last executing test programs:

4m4.068165309s ago: executing program 1 (id=188):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
open(&(0x7f0000001480)='./file0\x00', 0x96b80, 0x1ed)
setreuid(0x0, 0x0)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000000c0)={0x5, 0x1, {0x1, @usage=0x8, 0x0, 0x4, 0xfffffffffffffffe, 0xadd, 0x80000000, 0x0, 0x20, @struct={0xc, 0x2}, 0xfffffff8, 0xb, [0x0, 0xffffffffff4c4201, 0x74, 0x100000000, 0x6, 0xd4c]}, {0x0, @usage=0xc000000000, 0x0, 0x4, 0xc31, 0x8000000000000001, 0x0, 0x2, 0x0, @struct={0xbbf0, 0x200}, 0x3, 0x5, [0x57e, 0x6, 0x5, 0x1, 0x1, 0x8]}, {0x8, @struct={0xa54c, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0xe631263, 0x101, 0xa85e, 0x8, @usage=0x4, 0xc000, 0x7fffffff, [0x0, 0xe621, 0x10, 0x5, 0xfffffffffffffff9, 0xc]}, {0x5, 0x8001, 0x3}})
openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000008c0)='cgroup.procs\x00', 0x2, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000000000e1"])
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000000)=[@increfs, @release={0x40046306, 0x1}, @increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0})

4m4.0081032s ago: executing program 1 (id=190):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4m3.860170373s ago: executing program 1 (id=192):
r0 = openat$kvm(0xffffff9c, &(0x7f0000000280), 0x28800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"])
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x205, 0x6, 0x0, 0x0, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x4, 0x0, 0x7, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x4, 0x2000000, 0x0, 0xa8, 0x0, 0x3, 0xc2e5, 0x2, 0x0, 0x3, 0x7fffffffffffffff, 0x0, 0xfffffffffffffffc], 0x10000, 0x202})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x0, 0xe, 0x0, 0x0, 0x0, 0xa8, 0x0, 0x34, 0x7}, {0x2000, 0xffff1000, 0xc, 0x0, 0x7, 0x1, 0x0, 0x1, 0x3, 0x0, 0x10, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x8}, {0xeeee8001, 0xffff1000, 0x9, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x3c}, {0x6000, 0x0, 0x4, 0x0, 0x20, 0x0, 0x2, 0x8, 0x0, 0x0, 0x5, 0x20}, {0xeeef0000, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x0, 0x3000, 0xb, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x2000}, {0xdddd1000}, 0xddf8ffdf, 0x0, 0x5000, 0x50, 0x0, 0xf801, 0x0, [0x8, 0x0, 0x1]})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

4m3.782692225s ago: executing program 1 (id=193):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
r1 = fcntl$dupfd(r0, 0x0, r0)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4021)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
unshare(0x22020600)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000fedbdf250600000008000300", @ANYRES32=r3, @ANYBLOB="0c0099003b0019006b000001e152f6cb87878345c19619b852289ef298b71629af4d879009a0bbf013fd58e02f3dec4210283976ae2668f78122517a1345dc7bce422ff3abfa21e1091c280e3324393a993dcbd75ae2f49006bc6dce0416e480595cb88f1a3f"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x5)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0)
pselect6(0x40, &(0x7f0000000000)={0xb, 0x100000000, 0x1, 0x9, 0xaae5, 0x2, 0x101}, 0x0, 0x0, 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x2, 0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)={0x30000009})
r7 = open$dir(0x0, 0x7e, 0x0)
writev(r7, 0x0, 0x0)
close_range(r5, 0xffffffffffffffff, 0x0)
mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000080))

4m3.762289085s ago: executing program 1 (id=194):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async)
personality(0x5400004) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x7, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000004380)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591438d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0226cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296565722d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fda8bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f1cb390aaf82b0bc6af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde67f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c51ca11116b21e87887b462aa9770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c97cba5ca94ef1c555d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46babdb9247ce8eabad9718a8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a65247317882fbf171520f00b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0ca62212a1b6d41043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5b38f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077bec885ce88d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc670ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f9", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000001, {0x0, 0xffffffffffffffff, 0x9, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0x1, 0xffffffffffffffff, 0x102, 0x101, 0x6, 0x4, 0xc000, 0xfffefffc, r2, 0x0, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x4, 0xffffffffb3aada3c, 0xe00, 0x0, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0xfac1}}, 0x50) (async)
r3 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) (async)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r3) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x2)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4040140)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async)
r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) (async)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r6, &(0x7f00000029c0)={0x2020}, 0x2020)

4m3.668107477s ago: executing program 1 (id=195):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f0000000380)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0xe, [{@multicast1, 0x9}]}]}}}], 0x20}, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8edc11615cb9fab16"}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x60, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffdcc, 0x0, 0x0, 0x0}, 0x400}, @increfs={0x40046304, 0x80}], 0x55, 0x0, &(0x7f0000000500)="bcbc648bc9c07baf3789df6d877eac314ecc82d9c71ab1ecebefe99af20b4ab3cb820245a3692f3ac6a588df8de17d26b23105f63a0eeca6f09a8fe84b267ea7bd0e06c1f342a81542e35e27b0431c30a12ff4db2b"})

4m3.656814367s ago: executing program 32 (id=195):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f0000000380)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0xe, [{@multicast1, 0x9}]}]}}}], 0x20}, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8edc11615cb9fab16"}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x60, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffdcc, 0x0, 0x0, 0x0}, 0x400}, @increfs={0x40046304, 0x80}], 0x55, 0x0, &(0x7f0000000500)="bcbc648bc9c07baf3789df6d877eac314ecc82d9c71ab1ecebefe99af20b4ab3cb820245a3692f3ac6a588df8de17d26b23105f63a0eeca6f09a8fe84b267ea7bd0e06c1f342a81542e35e27b0431c30a12ff4db2b"})

3m10.271812084s ago: executing program 3 (id=810):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(r1, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x1d0, r2, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x90}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5b}]}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe086}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}]}, @TIPC_NLA_NODE={0x9c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x80000000}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "a0bcaf869fd9bab5431f397a238a83bb3ce8d46a8aa1263e75a88ee0f26f9e11"}}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "4cc016f5f88dc2067df46665ff6c629aba3758e902f0e14ee9b1cf859d"}}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x4008001}, 0x40811)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f00000002c0)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/101, 0x65, 0x0, 0x39}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000200)=[@increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0})

3m10.215133075s ago: executing program 3 (id=812):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3#\x82\xf7\x92\x10\x02k!i\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\x99\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdbv\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,{\xd3:`G\x81oN\xbd\x0f\xb8\xb7\xc0\xb8\"T0Z\xb1\x18\xe2\xd4&\xdb\x19\xb1\xbe\xcc}\x9d\x84\x10\x0e8^.d\xe1wSJ\xcf\xec\t\x12\x8b\xe1\x92\xf9hq\xbbs\x80x\xd5\xee~\xef\xea\x018\xec\xc3t\x992\xea\x93\x92\xdb\xb0|sdK\n\x8eN\x9a\x02\xe2\xdd\xf7Ho\x0f\"\f\xaf\xd7hb\a\x00\x00$\x1a\xc9\x06\x12Bg\x1a\xc8$v\xa2\xa1\xad\xed{\x8a\x0fn\xa8U0B\b\xc3Y=\xa6\xe9=m\xdc\xd9\x03\xa8\x93\x9c\xb6\xf8\xfc\xbb\n\xd9\xc8{\x1cs\xf5\xbd^\xb1\xda\x8f\xcb\xc5R\xe7b\xdf\xae\x7fo\x98\xc9\xf2\xa6\xa8\xaa)\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00}\x83\xd8\rX@\xa2JA\x84\xcc6\xc8\x05r\xb0\xbe\xf5\\\xfc\xb0\xa1\xb1\xa1`%S\xbe\xf4\xf3\x1cVD\xc9\x04\x1d\xc4#\xe9m\xa1\x82\x9a\x1e\x9c\xd1\"?4c7\x00Jf\x8a:X\xe1u\xb14.tf\xbd\x9b\xac\xa7\xb0o\x0e\xac!\x1f\x91+\xe2w\"\xf8\x9b\xe4\x8e\xcf#>\xbfi!\xc0\xc5\xd6\xab\xe2\xb8\x8e\x99}\x00j\x8d\xa7Z\xf3\xde%D\xe6U\'\\\xe8\xd6UV\x1f%\x0f\r^\xd1\xe8e3\xaa\x0f\xbf\xfc\x05\xd6\xe2\xc2\xbeN\xa9\xa4J\xd4~iK\"\xe6\xda0\x87\xe3\b3c\xd9ox\xecP\xc3\x81\xd2\x1aC\xb0\xed\xf8}\x18\xce\xe9\x86\xc9\xb4\xc8K<,\v\xac\xdc\xd6\xb8u\x01\xa9NQ\x9c\xa0\re\x13\xbdM\x8e\xf1\xc7h\xd3f\x8b\x10\xce\x91\xd4\x97\xfbt\xae\r^\xd7q\xea\x02\xc00\x10\x9a\xb1k\x8e%\xe1\x13\x9d')
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
ptrace$setregs(0xd, 0x0, 0x0, 0x0)
write$P9_RVERSION(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r5 = dup(r4)
write$P9_RLERRORu(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00F\x00'], 0x53)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}})
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x4, @dev={0xac, 0x14, 0x14, 0x22}, 0x4e23, 0x2, 'sed\x00', 0x2e, 0x8, 0x2c}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e22, 0x1, 0x6, 0x7fffffff, 0x6}}, 0x44)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000440)={'syztnl1\x00', <r7=>0x0, 0x29, 0x0, 0x6, 0x0, 0x42, @mcast2, @empty, 0x10, 0x1, 0xf, 0x5}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000200)={'tunl0\x00', &(0x7f00000004c0)={'erspan0\x00', r7, 0x7, 0x1, 0x1, 0x11800000, {{0x13, 0x4, 0x3, 0x9, 0x4c, 0x68, 0x0, 0xb8, 0x29, 0x0, @remote, @rand_addr=0x64010101, {[@timestamp={0x44, 0x8, 0xd, 0x0, 0x1, [0x7]}, @cipso={0x86, 0x2d, 0x1, [{0x7, 0x4, "9362"}, {0x2, 0xf, "c19c28bfc68ada81cca0ad61de"}, {0x6, 0x5, "a1141e"}, {0x5, 0x7, "b9d7c5dba7"}, {0x1, 0x3, "db"}, {0x2, 0x5, "9830dd"}]}]}}}}})
r8 = socket$key(0xf, 0x3, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r9 = syz_open_dev$ptys(0xc, 0x3, 0x0)
ioctl$TCXONC(r9, 0x40045436, 0x0)
sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x2, 0xd, 0x0, 0x3, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @empty}}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x50}}, 0x0)
r10 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r10, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r10, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r10, 0x0, 0x0)
syz_usb_control_io$printer(r10, 0x0, 0x0)

3m7.127898615s ago: executing program 3 (id=870):
r0 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r0, &(0x7f0000000040)="8a8692436f94edcf88da76470e4799d09902a0dbbb1c1b659c0b3155033e6c85c3162bbbc3a86d4f8f49dba09ef73e63959328b7d6", 0x35, 0x4, 0x0, 0x0) (async)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x400001000001fe) (async)
r2 = accept4$tipc(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x10, 0x80800)
setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'pimreg0\x00', 0x10})
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c0000000108010200000000000000000200000605000300110000003c000480080001400c013eea08000140000000040800014000000200080001400000000108000140000015de0800014000000008080001400000000205000300840000001c000400000100400000000308000140000000060800014000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
write$tun(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff020000000000000000000000000001042022eb"], 0xfdef) (async)
ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200000, 0x0) (async)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xf, 0x13, r1, 0xca639000) (async)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000100))

3m7.067902656s ago: executing program 3 (id=871):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x1100020, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
unshare(0x22020600)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1b96, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=<r2=>0x0)
syz_open_procfs(r2, &(0x7f0000000240)='net/bnep\x00')
syz_usb_control_io(r1, 0x0, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000))
r3 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x47d})
ioctl$UFFDIO_REGISTER(r3, 0x8010aa01, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\"\n'], 0x0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, <r5=>0x0, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000000080)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
syz_fuse_handle_req(r4, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r4, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="7801000000000000f9ffffffffffffff0500000000000000020000000000000003000000000000000900000000000000050000000c000000060000000000000009000000fcea7afdc279acb200000000fe0000000000000003000000000000000000000000000000ffffff7f040000000300000000200000ff030000", @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="040000000400000000000000000000000000200037050000000000002b"], 0x0, 0x0, 0x0})
getdents64(r7, 0x0, 0x0)
syz_fuse_handle_req(r4, 0x0, 0x0, 0x0)
mount$cgroup2(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x263c8c, 0x0)
read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020)

