000001440)=@string={0xd, 0x3, "052e1e85feb87567168fa5"}}, {0x78, &(0x7f0000001480)=@string={0x78, 0x3, "0d90ef59f69fcc154a9a3a83db95d54dc9cc3370b4a4c66fc239e2c307ef87eea6af19ac12db5bb3091e57c2cc81c1ec9d1acca61b99093657de3f529120b457ba7cc3974604f26374ec5f6fd9fddf1a0ab8bea2aa72825f7858d86fb71c42d98cbd75b12c3a62a571d2acb1b2800abb518c79f8e496"}}, {0x41, &(0x7f0000001500)=@string={0x41, 0x3, "2716a21ecf5a0fa83bedf2f5cb77aa7de64b3f617734bddd99a9e6fb772ea3d0f5136738985df5b6938fd87f47bce5dfa95a8d70b2ff4dc85d69c6d2592ebb"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x41d}}, {0x50, &(0x7f00000015c0)=@string={0x50, 0x3, "d738beeff3770d34addced483484c16ddde99c6dbf3a8b47ce6661a5bb3f5611d183d3fbc2e02542b50b124b1accc4aacdfea2e27ce398b2167029ef9da5d1659669be8c586729e1815ae2bc3128"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x42d}}, {0x51, &(0x7f0000001680)=@string={0x51, 0x3, "ccfe0b6cbb48b796c7a54c5019e3e301793e4d50b1f887de5ca1d56f2b4be96cc2d4821f34240f773d1e571cb6864ebbfc898fc3f3fbd2d4766577ce79d2d9d5bfeda4753ece661798bebf4f92fce0"}}]}) fsetxattr$system_posix_acl(r2, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x64, 0x2) [ 263.511723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.517565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.527283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.531681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.536620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.546403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:35:18 executing program 2: clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sched_rr_get_interval(0x0, 0x0) 15:35:18 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:35:18 executing program 2: clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sched_rr_get_interval(0x0, 0x0) 15:35:18 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mq_timedreceive(r0, &(0x7f0000000140)=""/192, 0xc0, 0x9, &(0x7f0000000200)={0x77359400}) pipe(&(0x7f0000000240)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000d80)) 15:35:18 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r2 = getpid() syz_open_procfs(r2, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r2], 0x1}, 0x58) 15:35:18 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mq_timedreceive(r0, &(0x7f0000000140)=""/192, 0xc0, 0x9, &(0x7f0000000200)={0x77359400}) dup(r0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000d80)) 15:35:18 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) pipe(&(0x7f0000000240)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000d80)) 15:35:27 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) r1 = syz_usb_connect$cdc_ecm(0x5, 0x6a, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0x5, 0x80, 0x16, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x7, 0x24, 0x6, 0x0, 0x0, "b44e"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x8000, 0x7, 0x1f}, [@mbim={0xc, 0x24, 0x1b, 0xc0, 0x8, 0xbe, 0x9, 0x4, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0xfffd, 0x6, 0x40}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0xe9, 0x8, 0x1f}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xf8, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x3f, 0x3b}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x8, 0xe9, 0x0, 0x10, 0xc5}, 0x90, &(0x7f0000000140)={0x5, 0xf, 0x90, 0x5, [@ptm_cap={0x3}, @generic={0x59, 0x10, 0x1, "8db30b0fb4a51aa2c629e620748741b59c16ee392922ac750dfa04af33709dde505c8f0fe48456f028969539f75bc660b37a2bb2290c3a31c9d14fcf0ddb7d389dc3f8b3489cc6e38fa26c46d3d1a78c9d7168172348"}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x7f, 0xf, 0x20, [0x1fe8130]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2f, 0xc1, 0xf5, 0x1f, 0x3f}, @ss_container_id={0x14, 0x10, 0x4, 0x20, "3e8d69095b656de1629ed966db0cfecf"}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x436}}]}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000340)={0x14, &(0x7f0000000280)={0x40, 0x34, 0x59, {0x59, 0x22, "2c4060a23ff1cdca54a9f95b5d727c05e3bc0f4f2fe236abdfab899f43c32ee2a46913ea8d4436c3e96c8257eca53b979ab02ac171b80830f8e290bb9621f951a662fa88d6fc5d7af475b9053a4606487863eec58e63ac"}}, &(0x7f0000000300)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x1c, &(0x7f0000000380)={0x0, 0x0, 0x58, "73a798c879f2a87bc02cc09b27cc6941ba0511988a67ef3816e93ea9da4575e852b81468bfc546021a2a8295918df742aeadd4be4f4c1d7988d52403b9693ed64cba843b8444950c6e6a451264c3d9cb1979aca6b6af6183"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x41}}) pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x2, 0x168, &(0x7f0000001200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x156, 0x2, 0x1, 0x0, 0x0, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "c305f87bad"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0xfeff, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@country_functional={0x12, 0x24, 0x7, 0x81, 0x40, [0x4d, 0xd7ab, 0xd392, 0x2, 0x5, 0x0]}, @mdlm_detail={0xe3, 0x24, 0x13, 0x80, "0b727a849cc3ad297332bab6507f679187d82726284d236b5008bea9062e9402029cfd82eccccc1749fafc3e268d9bd43d0cb127fca1dbb61d71b452b7ab756cf8b69e71ae8ddcbac89a6cfd195acb6caed75f41b3d551b7b716fe94f738b354d5e82933860459b520ec922a1d35f42b5d6e948a015ef85f436f228f4f0c59464cc88bd09c2c0b214151d7063b245959f452528569a200c13f053b2fa88b9f377f5ff565c8e711a5874f25ec0eb483ad98b21267cbfb1b9fef8f89f5ae3d11b8235ee25019014379915f4f30d7bee99d015667b2c95738bda9f8a299bd7177"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x4, 0xe6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x51, 0x60, 0x9}}}}}}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x110, 0x3, 0x3, 0xc8, 0x18, 0x7}, 0x78, &(0x7f00000013c0)={0x5, 0xf, 0x78, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x7a14, 0x0, 0x7f, [0xff00c0, 0xf, 0xf, 0xc0, 0xff003f, 0x5f]}, @ss_container_id={0x14, 0x10, 0x4, 0xf6, "4b93f7453647023d22b05488ab77e16a"}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x4, 0xf, 0xff6e, [0xffc0c0, 0x0, 0x3f, 0xf, 0x50, 0xc03f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d81d0f092648bb70553542bf40176aa6"}]}, 0x7, [{0xd, &(0x7f0000001440)=@string={0xd, 0x3, "052e1e85feb87567168fa5"}}, {0x78, &(0x7f0000001480)=@string={0x78, 0x3, "0d90ef59f69fcc154a9a3a83db95d54dc9cc3370b4a4c66fc239e2c307ef87eea6af19ac12db5bb3091e57c2cc81c1ec9d1acca61b99093657de3f529120b457ba7cc3974604f26374ec5f6fd9fddf1a0ab8bea2aa72825f7858d86fb71c42d98cbd75b12c3a62a571d2acb1b2800abb518c79f8e496"}}, {0x41, &(0x7f0000001500)=@string={0x41, 0x3, "2716a21ecf5a0fa83bedf2f5cb77aa7de64b3f617734bddd99a9e6fb772ea3d0f5136738985df5b6938fd87f47bce5dfa95a8d70b2ff4dc85d69c6d2592ebb"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x41d}}, {0x50, &(0x7f00000015c0)=@string={0x50, 0x3, "d738beeff3770d34addced483484c16ddde99c6dbf3a8b47ce6661a5bb3f5611d183d3fbc2e02542b50b124b1accc4aacdfea2e27ce398b2167029ef9da5d1659669be8c586729e1815ae2bc3128"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x42d}}, {0x51, &(0x7f0000001680)=@string={0x51, 0x3, "ccfe0b6cbb48b796c7a54c5019e3e301793e4d50b1f887de5ca1d56f2b4be96cc2d4821f34240f773d1e571cb6864ebbfc898fc3f3fbd2d4766577ce79d2d9d5bfeda4753ece661798bebf4f92fce0"}}]}) fsetxattr$system_posix_acl(r2, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x64, 0x2) 15:35:27 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) geteuid() shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:35:27 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) geteuid() waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:35:27 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mq_timedreceive(r0, &(0x7f0000000140)=""/192, 0xc0, 0x9, &(0x7f0000000200)={0x77359400}) dup(r0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)) 15:35:27 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) pipe(&(0x7f0000000240)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), r0) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000d80)) 15:35:27 executing program 3: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) getpgid(0x0) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:35:27 executing program 2: clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) sched_rr_get_interval(0x0, 0x0) 15:35:27 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r2 = getpid() syz_open_procfs(r2, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r2], 0x1}, 0x58) [ 272.878343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 15:35:27 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mq_timedreceive(r0, &(0x7f0000000140)=""/192, 0xc0, 0x9, &(0x7f0000000200)={0x77359400}) dup(r0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)) [ 272.906357] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.925035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.938386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:35:27 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mq_timedreceive(r0, &(0x7f0000000140)=""/192, 0xc0, 0x9, &(0x7f0000000200)={0x77359400}) dup(r0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)) 15:35:27 executing program 3: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) getpgid(0x0) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:35:27 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r2 = getpid() syz_open_procfs(r2, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r2], 0x1}, 0x58) 15:35:27 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) getpgid(0x0) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:35:27 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mq_timedreceive(r0, &(0x7f0000000140)=""/192, 0xc0, 0x9, &(0x7f0000000200)={0x77359400}) dup(r0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000d80)) 15:35:27 executing program 3: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) getpgid(0x0) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:35:27 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) getpgid(0x0) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:35:37 executing program 1: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) pipe(&(0x7f0000000240)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d80)) 15:35:37 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mq_timedreceive(r0, &(0x7f0000000140)=""/192, 0xc0, 0x9, &(0x7f0000000200)={0x77359400}) dup(r0) pipe(&(0x7f0000000240)) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000d80)) 15:35:37 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:35:37 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) geteuid() shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:35:37 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) ioprio_set$uid(0x3, 0x0, 0xd) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:35:37 executing program 3: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = fork() waitid(0x1, r0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:35:37 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) getpgid(0x0) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:35:37 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) syz_usb_connect$cdc_ecm(0x5, 0x6a, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x58, 0x1, 0x1, 0x5, 0x80, 0x16, [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x7, 0x24, 0x6, 0x0, 0x0, "b44e"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1000, 0x8000, 0x7, 0x1f}, [@mbim={0xc, 0x24, 0x1b, 0xc0, 0x8, 0xbe, 0x9, 0x4, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0xfffd, 0x6, 0x40}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0xe9, 0x8, 0x1f}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0xf8, 0x8, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x0, 0x3f, 0x3b}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x8, 0xe9, 0x0, 0x10, 0xc5}, 0x90, &(0x7f0000000140)={0x5, 0xf, 0x90, 0x5, [@ptm_cap={0x3}, @generic={0x59, 0x10, 0x1, "8db30b0fb4a51aa2c629e620748741b59c16ee392922ac750dfa04af33709dde505c8f0fe48456f028969539f75bc660b37a2bb2290c3a31c9d14fcf0ddb7d389dc3f8b3489cc6e38fa26c46d3d1a78c9d7168172348"}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x7f, 0xf, 0x20, [0x1fe8130]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2f, 0xc1, 0xf5, 0x1f, 0x3f}, @ss_container_id={0x14, 0x10, 0x4, 0x20, "3e8d69095b656de1629ed966db0cfecf"}]}, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x436}}]}) pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x2, 0x168, &(0x7f0000001200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x156, 0x2, 0x1, 0x0, 0x0, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "c305f87bad"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0xfeff, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@country_functional={0x12, 0x24, 0x7, 0x81, 0x40, [0x4d, 0xd7ab, 0xd392, 0x2, 0x5, 0x0]}, @mdlm_detail={0xe3, 0x24, 0x13, 0x80, "0b727a849cc3ad297332bab6507f679187d82726284d236b5008bea9062e9402029cfd82eccccc1749fafc3e268d9bd43d0cb127fca1dbb61d71b452b7ab756cf8b69e71ae8ddcbac89a6cfd195acb6caed75f41b3d551b7b716fe94f738b354d5e82933860459b520ec922a1d35f42b5d6e948a015ef85f436f228f4f0c59464cc88bd09c2c0b214151d7063b245959f452528569a200c13f053b2fa88b9f377f5ff565c8e711a5874f25ec0eb483ad98b21267cbfb1b9fef8f89f5ae3d11b8235ee25019014379915f4f30d7bee99d015667b2c95738bda9f8a299bd7177"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x4, 0xe6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x51, 0x60, 0x9}}}}}}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x110, 0x3, 0x3, 0xc8, 0x18, 0x7}, 0x78, &(0x7f00000013c0)={0x5, 0xf, 0x78, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x7a14, 0x0, 0x7f, [0xff00c0, 0xf, 0xf, 0xc0, 0xff003f, 0x5f]}, @ss_container_id={0x14, 0x10, 0x4, 0xf6, "4b93f7453647023d22b05488ab77e16a"}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x4, 0xf, 0xff6e, [0xffc0c0, 0x0, 0x3f, 0xf, 0x50, 0xc03f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d81d0f092648bb70553542bf40176aa6"}]}, 0x7, [{0xd, &(0x7f0000001440)=@string={0xd, 0x3, "052e1e85feb87567168fa5"}}, {0x78, &(0x7f0000001480)=@string={0x78, 0x3, "0d90ef59f69fcc154a9a3a83db95d54dc9cc3370b4a4c66fc239e2c307ef87eea6af19ac12db5bb3091e57c2cc81c1ec9d1acca61b99093657de3f529120b457ba7cc3974604f26374ec5f6fd9fddf1a0ab8bea2aa72825f7858d86fb71c42d98cbd75b12c3a62a571d2acb1b2800abb518c79f8e496"}}, {0x41, &(0x7f0000001500)=@string={0x41, 0x3, "2716a21ecf5a0fa83bedf2f5cb77aa7de64b3f617734bddd99a9e6fb772ea3d0f5136738985df5b6938fd87f47bce5dfa95a8d70b2ff4dc85d69c6d2592ebb"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x41d}}, {0x50, &(0x7f00000015c0)=@string={0x50, 0x3, "d738beeff3770d34addced483484c16ddde99c6dbf3a8b47ce6661a5bb3f5611d183d3fbc2e02542b50b124b1accc4aacdfea2e27ce398b2167029ef9da5d1659669be8c586729e1815ae2bc3128"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x42d}}, {0x51, &(0x7f0000001680)=@string={0x51, 0x3, "ccfe0b6cbb48b796c7a54c5019e3e301793e4d50b1f887de5ca1d56f2b4be96cc2d4821f34240f773d1e571cb6864ebbfc898fc3f3fbd2d4766577ce79d2d9d5bfeda4753ece661798bebf4f92fce0"}}]}) fsetxattr$system_posix_acl(r1, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x64, 0x2) 15:35:37 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) [ 282.628976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.632397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.639519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.640429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:35:37 executing program 3: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = fork() waitid(0x1, r0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:35:37 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mq_timedreceive(r0, &(0x7f0000000140)=""/192, 0xc0, 0x9, &(0x7f0000000200)={0x77359400}) dup(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000d80)) 15:35:37 executing program 2: waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:35:37 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:35:37 executing program 1: pipe(&(0x7f0000000240)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d80)) 15:35:37 executing program 2: waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:35:37 executing program 3: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = fork() waitid(0x1, r0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:35:37 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mq_timedreceive(r0, &(0x7f0000000140)=""/192, 0xc0, 0x9, &(0x7f0000000200)={0x77359400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000d80)) 15:35:37 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:35:47 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) ioprio_set$uid(0x3, 0x0, 0xd) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:35:47 executing program 3: r0 = fork() waitid(0x1, r0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:35:47 executing program 1: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d80)) 15:35:47 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d80)) 15:35:47 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:35:47 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) ioprio_set$uid(0x3, 0x0, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:35:47 executing program 2: waitid(0x0, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:35:47 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x2, 0x168, &(0x7f0000001200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x156, 0x2, 0x1, 0x0, 0x0, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "c305f87bad"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0xfeff, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@country_functional={0x12, 0x24, 0x7, 0x81, 0x40, [0x4d, 0xd7ab, 0xd392, 0x2, 0x5, 0x0]}, @mdlm_detail={0xe3, 0x24, 0x13, 0x80, "0b727a849cc3ad297332bab6507f679187d82726284d236b5008bea9062e9402029cfd82eccccc1749fafc3e268d9bd43d0cb127fca1dbb61d71b452b7ab756cf8b69e71ae8ddcbac89a6cfd195acb6caed75f41b3d551b7b716fe94f738b354d5e82933860459b520ec922a1d35f42b5d6e948a015ef85f436f228f4f0c59464cc88bd09c2c0b214151d7063b245959f452528569a200c13f053b2fa88b9f377f5ff565c8e711a5874f25ec0eb483ad98b21267cbfb1b9fef8f89f5ae3d11b8235ee25019014379915f4f30d7bee99d015667b2c95738bda9f8a299bd7177"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x4, 