3m4.036001495s ago: executing program 3 (id=901):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="210000001a00010000000000e4af4d0045aaf99f"], 0x14}, 0x1, 0x0, 0x0, 0x20004040}, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x10, r0, 0x1d329000)

3m3.987287146s ago: executing program 3 (id=902):
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x16, 0x0, 0x0, 0xfffffffffffffffa, 0x11, 0x0, 0x3, 0x30})
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="380100"], 0x138)
setxattr$trusted_overlay_origin(&(0x7f0000001400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x2)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000002a80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
mount$bpf(0x0, 0x0, 0x0, 0x800000, &(0x7f0000000240)=ANY=[@ANYBLOB='u'])
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)="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", 0x1f000)

3m3.957835367s ago: executing program 33 (id=902):
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, 0x16, 0x0, 0x0, 0xfffffffffffffffa, 0x11, 0x0, 0x3, 0x30})
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="380100"], 0x138)
setxattr$trusted_overlay_origin(&(0x7f0000001400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000140), &(0x7f0000000180), 0x2, 0x2)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000002a80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
mount$bpf(0x0, 0x0, 0x0, 0x800000, &(0x7f0000000240)=ANY=[@ANYBLOB='u'])
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
write(r3, &(0x7f0000000400)="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", 0x1f000)

2m20.884713573s ago: executing program 2 (id=1613):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2100, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f00007be000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x2c, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f00007cf000/0x2000)=nil})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40488a0)
ioctl$KVM_GET_TSC_KHZ_vm(r1, 0xaea3)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2m20.876713393s ago: executing program 2 (id=1614):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="22e3251524bc70f5fbc250fb7d316c", 0xf}], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
symlink(&(0x7f0000000040)='.\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_follow}, {@xino_on}]})
chdir(&(0x7f0000000100)='./bus\x00')
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
chdir(0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0)

2m20.831977724s ago: executing program 2 (id=1615):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = timerfd_create(0x8, 0x0)
timerfd_settime(r1, 0x1, &(0x7f00000020c0)={{0x77359400}, {0x0, 0x989680}}, 0x0)
timerfd_gettime(r1, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TCFLSH(r0, 0x540b, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x4)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000500)={0x44, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000400)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r2}, @flat=@binder={0x73622a85, 0x100}}, 0x0}}], 0x0, 0x0, 0x0})

2m20.787794325s ago: executing program 2 (id=1617):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20)
openat(0xffffffffffffff9c, 0x0, 0x20842, 0x22)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00')
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r1}, @flat=@weak_binder={0x77622a85, 0x29bdfb4895f82e9a, 0x1}, @flat=@binder={0x73622a85, 0x101, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"})

2m20.785786425s ago: executing program 2 (id=1618):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000580)={'filter\x00', 0x0, [0x7, 0x5, 0xeaaa]}, &(0x7f0000000600)=0x44)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="040100001a0007000800000000000000e638eda0f0691ff70000000000000001e0000002000000000000000000000000ffff00000000ffdf0000000033000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000004d42b000000fc000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000007000000000000000000000000002000c061771a000000007f000000000000000000000002000000700000000000000014000e"], 0x104}}, 0x4000040)
getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, 0x0, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x80, 0x0)
ioctl$RTC_ALM_SET(r3, 0x40247007, &(0x7f0000000480)={0x20, 0x1b, 0x4, 0x1d, 0xb, 0x2, 0x5, 0xe4, 0xffffffffffffffff})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0)
prctl$PR_SET_MM_AUXV(0x3c, 0xc, &(0x7f0000000000)="db", 0x1)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r5, 0x4068aea3, &(0x7f0000000040)={0xb6, 0x1000000})
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='dax\x00', 0x311885, 0x0)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000940)="bbe856235c8450c728f2429b215eb43aaf5052c7f66019bd31218f1841cf5fe1fa9b62aee5336b55abc52e17340c31b81d2e272746e1f90115271d9437ee2cad794031e7149ca05f83ee262bcae37b89db022cc45ce016def0d43c270f37f69acc0003916448ddffb1a05aef16d6a6582ad44627fe460288fee25b60fdb5fb0298061507bcb76c9764a8eabb284d92f46af938251f614aa0e1467c60f7ba96525484e82ca95f99077a8b9beea55078bdf564795388553b72708ec2bbb74b122c71ace95907420ffd7f2c17a8c4e3f3351dfed73261e29d698d852d56b5c3a29fc118b450d99f52c84dcdc5426667a5b8771a28e664ca93a224f16843660298b58507b05254b8495ccb1b3d9e0b8e5309f994acddfb812c82bb2b0b885f14d0711c1ac4f32a63a707103c533bc89e8dcf4d7b9e622d0372d1f9c7f0c8f724d858a47ff783e1a41cb253659c4cbe9a792cec08c497949a5e81b2b7bad7d23a3c0608acc983e2e460efe2055361253695d163c07efbbfa0ccff6a4cf7479113539ad68ef08939e0b3655f519451f04f39fac4ea50c4d706d82184fe516fdc26bf59ecf33075b402d22ea78266458cba89e078eea24ce4c056b34c73e2cd6cf65104dd28196307564a2ee31f7ab1694de1f2e66a019fcf37813268c503b438e0805eb855df707ab3137531fdb5320a594943bf6af8002ec7756083888bb5e548c800ab61608e4c45c598a27220e8422d645a0adb079abc20b794ee9761c498068677af1ba2cfd4db9841be0f7c819d10cc6f4dd46941b88cf6222f6253d61764b15299f934f5670f78c39c10ba6a5105c68e335995fb582c6525f5eb54ed4c49cc3414432b211ce4628674f453db358674ec575a73bfe4fca29111721d95318517906cc66e632e2bf677c599642c53c3cc70c8feb6376a32e1c98d7de6cc3f1dfcb33bf5d1646077655c0faa2a1b5357b09a5c18b88d56cae1c202e4aa767d835456e07b7f0795c1bf0854a663f9a3124e7bd8244f18a90adf49103e80786665507af8fb71be573bcee5db53812b01cbd4ea57f17bffd2c454f4bbad5daceda0ab9dc7a796a260c8cff0eb1f7631055d05bd6425b4e8e487b73626642dd834555ad607f3350fddcc1d36c0054026a88c3ba375864d03b1724426c7eb6532453faf8e87012542e10a5543eff4a5b93dbd1c296cc1e099bffbb19db50554216deabb4c96e4abe9b4a2893041328a607c9f53c5c8c12027a248671db27f7db2f006f890061b4e9d228b04b2cd65ade633be54650b0b299b67a1fcef3fb6615b502b1b70f0c08197db86e5352f29c9a467b849e9bb008d66ffbef91713ca81fc558f5eb847259c9a72b7bac4c75645d0ac1354b8165f773fa762c12a554beef40cf6ac2509c9ad88f85d703e9ba58f71c79f5f146448bf49c52f5d52e32cc25d52c024c1de88663002a5f2fc7622f3ea667781238b6af37a62b77c1b64ceece3285661e3e57e88bc3f2eb69a56a115972516474040099305465eff86fcc4ba780629eaf4f955f7c7b7c5e876237c1e708b8e826ef88002530a566ad8cc7ba98a0206bec88acc502cde84945410d6ed974ed145c5289e7e680a6b3677c8a2f72366021602e16b90f5023b89252d2f011ac3bd7645656f5d062a19ad3315213bc54ae511ee5e3f0091aadf659900f921b36116ba4fca86bbd9c341abdb20831716ee34ed5e2de721a94a61456d0c66a6b783c97bb513bae480961448cb36e5eb7755c4a3c17f84c2a56b9ed986c3b97841b7d9677523c00117bbda27fdbb8172cf8ec4529b0a36ac20c02b8b6cfd0e4716b4025b80da9615bdfae367f5e02198706dbbcd619f0b71893c22bfd0c2c8c78ff677d13a07359632c71f78c7d9d61a7bfc75903f3cb1c7ea411543dada7defbb43db1341e57554ca8c0cb9a32381290b10372c4a168f23631cd94756f743acaee707c323ed3fb534b496bbbbb83dae22eda9a74db95dad5c3528a2f77d08c9a0afa2a68c892e6f42674761511193614759724bfe478ab23e117f5c9d28badb7982670e7db03fd8c08c5c7d1a9e551a8e9e1c63503376706f7b4d71ec0eabe493b641fab61f4d0ec3f1b27ff7ed891997bd7c5a82d06258070c9bc61630e4cb1f35aa29aecca8202946678d193d2515c86dd34a5835a457dd9da10f56278526da87d8ae0e9b979cacdeba429f377f0a9da513bba2a576318774b5a82f4b26f14483c274e3c1164b19ebfd4c151cb0bcd486a29cdb04b5be8e90375e136c6847e21b5c89f588fcfa8c1a9e6827069dda417c679cf2ca4ca5566f7f0830c6176b9082915ab7b40a0a861a98f5ac25e326d50549eba9a176fbf5636a30115dcdd4d43834e9e7564d63f4ba34af9ebb3781d0c99996a0e181f626074fbd84ce3003edd5dce1447f49ddbc957c572919d244dd7f4130984a006bb74421b08ef18cec695fe4e18befb2de7bdbb2c53a8f05ce4b96cc44db21b04211fe7bd7ad26eea4dc5433c1bff12e698220bacedb386ca91604469888eecd39cb09ab008e125ed876df272214def17e1b1e497c30da3e9b140e7537dbf6bc41e70e24274f06de368e6621c8ce5d8af7c89cbd81de14369d46082683f36884bcb6b8c5830fcf94f274aded18bf9c05cc7969b7351a95df37d5a66ef7932b351cbbb7a50b65354eb38f44d8e87688df09a03ad674e9515e87d94b4ff3fac3269346a8da69b774ed731c4cd784f3de37a9c314db310ae77749d149c87426991e37a509fe0f891cabf3c4abdddb7c15354b8233c1f3e106f73c14240226f8d3a2adfa95dcd24e6dc5812ce542641dd80035204d00dc69cba0aed91207319ae99c0f14a37eaa424359a57ded3d59ce0990f3aa5860cce9408835fe4fa0310949a36c7a027d57f79513e62b7e12c448c7c78dc62787c69fe32ded77924278568a4f61f96890368adbbfd25156082b5629058032998e1b15d91f75f40ac1a39931b592036362d4b2c2df55d3f132d5509c88ae031d45dec134e45c6047f7464e63f3e26a1a790e5c9fbbb9bfae557c932bc7e1fb75fa4443e440eb58a2ff7b8dedb9677e55e206c01043a30a9bbf33b5110e407e43f4ef856831c1f9bfe8b388a89cc639fb72ef9e732e59642dd3bdfd2394aa524372261626f6ed702c48cfa6c8ba8cba023bf2b9f87187bea67fb9da02dd28c7938a89f832939b8675d0ec0594d4f5988b7e113936a074e60efcef88e84d91ca49521d657ac4296f1784dd3a4f00b7fbfa16e59a1944750bda31e4b053275f01f659a770c9daf0656daeab0f49337ed2e7d815b82bd0974d5b74ce670969ca3dac2dcac68faa0a691e9be34c076c177fae713b42037dfbca27cc8094c79a38b3be323e0d1e6cf65a1a89bac31dd653b7af1ed4f11f0d5a3c876a0c2440e10f00b496a9e99b3bd0c734e53073506cafef1f9d494a211bcf527a6aced818e582033cd6c11af7ad89ac311fb39b39cdc4f843c704be195ba56fe7d8a74f8e75162ff1308c857eab04ffd22467e932405061f74fd75c64d986314814bf5885d25ac691772543187f4bd20e9a797d019523d0a1fc42fee5a5b0e75efac4ca3c3d970a74bd88f9b08071bdaf832388a61ff29bc958db39116e89d54cf300f2709a83eabcedf7eb915558990d0029b8530021f5dec9a814364a06d6a8d1cb830f7e53ccd2c441e158d9a9aa548d0fb804187d6ebb56700d1f3527f8a67869edddfa1670df7a5a7cca397c4b6a59d5ca3833143a311529d4200597746cded1818aab9c7b3f76beb71e0c84ed7fffc19674a1db7790ea2185a86e8d27d0603c5a79d09f487d3bb2236a970fd9141e04ff8dabe8e566118884fa4d817bdf076f5024e7d0e23e228838a276bbed672d260b4370df30a8ff8d2c41386bb3554fb792b1133bc55c3c92bc9d50322831c4a2ac11ed51b0a997373586bc8ae692424f8a8b411367c59181ab2fa79e70cf11826c660277927c645cfc2709e49e906d80461d5172350def6e0230fedeb51d1b99c9adfc548526aea7f05d1914fe18c7db2b967bc7b58067c2daa8d1d07ca794d65f570516de4ae4fd7882ccc0b8a64316f70595e2c6c1d8bcebd249a43f7d83b2b8ed94f61186c41574c14045567c4f0a28f298350b93d886f2ae116a052218ee1ab4097d8453552ee987b659e0614d67cbff3fde88a55bb1b02fb2d8acc2b4ac43c690504db9b97eb6a1666237a595b3cb9ac65ea717a41ea7f0f1a79b0499ca8d26779f80011213a846fdb34358735266ed527193c752e8296711ff9f9885c208ff60035b63a687b4d86ca3ac93009cbb9194f08e866ab22ee31069bc0546dd88585039572ec9509b06d5168648776011e27c3268c209e9daa72c09b6c3f756b2866db36985e54cd3dbb63027cadc731f9b07c3e5fc4bf2bf70a8ec23999244dcc0b94c69b1c366a78059b92e766b5f139dee0f8b9bd3ddaef8f38a6f3bcaccbc17f731ab1f9c12cd595b1ef1327d762253717fb2fe7eb0a6ca19d95357a6085d29138e13d53cedbd3db4e713d6ee9cfe9907d65048943787c33160ae6d70066be37dad9ade1669d1e657ab7e242ba1893edd002fc8143548f01db1cd907b5febffaf008fbc40793fac8865147ad61a5538c3f3def6bfca32b5caeb32421a0ac608c8c9027ee8d89198f538d0ffd5df3bd89ea8809716c9f14be746b7cb97ff2a667a79579f0fefad7b648b48c37596026f2833787ab602f312c1c37eb36f82a382c1adda6850352a1212e05e067b8a07c6c2330fa617a2e9240ede61eb6d89850cecb86d7d3481797cfb8f7e65e81cd01ed42111fa336e954e1ec98840f9d8c61614818ceff7d005b8dc921adcbc10e90e892d3f9b8d9f42cc37113c0ccc47231fa8f6a561a56f0dc0df18f21a32d19ed9f0c80e7b9717958f0d318fa8ac4df303b0e62034460cb95384ea06f184680b01c6436e739b013b1a8b962802d6e48f1e34ee87f4dd89f68935742e1c9ba4518334ba946843332750178d872c68f1cf5fb647463425a952e80fab4c7faae50906e7506f5d3099074370a1fb84ac19a6cc29ec623915cc6a57ae1eec4c7e629af0c52191fcbeb7df9e230090e18e02bd7a0ea9348a8d5f48f0c5041cf205d570f6f355752d517a9d3c12b278e4c8838968c91e97b52dcb7a56c7bb726187281b19fd7a3ed72f62648ae5b795c543707421582c4fdb4acf746b65a51100a10aba42487c4496d9d27731c2935612336e9757c1f3b224e8617bf9fc5fdc1980ebe22be38ef3f15465dfb6ac03b2845f0f9258265a7ad1e13f97ee483ca7fa07c0ebe2133b82f411f404adddf325d0be417f033372620b85685a97397cc9a678f937009de7ec06a48453106388cbd425f9cd65114790d0550170dc382b6375c8678ad735068fdb6cac6c8348bd19bd8616c986b3812f85c601805feeefc52626365783cc59b4766f5ebd88087baf67ac696149f055ded175fd646703377a66fce43a806ded9ff455bf1413dcf74736fcccde38bff5d45e05e2129275e2b24dc4045c281149b5ad7f1f17629c7f860961b28f9693541a4ec6dcdec9162e7b0a5c45df9d54d0a606dd3de2362fe4588082448c7cf023e594cc04e48a112099d29d3b35598ad199cac6d28589d85e4a49a305f7cfe3500b2772cee1da452a699aa1302e67793854ad3f778eb6b8d17da0d3cdd6ff64a02b7ac416ace140f8d0e1e1a84f0831720ef0aac83592a8768995ed9c19dff743499275b244332955a3fea5c3d3be2e20c328e7eb917e0ec8d410c3bc6a", 0x1000)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000003740)=""/4097, 0x1001}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f0000003640)=""/217, 0xd9}, {&(0x7f00000035c0)=""/76, 0x4c}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/127, 0x7f}], 0x9}, 0x4}], 0x3, 0x2100, 0x0)
mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000002, 0x80010, r6, 0x180000000)

2m20.53214586s ago: executing program 2 (id=1625):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x1f)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000040))
setresuid(0x0, r2, 0x0)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="28b721dd", @ANYRES16=r6, @ANYBLOB="010d2cbd7000ffdbdf250a00000014000380080002000d00000008000200cb4a0000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x800)
fcntl$setstatus(r4, 0x4, 0x4400)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x4008032, r3, 0xcdc0000)
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
r7 = epoll_create(0x3)
epoll_wait(r7, &(0x7f0000000000)=[{}], 0x1, 0x1ff)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0)

2m20.51911613s ago: executing program 34 (id=1625):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x1f)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000040))
setresuid(0x0, r2, 0x0)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="28b721dd", @ANYRES16=r6, @ANYBLOB="010d2cbd7000ffdbdf250a00000014000380080002000d00000008000200cb4a0000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x800)
fcntl$setstatus(r4, 0x4, 0x4400)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x4008032, r3, 0xcdc0000)
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
r7 = epoll_create(0x3)
epoll_wait(r7, &(0x7f0000000000)=[{}], 0x1, 0x1ff)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r3, 0x942e, 0x0)

2m10.876274838s ago: executing program 5 (id=1747):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0x23c, 0x0, &(0x7f0000000440)="fe333bd2e0549e1e4f42fa86cdb62ef183bfc66447034060188d11f46f1375345f4804ea86122d4e175528d60e4a12", 0x0, 0x2f})
ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000000, 0x4}) (async, rerun: 32)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (rerun: 32)
arch_prctl$ARCH_GET_FS(0x1003, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}], 0x33, 0x0, 0x0})

2m10.875427158s ago: executing program 5 (id=1748):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0)
splice(r2, 0x0, r2, 0x0, 0x25a5, 0x7)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r3, 0xffffffffffffffff, 0x0)

2m10.835929919s ago: executing program 5 (id=1750):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
fsopen(0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_GET_STATS_FD_vm(r2, 0xaece)
r3 = socket$xdp(0x2c, 0x3, 0x0)
syz_open_procfs$userns(0x0, &(0x7f0000000000))
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f0000000a00)={0x8, 'vlan0\x00', {'ipvlan1\x00'}})
close_range(r0, 0xffffffffffffffff, 0x0)

2m10.79187061s ago: executing program 5 (id=1752):
r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85bf61681905db88235fc9a1bd77ff66f6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c8fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7b070000003635b2ee97c143f28def4b73905ca14d90d1f600"})
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000))
unshare(0x62040200)
r1 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/33, 0x308000, 0x800, 0x40000000, 0x3}, 0x1e)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0)
creat(&(0x7f0000000100)='./cgroup\x00', 0x2c)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x36)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./cgroup\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000340)=0x60)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2c, 0x10, 0x21, 0x70bd29, 0x0, {0x3}, [@nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x42, 0x0, 0x0, @ipv6=@private0}]}]}, 0x2c}}, 0x0)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000080)=0x11240f0, 0x4)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000040)={0x0, 0xffffffff, 0x4, 0x0, 0x90, "ff00f7000000000000000020af88008300"})

2m10.74121222s ago: executing program 5 (id=1755):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x20)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r2 = eventfd2(0x800, 0x0)
io_setup(0x81, &(0x7f0000000400)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x7, 0x1, r1, 0x0, 0x0, 0x2000000000, 0x0, 0x1, r2}])
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000080)=0x1)
r7 = socket$unix(0x1, 0x5, 0x0)
r8 = dup2(r7, r6)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000440))
close_range(r8, 0xffffffffffffffff, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957e2013d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0aac7b141787bad6b0ba090000005f2f3158f0d200000000000070000000000000000701000040000000afbb30c2946e41ef3167d1f6ed47aa1f52bad114a89dbed741f74a23cd8d915e2dcc74a4932646b90f90a9d3956d5cadb642ac79fcb0aae3654482188263abd27e9d57cc28032453dc75f333e1f367ab38b7e7719805a454e79802d07ec60c00b0000000000000000100000001"], 0x208}, 0x0)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, &(0x7f00000006c0)=0x2)
socketpair(0x10, 0xa, 0x8, &(0x7f0000000240)={<r9=>0xffffffffffffffff})
sendmsg(r9, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r10, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x3, @multicast1}}, {{0x2, 0x0, @rand_addr=0x64010100}}}, 0x108)
r11 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r12 = dup(r11)
socket$inet6_tcp(0xa, 0x1, 0x0)
read$hiddev(r12, 0x0, 0xc)
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000280)=[@free_buffer], 0x0, 0x0, 0x0})

2m10.520138165s ago: executing program 5 (id=1756):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18)
setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0xffffffffffffffff})
ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0)
mmap$binder(&(0x7f0000187000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
socket$inet(0x2, 0x2, 0x3)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240))
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0xfffffffc, &(0x7f0000000300)=""/210, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0xffa3, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0})

2m10.499720695s ago: executing program 35 (id=1756):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18)
setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0xffffffffffffffff})
ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0)
mmap$binder(&(0x7f0000187000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
socket$inet(0x2, 0x2, 0x3)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240))
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0xfffffffc, &(0x7f0000000300)=""/210, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0xffa3, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0})

1m53.805642949s ago: executing program 7 (id=1937):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe)
r1 = syz_open_procfs(0x0, &(0x7f0000002040)='pagemap\x00')
lseek(r1, 0xffffffffffff0000, 0x0)
read$FUSE(r1, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x43, 0x0, 0x0)
ioctl$FIONCLEX(0xffffffffffffffff, 0x5450)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0)
mmap(&(0x7f000001a000/0x2000)=nil, 0x2000, 0x8, 0x13, r0, 0x66053000)
mmap(&(0x7f000001b000/0x3000)=nil, 0x3000, 0x0, 0x40010, r2, 0xc8b5b000)

1m53.77919401s ago: executing program 7 (id=1938):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
syz_io_uring_setup(0x1e72, &(0x7f00000000c0)={0x0, 0x5e03, 0x4, 0x3, 0x186}, 0x0, 0x0) (async)
syz_io_uring_setup(0x1e72, &(0x7f00000000c0)={0x0, 0x5e03, 0x4, 0x3, 0x186}, 0x0, 0x0)
write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="000086dd0500561008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000100)) (async)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000100))