0xe6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x51, 0x60, 0x9}}}}}}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x110, 0x3, 0x3, 0xc8, 0x18, 0x7}, 0x78, &(0x7f00000013c0)={0x5, 0xf, 0x78, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x7a14, 0x0, 0x7f, [0xff00c0, 0xf, 0xf, 0xc0, 0xff003f, 0x5f]}, @ss_container_id={0x14, 0x10, 0x4, 0xf6, "4b93f7453647023d22b05488ab77e16a"}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x4, 0xf, 0xff6e, [0xffc0c0, 0x0, 0x3f, 0xf, 0x50, 0xc03f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d81d0f092648bb70553542bf40176aa6"}]}, 0x7, [{0xd, &(0x7f0000001440)=@string={0xd, 0x3, "052e1e85feb87567168fa5"}}, {0x78, &(0x7f0000001480)=@string={0x78, 0x3, "0d90ef59f69fcc154a9a3a83db95d54dc9cc3370b4a4c66fc239e2c307ef87eea6af19ac12db5bb3091e57c2cc81c1ec9d1acca61b99093657de3f529120b457ba7cc3974604f26374ec5f6fd9fddf1a0ab8bea2aa72825f7858d86fb71c42d98cbd75b12c3a62a571d2acb1b2800abb518c79f8e496"}}, {0x41, &(0x7f0000001500)=@string={0x41, 0x3, "2716a21ecf5a0fa83bedf2f5cb77aa7de64b3f617734bddd99a9e6fb772ea3d0f5136738985df5b6938fd87f47bce5dfa95a8d70b2ff4dc85d69c6d2592ebb"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x41d}}, {0x50, &(0x7f00000015c0)=@string={0x50, 0x3, "d738beeff3770d34addced483484c16ddde99c6dbf3a8b47ce6661a5bb3f5611d183d3fbc2e02542b50b124b1accc4aacdfea2e27ce398b2167029ef9da5d1659669be8c586729e1815ae2bc3128"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x42d}}, {0x51, &(0x7f0000001680)=@string={0x51, 0x3, "ccfe0b6cbb48b796c7a54c5019e3e301793e4d50b1f887de5ca1d56f2b4be96cc2d4821f34240f773d1e571cb6864ebbfc898fc3f3fbd2d4766577ce79d2d9d5bfeda4753ece661798bebf4f92fce0"}}]}) fsetxattr$system_posix_acl(r1, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x64, 0x2) [ 293.386587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.403429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:35:47 executing program 2: waitid(0x0, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:35:48 executing program 2: waitid(0x0, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:35:48 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:35:48 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d80)) 15:35:48 executing program 2: waitid(0x1, 0x0, 0x0, 0x4, &(0x7f0000000500)) 15:35:48 executing program 2: waitid(0x1, 0x0, 0x0, 0x4, &(0x7f0000000500)) 15:35:48 executing program 1: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d80)) 15:35:48 executing program 2: waitid(0x1, 0x0, 0x0, 0x4, &(0x7f0000000500)) 15:35:57 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) ioprio_set$uid(0x3, 0x0, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:35:57 executing program 3: r0 = fork() waitid(0x0, r0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:35:57 executing program 0: write$char_usb(0xffffffffffffffff, &(0x7f0000000000)="320e902496a11de7a8955a2eb9d3260beef996cf81ba6d25a4f7635a86dc76648e8f8fbc6d85126e4dc53056880db03da89dfd428bff41846075b8d8ca1e16371dd8653e88d55259b105a3758538cf0ba71ec05425f04d30d9b40ced0982de4c01102f64df7951c6a0fa5056607b7f37f76625de2edfb8bf23f29c5dbbd19130085a542647d207199f3aa554f51ec96eaee96ea8eca5c4e801f9dd85664c2a0588d65a903b3bc167d06e770066eed656e893165e52bd9be74116dbdaab336ab7478c95149216c7226ecbfb085cff", 0xce) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d80)) 15:35:57 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:35:57 executing program 2: waitid(0x1, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)) 15:35:57 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x2, 0x168, &(0x7f0000001200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x156, 0x2, 0x1, 0x0, 0x0, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "c305f87bad"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0xfeff, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@country_functional={0x12, 0x24, 0x7, 0x81, 0x40, [0x4d, 0xd7ab, 0xd392, 0x2, 0x5, 0x0]}, @mdlm_detail={0xe3, 0x24, 0x13, 0x80, "0b727a849cc3ad297332bab6507f679187d82726284d236b5008bea9062e9402029cfd82eccccc1749fafc3e268d9bd43d0cb127fca1dbb61d71b452b7ab756cf8b69e71ae8ddcbac89a6cfd195acb6caed75f41b3d551b7b716fe94f738b354d5e82933860459b520ec922a1d35f42b5d6e948a015ef85f436f228f4f0c59464cc88bd09c2c0b214151d7063b245959f452528569a200c13f053b2fa88b9f377f5ff565c8e711a5874f25ec0eb483ad98b21267cbfb1b9fef8f89f5ae3d11b8235ee25019014379915f4f30d7bee99d015667b2c95738bda9f8a299bd7177"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x4, 0xe6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x51, 0x60, 0x9}}}}}}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x110, 0x3, 0x3, 0xc8, 0x18, 0x7}, 0x78, &(0x7f00000013c0)={0x5, 0xf, 0x78, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x7a14, 0x0, 0x7f, [0xff00c0, 0xf, 0xf, 0xc0, 0xff003f, 0x5f]}, @ss_container_id={0x14, 0x10, 0x4, 0xf6, "4b93f7453647023d22b05488ab77e16a"}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x4, 0xf, 0xff6e, [0xffc0c0, 0x0, 0x3f, 0xf, 0x50, 0xc03f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d81d0f092648bb70553542bf40176aa6"}]}, 0x7, [{0xd, &(0x7f0000001440)=@string={0xd, 0x3, "052e1e85feb87567168fa5"}}, {0x78, &(0x7f0000001480)=@string={0x78, 0x3, "0d90ef59f69fcc154a9a3a83db95d54dc9cc3370b4a4c66fc239e2c307ef87eea6af19ac12db5bb3091e57c2cc81c1ec9d1acca61b99093657de3f529120b457ba7cc3974604f26374ec5f6fd9fddf1a0ab8bea2aa72825f7858d86fb71c42d98cbd75b12c3a62a571d2acb1b2800abb518c79f8e496"}}, {0x41, &(0x7f0000001500)=@string={0x41, 0x3, "2716a21ecf5a0fa83bedf2f5cb77aa7de64b3f617734bddd99a9e6fb772ea3d0f5136738985df5b6938fd87f47bce5dfa95a8d70b2ff4dc85d69c6d2592ebb"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x41d}}, {0x50, &(0x7f00000015c0)=@string={0x50, 0x3, "d738beeff3770d34addced483484c16ddde99c6dbf3a8b47ce6661a5bb3f5611d183d3fbc2e02542b50b124b1accc4aacdfea2e27ce398b2167029ef9da5d1659669be8c586729e1815ae2bc3128"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x42d}}, {0x51, &(0x7f0000001680)=@string={0x51, 0x3, "ccfe0b6cbb48b796c7a54c5019e3e301793e4d50b1f887de5ca1d56f2b4be96cc2d4821f34240f773d1e571cb6864ebbfc898fc3f3fbd2d4766577ce79d2d9d5bfeda4753ece661798bebf4f92fce0"}}]}) fsetxattr$system_posix_acl(r1, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x64, 0x2) 15:35:57 executing program 1: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d80)) 15:35:57 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) ioprio_set$uid(0x3, 0x0, 0xd) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) [ 303.309459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.310376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:35:57 executing program 2: waitid(0x1, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)) 15:35:57 executing program 2: waitid(0x1, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)) 15:35:57 executing program 1: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d80)) 15:35:57 executing program 2: waitid(0x1, 0x0, &(0x7f0000000480), 0x4, 0x0) 15:35:57 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:36:06 executing program 1: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d80)) 15:36:06 executing program 2: waitid(0x1, 0x0, &(0x7f0000000480), 0x4, 0x0) 15:36:06 executing program 3: r0 = fork() waitid(0x0, r0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:36:06 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:36:06 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:36:06 executing program 7: socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x2, 0x168, &(0x7f0000001200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x156, 0x2, 0x1, 0x0, 0x0, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "c305f87bad"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0xfeff, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@country_functional={0x12, 0x24, 0x7, 0x81, 0x40, [0x4d, 0xd7ab, 0xd392, 0x2, 0x5, 0x0]}, @mdlm_detail={0xe3, 0x24, 0x13, 0x80, "0b727a849cc3ad297332bab6507f679187d82726284d236b5008bea9062e9402029cfd82eccccc1749fafc3e268d9bd43d0cb127fca1dbb61d71b452b7ab756cf8b69e71ae8ddcbac89a6cfd195acb6caed75f41b3d551b7b716fe94f738b354d5e82933860459b520ec922a1d35f42b5d6e948a015ef85f436f228f4f0c59464cc88bd09c2c0b214151d7063b245959f452528569a200c13f053b2fa88b9f377f5ff565c8e711a5874f25ec0eb483ad98b21267cbfb1b9fef8f89f5ae3d11b8235ee25019014379915f4f30d7bee99d015667b2c95738bda9f8a299bd7177"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x4, 0xe6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x51, 0x60, 0x9}}}}}}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x110, 0x3, 0x3, 0xc8, 0x18, 0x7}, 0x78, &(0x7f00000013c0)={0x5, 0xf, 0x78, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x7a14, 0x0, 0x7f, [0xff00c0, 0xf, 0xf, 0xc0, 0xff003f, 0x5f]}, @ss_container_id={0x14, 0x10, 0x4, 0xf6, "4b93f7453647023d22b05488ab77e16a"}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x4, 0xf, 0xff6e, [0xffc0c0, 0x0, 0x3f, 0xf, 0x50, 0xc03f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d81d0f092648bb70553542bf40176aa6"}]}, 0x7, [{0xd, &(0x7f0000001440)=@string={0xd, 0x3, "052e1e85feb87567168fa5"}}, {0x78, &(0x7f0000001480)=@string={0x78, 0x3, "0d90ef59f69fcc154a9a3a83db95d54dc9cc3370b4a4c66fc239e2c307ef87eea6af19ac12db5bb3091e57c2cc81c1ec9d1acca61b99093657de3f529120b457ba7cc3974604f26374ec5f6fd9fddf1a0ab8bea2aa72825f7858d86fb71c42d98cbd75b12c3a62a571d2acb1b2800abb518c79f8e496"}}, {0x41, &(0x7f0000001500)=@string={0x41, 0x3, "2716a21ecf5a0fa83bedf2f5cb77aa7de64b3f617734bddd99a9e6fb772ea3d0f5136738985df5b6938fd87f47bce5dfa95a8d70b2ff4dc85d69c6d2592ebb"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x41d}}, {0x50, &(0x7f00000015c0)=@string={0x50, 0x3, "d738beeff3770d34addced483484c16ddde99c6dbf3a8b47ce6661a5bb3f5611d183d3fbc2e02542b50b124b1accc4aacdfea2e27ce398b2167029ef9da5d1659669be8c586729e1815ae2bc3128"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x42d}}, {0x51, &(0x7f0000001680)=@string={0x51, 0x3, "ccfe0b6cbb48b796c7a54c5019e3e301793e4d50b1f887de5ca1d56f2b4be96cc2d4821f34240f773d1e571cb6864ebbfc898fc3f3fbd2d4766577ce79d2d9d5bfeda4753ece661798bebf4f92fce0"}}]}) fsetxattr$system_posix_acl(r0, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x64, 0x2) 15:36:06 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) ioprio_set$uid(0x3, 0x0, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:36:06 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d80)) [ 312.222382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.234363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:36:06 executing program 2: waitid(0x1, 0x0, &(0x7f0000000480), 0x4, 0x0) 15:36:06 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)) 15:36:06 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:36:06 executing program 1: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d80)) 15:36:06 executing program 2: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d80)) 15:36:06 executing program 6: mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:36:06 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)) 15:36:07 executing program 1: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d80)) 15:36:07 executing program 6: mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:36:14 executing program 2: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d80)) 15:36:14 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:36:14 executing program 3: r0 = fork() waitid(0x0, r0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:36:14 executing program 1: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d80)) 15:36:14 executing program 7: pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x2, 0x168, &(0x7f0000001200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x156, 0x2, 0x1, 0x0, 0x0, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "c305f87bad"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0xfeff, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@country_functional={0x12, 0x24, 0x7, 0x81, 0x40, [0x4d, 0xd7ab, 0xd392, 0x2, 0x5, 0x0]}, @mdlm_detail={0xe3, 0x24, 0x13, 0x80, "0b727a849cc3ad297332bab6507f679187d82726284d236b5008bea9062e9402029cfd82eccccc1749fafc3e268d9bd43d0cb127fca1dbb61d71b452b7ab756cf8b69e71ae8ddcbac89a6cfd195acb6caed75f41b3d551b7b716fe94f738b354d5e82933860459b520ec922a1d35f42b5d6e948a015ef85f436f228f4f0c59464cc88bd09c2c0b214151d7063b245959f452528569a200c13f053b2fa88b9f377f5ff565c8e711a5874f25ec0eb483ad98b21267cbfb1b9fef8f89f5ae3d11b8235ee25019014379915f4f30d7bee99d015667b2c95738bda9f8a299bd7177"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x4, 0xe6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x51, 0x60, 0x9}}}}}}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x110, 0x3, 0x3, 0xc8, 0x18, 0x7}, 0x78, &(0x7f00000013c0)={0x5, 0xf, 0x78, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x7a14, 0x0, 0x7f, [0xff00c0, 0xf, 0xf, 0xc0, 0xff003f, 0x5f]}, @ss_container_id={0x14, 0x10, 0x4, 0xf6, "4b93f7453647023d22b05488ab77e16a"}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x4, 0xf, 0xff6e, [0xffc0c0, 0x0, 0x3f, 0xf, 0x50, 0xc03f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d81d0f092648bb70553542bf40176aa6"}]}, 0x7, [{0xd, &(0x7f0000001440)=@string={0xd, 0x3, "052e1e85feb87567168fa5"}}, {0x78, &(0x7f0000001480)=@string={0x78, 0x3, "0d90ef59f69fcc154a9a3a83db95d54dc9cc3370b4a4c66fc239e2c307ef87eea6af19ac12db5bb3091e57c2cc81c1ec9d1acca61b99093657de3f529120b457ba7cc3974604f26374ec5f6fd9fddf1a0ab8bea2aa72825f7858d86fb71c42d98cbd75b12c3a62a571d2acb1b2800abb518c79f8e496"}}, {0x41, &(0x7f0000001500)=@string={0x41, 0x3, "2716a21ecf5a0fa83bedf2f5cb77aa7de64b3f617734bddd99a9e6fb772ea3d0f5136738985df5b6938fd87f47bce5dfa95a8d70b2ff4dc85d69c6d2592ebb"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x41d}}, {0x50, &(0x7f00000015c0)=@string={0x50, 0x3, "d738beeff3770d34addced483484c16ddde99c6dbf3a8b47ce6661a5bb3f5611d183d3fbc2e02542b50b124b1accc4aacdfea2e27ce398b2167029ef9da5d1659669be8c586729e1815ae2bc3128"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x42d}}, {0x51, &(0x7f0000001680)=@string={0x51, 0x3, "ccfe0b6cbb48b796c7a54c5019e3e301793e4d50b1f887de5ca1d56f2b4be96cc2d4821f34240f773d1e571cb6864ebbfc898fc3f3fbd2d4766577ce79d2d9d5bfeda4753ece661798bebf4f92fce0"}}]}) fsetxattr$system_posix_acl(r0, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x64, 0x2) 15:36:14 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:36:14 executing program 6: mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:36:14 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)) [ 319.912444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.925367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:36:14 executing program 2: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d80)) 15:36:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 15:36:14 executing program 6: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:36:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 15:36:14 executing program 2: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) 15:36:14 executing program 1: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d80)) 15:36:14 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 15:36:14 executing program 6: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:36:14 executing program 2: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), 0xffffffffffffffff) 15:36:23 executing program 1: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d80)) 15:36:23 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:36:23 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:36:23 executing program 0: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) 15:36:23 executing program 2: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 15:36:23 executing program 7: pipe(0x0) syz_usb_connect$cdc_ncm(0x2, 0x168, &(0x7f0000001200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x156, 0x2, 0x1, 0x0, 0x0, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "c305f87bad"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0xfeff, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@country_functional={0x12, 0x24, 0x7, 0x81, 0x40, [0x4d, 0xd7ab, 0xd392, 0x2, 0x5, 0x0]}, @mdlm_detail={0xe3, 0x24, 0x13, 0x80, "0b727a849cc3ad297332bab6507f679187d82726284d236b5008bea9062e9402029cfd82eccccc1749fafc3e268d9bd43d0cb127fca1dbb61d71b452b7ab756cf8b69e71ae8ddcbac89a6cfd195acb6caed75f41b3d551b7b716fe94f738b354d5e82933860459b520ec922a1d35f42b5d6e948a015ef85f436f228f4f0c59464cc88bd09c2c0b214151d7063b245959f452528569a200c13f053b2fa88b9f377f5ff565c8e711a5874f25ec0eb483ad98b21267cbfb1b9fef8f89f5ae3d11b8235ee25019014379915f4f30d7bee99d015667b2c95738bda9f8a299bd7177"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x4, 0xe6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x51, 0x60, 0x9}}}}}}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x110, 0x3, 0x3, 0xc8, 0x18, 0x7}, 0x78, &(0x7f00000013c0)={0x5, 0xf, 0x78, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x7a14, 0x0, 0x7f, [0xff00c0, 0xf, 0xf, 0xc0, 0xff003f, 0x5f]}, @ss_container_id={0x14, 0x10, 0x4, 0xf6, "4b93f7453647023d22b05488ab77e16a"}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x4, 0xf, 0xff6e, [0xffc0c0, 0x0, 0x3f, 0xf, 0x50, 0xc03f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d81d0f092648bb70553542bf40176aa6"}]}, 0x7, [{0xd, &(0x7f0000001440)=@string={0xd, 0x3, "052e1e85feb87567168fa5"}}, {0x78, &(0x7f0000001480)=@string={0x78, 0x3, "0d90ef59f69fcc154a9a3a83db95d54dc9cc3370b4a4c66fc239e2c307ef87eea6af19ac12db5bb3091e57c2cc81c1ec9d1acca61b99093657de3f529120b457ba7cc3974604f26374ec5f6fd9fddf1a0ab8bea2aa72825f7858d86fb71c42d98cbd75b12c3a62a571d2acb1b2800abb518c79f8e496"}}, {0x41, &(0x7f0000001500)=@string={0x41, 0x3, "2716a21ecf5a0fa83bedf2f5cb77aa7de64b3f617734bddd99a9e6fb772ea3d0f5136738985df5b6938fd87f47bce5dfa95a8d70b2ff4dc85d69c6d2592ebb"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x41d}}, {0x50, &(0x7f00000015c0)=@string={0x50, 