1m53.683784922s ago: executing program 7 (id=1941):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1819c0, 0xc)
ioctl$sock_TIOCINQ(r0, 0x541b, 0x0)
recvfrom$inet_nvme(r0, &(0x7f0000000040), 0x0, 0x40010061, 0x0, 0x0)
ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000280))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4})
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
r4 = fsopen(&(0x7f00000002c0)='exfat\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x2f, &(0x7f0000000600)=0xdfc, 0x10)
sendmmsg$inet(r3, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000380)="cebdd21fe03e57c125bd9c3965b579407c9962373117b122c45bf84c98a973ecb6b9ad663b6a07bdfb5c17a5a2cd48dc09da2f20c69872e6399874332704872ec2a432d22928522671038af0783ef06a2f8ef5bf4c1852cc25f1ab39b7c146d2cb25084504d5606202f98d0b03dc", 0x6e}, {&(0x7f0000000040)="dcf6c7a8594cbefed4f7b6af317a47ee47be6e2d4a61e5cc0a2a79081670698a39", 0x21}, {&(0x7f0000000580)="43b6624bcf70a4c826371a24e33c4d2bae5d7babbfb1ba2c6ecf970f9def87320ccb4fbbb31e12d8fd21d656ef864f17c24210eac6248dd40efb9b0ac8da179915840a5c9d2f213d47a7367669a3870626413286b92bd7b51f2b4f99eec1b6ff81751fb805f86ea434a7531f3c9878bdc2cadebaba4621", 0x77}, {&(0x7f00000002c0)="518d090c62a0a9a11ff26593bd52165b011c0e9f6c2c05550d880894aea3fd3718de3675e1f30ffff0ff511d8b6a90c94d442c509c6a01f65cad16374ea2e62749579d", 0x43}, {&(0x7f00000001c0)="9f189b8d5e6ee068cce816de05698d4fe01cdb8e875eefe3db5e153722b1745423f726b35f80b980f8a7e6cab9983bc947924f6d30813d0899d80c2cb6a3cb80a16f14c194157b98c823780ea180f5f304f5694e0b90569c14c118c5896396f9c79d867b5026d66ae9eda462f1233702f941cf239ec1bfe8c9ca3c5faa4c0efa368def9717a2da7e0cde5146db635972858964020d656353a476e01071bc9367c8ab8ee6b5ff6cd25be88a2326b81df502c8b117250afb4a1b9f205eac48359e3c4323ff3e32f2be7c235dfb3613995f704263f6085512d9e267d49f43cb", 0xde}, {&(0x7f00000008c0)="aa27de4a8cfe6fc7fd36ac634de0b7dce04f6ce3e3d452f1c75502b2cbb29fa999d2a372e83819556e792a18e17c128a1ee3a593fbac892cbb42575f483fe523c9abe644830816977ccba1f493bdfa33d63b1dbfd5dde8b03dfa6162f0849ad9823f4e302f12d77cefff93dae1d25662ce8cfe9cdf57a066565ea4a78f8b0e0379110f8d424740bb27839ccc87e687adf0d23ac64ce9c971e0d3eec711e7d49d051cb97526f79fe31b00421399b4101c763b33224a71d2e0b64c02374fc4f0ebc5fdb156e3b8716cba396ad951a983a24404dddcc37b8b5d32e138185df4c6326f8e9c5e4e5c2088c513b2", 0xeb}, {&(0x7f00000009c0)="d650774632b71a34a88292fcf26ad63f611e11baa9b64a99773dd6fbfe12178987d7b005129705e9d23da9376d714ea8cadc0d1b4f2d7fc2e73242b432015e5e298fd6e2161beacaa75ecb41f6aa8cca9a50239a518873cc1eef5ffcc67226fd8e2386d070a8fadf0e4573f3141917bf0fed3e6d0ba5e600840121a0df8deb37ca310ee1d23869f142d3ac1eda8027bd68f94969e492b24718ba715958516ef3b07f7d52465d66f705e80f816ac9a0a3ab08e8a6f1fa6fae5c12fe1526de3f51f545d49892b6fa2042a163e76a", 0xcd}], 0x7}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000f00)='2', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000400)="1a51b7", 0x3}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)}}], 0x4, 0x40)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r5)
tkill(r5, 0x12)
ptrace(0x4207, r5)
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
madvise(&(0x7f0000e28000/0x1000)=nil, 0x1000, 0x16)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x10401, 0x11)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x88, 0x0, &(0x7f0000000400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/30, 0x1e, 0x1, 0x19}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/41, 0x29, 0x2, 0x30}, @fd={0x66642a85, 0x0, r7}}, &(0x7f0000000300)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000001c0)=[@increfs_done={0x40106308, 0x1}], 0x0, 0x0, 0x0})

1m53.604154323s ago: executing program 7 (id=1944):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_GET_EMULATED_CPUID(r6, 0xc008ae09, &(0x7f0000000240)={0x9, 0x0, [{0x80000019, 0x100, 0x0, 0x9, 0xfff, 0x0, 0x8}, {0x80000007, 0x1, 0x2, 0x8, 0x343, 0x2fb, 0x9}, {0x2, 0x5, 0x4, 0xf, 0xd, 0xfffffffe, 0xfffffff9}, {0x0, 0x9, 0x0, 0x4, 0x0, 0x3, 0x9}, {0x4, 0x7, 0x2, 0x4, 0x5, 0x1ff, 0x7}, {0xc0000001, 0x10001, 0x3, 0xd5, 0x80000001, 0x5}, {0x4, 0x5, 0x4, 0x518, 0xfffffff8, 0x400, 0x101}, {0x8000000f, 0x1, 0x2, 0x119, 0x5, 0x0, 0x8000}, {0x7, 0x3, 0x4, 0xf5, 0x6fd, 0xd7af, 0x2}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="8cc2ea0088390088c26666d2eff30f10f10f30b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x35}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000009c0)={"73cce1a2b9fbcb97694043ebfb82442d7f428290538e75ff029908cebee95ac2b1febd018ae4703d3263c5b30d4db3243275dd57287ef3c41695e828a0e03b5098370515dc8c9b278addefde0e6ea6ef65a74a3e66e51ee0a646e634cd9cf3ceb03dcf88a235bd6d7a5e64ea39db4636dc9b79c3fc4b6c82b54a6bea17ebf522d474b39c4f6fee3ae29caeec81652b33e49426ec6481fe2262eebd869b7a14a8646751f0b15e94a6bb853e3b3443d254af5852a59766fd5aa457c444e713dbbd7699a8d887ab77e97cf1fd6dd2fe80662726aa9efd1d9c535c161a6b413a473c37876cf8be6867395fe6513e10f14d5c677d301612987f4b25a719961e7bc1d10de8eb93960e40c99b502d401556250d52c53d05eb471d675802ccbbc3de9366ccb6e096b235ae2b81c4f9168f4ce4e741d7e8b381daae4674eacd719870f1f113568e647f04109efd349cb74234c3a469d48e857b3e33ac6a7d7d332a72854c980b550af5a90d997c3c40fbc5fb22492f83675786435181dc40777c05c77ddf9432d2fd86cb3d56393e08f2d9b94b1cb579be8d4110c6a34689fa5972e6879e5c3a7ef48caf8cf42ca467d135665ce259b1dc5ea6c4b07a47260fd8661c29367a99f26a415bea9b5ed5e69d42b8f58ee3f245d4475b05def5960100ef1658d586e1066e24baa59543545c2cca981c6e100a966b52314a8d00863eb35faff0418b5285534298b7d677641b4a5aba2958e1ca74639cd17cf72972aaf8235354157b65f3f06e4e6036c81c33b0464bc6b2d3b9a76323930b1c4c7bf88aad05e2e5332719685c2968ebef1e26f2652bc37b5e4f53617e0bdf41059d7ccf00468537714b77478147d69decae6979b56fa0048f1a9ca8986ba81033850bffe420bed347ec85f23cf78084e5a2f384c9b8ebaf547289fa7b798f53ec2266a9d2150ae353bb8f9a1adc385081366708c819d6ed45a778e5d9ab90333b12d9346d28340d20293a7e9364312bd9ac1048b3ad5306d2f35defb6addea0e6cac0fd8937dbca03968f94433696e77aa48282661b4a3c6aacce6bf023dc078401daf8a7df4081d561fb48c9e6d706123fc273f63203a09addf81dba40f25c2e3ba9035d3678a0f289a3fb0f13baf9e827df7cf7a3b97c3b2504f00e0aa2bc4de28874eb8d88fe393fb165cb8acc6b029eba087bfb614962633e2b00db758e9309b5446e26fcd0634ae2ea70bfd47b9132dd91262554d8fcae51638e9faf2f9fb86a2d5749d56dbb6fb04fde46962ad52d9b9a4bc907ffaa30a007cdeb3df46fb2138bf5baa9ff06e3d708ff8b188d8889d9a8dd95ba74b8e2410bd94e88a3cdfe69927b4d656ff89ab16e8fe7440c707b0e9f308f7164908780c0c1e5e60e6b51281510318de838a4f1e3baf40418deefbc9ab7d4549044c124d0a509d9dc7175fdf469edb9a6"}) (async)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000009c0)={"73cce1a2b9fbcb97694043ebfb82442d7f428290538e75ff029908cebee95ac2b1febd018ae4703d3263c5b30d4db3243275dd57287ef3c41695e828a0e03b5098370515dc8c9b278addefde0e6ea6ef65a74a3e66e51ee0a646e634cd9cf3ceb03dcf88a235bd6d7a5e64ea39db4636dc9b79c3fc4b6c82b54a6bea17ebf522d474b39c4f6fee3ae29caeec81652b33e49426ec6481fe2262eebd869b7a14a8646751f0b15e94a6bb853e3b3443d254af5852a59766fd5aa457c444e713dbbd7699a8d887ab77e97cf1fd6dd2fe80662726aa9efd1d9c535c161a6b413a473c37876cf8be6867395fe6513e10f14d5c677d301612987f4b25a719961e7bc1d10de8eb93960e40c99b502d401556250d52c53d05eb471d675802ccbbc3de9366ccb6e096b235ae2b81c4f9168f4ce4e741d7e8b381daae4674eacd719870f1f113568e647f04109efd349cb74234c3a469d48e857b3e33ac6a7d7d332a72854c980b550af5a90d997c3c40fbc5fb22492f83675786435181dc40777c05c77ddf9432d2fd86cb3d56393e08f2d9b94b1cb579be8d4110c6a34689fa5972e6879e5c3a7ef48caf8cf42ca467d135665ce259b1dc5ea6c4b07a47260fd8661c29367a99f26a415bea9b5ed5e69d42b8f58ee3f245d4475b05def5960100ef1658d586e1066e24baa59543545c2cca981c6e100a966b52314a8d00863eb35faff0418b5285534298b7d677641b4a5aba2958e1ca74639cd17cf72972aaf8235354157b65f3f06e4e6036c81c33b0464bc6b2d3b9a76323930b1c4c7bf88aad05e2e5332719685c2968ebef1e26f2652bc37b5e4f53617e0bdf41059d7ccf00468537714b77478147d69decae6979b56fa0048f1a9ca8986ba81033850bffe420bed347ec85f23cf78084e5a2f384c9b8ebaf547289fa7b798f53ec2266a9d2150ae353bb8f9a1adc385081366708c819d6ed45a778e5d9ab90333b12d9346d28340d20293a7e9364312bd9ac1048b3ad5306d2f35defb6addea0e6cac0fd8937dbca03968f94433696e77aa48282661b4a3c6aacce6bf023dc078401daf8a7df4081d561fb48c9e6d706123fc273f63203a09addf81dba40f25c2e3ba9035d3678a0f289a3fb0f13baf9e827df7cf7a3b97c3b2504f00e0aa2bc4de28874eb8d88fe393fb165cb8acc6b029eba087bfb614962633e2b00db758e9309b5446e26fcd0634ae2ea70bfd47b9132dd91262554d8fcae51638e9faf2f9fb86a2d5749d56dbb6fb04fde46962ad52d9b9a4bc907ffaa30a007cdeb3df46fb2138bf5baa9ff06e3d708ff8b188d8889d9a8dd95ba74b8e2410bd94e88a3cdfe69927b4d656ff89ab16e8fe7440c707b0e9f308f7164908780c0c1e5e60e6b51281510318de838a4f1e3baf40418deefbc9ab7d4549044c124d0a509d9dc7175fdf469edb9a6"})
close_range(r0, 0xffffffffffffffff, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