0x3, "d738beeff3770d34addced483484c16ddde99c6dbf3a8b47ce6661a5bb3f5611d183d3fbc2e02542b50b124b1accc4aacdfea2e27ce398b2167029ef9da5d1659669be8c586729e1815ae2bc3128"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x42d}}, {0x51, &(0x7f0000001680)=@string={0x51, 0x3, "ccfe0b6cbb48b796c7a54c5019e3e301793e4d50b1f887de5ca1d56f2b4be96cc2d4821f34240f773d1e571cb6864ebbfc898fc3f3fbd2d4766577ce79d2d9d5bfeda4753ece661798bebf4f92fce0"}}]}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x64, 0x2) 15:36:23 executing program 6: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:36:23 executing program 3: fork() waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) [ 329.351163] cgroup: fork rejected by pids controller in /syz3 [ 329.358686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.403559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:36:23 executing program 3: fork() waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:36:23 executing program 2: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 15:36:23 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:36:24 executing program 3: fork() waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:36:24 executing program 0: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) 15:36:24 executing program 2: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 15:36:24 executing program 1: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d80)) 15:36:24 executing program 3: r0 = fork() waitid(0x1, r0, 0x0, 0x4, &(0x7f0000000500)) 15:36:24 executing program 2: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:36:34 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:36:34 executing program 0: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x730}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8f9}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x408c0) 15:36:34 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, 0x0, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:36:34 executing program 1: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d80)) 15:36:34 executing program 2: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:36:34 executing program 7: pipe(0x0) syz_usb_connect$cdc_ncm(0x2, 0x168, &(0x7f0000001200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x156, 0x2, 0x1, 0x0, 0x0, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "c305f87bad"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0xfeff, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@country_functional={0x12, 0x24, 0x7, 0x81, 0x40, [0x4d, 0xd7ab, 0xd392, 0x2, 0x5, 0x0]}, @mdlm_detail={0xe3, 0x24, 0x13, 0x80, "0b727a849cc3ad297332bab6507f679187d82726284d236b5008bea9062e9402029cfd82eccccc1749fafc3e268d9bd43d0cb127fca1dbb61d71b452b7ab756cf8b69e71ae8ddcbac89a6cfd195acb6caed75f41b3d551b7b716fe94f738b354d5e82933860459b520ec922a1d35f42b5d6e948a015ef85f436f228f4f0c59464cc88bd09c2c0b214151d7063b245959f452528569a200c13f053b2fa88b9f377f5ff565c8e711a5874f25ec0eb483ad98b21267cbfb1b9fef8f89f5ae3d11b8235ee25019014379915f4f30d7bee99d015667b2c95738bda9f8a299bd7177"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x4, 0xe6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x51, 0x60, 0x9}}}}}}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x110, 0x3, 0x3, 0xc8, 0x18, 0x7}, 0x78, &(0x7f00000013c0)={0x5, 0xf, 0x78, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x7a14, 0x0, 0x7f, [0xff00c0, 0xf, 0xf, 0xc0, 0xff003f, 0x5f]}, @ss_container_id={0x14, 0x10, 0x4, 0xf6, "4b93f7453647023d22b05488ab77e16a"}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x4, 0xf, 0xff6e, [0xffc0c0, 0x0, 0x3f, 0xf, 0x50, 0xc03f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d81d0f092648bb70553542bf40176aa6"}]}, 0x7, [{0xd, &(0x7f0000001440)=@string={0xd, 0x3, "052e1e85feb87567168fa5"}}, {0x78, &(0x7f0000001480)=@string={0x78, 0x3, "0d90ef59f69fcc154a9a3a83db95d54dc9cc3370b4a4c66fc239e2c307ef87eea6af19ac12db5bb3091e57c2cc81c1ec9d1acca61b99093657de3f529120b457ba7cc3974604f26374ec5f6fd9fddf1a0ab8bea2aa72825f7858d86fb71c42d98cbd75b12c3a62a571d2acb1b2800abb518c79f8e496"}}, {0x41, &(0x7f0000001500)=@string={0x41, 0x3, "2716a21ecf5a0fa83bedf2f5cb77aa7de64b3f617734bddd99a9e6fb772ea3d0f5136738985df5b6938fd87f47bce5dfa95a8d70b2ff4dc85d69c6d2592ebb"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x41d}}, {0x50, &(0x7f00000015c0)=@string={0x50, 0x3, "d738beeff3770d34addced483484c16ddde99c6dbf3a8b47ce6661a5bb3f5611d183d3fbc2e02542b50b124b1accc4aacdfea2e27ce398b2167029ef9da5d1659669be8c586729e1815ae2bc3128"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x42d}}, {0x51, &(0x7f0000001680)=@string={0x51, 0x3, "ccfe0b6cbb48b796c7a54c5019e3e301793e4d50b1f887de5ca1d56f2b4be96cc2d4821f34240f773d1e571cb6864ebbfc898fc3f3fbd2d4766577ce79d2d9d5bfeda4753ece661798bebf4f92fce0"}}]}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x64, 0x2) 15:36:34 executing program 3: r0 = fork() waitid(0x1, r0, 0x0, 0x4, &(0x7f0000000500)) 15:36:34 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) [ 339.810672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.812517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:36:34 executing program 2: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:36:34 executing program 0: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000c40), 0xffffffffffffffff) 15:36:34 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:36:34 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:36:34 executing program 1: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d80)) 15:36:34 executing program 3: r0 = fork() waitid(0x1, r0, 0x0, 0x4, &(0x7f0000000500)) 15:36:34 executing program 0: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 15:36:43 executing program 0: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 15:36:43 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:36:43 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, 0x0, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:36:43 executing program 1: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000d80)) 15:36:43 executing program 7: pipe(0x0) syz_usb_connect$cdc_ncm(0x2, 0x168, &(0x7f0000001200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x156, 0x2, 0x1, 0x0, 0x0, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "c305f87bad"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0xfeff, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@country_functional={0x12, 0x24, 0x7, 0x81, 0x40, [0x4d, 0xd7ab, 0xd392, 0x2, 0x5, 0x0]}, @mdlm_detail={0xe3, 0x24, 0x13, 0x80, "0b727a849cc3ad297332bab6507f679187d82726284d236b5008bea9062e9402029cfd82eccccc1749fafc3e268d9bd43d0cb127fca1dbb61d71b452b7ab756cf8b69e71ae8ddcbac89a6cfd195acb6caed75f41b3d551b7b716fe94f738b354d5e82933860459b520ec922a1d35f42b5d6e948a015ef85f436f228f4f0c59464cc88bd09c2c0b214151d7063b245959f452528569a200c13f053b2fa88b9f377f5ff565c8e711a5874f25ec0eb483ad98b21267cbfb1b9fef8f89f5ae3d11b8235ee25019014379915f4f30d7bee99d015667b2c95738bda9f8a299bd7177"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x4, 0xe6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x51, 0x60, 0x9}}}}}}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x110, 0x3, 0x3, 0xc8, 0x18, 0x7}, 0x78, &(0x7f00000013c0)={0x5, 0xf, 0x78, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x7a14, 0x0, 0x7f, [0xff00c0, 0xf, 0xf, 0xc0, 0xff003f, 0x5f]}, @ss_container_id={0x14, 0x10, 0x4, 0xf6, "4b93f7453647023d22b05488ab77e16a"}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x4, 0xf, 0xff6e, [0xffc0c0, 0x0, 0x3f, 0xf, 0x50, 0xc03f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d81d0f092648bb70553542bf40176aa6"}]}, 0x7, [{0xd, &(0x7f0000001440)=@string={0xd, 0x3, "052e1e85feb87567168fa5"}}, {0x78, &(0x7f0000001480)=@string={0x78, 0x3, "0d90ef59f69fcc154a9a3a83db95d54dc9cc3370b4a4c66fc239e2c307ef87eea6af19ac12db5bb3091e57c2cc81c1ec9d1acca61b99093657de3f529120b457ba7cc3974604f26374ec5f6fd9fddf1a0ab8bea2aa72825f7858d86fb71c42d98cbd75b12c3a62a571d2acb1b2800abb518c79f8e496"}}, {0x41, &(0x7f0000001500)=@string={0x41, 0x3, "2716a21ecf5a0fa83bedf2f5cb77aa7de64b3f617734bddd99a9e6fb772ea3d0f5136738985df5b6938fd87f47bce5dfa95a8d70b2ff4dc85d69c6d2592ebb"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x41d}}, {0x50, &(0x7f00000015c0)=@string={0x50, 0x3, "d738beeff3770d34addced483484c16ddde99c6dbf3a8b47ce6661a5bb3f5611d183d3fbc2e02542b50b124b1accc4aacdfea2e27ce398b2167029ef9da5d1659669be8c586729e1815ae2bc3128"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x42d}}, {0x51, &(0x7f0000001680)=@string={0x51, 0x3, "ccfe0b6cbb48b796c7a54c5019e3e301793e4d50b1f887de5ca1d56f2b4be96cc2d4821f34240f773d1e571cb6864ebbfc898fc3f3fbd2d4766577ce79d2d9d5bfeda4753ece661798bebf4f92fce0"}}]}) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x64, 0x2) 15:36:43 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x0, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:36:43 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, 0x0, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:36:43 executing program 3: r0 = fork() waitid(0x1, r0, &(0x7f0000000480), 0x0, &(0x7f0000000500)) [ 349.440304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.465042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:36:43 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 15:36:44 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x0, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:36:44 executing program 0: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:36:44 executing program 0: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:36:44 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x0, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:36:44 executing program 3: r0 = fork() waitid(0x1, r0, &(0x7f0000000480), 0x0, &(0x7f0000000500)) 15:36:44 executing program 1: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)) 15:36:44 executing program 0: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:36:53 executing program 1: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)) 15:36:53 executing program 7: pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x0, 0x168, &(0x7f0000001200)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x156, 0x2, 0x1, 0x0, 0x0, 0x20, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "c305f87bad"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x6, 0xfeff, 0x9}, {0x6, 0x24, 0x1a, 0x8, 0x2}, [@country_functional={0x12, 0x24, 0x7, 0x81, 0x40, [0x4d, 0xd7ab, 0xd392, 0x2, 0x5, 0x0]}, @mdlm_detail={0xe3, 0x24, 0x13, 0x80, "0b727a849cc3ad297332bab6507f679187d82726284d236b5008bea9062e9402029cfd82eccccc1749fafc3e268d9bd43d0cb127fca1dbb61d71b452b7ab756cf8b69e71ae8ddcbac89a6cfd195acb6caed75f41b3d551b7b716fe94f738b354d5e82933860459b520ec922a1d35f42b5d6e948a015ef85f436f228f4f0c59464cc88bd09c2c0b214151d7063b245959f452528569a200c13f053b2fa88b9f377f5ff565c8e711a5874f25ec0eb483ad98b21267cbfb1b9fef8f89f5ae3d11b8235ee25019014379915f4f30d7bee99d015667b2c95738bda9f8a299bd7177"}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x9, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x4, 0xe6}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x51, 0x60, 0x9}}}}}}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x110, 0x3, 0x3, 0xc8, 0x18, 0x7}, 0x78, &(0x7f00000013c0)={0x5, 0xf, 0x78, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x7a14, 0x0, 0x7f, [0xff00c0, 0xf, 0xf, 0xc0, 0xff003f, 0x5f]}, @ss_container_id={0x14, 0x10, 0x4, 0xf6, "4b93f7453647023d22b05488ab77e16a"}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x4, 0xf, 0xff6e, [0xffc0c0, 0x0, 0x3f, 0xf, 0x50, 0xc03f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d81d0f092648bb70553542bf40176aa6"}]}, 0x7, [{0xd, &(0x7f0000001440)=@string={0xd, 0x3, "052e1e85feb87567168fa5"}}, {0x78, &(0x7f0000001480)=@string={0x78, 0x3, "0d90ef59f69fcc154a9a3a83db95d54dc9cc3370b4a4c66fc239e2c307ef87eea6af19ac12db5bb3091e57c2cc81c1ec9d1acca61b99093657de3f529120b457ba7cc3974604f26374ec5f6fd9fddf1a0ab8bea2aa72825f7858d86fb71c42d98cbd75b12c3a62a571d2acb1b2800abb518c79f8e496"}}, {0x41, &(0x7f0000001500)=@string={0x41, 0x3, "2716a21ecf5a0fa83bedf2f5cb77aa7de64b3f617734bddd99a9e6fb772ea3d0f5136738985df5b6938fd87f47bce5dfa95a8d70b2ff4dc85d69c6d2592ebb"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x41d}}, {0x50, &(0x7f00000015c0)=@string={0x50, 0x3, "d738beeff3770d34addced483484c16ddde99c6dbf3a8b47ce6661a5bb3f5611d183d3fbc2e02542b50b124b1accc4aacdfea2e27ce398b2167029ef9da5d1659669be8c586729e1815ae2bc3128"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x42d}}, {0x51, &(0x7f0000001680)=@string={0x51, 0x3, "ccfe0b6cbb48b796c7a54c5019e3e301793e4d50b1f887de5ca1d56f2b4be96cc2d4821f34240f773d1e571cb6864ebbfc898fc3f3fbd2d4766577ce79d2d9d5bfeda4753ece661798bebf4f92fce0"}}]}) fsetxattr$system_posix_acl(r0, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x64, 0x2) 15:36:53 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, 0x0, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:36:53 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, 0x0, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:36:53 executing program 3: r0 = fork() waitid(0x1, r0, &(0x7f0000000480), 0x0, &(0x7f0000000500)) 15:36:53 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:36:53 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:36:53 executing program 0: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) [ 359.146447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.155375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 15:36:53 executing program 0: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 15:36:53 executing program 1: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)) 15:36:53 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:36:53 executing program 0: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 15:36:53 executing program 1: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 15:36:53 executing program 3: r0 = fork() waitid(0x1, r0, &(0x7f0000000480), 0x4, 0x0) 15:36:54 executing program 0: pipe(0x0) 15:37:04 executing program 1: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 15:37:04 executing program 0: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)) 15:37:04 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0xee00, 0xee01, r2, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:37:04 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) 15:37:04 executing program 7: pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000001700)={0xa, &(0x7f0000001380)={0xa, 0x6, 0x110, 0x3, 0x3, 0xc8, 0x18, 0x7}, 0x78, &(0x7f00000013c0)={0x5, 0xf, 0x78, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0x7a14, 0x0, 0x7f, [0xff00c0, 0xf, 0xf, 0xc0, 0xff003f, 0x5f]}, @ss_container_id={0x14, 0x10, 0x4, 0xf6, "4b93f7453647023d22b05488ab77e16a"}, @ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x4, 0xf, 0xff6e, [0xffc0c0, 0x0, 0x3f, 0xf, 0x50, 0xc03f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "d81d0f092648bb70553542bf40176aa6"}]}, 0x7, [{0xd, &(0x7f0000001440)=@string={0xd, 0x3, "052e1e85feb87567168fa5"}}, {0x78, &(0x7f0000001480)=@string={0x78, 0x3, "0d90ef59f69fcc154a9a3a83db95d54dc9cc3370b4a4c66fc239e2c307ef87eea6af19ac12db5bb3091e57c2cc81c1ec9d1acca61b99093657de3f529120b457ba7cc3974604f26374ec5f6fd9fddf1a0ab8bea2aa72825f7858d86fb71c42d98cbd75b12c3a62a571d2acb1b2800abb518c79f8e496"}}, {0x41, &(0x7f0000001500)=@string={0x41, 0x3, "2716a21ecf5a0fa83bedf2f5cb77aa7de64b3f617734bddd99a9e6fb772ea3d0f5136738985df5b6938fd87f47bce5dfa95a8d70b2ff4dc85d69c6d2592ebb"}}, {0x4, &(0x7f0000001580)=@lang_id={0x4, 0x3, 0x41d}}, {0x50, &(0x7f00000015c0)=@string={0x50, 0x3, "d738beeff3770d34addced483484c16ddde99c6dbf3a8b47ce6661a5bb3f5611d183d3fbc2e02542b50b124b1accc4aacdfea2e27ce398b2167029ef9da5d1659669be8c586729e1815ae2bc3128"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x42d}}, {0x51, &(0x7f0000001680)=@string={0x51, 0x3, "ccfe0b6cbb48b796c7a54c5019e3e301793e4d50b1f887de5ca1d56f2b4be96cc2d4821f34240f773d1e571cb6864ebbfc898fc3f3fbd2d4766577ce79d2d9d5bfeda4753ece661798bebf4f92fce0"}}]}) fsetxattr$system_posix_acl(r0, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x64, 0x2) 15:37:04 executing program 3: r0 = fork() waitid(0x1, r0, &(0x7f0000000480), 0x4, 0x0) 15:37:04 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, 0x0, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:37:04 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:37:04 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) 15:37:04 executing program 1: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 15:37:04 executing program 0: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)) 15:37:04 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) geteuid() 15:37:04 executing program 3: r0 = fork() waitid(0x1, r0, &(0x7f0000000480), 0x4, 0x0) 15:37:04 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) 15:37:04 executing program 3: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 15:37:04 executing program 0: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d80)) 15:37:04 executing program 1: r0 = fork() waitid(0x1, r0, &(0x7f0000000480), 0x4, 0x0) 15:37:04 executing program 3: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 15:37:14 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') geteuid() 15:37:14 executing program 1: r0 = fork() waitid(0x1, r0, &(0x7f0000000480), 0x4, 0x0) 15:37:14 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0xee00, 0xee01, r2, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:37:14 executing program 3: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x408c0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 15:37:14 executing program 7: pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x64, 0x2) 15:37:14 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0xee00, 0xee01, r2, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:37:14 executing program 0: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x408c0) 15:37:14 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={0x0, r0+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r2 = getpid() syz_open_procfs(r2, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r2], 0x1, {r1}}, 0x58) 15:37:14 executing program 0: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 15:37:14 executing program 3: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, 0x0, 0x408c0) 15:37:14 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={0x0, r0+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r2 = getpid() syz_open_procfs(r2, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r2], 0x1, {r1}}, 0x58) 15:37:14 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') geteuid() 15:37:14 executing program 0: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 15:37:15 executing program 3: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 15:37:24 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0xee00, 0xee01, r2, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:37:24 executing program 1: r0 = fork() waitid(0x1, r0, &(0x7f0000000480), 0x4, 0x0) 15:37:24 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') 15:37:24 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={0x0, r0+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r2 = getpid() syz_open_procfs(r2, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r2], 0x1, {r1}}, 0x58) 15:37:24 executing program 0: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) 15:37:24 executing program 3: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 15:37:24 executing program 7: pipe(&(0x7f00000011c0)) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x64, 0x2) 15:37:24 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0xee00, 0xee01, r2, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:37:24 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) fork() syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') 15:37:24 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) 15:37:24 executing program 3: pipe(0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x80001, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 15:37:24 executing program 0: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80001, 0x0) 15:37:24 executing program 3: pipe(0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 15:37:24 executing program 0: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80001, 0x0) 15:37:24 executing program 3: syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) 15:37:24 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, 0x0}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r2 = getpid() syz_open_procfs(r2, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r2], 0x1, {r1}}, 0x58) 15:37:33 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0xee00, 0xee01, r2, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:37:33 executing program 1: waitid(0x1, 0x0, &(0x7f0000000480), 0x4, 0x0) 15:37:33 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={0x0, r0+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r2 = getpid() syz_open_procfs(r2, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r2], 0x1, {r1}}, 0x58) 15:37:33 executing program 0: openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80001, 0x0) 15:37:33 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') 15:37:33 executing program 7: pipe(&(0x7f00000011c0)) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x64, 0x2) 15:37:33 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:37:33 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, 0x0}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r2 = getpid() syz_open_procfs(r2, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r2], 0x1, {r1}}, 0x58) 15:37:33 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') 15:37:33 executing program 1: waitid(0x0, 0x0, &(0x7f0000000480), 0x4, 0x0) 15:37:33 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 15:37:33 executing program 1: waitid(0x0, 0x0, 0x0, 0x4, 0x0) 15:37:33 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') 15:37:33 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, 0x0}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r2 = getpid() syz_open_procfs(r2, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r2], 0x1, {r1}}, 0x58) 15:37:33 executing program 1: waitid(0x0, 0x0, 0x0, 0x0, 0x0) 15:37:33 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') 15:37:43 executing program 1: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') 15:37:43 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:37:43 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={0x0, r0+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r2 = getpid() syz_open_procfs(r2, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r2], 0x1, {r1}}, 0x58) 15:37:43 executing program 2: r0 = getpgid(0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') 15:37:43 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 15:37:43 executing program 7: pipe(&(0x7f00000011c0)) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x64, 0x2) 15:37:43 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:37:43 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:37:43 executing program 1: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') 15:37:43 executing program 2: getpgid(0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') 15:37:43 executing program 0: openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 15:37:43 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:37:43 executing program 1: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') 15:37:43 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={0x0, r0+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r2 = getpid() syz_open_procfs(r2, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r2], 0x1, {r1}}, 0x58) 15:37:43 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:37:43 executing program 2: getpgid(0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') 15:37:43 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:37:43 executing program 1: syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') 15:37:43 executing program 2: getpgid(0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') 15:37:43 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:37:52 executing program 1: syz_open_procfs(0x0, 0x0) 15:37:52 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:37:52 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:37:52 executing program 2: r0 = getpgid(0x0) syz_open_procfs(r0, 0x0) 15:37:52 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:37:52 executing program 7: pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, 0x0, &(0x7f0000001880)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x64, 0x2) 15:37:52 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:37:52 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={0x0, r0+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r2 = getpid() syz_open_procfs(r2, &(0x7f00000017c0)='gid_map\x00') 15:37:53 executing program 2: r0 = getpgid(0x0) syz_open_procfs(r0, 0x0) 15:37:53 executing program 1: syz_open_procfs(0x0, 0x0) 15:37:53 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={0x0, r0+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) getpid() 15:37:53 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:37:53 executing program 2: r0 = getpgid(0x0) syz_open_procfs(r0, 0x0) 15:38:03 executing program 1: syz_open_procfs(0x0, 0x0) 15:38:03 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, 0x0, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01, r2, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, 0x0, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:03 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:03 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:38:03 executing program 2: syz_open_procfs(0x0, 0x0) 15:38:03 executing program 7: pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, 0x0, &(0x7f0000001880)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x64, 0x2) 15:38:03 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={0x0, r0+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) 15:38:03 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:38:03 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, 0x0, 0x0, 0x6}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r0 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r0, 0xee00, 0xee01, r1, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, 0x0, 0x0, 0x1}) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:03 executing program 2: syz_open_procfs(0x0, 0x0) 15:38:03 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={0x0, r0+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) 15:38:03 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:38:03 executing program 2: syz_open_procfs(0x0, 0x0) 15:38:03 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:38:03 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, 0x0, 0x0, 0x6}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r0 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r0, 0xee00, 0xee01, r1, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, 0x0, 0x0, 0x1}) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:03 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={0x0, r0+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) 15:38:03 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:38:13 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:13 executing program 7: pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, 0x0, &(0x7f0000001880)={{}, {0x1, 0x7}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x64, 0x2) 15:38:13 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:38:13 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, 0x0, 0x0, 0x6}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r0 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r0, 0xee00, 0xee01, r1, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, 0x0, 0x0, 0x1}) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:13 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:38:13 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={0x0, r0+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140)=0x1, 0x4) 15:38:13 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:38:13 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:13 executing program 4: r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, 0x0, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01, r2, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, 0x0, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:13 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={0x0, r0+10000000}) 15:38:13 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:38:13 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:38:13 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:38:13 executing program 4: r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, 0x0, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01, r2, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, 0x0, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:13 executing program 3: mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) 15:38:13 executing program 4: r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, 0x0, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01, r2, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, 0x0, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:23 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:23 executing program 7: pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000001780)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) 15:38:23 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, 0x0, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01, r2, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, 0x0, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:23 executing program 3: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000100)) 15:38:23 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:38:23 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:38:23 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:38:23 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:23 executing program 3: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) 15:38:23 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01, r2, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, 0x0, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:23 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:38:23 executing program 3: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:38:23 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01, r2, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, 0x0, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:23 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:38:23 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:38:31 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:38:31 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:31 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:31 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:38:31 executing program 3: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:38:31 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:38:31 executing program 7: pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000001780)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) 15:38:31 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01, r2, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, 0x0, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:31 executing program 3: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:38:32 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01, r2, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, 0x0, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) [ 457.518953] cgroup: fork rejected by pids controller in /syz5 15:38:32 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:38:32 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, 0x0) r1 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01, r2, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, 0x0, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:32 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:38:32 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, 0x0) r1 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01, r2, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, 0x0, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:32 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:38:32 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:38:32 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:38:32 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, 0x0) r1 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01, r2, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, 0x0, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:32 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, 0x0, r0, 0x6}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01, r2, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r0, 0x0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:40 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01, r2, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, 0x0, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:40 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:38:40 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:38:40 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) 15:38:40 executing program 7: pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000001780)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) 15:38:40 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:38:40 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, 0x0, r0, 0x6}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01, r2, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r0, 0x0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:40 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:38:40 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) geteuid() shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) 15:38:40 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:38:40 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01, r2, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, 0x0, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:40 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) 15:38:40 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:38:49 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:38:49 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:38:49 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01, r2, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, 0x0, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:49 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) 15:38:49 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:38:49 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, 0x0, r0, 0x6}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01, r2, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r0, 0x0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:49 executing program 7: pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}, {0x2, 0x6}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x64, 0x2) 15:38:49 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:38:49 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:38:49 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:38:49 executing program 5: r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:49 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01, 0x0, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, 0x0, r0, 0x1}) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:49 