1m52.727664131s ago: executing program 7 (id=1951):
r0 = getpgid(0x0)
r1 = epoll_create1(0x80000)
kcmp(r0, 0xffffffffffffffff, 0x5, r1, 0xffffffffffffffff)
r2 = syz_pidfd_open(r0, 0x0)
r3 = socket$inet(0x2, 0x1, 0xf6b8)
flistxattr(r3, &(0x7f0000000000)=""/175, 0xaf)
ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f00000000c0))
sendmmsg$sock(r3, &(0x7f0000000880)=[{{&(0x7f0000000100)=@vsock={0x28, 0x0, 0xffffffff}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)="5fe2f561ad5f763324e5e3083bcbc7a4774fe70a5e26e642c60ee6fee9e4a7c07a715a7ceb624a347d1a46572bbebe23d60a7c9ef4a97e1eb2a7528a14ad1cd0", 0x40}, {&(0x7f00000001c0)="ca54dc2f1c83ebaa9c407f513e2d4b9f461125e26f2feb3bf8085d2b4249c4508a83792576aa2fc0fd1cd17893d6193a7875c48bbf913d03b51d35217c594d02ef8a7954fa8f1677f9adfa48a30bd65058a73ec23f458744985b32c4c9bd9cb3d018d012777ea2d81bcce87ed9aff9398d7bb47ffd2ac44a0cce4d3388ac7074cc64c4c76685f968a34aabda89a59c80e5f866ca247bedf3787eb1201bbf29f3b8025ace14849775363c796415f3b14fd1", 0xb1}, {&(0x7f0000000280)="bcd0b1", 0x3}, {&(0x7f00000002c0)="1d88fd9e9bc673f4701e37a8da7ab88fa9938ce2861fe86f6c9a1c5804c6ce17a1baff01aab58591d538d776187da95408fc29c8045f72af587dcf582cde05bd3d1a6ff46a30a8fe291fc1b5c0cfd9efecde7b49fe5079602da3ef519cec590b952ce6941c141d589019", 0x6a}, {&(0x7f0000000340)="eadc4d43845873f9ff2559f625c74c0936ae999b0dda256039ed3967ee96e912a0081953546734cab8987ba2945043fba6e3f0384a0827f318837ec1ddc665546a0a634c00b8b9677205f3d816a2ace36f3bab1a232309c0269b335200e09e25523505e728c007b9c9a67400b728c7c0895a8e12aac3760546fbbe6ba2a7b2f65ba646c3ebb78fb9ca79eea75d6051ccdf3bc2259db8304caae458d620c094716e7a7b201dc7ae4626c4c7d93ff0f3307d0649", 0xb3}, {&(0x7f0000000400)="de74f1423b6b15194fbe2484e456c12c7c8752378d2300170b2daaa4a279b230d9ed97b8b4fe8e90350d734aae208caa82315d66d1e7178925cf1ff3eb3d2c3e5e3f60fed9d660c8d435a42825d33aa3357b2673433fd2dfa599b2d3c1f503ffcacd75ea87a42aa3e29361616d58bee3e5a2ff2e96b886a13d3b9db4b63624ac1be5950c75aabf183ced97e76341777854c63a2aa860310cb2a14c73688f8f497d0af2f67e194fc0d26de08c0c24adf9", 0xb0}], 0x6}}, {{&(0x7f0000000540)=@generic={0x2c, "6f6a2664810d0aa95420c9fa463e3fb93755d7b6b599c75eed3980abe72ef78eb7d90a8ca8534389e249011fdb022ae7ab2340ff4cb169da2599d7d34b85df7d3dc8aea9ca3822128b898e40c5ea5cd3c8b22416bb4c5f59e9a9069091064237a33505728155703f54925b3885ae8064e61e078ea6e128bf2ebbb7ba5f41"}, 0x80, &(0x7f0000000600)=[{&(0x7f00000005c0)="1d2a4549a552d6ef1ebf64a087af9d7fc90fc47e27cf6a73f3b9cc9b04bcc9e0d23b4eeb01b7487c1749f7234307dcbd1fcc032a4024", 0x36}], 0x1, &(0x7f0000000640)=[@txtime={{0x18, 0x1, 0x3d, 0xb}}, @txtime={{0x18, 0x1, 0x3d, 0xc90f}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x80000000}}], 0x78}}, {{0x0, 0x0, &(0x7f00000006c0)}}, {{&(0x7f0000000700)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null]}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000780)="2719ffd359763172034e55fba4beaaf4c3bf8d984cc6a324f7b41a3e41e522aa70a0dfdda9b24adcae1647113b9902f204dac34610c6487dbb60a4ccbe726593c64664080dd8040e7899b87270d7148224f06fb08401c8878b40b7088574b662db5ce78dc1925a17554bad428762e97d6621bc013a20e92efbef", 0x7a}], 0x1, &(0x7f0000000840)=[@mark={{0x14, 0x1, 0x24, 0x5}}], 0x18}}], 0x4, 0x81)
r4 = syz_open_procfs(r0, &(0x7f0000000980)='timers\x00')
ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f00000009c0)={0x8, 0x2})
close_range(r4, r4, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r4, 0x50009402, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r2, 0x8040942d, &(0x7f0000000a00))
ioctl$USBDEVFS_CONNECTINFO(r4, 0x40085511, &(0x7f0000000a40))
r5 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$F2FS_IOC_DEFRAGMENT(r5, 0xc010f508, &(0x7f0000000a80)={0x8, 0x9})
read$FUSE(r4, &(0x7f0000000ac0)={0x2020, 0x0, <r6=>0x0}, 0x2020)
ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000002b00)=<r7=>0x0)
r8 = getegid()
write$FUSE_DIRENTPLUS(r4, &(0x7f0000002b40)={0xb0, 0xfffffffffffffffe, r6, [{{0x5, 0x0, 0x3, 0x7, 0x9, 0x2, {0x3, 0x8, 0x4, 0x3, 0x0, 0x3, 0x0, 0x155, 0xc, 0x1000, 0x1, r7, r8, 0x820, 0x7fff}}, {0x6, 0xffffffffffff3074, 0x7, 0x4, 'timers\x00'}}]}, 0xb0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000002c00), r4)
r9 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000002c40), 0x2)
fcntl$F_SET_FILE_RW_HINT(r9, 0x40e, &(0x7f0000002c80)=0x4)
sendmmsg$sock(r3, &(0x7f0000005200)=[{{&(0x7f0000002cc0)=@hci={0x1f, 0x1, 0x2}, 0x80, &(0x7f0000003140)=[{&(0x7f0000002d40)="8093dd978ed6dad5acc054ae0b4a15194e48f28149897224a4e9d698c0c0794dfdae86efdc10dcabbc659a1785c64a081299994bfac156fb7fa5c6529f4cce15f6dd571715ded80d3269c7817e747b491514f3ad9c897797b434c3e3963121c356699566bd804fa86979a6eb7e5619268bb6479a177eb978b22386d095be400a3e3721be435e534d9d6ac4c9db6ae81bac196fbb329ffb2faadf116e76", 0x9d}, {&(0x7f0000002e00)="9d4b3adad68c41be93d4e7893219cd0026ca1416492cdb2a40a74a97d443", 0x1e}, {&(0x7f0000002e40)="0559d537b60b83d7b275603f252686b5dce02f0f61f5f5b5170e98f56f2dfb77aa874683a930f0a5a79d20d05e0195a2acce285a2e8fce7a252c018759e421f87c27c6e5a0f62a68ed161f86", 0x4c}, {&(0x7f0000002ec0)="51b03b614d4f3a16553902cca02b3328a45b98b4226c184e6d380b4d3a88a5fadceba63f8abf05ff7d520f2c5a900e883345e37ef776dd3b6abf45d2d4a04d98e3c9ed05228016a5a914d90edacfe1f10048717b6878b1492555d140560771b07d421b651f243840c0b03dd417", 0x6d}, {&(0x7f0000002f40)="0c889bbdf3bc46e402a3b5bd11091f6cf2aae0a0a1167722046ac0f1a2a8f0d403c54d149f0f92380fcdd9c4f683a589b1c18c8bdd9353d9c9b44a2028318b8474666b615dbe90a8b56c7e5ee31cc37a9bbf8214038da05c0a5ea8bd9fea316017c75d354f8ff58df5e8f447ae0f32b5ee42bbcb0a86dc5f0b7067515a0a3e67a1aa1df7f50bd47fa6a1225b4f74b67ac949b2154add37f19744b884e331405ac1bf2d423eedbaa4e166cc877c348222aeb0be57b6172104613c7aae28c36f930a12b9c7b8545db2dcaf29d4297d038ce488bd7608f6c9ea3e99648566053ece2cc0607cdcfd55c365fdc3", 0xeb}, {&(0x7f0000003040)="e8303af2c9ba05da9c5532fbee9200d0546e5e0332f876fbd0f4a65bc7c29b61f0f285a5d4967e49b8c68ac9f5550adf1e154949c1f67e7924a98ccceb3f651df205e8f772e99d17a7466cd3b16ff51846fcf24728490c2d3cbd526fa0c9774157173bbc0083df163643cb3c3c131d242601b1bd7ec57356db3dc6ce2784288806de79878390d44abe9f6d07576a83b62ecf01291c92584c457033f3f9996b270a6432b5c16723d1351526f139f79f2087037f221ee9cc56610ea30da5f7aa0ab8f536a1ef3ca433e26fbcefffc2f6a92ffacd35f74100e608c6acfe5d4b0d2959113fd93b14f54822d7d708b1b02d", 0xef}], 0x6, &(0x7f00000031c0)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x5af}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x48}}, {{&(0x7f0000003240)=@ax25={{0x3, @null, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f00000047c0)=[{&(0x7f00000032c0)="bcb77bfb4d46b5872253a9ea23376823cc0d5c842385cf9bc9f5577801de374fe476951ecdbe65dac60e470ff24d5a73da624e60cc9c3e14087767c9c43f0dad476e44", 0x43}, {&(0x7f0000003340)="8f43b7b2572c64a0d679f44026fb39e681fa4d1c3c9019ac925d1fdbea79e0a887c0c92d185d0aa3c69b239f6782ce6d47cb4eee293fe0918db4fa25ab250e247e1321caf7ac7ecb9d171e26b47aeb81a44f1d13629a22c2013721776cb26b6d4ccb44e2dc6ad0bd94d63ecc99c1", 0x6e}, {&(0x7f00000033c0)="37add2295f1e3c880001c8dd4614361350b8554b90fabc5dd0301fcac7c978fa640025e3886845ba229a814fefb8778fd99b1cac25344facaa609c86baf511c9ef479792aec63d4a2a5c0348228a4708ec71ed8a3ad44413cdfc11142dd7fc708ab0a05735ceacf5df2cc2d646c3bce95401ce3425a4c13fb42be1cc5884cb814a33b6f7774ae4171578b5ffa493c88ad015d8cbd527c8710523433f3914573652df19a24ab10a746cf83df8ec8502dc", 0xb0}, {&(0x7f0000003480)="3a52d9636d88db99ff9405ac94c725e71f1d450216b0383a47aeefa11fb6c16734253227b9d7c0276168777ec5488b62220ee73acc21f6355cf84627bdb86c413a644cdf40c7ab7853aa793a95d1f3cce9bae4574124ab898a382fdfb01bba6400f96047591a594d0d4d790730acbbe060afc3b07dc5f30155e0eebab2f10321ace6088a63a3eff0e25e93c51c8784a6d5a25cd63ee94e947ef676e5108be6f0c78c7bfc348b2b430c0fce88a454f99a469c79ad7f27c34433eb04e0ae20b7be3e533ddbfc98f72ae3091e1875d4c0cd42c3a40ce3ee8041f57755eb96e45abfce84021d8b043c96de0932d111b4ebbba3fd2f2d0c2ebc9e3e8c7fc9de59a68803c6821a2e417955c21c72549ea5cd5ba53b3111b351ff71b7cd526b865ad56cf7116ba075f012879b144a2eb5272e2830f8643fd4014605955dd607c27cfae28f86aebeb4c0611d3096dfc7210bd4a9d15310de3d5fa295f1335300fa5efe0b29f35eaaf365c4120c59a576abfe0ae3a4e08aeefb533f05721b72f81b5177b28cde7a61c79ceba87c40619309cf0565bccfa809c2851b5ba34dcbdf9060696011a55ff0ac7db5e755574f271dbe5e104fe5c804fd365408892046e1d85da9442b4058d77eb0478d0cfd64ff44ae469b46a698f7fd961a461a9b80aef211f16df2771251b7448a07fceb891edbdd7cec6e95c24d47e80785b868513abe82a176f6784143fa083fd1cc1689f0548ff9fdbed27377fa5a03509c86d95ca9a07401814afd71c5de33ccca3b98d4b5ba10cde441f683b5eea6112b2edcd5ffcafffafe58c1d645f744853ea9b50d5aa1969d2d4090232badfe5a09b598bb9f25390efbabb77d6718f8a22af6e0e7c820461e296ff6745b2ca00bc0fbfac42d6c653e09d60844c6bc7ba16dea993740a6b499c174194782bdd148a0c2671f4b76103fc908afe9d06dfd6f061c8760b1842d531af5fca114580640208536ff43d7225f09b02c211e568361550327768e943d09f4eef0d69c71b29d6dfab717f047d0f3824e31fc9bec87fca4ad619c3577b7c60f4f4d513a05d809fe72d19aaac2cd4378ea91f6d9722b139486f1f68eb81de7126f25c16bbd4c73bcd1f637100c4d3750fbad6f10f184e65aba9f4e316a6db6c42656e15f452029441f272eb8107adf51e75e8187f284841b5d00ee89eb86a2f72e85cd0402968312be739466002a9963af5bbe65a502c0767c0a36606c81df4a2dbc6acf668ab0707d6267419e8d3d3095106c646db33b200b2aafec5b9596376e16dc450dc111ff44f15cb43a8943207033ce07e4db01de7f89892b1f20e293d9e7ec487303eea2591d82bfaf90574678a0ef06d96b1299c6fbe1fe4dbbc63f949f28755e5bf67dc8fb43c80547cae86f4fb77287192eddcf8dc1e6f6ad8cc32b58f482b7482a4a6f8df1fd9fd7c86b6f3ff9cef0ed2e604d9aee5908d21d2841ee8f2d2d7bb434db68ca5338fd48276b46a471b24b587021d03be657a794dde9f3ab052a379e81da68925f23d75f2dd7780d25ea4d1c15cd3e030b34fce8751334a56a8f773ced6c98be712a617c1a397180d544d362999caec8235ffde86bd627551868f69e4750d8b4d6d56d0329489e8148033254ec09511821526b717e2618c65a0b7edf69fce12979eb5594eef9445bd48a92ffbbb4524cfd4ad7b684b1945f7b053ee5b7763a28af642e1b8d4a574e0541162ee58340e5a205cdb9c73dedfb1ca6e52c0e938b284e638cc49c48d865e4f000c9e117ff3ce97d9f083f02b6d27544d0baf045eed837f7357795721429617f264e46d2d03e762bf2f2bd68105452d4300eb3974cdec57b67dcce55620de5b18ed0b85c51f65e9142f1361842e3152450b9522838c083b74a2ae20fe58f978d27db4be3779e0917e9e6ae7a28b213fef34c8fe668e8c5d97875d3060a0d1895a30cc3df6327768e1274ec40fbdd3d22b7903390d4bfd470964ee4194637469d4f5058e69e0a1e438b322a8029fdc7692c767314370a289b31bc58dda8a0b8de909a3d6aeb6a14008e4dc274c6485e6a0da5be2f48b84c27e33b65e070f9047ec6b561c2ad9b953144794849b426b48ff186ab47ea82843043fe4fd7a95168cfe1053738437784e4fac433b3241e73a602ff0ed373b37772c0c07972d0bdb65146ae3a7ace19f757d9c9517c5e5c9c656ec9a864548fee0682396b5d58172dbde7cad4af794a2b8142a7706d7dd86c41a80b99b49f1afca55b2b6086d0b56a2f522d88e0e91fb630440d553a036746dfb7714bd9d4753de0df5555ee74f7a3012d539929d4c1f198f7a0b7c195373a934ad7e72ba9b66074d63adf32e46d90897a28b203ccba167c047437d7c44b627d3bd12bc179fe2df5a3b90aa28e4fe815854144b118433f2584a6d08d82122f301b7d06d5285c95757ca98734f49b8d31cca7416cf76c174a0f4f128c358962fa1c0e053a76847002346ec1e7cbfd29e7e3de8ffd600cd5efa1c124689d045ce7af4b011861bd63d978e8bd770ef9a805a6bdb4601f70fd4f2945710ed24cc3f536fe2574a37d7e26736613a8ca639eb393544ce94af795bcc04a76585974bd12e9f55d5fd8c7aeb846dff048d362c86c0a892298f088979cae9a2e175846f93be9437277b82116eca7d97f696464e76d2efe431b174ba02fd39dbe6643c7ccd30fe1eae6089a3d5974c5f61ace7be8c864023339220747a2650d522116fa91e043cd50eac44f7261a6e7831d675cd8895987b4a35f821517db52343255a14edb611427ac9add1db79a57adda9a9ba8d23cdf5d69fd9feaa7e968ea821131bd44c2ff38152bcbdcae98f36958c47c26b14b75f4a44495c8fc355eeeebe59266565d57f2c70888a706acfa9fcc0856e3ec81ecb5ec8375bdf1273b5c83c06c63b6ab64ecfd186c97e18a8e25e107d6ca8aab98c0d31038aec39fbcb0c8cf7ff3903a3f9c376bce27d8ba0f2120aac1449f18202ea1d65caba97d799215674609cb6c195c954c67fb585c280dffd50f973fe923bd4191b079efb5f856dec601ca5636d66297ab065123683efb177d7184b39de3906331341b7f01e43274f23bbc90d4fdb7d2531eada3cec69322d68029e30dcbae390a7b7fb66efb228784ae3b90fba46089189c63f56d3140a92af8a27b2ffa3efb6e8c76145851184312d42ef2aa240a06205d13c1e1c99bceefa1bb386d740304d04148e122cfcb2da427f9628377376ea2728a6bb63f017d3acda7ec97a2090a0b48ad2bad7c8722df3886ff6a88c1de4919eb3a9bae6f501f4d9e2f5dedd0e36930b6a7319c1b5b6b69d1e798b0d23757813be33160a37bc6f966d66eca3dfc4340bdc99adf77bf2506a9f3eb19398f5e3a3624913bf0a00e0f4caf88207a7c054ab6249dcd36df4b9804cd3e0f9860bf10d7ec56c9a1214264b45dab83c0ad8f40c2126edf96548b3b846ea9fb42682be0ec625ef12d06d7bba7c71af696a75beaba5c3efcddec69d0bb13268043665b20672790ee6586ec6c1b6a8e3ebf78d4b9cc36932b988470f6ccb15c1ae14796abe5eada4f6be7bffb9d93f5dd5d2c0e680079ce34ebb1c98081fe06bd5fc75443a2eec8a6ec33897db153ea371a96f0b88966bdeb72561e89a80901bf4ea3e8290048835b5722bd870bc3dec7f2be7e33c0d5a385308182dd92602f9602fcaf46de4e9b9af5e0d7911b1d5c8d5517cc1f7e7042204b880e2d4fc42d61924684eb476ac339ac801509f32adfa106bd051c2b5d5feebeb00d71c5f714751e93e89d2c41b3c3af3db61622af65ffe2a9986dd376a9079270a035f4ef9d47ba2c7bb6197d218f004016d0da9c8fd79d19c4d7896adbf006944ce08613e1778ce30f564216844bfbb2fb0010a537e4c2d517d4101d20e7cd2b87b6c35141f1d66b7f26dd35748f4315f5f5aa6995ed7e127bb12ae7cf0cc35e237c8c7190acb0b14bbc0bce406257c232f3648fcab4f76942d4f911eaea2d71e1c50dacf74ac1333354adf698fe949c4ec104d80340bbbc2f5f3d599a9c9f6af7ec7ab5e7e8ce121c91f4a29f3e531f233e15ffd5329bd33df727011e67c89907d1f49f9494fbf889578a34af439d8655b619e766376c9e8e3216f5e74b5b8bb89c085eb3a17f4fd6f157c60bce3fdefeaca123e4e55988c39e455ddece1f1aa788fdbb603836392ad35104d74c83586a060b63b9da43fd6d3980b35c994f2647bfc3c6b6c866fc53fbfb1ba5cc9114a398900f345bf3922dc67be0e4ba2b464b00cd4eb4d04481e5eec166e7c1080f8f3c146ed4019e65ab41384b150be4cf5079635365d755a9f2681388d8fd139b19ca43a66827540b9b051849ca1d4ec092ee078b100e1b5389a9fb8a004f7019defc309cebb7c395ecff8a4122308205931a7361f2e5875167154a17a806845e65947f70924515dd7b1c0bc3d78af01da0a53c1bbd34f9ef17e0e6efa70b9a5216b924ded6ae2aebb012bd481f219abc0ffebf1aa7b4da55c78e7a9a513e6d1913c35fe626a560fe8396c6fa4b3b50c2bb900cd0b9e7e108cea2ede0f8d3aff6acc3a55a48b54f0358a844932423d59186baca39c54b20c8e8b4a343ed0819652f3beaa367bc856c197f585b09647d9f866990a58453eedb305a072ea494f7e25d6eaf334d9679ddefb9656a6d7932a944842bb1b58f2d1a1cc4bf5adb154cfa9f2b15f22a03f11a817bd2ef79df915f7c9fde251df40a6362de1c9c95c5d04ac0a2943e6fd2e332279ac71c71cd7af8d0a24d718ec12242bcca35ffd0654577fa3d84084e70f7020392fc19246c64a7dbf206101d42f6609987ea4b252e4c2210043406cfb59d3bc311f2d0dad57d7b1823661c2997e25e3f5e095547b4bee87d14d6c35b62710ab504e81436f0a964058e7847cff5b87c8f783966399f5b7300d08fe20354bb1f00f6a30c47c16cb7c8a0623aee43aed95ae3ddf3d7c1aa2b489fa1317032eaaffaffaa8a8e4993d201379a9e44e70c5b5d7046632a49427b4b278c748adddbb27a75b8e5fdc3ae9f6a5a29106c84d0a4b140bd3db7f0d29db050e8e48cf98c9a539c781bf32a3b93ba63f1cbba91ff45167d9677bb0bf335f80cae138011873829ddbe0156c10c1c4a8ef1480fb453c921e800aede7adc0a34e41022732d26ce84f4164a0bb43596f15d90eae0a41aea6a171bd51737077d711f996f38724e9266b1d0b46974efdf1117904514ea0827e5bf9bf2204bee5b7848c051d4ec2dcf5eca9f2b86cab95103f176c8a8e2b3d920ff1c901bba4f0ff985fe0b8ce4d234989b3b11f029bcfb183cec4c16fd43d2ffe6e64a17e2138370ed7e39e8192f5eeb182cfd15717eb92907ba48e54b88b13e7499fbc9fc62a795601ec044a4e590f2246a919e7a0bfe0b58f8455c6be5aa546856b0b8adba5b6310b572c6bb87294df5d3e2608d8258577b8aae30acc1754ff7df65230d906acfa506598840fd18c46ed8a0db39aa799e88b233666fecb793310c62954ea36a8bfac23edf8991428287536e281123218f5f95c6b1a0474392444ff16057afd4c1064fbaedd1bf9b663c0694b4a897831d5044b66442d5b070834d667a3abfb081a555ff17f81d2fc1addb0dbf9a43bffec5ba4e12f72fea9993c97091cb42b38e88f9c439a0e4b76b1c1941fc7f612a01ff961c4e83456bbb82e661403d4cccff4d43bc01b43907e3f1b7c01f945d2ca7d60aa7d1ca776fbdf56e73b1d459fbceffcb15ab57563db62689d0ec726068350ea8edb6fd2075082c8aa331f9", 0x1000}, {&(0x7f0000004480)="9b3afb9a178ae6a0f7749d71256482fcc54aa3b57495e20c2be9aaa40ab8caf8f9acfbe11b5cbb75fa816eaeb7df91a269434b40959c5b880ad102e91eb4f6a12bfd3c104222672c4b160a2644ee0ec4b40a2ec2b02e428340c40b5ffaaed371784421c03e3b9bdf0b5f421c9beb6a38b3d20a4bec17d519fdb4c2a0a7de8f90cc63c5c8eb7bff8e2f85a4288756093f73ee65b46bc13f18c25bb9879ca577a30ee82d7b39c5b4deafddd425c66133111f72da69538a4fce86f2307904fdd3499a6ece8e9c15ac1d8c3750d62f1c5d", 0xcf}, {&(0x7f0000004580)="58a709dc1ec67fe4d70b0ef0d5746728de94fe99d5395d21f43e6a255ded44c873f85f30773dd3b6a48a3c8159ed341935d28831b910443d7bcceef50648bbe751f8dde98acd86428c8085a9d5707aff33bce5d381fa3928ff1b22c4e1d2b242914669cc9a300ff64b6a105e75f2c02a88ef26258f7ff39c707df41cc04e997159a8f6ec76cf82fbcfb8e0a0511f7a27d1ea", 0x92}, {&(0x7f0000004640)="3856222498e253054efb2675ce81b48b92bf708350ac06ba0f3e0c5a4b4905db44f29d8ffb4a217d1842ffca35b5a20e319b921af3ccf2e10401b1cdee45ae43c66b3184caabbd34d738d599cec37d58f82ea03d2cd49b233a61d960ab29eff08cd41ba6d911871a238d51d311644d86306bf2b28a95e09e023a8f", 0x7b}, {&(0x7f00000046c0)="399ecba18ca4724fcdee9b2fb63bd5c4e8336803cdb3bf801eb4e5e6090113dd169c935614b324ec668359835068b818f4ec3bf7a67db818baf4538b78e90531e4cd7c85466121deb150ab7a22d0fe3454917669acd9d3751e93e19dc8ede99da782c0badfe2bdcb7993839aade185109c2ebb0a96cd6a6b00eb5b89940b7133dc8d6e44206df51c639c17691ddd457f2de6a72101c72f50ad4bfefaf607902a3d2986142e1f3a2f3da82453894defe7a48de615f587aeaf40c2a8157f0f0d571cce5948", 0xc4}], 0x8, &(0x7f0000004840)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000001}}, @txtime={{0x18, 0x1, 0x3d, 0x773}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x8b6}}], 0x90}}, {{&(0x7f0000004900)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @multicast2}, 0x1, 0x1, 0x0, 0x2}}, 0x80, &(0x7f0000004dc0)=[{&(0x7f0000004980)="30d358c072559d2ce42286878eb821c0b01dc851df05cec4117873477cadd4769e84e5e41ff3e150ab4c605c526f12b426b7d459b7cf98098eee975dea44f8d30bd7aa10c14c1914e455775e6a1e3f2466c89dcf8069b6c9ac73f98563bb5f7148a743da8ce95abea913b0d0a0f39ef1d316169cdac21900281fcf201de9f3327ffe418c3d715cc46d387c5f993099a430684fdb7973157624808286727cca6f8f5b1a6e2705f9ceec5155185e99ff33fa30be", 0xb3}, {&(0x7f0000004a40)="5798c088a6af0f73d17ecd2bd39128178c95f01cd4dbc06adfd24e12e367b76f519e43fa8bd092067035b85be75288ce609b957849cf02e72cc2a321c2be8d89c356cabd92ab25bffe4c9ea9d31d2bf4f2f372f5838405c71545ee91adb86c9c448eb8b93e2c609f403ce43e6f9b62435255f47c6b26d1128d7378d8148f35e42c801c4cd804cfa13d004f566d0f2f7cb7cb7292bc4a1d6b63acb9f2e1ac249e63b6a83a6a2a825685c37dea180588985da205a419773d7c7654c5d41f2c", 0xbe}, {&(0x7f0000004b00)="283a2e5a11f27ea5ef9d4e39e69b0f17aa7791cba9f3930886141dc72e76da18df8527185f1d64a92d28ca1630618a1043322e1750f1dd7cb6cb18f025df5be2873c3072c30d7bfc9c4a634e9b269bec3d3fe28a6dde60201d7dc821db225354b51b054af315f0a888f7a29c30569f14df8459ef127e414632decedaf65fdfeb2ff5dd1f022fe4c2e359b351373caa11f5da5534232a9e3e2df9bb0468f635534f56ca66415d1c06e91bfafdd3052f9b4d7cf950f97a184058236b918959efa82f0ba98c8661b2b1ac84697858a5", 0xce}, {&(0x7f0000004c00)="e143a8ed45e768aefed4b29f84caf57faeb96bafc43f1f938011b35401c2ca48d82ec1f8e3a41735e1453cf70a565d6f1b79eb962412f215d9abb93e20c20e79749b8bad810432cca671a7f1b53319a6990eeeb6eeec66135ebe2d887b90effc34fc86827e5d8910f5c59a979a1754bdb62bb47b0c514fc55d0ef37d0e3a", 0x7e}, {&(0x7f0000004c80)="ec0112b6ac6ccfb26100295d409c145c0e03a757d2929f1bbe555f4c7f18c1ee9864e423af94d8f1477e15a46b16386007df628e49b1d68ef83d02fc59aed8814af57d9b2f17bc1417936df69342d27d81054496fc1d0c58cc4d2c8082cb446b2ba527ab3def55fbff61b54257cede4807c9e2ffea4df9b30abe1958ba8a3da754798f6d8d7555ce472705e1689eb33c73efcead43330757d1f2", 0x9a}, {&(0x7f0000004d40)="bd6875323d7077da840d252dc91ff046508302165a229823e0fb7450e19f3b5dab52eb86a0bda8b2866beeed3bee224c422ac64da05b4ebf0482221481d66d6dfe8b3855590b2151991f053f6a5226de4697379f2709d9032007fa0eca2230f8ba5a61d0a3f1f783a6149a7d3bd33bdd6354bbf5fef391", 0x77}], 0x6, &(0x7f0000004e40)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x40}}], 0x48}}, {{&(0x7f0000004ec0)=@nfc={0x27, 0x0, 0x0, 0x5}, 0x80, &(0x7f0000005100)=[{&(0x7f0000004f40)="ea09f30e03f897cb621f63b2ba08e2d181b507eee4a4b7199bd47aa86f80d437e749b61ebb1753c6e6f7972fb85556365337381a4724461d2bc78e011df943e9801bc656a9733071cf081f7f64aff35d780871971a6dec712cc25b3ae813e7c61432dc739a8d7dc3a0072300cf4f8b93cd7c5210d53ad87b046705d93a8ee38cb7fc780c01705a5f0bd56645e0360bcb236e6e3ae642b76d0356d5b405a163edad44a4051d4a40e51931b9936c14f1271ec5f9970aadf039014c3705d5798d67d5d34d66c704ea987fbf53bc5b954956d7f046a280f7c427427bc5ddfdce511b", 0xe0}, {&(0x7f0000005040)="dfa5e3a172b866ea6a685b29619399708975dfd1ddd1823e9f12f6f47165741bf364228fd05d8be2fc2c57776b7ad70a06c4b065667ec3208c10faa4f62d90b8ae46b63756355a29d9f5ef9896267fae9a426aac2bb72d76add3246b8f975a179aa890d61dac230490fe76a71b6acb1144f2d88bec86e79c8d75f7f1c6dbf90eb52e168af8c9f90f88ba6ade2b323fd8031fd8", 0x93}], 0x2, &(0x7f0000005140)=[@txtime={{0x18, 0x1, 0x3d, 0x101}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff9}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffff}}], 0x90}}], 0x4, 0x4000001)
ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r9, 0x40049366, &(0x7f0000005300))
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
cachestat(r10, &(0x7f0000005340)={0x4, 0x400000000000000}, &(0x7f0000005380), 0x0)
write$FUSE_NOTIFY_POLL(r4, &(0x7f00000053c0)={0x18, 0x1, 0x0, {0x1000}}, 0x18)