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) geteuid() shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) 15:38:49 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:38:49 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:38:49 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:38:49 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:38:49 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01, 0x0, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, 0x0, r0, 0x1}) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:58 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:38:58 executing program 7: pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}, {0x2, 0x6, 0xee01}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x5c, 0x2) 15:38:58 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) 15:38:58 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:38:58 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) r1 = geteuid() ioprio_set$uid(0x3, r1, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:58 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:38:58 executing program 5: r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:58 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:38:58 executing program 0: mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:38:58 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:38:58 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) r1 = geteuid() ioprio_set$uid(0x3, r1, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:38:58 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:38:58 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) getpgid(0x0) fork() shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) 15:38:58 executing program 0: mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:38:58 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:38:58 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:38:58 executing program 5: r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:39:06 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:39:07 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) r1 = geteuid() ioprio_set$uid(0x3, r1, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:39:06 executing program 7: pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}, {}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x54, 0x2) 15:39:06 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:39:06 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) getpgid(0x0) fork() shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) 15:39:06 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:39:06 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:39:06 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:39:07 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:39:07 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:39:07 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0xee00, 0xee01, 0x0, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, 0x0, r0, 0x1}) r1 = geteuid() ioprio_set$uid(0x3, r1, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:39:07 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:39:07 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) getpgid(0x0) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) 15:39:07 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0xee00, 0xee01, 0x0, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, 0x0, r0, 0x1}) r1 = geteuid() ioprio_set$uid(0x3, r1, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:39:07 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:39:07 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:39:07 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:39:16 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:39:16 executing program 7: pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {}, [{0x2, 0x5, 0xee00}, {0x2, 0x4, 0xee01}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x4c, 0x2) 15:39:16 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:39:16 executing program 2: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) 15:39:16 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:39:16 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:39:16 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:39:16 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0xee00, 0xee01, 0x0, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, 0x0, r0, 0x1}) r1 = geteuid() ioprio_set$uid(0x3, r1, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:39:16 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01, 0x0, 0x0, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, 0x0, r0, 0x1}) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:39:16 executing program 2: shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) 15:39:16 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:39:25 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:39:25 executing program 7: pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {}, [{0x2, 0x5, 0xee00}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x44, 0x2) 15:39:25 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:39:25 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:39:25 executing program 2: shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) 15:39:25 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:39:25 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:39:25 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01, 0x0, 0x0, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, 0x0, r0, 0x1}) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:39:26 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01}, 0x40, 0xf0, 0x1, 0x5400000000, 0x0, r0, 0x1}) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:39:26 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:39:26 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:39:26 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:39:26 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:39:26 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:39:26 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01}, 0x0, 0xf0, 0x1, 0x5400000000, 0x0, r0, 0x1}) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:39:26 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:39:26 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:39:35 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:39:35 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:39:35 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:39:35 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01}, 0x0, 0xf0, 0x1, 0x5400000000, 0x0, r0, 0x1}) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:39:35 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:39:35 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x0, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:39:35 executing program 7: pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {}, [], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x3c, 0x2) 15:39:35 executing program 1: mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:39:36 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01}, 0x0, 0xf0, 0x1, 0x5400000000, 0x0, r0, 0x1}) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:39:36 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:39:36 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:39:36 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01}, 0x40, 0x0, 0x1, 0x5400000000, 0x0, r0, 0x1}) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:39:36 executing program 1: mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:39:36 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(0x0, 0x0) 15:39:36 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:39:36 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(0x0, 0x0) 15:39:36 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:39:36 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:39:36 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(0x0, 0x0) 15:39:36 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01}, 0x40, 0x0, 0x0, 0x5400000000, 0x0, r0, 0x1}) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:39:36 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x0, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:39:36 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01}, 0x40, 0x0, 0x0, 0x5400000000, 0x0, r0, 0x1}) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:39:44 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01}, 0x40, 0x0, 0x0, 0x5400000000, 0x0, r0, 0x1}) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:39:44 executing program 7: pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {}, [], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x3c, 0x2) 15:39:44 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:39:44 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:39:44 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x0, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:39:44 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:39:44 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x0, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:39:44 executing program 1: mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:39:44 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:39:53 executing program 2: clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:39:53 executing program 7: pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {}, [], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x3c, 0x2) 15:39:53 executing program 1: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:39:53 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:39:53 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:39:53 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:39:53 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01}, 0x40, 0x0, 0x0, 0x0, 0x0, r0, 0x1}) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:39:53 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x0, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:39:53 executing program 1: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:39:53 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:39:53 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:39:53 executing program 2: clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:39:53 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:39:53 executing program 1: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:39:53 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x0, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:39:53 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01}, 0x40}) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:39:53 executing program 2: clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:40:02 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:40:02 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01}, 0x40}) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:40:02 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:40:02 executing program 3: mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:40:02 executing program 7: pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {}, [{0x2, 0x0, 0xee00}], {0x4, 0x4}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x44, 0x2) 15:40:02 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, 0x0, &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:40:02 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:40:02 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:40:03 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01}, 0x40}) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:40:03 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(0x0, 0x0) 15:40:03 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:40:03 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(0x0, 0x0) 15:40:03 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = geteuid() ioprio_set$uid(0x0, r2, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:40:03 executing program 3: mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:40:03 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:40:03 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(0x0, 0x0) 15:40:12 executing program 7: pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {}, [{0x2, 0x0, 0xee00}], {}, [{0x8, 0x2}, {0x8, 0x2}, {0x8, 0x2, 0xee01}], {0x10, 0x3}}, 0x44, 0x2) 15:40:12 executing program 3: mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:40:12 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, 0x0, &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:40:12 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:40:12 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000002300)={0x0, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:40:12 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x0, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:40:12 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x0, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:40:12 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = geteuid() ioprio_set$uid(0x0, r2, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:40:12 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) geteuid() ioprio_set$uid(0x0, 0x0, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:40:12 executing program 3: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:40:12 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(0x0, 0x0) 15:40:12 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, 0x0, &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:40:12 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000002300)={0x0, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:40:12 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x0, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:40:12 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) geteuid() ioprio_set$uid(0x0, 0x0, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:40:12 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x0, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:40:22 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(0x0, 0x0) 15:40:22 executing program 3: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:40:22 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x0, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:40:22 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x0, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:40:22 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000002300)={0x0, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:40:22 executing program 7: pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {}, [{0x2, 0x0, 0xee00}], {}, [{0x8, 0x2}, {0x8, 0x2}], {0x10, 0x3}}, 0x3c, 0x2) 15:40:22 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) geteuid() ioprio_set$uid(0x0, 0x0, 0xd) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:40:22 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), 0x0, &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:40:22 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(0x0, 0x0) 15:40:22 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = geteuid() ioprio_set$uid(0x0, r2, 0x0) waitid(0x1, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:40:22 executing program 3: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:40:22 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000002300)={0x10000000, 0x0, &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:40:22 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:40:22 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x0, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:40:22 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = geteuid() ioprio_set$uid(0x0, r2, 0x0) waitid(0x0, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:40:22 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), 0x0, &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:40:22 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x0, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:40:22 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:40:22 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = geteuid() ioprio_set$uid(0x0, r2, 0x0) waitid(0x0, 0x0, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:40:31 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x0, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:40:31 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:40:31 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x0, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:40:31 executing program 7: pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {}, [{0x2, 0x0, 0xee00}], {}, [{0x8, 0x2}], {0x10, 0x3}}, 0x34, 0x2) 15:40:31 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), 0x0, &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:40:31 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = geteuid() ioprio_set$uid(0x0, r2, 0x0) waitid(0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)) 15:40:31 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000002300)={0x10000000, 0x0, &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:40:31 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:40:31 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = geteuid() ioprio_set$uid(0x0, r2, 0x0) waitid(0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)) 15:40:31 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000002300)={0x10000000, 0x0, &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:40:31 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:40:31 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = geteuid() ioprio_set$uid(0x0, r2, 0x0) waitid(0x0, 0x0, 0x0, 0x4, &(0x7f0000000500)) 15:40:31 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x0, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:40:31 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), 0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:40:31 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:40:31 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x0, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:40:31 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = geteuid() ioprio_set$uid(0x0, r2, 0x0) waitid(0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)) 15:40:31 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x0, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:40:31 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), 0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:40:40 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x0, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:40:40 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), 0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:40:40 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = geteuid() ioprio_set$uid(0x0, r2, 0x0) waitid(0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)) 15:40:40 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={0x0, r0+10000000}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r1}}, 0x58) 15:40:40 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, 0x0, &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:40:40 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x0, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:40:40 executing program 7: pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {}, [{0x2, 0x0, 0xee00}], {}, [], {0x10, 0x3}}, 0x2c, 0x2) 15:40:40 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), 0x0, &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:40:41 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = geteuid() ioprio_set$uid(0x0, r2, 0x0) waitid(0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000500)) 15:40:41 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={0x0, r0+10000000}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r1}}, 0x58) 15:40:41 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x0, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:40:41 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:40:41 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, 0x0, &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:40:41 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = geteuid() ioprio_set$uid(0x0, r2, 0x0) waitid(0x0, 0x0, &(0x7f0000000480), 0x4, 0x0) 15:40:41 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), 0x0, &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:40:41 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x0, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:40:41 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:40:41 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={0x0, r0+10000000}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r1}}, 0x58) 15:40:41 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = geteuid() ioprio_set$uid(0x0, r2, 0x0) waitid(0x0, 0x0, &(0x7f0000000480), 0x4, 0x0) 15:40:41 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, 0x0, &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:40:41 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:40:41 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:40:50 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x0, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:40:50 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:40:50 executing program 7: pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {}, [{0x2, 0x0, 0xee00}], {}, [], {0x10, 0x3}}, 0x2c, 0x2) 15:40:50 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), 0x0, &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:40:50 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, 0x0}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r1}}, 0x58) 15:40:50 executing program 4: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, 0x0) r0 = getpgid(0x0) shmctl$IPC_SET(0xffffffffffffffff, 0x1, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r1 = geteuid() getresgid(&(0x7f0000000100), 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r1, 0xee00, 0xee01}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r2 = geteuid() ioprio_set$uid(0x0, r2, 0x0) waitid(0x0, 0x0, &(0x7f0000000480), 0x4, 0x0) 15:40:50 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), 0x0, &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:40:50 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:40:50 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:40:59 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, 0x0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:40:59 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), 0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:40:59 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, 0x0}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r1}}, 0x58) 15:40:59 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, 0x0, 0x0, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:40:59 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), 0x0, &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:40:59 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={0x0, r0+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r1}}, 0x58) 15:40:59 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:40:59 executing program 7: pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {}, [{0x2, 0x0, 0xee00}], {}, [], {0x10, 0x3}}, 0x2c, 0x2) 15:40:59 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={0x0, r0+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r1}}, 0x58) 15:40:59 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), 0x0, &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:40:59 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, 0x0}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r1}}, 0x58) 15:40:59 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, 0x0, 0x0, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:40:59 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:40:59 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), 0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:40:59 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, 0x0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:40:59 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={0x0, r0+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r1}}, 0x58) 15:41:00 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), 0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:41:00 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:00 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), 0x0, {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:41:00 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:41:00 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, 0x0, 0x0, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:41:09 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, 0x0}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r1}}, 0x58) 15:41:09 executing program 7: pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {}, [{0x2, 0x0, 0xee00}], {}, [{}], {0x10, 0x3}}, 0x34, 0x2) 15:41:09 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:41:09 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), 0x0, {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:41:09 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), 0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:41:09 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, 0x0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:41:09 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, 0x0, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:41:09 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:09 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:09 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, 0x0}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r1}}, 0x58) 15:41:20 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), 0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:41:20 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:41:20 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), 0x0, {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:41:20 executing program 7: pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {}, [{0x2, 0x0, 0xee00}], {}, [{}]}, 0x34, 0x2) 15:41:20 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:20 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, 0x0, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:41:20 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, 0x0, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:41:20 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, 0x0}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r1}}, 0x58) 15:41:20 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:41:20 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:20 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:20 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, 0x0, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:41:20 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:20 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), 0x0, {0x18}, 0x0, 0x0, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:41:20 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:20 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:20 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, 0x0, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:41:20 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, 0x0, 0x0, {r2}}, 0x58) 15:41:20 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), 0x0, {0x18}, 0x0, 0x0, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:41:30 executing program 7: pipe(&(0x7f00000011c0)={0xffffffffffffffff}) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000001780)='system.posix_acl_access\x00', &(0x7f0000001880)={{}, {}, [{0x2, 0x0, 0xee00}], {}, [{}]}, 0x34, 0x0) 15:41:30 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:41:30 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:30 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, 0x0, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:41:30 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:30 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, 0x0, 0x0, {r2}}, 0x58) 15:41:30 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), 0x0, {0x18}, 0x0, 0x0, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:41:30 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:30 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:41:30 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:41:39 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:39 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, 0x0, 0x0, {r2}}, 0x58) 15:41:39 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:41:39 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x0, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:39 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, 0x0, 0x0, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:41:39 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:39 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), 0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, 0x0, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:41:39 executing program 7: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:39 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, 0x0, 0x0, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:41:39 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0), 0x0, {r2}}, 0x58) 15:41:39 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x0, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:39 executing program 7: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:39 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:41:39 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:39 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), 0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, 0x0, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:41:39 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:41:39 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, 0x0, 0x0, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:41:40 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0), 0x0, {r2}}, 0x58) 15:41:49 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0), 0x0, {r2}}, 0x58) 15:41:49 executing program 7: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:49 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x0, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:49 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, 0x0, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:41:49 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:41:49 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), 0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, 0x0, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:41:49 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:41:49 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:49 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:49 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:49 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, 0x0, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:41:49 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:41:49 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), 0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, 0x0}, 0x58) 15:41:58 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:41:58 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:58 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:58 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:58 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, 0x0, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:41:58 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = getpid() syz_open_procfs(r2, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r2], 0x1}, 0x58) 15:41:58 executing program 7: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:58 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), 0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, 0x0}, 0x58) 15:41:58 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), 0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, 0x0}, 0x58) 15:41:58 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:58 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = getpid() syz_open_procfs(r2, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r2], 0x1}, 0x58) 15:41:58 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:58 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:58 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:41:58 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, 0x0, 0x0, {r0}}, 0x58) 15:41:58 executing program 7: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:58 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), 0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)}, 0x58) 15:41:58 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:41:58 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = getpid() syz_open_procfs(r2, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r2], 0x1}, 0x58) 15:41:58 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1}, 0x58) 15:42:07 executing program 7: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:07 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:07 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1}, 0x58) 15:42:07 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, 0x0) r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:42:07 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), 0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)}, 0x58) 15:42:07 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:42:07 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:07 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, 0x0, 0x0, {r0}}, 0x58) 15:42:07 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:07 executing program 2: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), 0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)}, 0x58) 15:42:07 executing program 7: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:07 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:42:16 executing program 7: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:16 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:16 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0xfc, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:16 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, 0x0) r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:42:16 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:42:16 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, 0x0, 0x0, {r0}}, 0x58) 15:42:16 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1}, 0x58) 15:42:16 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:16 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0), 0x0, {r0}}, 0x58) 15:42:16 executing program 7: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:16 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:16 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:42:16 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:16 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0xfc, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:16 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0), 0x0, {r0}}, 0x58) 15:42:16 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, 0x0) r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:42:16 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:42:16 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:42:16 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0), 