1m52.689418621s ago: executing program 7 (id=1952):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2ca142, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0xfeffffffffffffff, 0x8, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523720fd4002002cfc03d81a8ca55b39c01802c4dae4162e43ac61b7ad3300", [0x2, 0x7]}})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000ffdbdf2501000000000000000b00002c00140014"], 0x30}}, 0xc840)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x63, 0x0, &(0x7f00000001c0))
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x300, &(0x7f0000000180)=[0x6bd1a313, 0xec63, 0xff, 0x8, 0x98b9, 0xfff, 0x0, 0x100000000000004, 0x10000, 0x200100, 0xfe51, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3fc, 0x4, 0x3, 0x9, 0x400, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0x1, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x3, 0x4, 0x8, 0x6, 0x6, 0x8000003, 0xa3de, 0x4e, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffff6, 0x4, 0xe, 0x7, 0x0, 0xe6, 0x200000000000101, 0x5, 0x100004, 0x63, 0x4, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0x11, 0x8000000000000000, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0x2, 0x7, 0x7, 0x3, 0x2, 0x8, 0xfff, 0x101, 0x4, 0x6, 0xab6, 0x4, 0x4, 0x1, 0x80000007, 0xb, 0x39790, 0x6, 0xe, 0x5, 0x400000000008061d, 0x10000003, 0x8, 0x6, 0x4, 0x4, 0x200, 0xfffffffffffffffc, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x3, 0x5, 0x1, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x4cb, 0x8, 0x3, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb690, 0x3ffc00000, 0x8, 0x3]})
ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000580)={0x1, 0xf9, "8969793c0a8d2541d4be8ac4fe047ef1593c48815158765dd6265553b1215a01604aa406535e7941e2abf1e87eb9105ecf99387d1062431ec224e0cd30013da43fe2a5413d0706939387300c1e07ef6a33a14f89972c88859d9189a99b78f91422542def190b9e240576006c7d28b8f4ab61878ffb530d9a263176b2a96d114fb169039714321fe6e0a303541b5f7d5b0c859e1ea9e36b3aaee69f941b891080efcb5377ae17bea04f3d46eb0ab7f9954980874ac5d587bb22b34bd7e06e7e8944d4ec3ac0b241de82f7dff2b1fd85517d0c5f9deeeedbb739e9f0cb092ea1d23b61bddb7915991d1c1a43f239fde9cd276e38e0b6dae604cd"})
r7 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0)
write$binfmt_elf32(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8)
execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
close_range(r0, r3, 0x0)