0x0, {r0}}, 0x58) 15:42:25 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0xfc, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:25 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:25 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) r3 = getpid() syz_open_procfs(r3, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r3], 0x1, {r2}}, 0x58) 15:42:25 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:42:25 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:25 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:25 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:42:25 executing program 7: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:42:25 executing program 7: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:42:25 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:42:25 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:42:33 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:42:33 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:42:33 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) 15:42:33 executing program 7: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:42:33 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:33 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:33 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:42:33 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:33 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) openat$nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0) 15:42:33 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0) 15:42:33 executing program 4: clock_gettime(0x0, &(0x7f00000000c0)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:42:34 executing program 7: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:34 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:34 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:34 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) openat$nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0) 15:42:34 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:34 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:42:34 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:42:34 executing program 4: mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:42:34 executing program 7: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:43 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:42:43 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)) openat$nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0) 15:42:43 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:43 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), 0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, 0x0, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:42:43 executing program 4: mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:42:43 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0), 0x0, {r0}}, 0x58) 15:42:43 executing program 7: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:43 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:43 executing program 2: openat$nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0) 15:42:43 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0), 0x0, {r0}}, 0x58) 15:42:43 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x100, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:43 executing program 7: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:43 executing program 4: mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:42:43 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:43 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), 0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, 0x0, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:42:43 executing program 2: openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:42:43 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0), 0x0, {r0}}, 0x58) 15:42:43 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:42:43 executing program 2: openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:42:52 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:52 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x100, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:52 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), 0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, 0x0, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:42:52 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:42:52 executing program 4: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:42:52 executing program 7: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:42:52 executing program 2: openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:42:52 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100)) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)}, 0x58) 15:43:06 executing program 0: clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)}, 0x58) 15:43:06 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:43:06 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:43:06 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x100, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:43:06 executing program 4: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:43:06 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:43:06 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:43:06 executing program 7: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:43:06 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:43:06 executing program 0: clone3(0x0, 0x0) 15:43:06 executing program 4: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:43:06 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0xcc, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:43:06 executing program 7: clock_gettime(0x0, &(0x7f00000000c0)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:43:06 executing program 0: clone3(0x0, 0x0) 15:43:06 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:43:06 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:43:06 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:43:06 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:43:06 executing program 0: clone3(0x0, 0x0) 15:43:06 executing program 7: clock_gettime(0x0, &(0x7f00000000c0)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:43:06 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0xcc, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:43:14 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:43:14 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:43:14 executing program 4: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:43:14 executing program 7: clock_gettime(0x0, &(0x7f00000000c0)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:43:14 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:43:14 executing program 0: clone3(&(0x7f0000002300)={0x0, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)}, 0x58) 15:43:14 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0xcc, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:43:14 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:43:14 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, 0x0) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:43:14 executing program 4: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:43:14 executing program 0: clone3(&(0x7f0000002300)={0x0, 0x0, &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)}, 0x58) 15:43:14 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:43:14 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:43:14 executing program 4: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x0, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:43:14 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:43:14 executing program 7: mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:43:14 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:43:14 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, 0x0) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:43:24 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:43:24 executing program 0: clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)}, 0x58) 15:43:24 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:43:24 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, 0x0) r2 = geteuid() ioprio_set$uid(0x3, r2, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:43:24 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:43:24 executing program 7: mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:43:24 executing program 6: clock_gettime(0x0, &(0x7f00000000c0)) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:43:24 executing program 4: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x0, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:43:24 executing program 0: clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)}, 0x58) 15:43:24 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:43:24 executing program 4: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x0, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:43:24 executing program 7: mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:43:24 executing program 6: clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:43:24 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) [ 750.972158] kworker/u10:1 (43) used greatest stack depth: 24048 bytes left 15:43:33 executing program 4: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:43:33 executing program 7: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:43:33 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0xfc, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:43:33 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:43:33 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0xee00, 0xee01, r2, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:43:33 executing program 6: clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:43:33 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:43:33 executing program 0: clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)}, 0x58) 15:43:33 executing program 0: clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, &(0x7f0000002280)=""/3, &(0x7f00000022c0)}, 0x58) 15:43:33 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0xfc, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:43:33 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0xee00, 0xee01, r2, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:43:33 executing program 0: clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000022c0)}, 0x58) 15:43:33 executing program 7: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:43:33 executing program 0: clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15:43:33 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:43:33 executing program 4: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:43:33 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:43:33 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0xfc, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:43:33 executing program 6: clone3(0x0, 0x0) 15:43:33 executing program 0: clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15:43:42 executing program 6: clone3(0x0, 0x0) 15:43:42 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, 0x0, 0xee00, 0xee01, r2, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:43:42 executing program 4: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:43:42 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:43:42 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:43:42 executing program 7: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:43:42 executing program 0: clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15:43:42 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:43:42 executing program 6: clone3(0x0, 0x0) 15:43:42 executing program 4: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:43:42 executing program 6: clone3(&(0x7f0000002300)={0x0, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:43:53 executing program 4: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:43:53 executing program 6: clone3(&(0x7f0000002300)={0x0, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:43:53 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, 0x0, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:43:53 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:43:53 executing program 7: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:43:53 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000001540)}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:43:53 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:43:53 executing program 0: clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15:43:53 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:43:53 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:43:53 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000001540)}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:43:53 executing program 4: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:43:53 executing program 6: clone3(&(0x7f0000002300)={0x0, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:43:53 executing program 7: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x0, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:43:53 executing program 0: clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15:43:53 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, 0x0, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:43:53 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000001540)}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:43:53 executing program 6: clone3(&(0x7f0000002300)={0x10000000, 0x0, &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:43:53 executing program 0: clone3(&(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 15:43:53 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x100, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:43:53 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:43:53 executing program 7: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x0, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:44:01 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, 0x0, 0x5, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r3 = geteuid() ioprio_set$uid(0x3, r3, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:44:01 executing program 7: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x0, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:44:01 executing program 0: clone3(0x0, 0x0) 15:44:01 executing program 6: clone3(&(0x7f0000002300)={0x10000000, 0x0, &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:01 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:44:01 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x100, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:44:01 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:10 executing program 0: clone3(0x0, 0x0) 15:44:10 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:44:10 executing program 4: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:44:10 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x0, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:44:10 executing program 2: mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:10 executing program 6: clone3(&(0x7f0000002300)={0x10000000, 0x0, &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:10 executing program 7: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:44:10 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x100, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:44:10 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x0, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:44:10 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0xcc, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:44:10 executing program 0: clone3(0x0, 0x0) 15:44:10 executing program 2: mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:10 executing program 6: clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), 0x0, &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:10 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0xcc, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:44:10 executing program 7: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:44:11 executing program 2: mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:11 executing program 4: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:44:11 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:44:11 executing program 6: clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), 0x0, &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:11 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0xcc, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:44:11 executing program 0: clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), 0x0, &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:11 executing program 2: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:11 executing program 6: clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), 0x0, &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:11 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:44:21 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:44:21 executing program 7: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:44:21 executing program 0: clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), 0x0, &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:21 executing program 4: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:44:21 executing program 6: clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), 0x0, {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:21 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:44:21 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x0, 0x1}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:44:21 executing program 2: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:21 