1m52.648124602s ago: executing program 36 (id=1952):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2ca142, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0xfeffffffffffffff, 0x8, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523720fd4002002cfc03d81a8ca55b39c01802c4dae4162e43ac61b7ad3300", [0x2, 0x7]}})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000ffdbdf2501000000000000000b00002c00140014"], 0x30}}, 0xc840)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r6, 0x0, 0x63, 0x0, &(0x7f00000001c0))
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x300, &(0x7f0000000180)=[0x6bd1a313, 0xec63, 0xff, 0x8, 0x98b9, 0xfff, 0x0, 0x100000000000004, 0x10000, 0x200100, 0xfe51, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3fc, 0x4, 0x3, 0x9, 0x400, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0x1, 0xffffffff00000000, 0x0, 0x4, 0x7, 0x23b, 0x3, 0x2, 0x3, 0x4, 0x8, 0x6, 0x6, 0x8000003, 0xa3de, 0x4e, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffff6, 0x4, 0xe, 0x7, 0x0, 0xe6, 0x200000000000101, 0x5, 0x100004, 0x63, 0x4, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0x11, 0x8000000000000000, 0xe8, 0x80000000, 0xfffffffffffffc00, 0x2, 0x4, 0x2, 0x2, 0x7, 0x7, 0x3, 0x2, 0x8, 0xfff, 0x101, 0x4, 0x6, 0xab6, 0x4, 0x4, 0x1, 0x80000007, 0xb, 0x39790, 0x6, 0xe, 0x5, 0x400000000008061d, 0x10000003, 0x8, 0x6, 0x4, 0x4, 0x200, 0xfffffffffffffffc, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x3, 0x5, 0x1, 0x2, 0x7, 0xdfd4, 0xfffd, 0x10, 0x4cb, 0x8, 0x3, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb690, 0x3ffc00000, 0x8, 0x3]})
ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000580)={0x1, 0xf9, "8969793c0a8d2541d4be8ac4fe047ef1593c48815158765dd6265553b1215a01604aa406535e7941e2abf1e87eb9105ecf99387d1062431ec224e0cd30013da43fe2a5413d0706939387300c1e07ef6a33a14f89972c88859d9189a99b78f91422542def190b9e240576006c7d28b8f4ab61878ffb530d9a263176b2a96d114fb169039714321fe6e0a303541b5f7d5b0c859e1ea9e36b3aaee69f941b891080efcb5377ae17bea04f3d46eb0ab7f9954980874ac5d587bb22b34bd7e06e7e8944d4ec3ac0b241de82f7dff2b1fd85517d0c5f9deeeedbb739e9f0cb092ea1d23b61bddb7915991d1c1a43f239fde9cd276e38e0b6dae604cd"})
r7 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0)
write$binfmt_elf32(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8)
execveat(r7, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
close_range(r0, r3, 0x0)

1m1.567867304s ago: executing program 4 (id=2920):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_MAX_VCPU_ID(r2, 0x4068aea3, &(0x7f00000002c0)={0x80, 0x0, 0x4})
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x0, 0x3})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000340)={'tunl0\x00', 0x0})
accept4$inet(r3, 0x0, &(0x7f0000000000), 0x80000)
accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000)
socket$inet6(0xa, 0x3, 0x200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000280)={@flat=@handle={0x73682a85, 0xb, 0x3}, @ptr={0x70742a85, 0xfffffffc, 0x0, 0x0, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, 0x0}, 0x7a561b561224c868}], 0x0, 0x0, 0x0})