executing program 4: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:44:30 executing program 4: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:44:30 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:44:30 executing program 2: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:30 executing program 0: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, 0x0) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:44:30 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:44:30 executing program 7: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:44:30 executing program 6: clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), 0x0, {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:30 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:44:30 executing program 7: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:44:30 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:30 executing program 4: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:44:30 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:44:30 executing program 0: clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), 0x0, &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:30 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:44:30 executing program 6: clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), 0x0, {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:30 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:44:30 executing program 7: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:44:30 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:44:30 executing program 4: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:44:31 executing program 0: clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), 0x0, &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:31 executing program 7: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:44:39 executing program 6: clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, 0x0, 0x0, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:39 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:44:39 executing program 0: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:44:39 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5}, 0x40, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:44:39 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:44:39 executing program 7: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:44:39 executing program 4: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:44:39 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:39 executing program 7: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:44:39 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:39 executing program 4: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:44:39 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:44:39 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:44:39 executing program 6: clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, 0x0, 0x0, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:39 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000001540)}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:44:39 executing program 4: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:44:39 executing program 0: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:44:39 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x0, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:44:39 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0x0, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:44:39 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x0, &(0x7f0000000100)={r0, r1+10000000}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:48 executing program 6: clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, 0x0, 0x0, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:48 executing program 7: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:44:48 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x0, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:44:48 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000001540)}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:44:48 executing program 0: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:44:48 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0x0, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:44:48 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x0, &(0x7f0000000100)={r0, r1+10000000}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:48 executing program 4: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:44:48 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x0, &(0x7f0000000100)={r0, r1+10000000}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:48 executing program 4: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:44:48 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000001540)}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:44:57 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0x0, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:44:57 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:44:57 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:57 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x0, &(0x7f0000000100)={r0, r1+10000000}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:57 executing program 7: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:44:57 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x0, 0xf0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:44:57 executing program 4: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:44:57 executing program 6: clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, 0x0, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:57 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:44:57 executing program 4: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:44:58 executing program 0: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, 0x0, 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) [ 843.512263] [ 843.512563] ===================================== [ 843.513246] WARNING: bad unlock balance detected! [ 843.513920] 6.19.0-rc5-next-20260116 #1 Not tainted [ 843.514633] ------------------------------------- [ 843.515391] syz-executor.4/12973 is trying to release lock (rcu_read_lock) at: [ 843.516445] [] __wait_on_freeing_inode+0x105/0x350 [ 843.517380] but there are no more locks to release! [ 843.518085] [ 843.518085] other info that might help us debug this: [ 843.519010] 4 locks held by syz-executor.4/12973: [ 843.519694] #0: ffff88800f7a03f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 843.521232] #1: ffff88803ccb96f0 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 843.526052] #2: ffff88800f7a4950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 843.529310] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 843.530632] [ 843.530632] stack backtrace: [ 843.531287] CPU: 1 UID: 0 PID: 12973 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 843.531314] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 843.531326] Call Trace: [ 843.531334] [ 843.531342] dump_stack_lvl+0xca/0x120 [ 843.531386] ? __wait_on_freeing_inode+0x105/0x350 [ 843.531412] print_unlock_imbalance_bug+0x118/0x130 [ 843.531439] ? __wait_on_freeing_inode+0x105/0x350 [ 843.531465] lock_release+0x1ee/0x270 [ 843.531492] __wait_on_freeing_inode+0x10a/0x350 [ 843.531518] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 843.531547] ? __pfx_var_wake_function+0x10/0x10 [ 843.531578] ? lock_is_held_type+0x9e/0x120 [ 843.531599] insert_inode_locked+0x25f/0x890 [ 843.531630] __ext4_new_inode+0x223d/0x4cd0 [ 843.531661] ? __pfx___ext4_new_inode+0x10/0x10 [ 843.531687] ? __pfx___dquot_initialize+0x10/0x10 [ 843.531719] ? __pfx_avc_has_perm+0x10/0x10 [ 843.531748] ext4_symlink+0x623/0xb40 [ 843.531781] ? __pfx_ext4_symlink+0x10/0x10 [ 843.531810] ? security_inode_permission+0x72/0xe0 [ 843.531833] vfs_symlink+0x44b/0x840 [ 843.531879] filename_symlinkat+0x158/0x440 [ 843.531906] ? __pfx_filename_symlinkat+0x10/0x10 [ 843.531931] ? strncpy_from_user+0x21b/0x2f0 [ 843.531960] __x64_sys_symlink+0x82/0x110 [ 843.531985] do_syscall_64+0xbf/0x420 [ 843.532009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.532031] RIP: 0033:0x7f319201b427 [ 843.532048] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 843.532067] RSP: 002b:00007fffa5f79e78 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 843.532087] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f319201b427 [ 843.532101] RDX: 00007fffa5f79f57 RSI: 00007f3192076019 RDI: 00007fffa5f79f40 [ 843.532114] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fffa5f79d10 [ 843.532127] R10: 00007fffa5f79bc7 R11: 0000000000000206 R12: 0000000000000001 [ 843.532140] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffa5f79f40 [ 843.532159] [ 843.560044] ------------[ cut here ]------------ [ 843.560725] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.4/12973 [ 843.562452] Modules linked in: [ 843.563007] CPU: 1 UID: 0 PID: 12973 Comm: syz-executor.4 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 843.566620] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 843.569452] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 843.570386] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 843.573096] RSP: 0018:ffff88804573f9a0 EFLAGS: 00010286 [ 843.574188] RAX: 00000000ffffffff RBX: ffff888042d45280 RCX: ffffffff815660f7 [ 843.575605] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff888042d4567c [ 843.577029] RBP: ffff888042d45280 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 843.578454] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888042d45280 [ 843.579981] R13: 0000000000000001 R14: ffffffff85c102b0 R15: ffff88803cdf4f58 [ 843.581167] FS: 0000555581b42400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000 [ 843.582425] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 843.583360] CR2: 00007f319209b544 CR3: 000000004475d000 CR4: 0000000000350ef0 [ 843.584513] Call Trace: [ 843.585183] [ 843.586546] __wait_on_freeing_inode+0x10f/0x350 [ 843.587978] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 843.590110] ? __pfx_var_wake_function+0x10/0x10 [ 843.592441] ? lock_is_held_type+0x9e/0x120 [ 843.594511] insert_inode_locked+0x25f/0x890 [ 843.597589] __ext4_new_inode+0x223d/0x4cd0 [ 843.602304] ? __pfx___ext4_new_inode+0x10/0x10 [ 843.604607] ? __pfx___dquot_initialize+0x10/0x10 [ 843.606101] ? __pfx_avc_has_perm+0x10/0x10 [ 843.609434] ext4_symlink+0x623/0xb40 [ 843.613690] ? __pfx_ext4_symlink+0x10/0x10 [ 843.615622] ? security_inode_permission+0x72/0xe0 [ 843.618691] vfs_symlink+0x44b/0x840 [ 843.621161] filename_symlinkat+0x158/0x440 [ 843.623370] ? __pfx_filename_symlinkat+0x10/0x10 [ 843.624857] ? strncpy_from_user+0x21b/0x2f0 [ 843.628369] __x64_sys_symlink+0x82/0x110 [ 843.629738] do_syscall_64+0xbf/0x420 [ 843.631291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.632296] RIP: 0033:0x7f319201b427 [ 843.633023] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 843.635685] RSP: 002b:00007fffa5f79e78 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 843.636866] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f319201b427 [ 843.637959] RDX: 00007fffa5f79f57 RSI: 00007f3192076019 RDI: 00007fffa5f79f40 [ 843.639053] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fffa5f79d10 [ 843.640168] R10: 00007fffa5f79bc7 R11: 0000000000000206 R12: 0000000000000001 [ 843.641256] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffa5f79f40 [ 843.646224] [ 843.646576] irq event stamp: 227 [ 843.647133] hardirqs last enabled at (227): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 843.648686] hardirqs last disabled at (226): [] _raw_spin_lock_irqsave+0x53/0x60 [ 843.650249] softirqs last enabled at (222): [] kernel_fpu_end+0x59/0x70 [ 843.651611] softirqs last disabled at (220): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 843.653092] ---[ end trace 0000000000000000 ]--- 15:44:58 executing program 7: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:44:58 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:44:58 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:58 executing program 6: clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, 0x0, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:58 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:44:58 executing program 7: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:44:58 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:58 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:44:58 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0x0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:44:58 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:44:58 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:45:05 executing program 6: clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, 0x0, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:45:05 executing program 4: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[r1], 0x1, {r0}}, 0x58) 15:45:05 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:45:05 executing program 0: clock_gettime(0x0, &(0x7f00000000c0)) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, 0x0) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:45:05 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0x0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:45:05 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x0, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:45:05 executing program 7: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:45:05 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={0x0, r0+10000000}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:45:06 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={0x0, r0+10000000}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:45:06 executing program 5: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000000)=""/19) r0 = getpgid(0x0) r1 = fork() shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000040)={{0x0, 0xffffffffffffffff, 0x0, 0x0, 0xee00, 0x1a, 0xfff8}, 0x9, 0x6, 0x7, 0x0, r0, r1, 0x6}) syz_open_procfs(r0, &(0x7f00000000c0)='net/arp\x00') r2 = geteuid() getresgid(&(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180)) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000001c0)={{0x0, r2, 0xee00, 0xee01, r3, 0x5, 0x1}, 0x40, 0x0, 0x1, 0x5400000000, r1, r0, 0x1}) r4 = geteuid() ioprio_set$uid(0x3, r4, 0xd) shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil) waitid(0x1, r1, &(0x7f0000000480), 0x4, &(0x7f0000000500)) 15:45:06 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x0, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:45:06 executing program 3: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x1103, 0x3}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) 15:45:06 executing program 7: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) syz_open_procfs(0x0, &(0x7f00000017c0)='gid_map\x00') clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r0}}, 0x58) 15:45:06 executing program 4: clock_gettime(0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)) setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000140), 0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = getpid() syz_open_procfs(r1, &(0x7f00000017c0)='gid_map\x00') clone3(0x0, 0x0) 15:45:06 executing program 6: clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, 0x0}, 0x58) 15:45:06 executing program 2: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={0x0, r0+10000000}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1}, 0x58) 15:45:06 executing program 1: clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000000)=""/154, 0x9a, 0x20000000, &(0x7f0000000100)={r0, r1+10000000}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001700)={0x110, 0x0, &(0x7f0000001580)=[@enter_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fda={0x66646185, 0x2, 0x2, 0x38}, @flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/31, 0x1f, 0x1, 0xd}}, &(0x7f00000002c0)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@ptr={0x70742a85, 0x0, &(0x7f0000000300)=""/234, 0xea, 0x2, 0x3e}, @fd, @fd}, &(0x7f0000000480)={0x0, 0x28, 0x40}}, 0x1000}, @register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f00000014c0)={@ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/4096, 0x1000, 0x0, 0x2a}, @flat=@handle={0x73682a85, 0xa, 0x3}, @fda={0x66646185, 0x0, 0x1, 0xa}}, &(0x7f0000001540)={0x0, 0x28, 0x40}}}, @request_death, @acquire_done={0x40106309, 0x3}], 0x40, 0x0, &(0x7f00000016c0)="6c664e4be0de46cbc97d29af756b0a6ad51ed28637bc6d13a8e05d63559ca42c15eb7dd8ed5737e74ac362fa63ad2dca6c21c377dcdc695a4c38ed16b6cb1471"}) clone3(&(0x7f0000002300)={0x10000000, &(0x7f0000002100), &(0x7f0000002140), &(0x7f0000002180), {0x18}, &(0x7f00000021c0)=""/147, 0x93, &(0x7f0000002280)=""/3, &(0x7f00000022c0)=[0x0], 0x1, {r2}}, 0x58) VM DIAGNOSIS: 15:44:58 Registers: info registers vcpu 0 RAX=fffffbfff0b82d11 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=fffffbfff0b82d10 RSP=ffff88801a24faf8 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff11003449f63 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88801a24fb48 RIP=ffffffff81b3c9e7 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555590357400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000555581b42708 CR3=000000000c106000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88804573f488 R8 =0000000000000000 R9 =ffffed10016e3046 R10=0000000000000020 R11=666666203a322320 R12=0000000000000020 R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120 RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555581b42400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f319209b544 CR3=000000004475d000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000ff0000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000