1m1.514127915s ago: executing program 4 (id=2921):
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x10, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000000080)={{0x2, @empty, 0x2, 0x43, 'fo\x00', 0x2, 0x0, 0x3a}, {@private=0xa810101, 0x4, 0x0, 0x0, 0xba0, 0xdffffffe}}, 0x44)
getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x272590b352b6fbc9, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x14, 0x0, &(0x7f0000000400)=[@request_death], 0x42, 0x1000000, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000000480)=[@increfs_done={0x40106308, 0x1}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/76, 0x4c, 0x0, 0x24}, @fda={0x66646185, 0x9, 0x0, 0xa}, @fda={0x66646185, 0x1, 0x2, 0x13}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x40}], 0x50, 0x0, &(0x7f0000000240)="d81e15c3b9703b627c6f69f27e8fda212411223bed3eb544eea0bb85b9db7e9aa8f4f153246efaf2a8d8f8cf1ae69729c805005f7cf44d476fa4d69887ad7b73ec4b8475b312ee27f07411c59fbffc81"})

1m1.473409656s ago: executing program 4 (id=2922):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read(r0, &(0x7f0000000040)=""/141, 0x8d)
sendfile(r0, r0, 0x0, 0x7ffff000)

1m1.416254227s ago: executing program 4 (id=2923):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x81028, 0x0)
unshare(0x22020600)
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000007c0)={0x0, 0x0, 0xf440, 0x0, 0x0, "95bff5627804ada2"})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020)

1m1.414811317s ago: executing program 4 (id=2924):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
fcntl$addseals(r3, 0x409, 0x5)
pwrite64(r3, &(0x7f0000000000)="48ed", 0x2, 0x3)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$PTRACE_SETSIGMASK(0x420b, r4, 0x8, &(0x7f0000000400)={[0x8]})
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x200)
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f00000009c0)={"73cce1a2b9fbcb97694043ebfb82442d7f428290538e75ff029908cebee95ac2b1febd018ae4703d3263c5b30d4db3243275dd57287ef3c41695e828a0e03b5098370515dc8c9b278addefde0e6ea6ef65a74a3e66e51ee0a646e634cd9cf3ceb03dcf88a235bd6d7a5e64ea39db4636dc9b79c3fc4b6c82b54a6bea17ebf522d474b39c4f6fee3ae29caeec81652b33e49426ec6481fe2262eebd869b7a14a8646751f0b15e94a6bb853e3b3443d254af5852a59766fd5aa457c444e713dbbd7699a8d887ab77e97cf1fd6dd2fe80662726aa9efd1d9c535c161a6b413a473c37876cf8be6867395fe6513e10f14d5c677d301612987f4b25a719961e7bc1d10de8eb93960e40c99b502d401556250d52c53d05eb471d675802ccbbc3de9366ccb6e096b235ae2b81c4f9168f4ce4e741d7e8b381daae4674eacd719870f1f113568e647f04109efd349cb74234c3a469d48e857b3e33ac6a7d7d332a72854c980b550af5a90d997c3c40fbc5fb22492f83675786435181dc40777c05c77ddf9432d2fd86cb3d56393e08f2d9b94b1cb579be8d4110c6a34689fa5972e6879e5c3a7ef48caf8cf42ca467d135665ce259b1dc5ea6c4b07a47260fd8661c29367a99f26a415bea9b5ed5e69d42b8f58ee3f245d4475b05def5960100ef1658d586e1066e24baa59543545c2cca981c6e100a966b52314a8d00863eb35faff0418b5285534298b7d677641b4a5aba2958e1ca74639cd17cf72972aaf8235354157b65f3f06e4e6036c81c33b0464bc6b2d3b9a76323930b1c4c7bf88aad05e2e5332719685c2968ebef1e26f2652bc37b5e4f53617e0bdf41059d7ccf00468537714b77478147d69decae6979b56fa0048f1a9ca8986ba81033850bffe420bed347ec85f23cf78084e5a2f384c9b8ebaf547289fa7b798f53ec2266a9d2150ae353bb8f9a1adc385081366708c819d6ed45a778e5d9ab90333b12d9346d28340d20293a7e9364312bd9ac1048b3ad5306d2f35defb6addea0e6cac0fd8937dbca03968f94433696e77aa48282661b4a3c6aacce6bf023dc078401daf8a7df4081d561fb48c9e6d706123fc273f63203a09addf81dba40f25c2e3ba9035d3678a0f289a3fb0f13baf9e827df7cf7a3b97c3b2504f00e0aa2bc4de28874eb8d88fe393fb165cb8acc6b029eba087bfb614962633e2b00db758e9309b5446e26fcd0634ae2ea70bfd47b9132dd91262554d8fcae51638e9faf2f9fb86a2d5749d56dbb6fb04fde46962ad52d9b9a4bc907ffaa30a007cdeb3df46fb2138bf5baa9ff06e3d708ff8b188d8889d9a8dd95ba74b8e2410bd94e88a3cdfe69927b4d656ff89ab16e8fe7440c707b0e9f308f7164908780c0c1e5e60e6b51281510318de838a4f1e3baf40418deefbc9ab7d4549044c124d0a509d9dc7175fdf469edb9a6"})
r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0)
getsockopt$TIPC_CONN_TIMEOUT(r6, 0x10f, 0x82, &(0x7f0000000080), &(0x7f0000000140)=0x4)
r7 = socket(0x28, 0x5, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x80)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

1m1.27830893s ago: executing program 4 (id=2926):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20008080)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
io_setup(0x82, &(0x7f0000000240)=<r3=>0x0)
syz_clone(0xa61a2100, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x1b8)
io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1, r4, &(0x7f0000001200)='N-', 0x2, 0x4}])
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r6, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}}, 0xd0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000140)={'bridge_slave_1\x00', {0x2, 0x4e24, @broadcast}})
r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x301000, 0x0)
ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000080))
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x28011, r0, 0xffffb000)
setsockopt$bt_BT_VOICE(r7, 0x112, 0xb, &(0x7f0000000200)=0x60, 0x2)

1m1.199661961s ago: executing program 37 (id=2926):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20008080)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
io_setup(0x82, &(0x7f0000000240)=<r3=>0x0)
syz_clone(0xa61a2100, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x1b8)
io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x1, r4, &(0x7f0000001200)='N-', 0x2, 0x4}])
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r6, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}}, 0xd0)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000140)={'bridge_slave_1\x00', {0x2, 0x4e24, @broadcast}})
r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x301000, 0x0)
ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000080))
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x28011, r0, 0xffffb000)
setsockopt$bt_BT_VOICE(r7, 0x112, 0xb, &(0x7f0000000200)=0x60, 0x2)

3.60668395s ago: executing program 6 (id=3736):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ptrace$setregs(0xd, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="bce1400d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)

1.655900218s ago: executing program 9 (id=3767):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x7fffffffffffffff)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_FIOSETOWN(r1, 0x80086601, 0x0)
pipe2$9p(&(0x7f00000003c0)={<r2=>0xffffffffffffffff}, 0x84800)
openat$kvm(0xffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, 0x0, &(0x7f0000000040))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20242, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}}, 0x0)
readv(r2, &(0x7f00000008c0)=[{&(0x7f0000000400)=""/113, 0x71}], 0x1)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0xa8, 0x0, &(0x7f0000000240)=[@increfs={0x40046304, 0x1}, @clear_death={0x400c630f, 0x2}, @dead_binder_done, @request_death={0x400c630e, 0x2}, @clear_death, @enter_looper, @increfs_done, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/121, 0x79, 0x0, 0x4}, @flat=@weak_handle={0x77682a85, 0x10a, 0x1}, @flat=@weak_binder={0x77622a85, 0x100, 0x2}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}, 0x40}], 0x0, 0x0, 0x0})

1.649715848s ago: executing program 9 (id=3768):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff})
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'})
setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) (async)
setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4)
sendmmsg$inet6(r1, &(0x7f0000000740)=[{{&(0x7f0000000000)={0x2, 0x4e21, 0x1ff, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004080) (async)
sendmmsg$inet6(r1, &(0x7f0000000740)=[{{&(0x7f0000000000)={0x2, 0x4e21, 0x1ff, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004080)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) (async)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0x81007702, 0x2)
close_range(r0, 0xffffffffffffffff, 0x0)

1.576166739s ago: executing program 9 (id=3770):
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x1, 0x42145)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0x4020aeb2)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x6fd5239, 0x0, 0x0, 0xb, 0x0, "fee8a2ab78fc979fd1e00d96072000001ea89de2c100000000000000025d96000100000000000000000000000000000800000000000000efffffffffffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x3, 0x9]}})
arch_prctl$ARCH_SHSTK_LOCK(0x5003, 0x1)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000180)=0x4000000)
r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
ioctl$int_in(r6, 0x5421, &(0x7f0000000000)=0x3)
connect$bt_rfcomm(r6, &(0x7f00000001c0)={0x1f, @any, 0xb}, 0xa)
close_range(r4, 0xffffffffffffffff, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.max.descendants\x00', 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x12, 0x1, 0x4, "6a4a42aba98b2f07359d3272d6e8ce294686c732c24a39cc509c79ad4bf6de70b02c91ffbe04916d065f1681d04be078c2e4c1014ec966a8158d76d7aa63c0d9", "ce5862f532d5bff5ff013807abc3406dfe731e87f50cd5bb091fff519936869fd5295ddc045503fe0b01150b5b5ebf1561daa3dc633d717f3f7a3d1f1edac2f2", "c0c045fd3dfd710ca2562c2d8e828bb61dea84761cff87e28f9c8a246fa4f376", [0x8, 0xa]})

1.57347769s ago: executing program 9 (id=3771):
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20102)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = open(0x0, 0x1a1342, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
setns(r0, 0x10000000)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x200)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000733d6464624fb7b52401d9", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',\x00'])

1.56059486s ago: executing program 9 (id=3772):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/fscaps', 0x40, 0x40)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
epoll_create1(0x80000)
r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, 0x0, 0x0, &(0x7f0000000140)={0x0, 0xf, 0x54, {0x5, 0xf, 0x54, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x40, 0x0, 0x6fb7}, @generic={0x33, 0x10, 0xa, "49bbcb33fe527c5a26204c7e85c9da0054cfdd297c827f42ac87d707e2499273cb8b5e494a35de5627e11b28bd5615d8"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x4, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x80, 0x6, 0xff, 0xc}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x60, 0x3, 0xfb, "ce40bc1c", "81014ad9"}}, 0x0}, &(0x7f00000007c0)={0x84, &(0x7f00000003c0)={0x20, 0x12}, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x9}, 0x0, &(0x7f0000000640)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x19, 0x2, "ea0f"}, 0x0, 0x0, 0x0, 0x0})
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020)

1.02386081s ago: executing program 9 (id=3773):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0)
r1 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080))
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2}, 0x1c)
sendto$inet6(r2, &(0x7f0000000000)="b6a5", 0x2, 0x20048004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18119, @rand_addr, 0x983a}, 0x1c)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0x406f413, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f0000000200)='fdinfo/3\x00')
read$eventfd(r5, &(0x7f0000000080), 0x8)

976.269441ms ago: executing program 8 (id=3774):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r0 = getpid()
syz_pidfd_open(r0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RGETLOCK(r1, &(0x7f0000000140)={0x22, 0x37, 0x1, {0x0, 0x2, 0x8, r0, 0x4, ',+(&'}}, 0x22)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
setresgid(0xee00, 0x0, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_pidfd_open(r2, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0xf503, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000000)={'bridge0\x00', @random="0100"})
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0)
ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffffa)
mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0)
ioctl$ASHMEM_SET_NAME(r5, 0x41007701, &(0x7f0000000040)='}.\x00')

976.028482ms ago: executing program 8 (id=3775):
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000340)="23000000220021bb0000409b849ac00a374e296ecb2ccf9ad66c3236de721025e005000000a8", 0x26, 0x26044082, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
r2 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000280)={@ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x34}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x13}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, 0x0}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
getpriority(0x1, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xe, &(0x7f0000000040)=0xc, 0x4)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x3)
syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000380)="64f3466d2e3e672e452f0f070729d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410069e648b80010000000000000440f01c20f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c249dba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000400)={[0x7, 0x901, 0xfffffffffffffffd, 0x7, 0xfffffffffffffff7, 0x40000000000009e, 0xfffffffffffffffe, 0xffff, 0x400, 0xfb, 0x5, 0x4000000004b, 0xe4, 0x3d, 0x2000000009, 0x7], 0x0, 0x10683})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000004c0)={[0x3, 0x101, 0x0, 0xea, 0xea, 0x80000000, 0x100000000800, 0xb, 0x403, 0x7fff, 0x2c8, 0x6745a7b4, 0xd3d, 0x7e276fea, 0x8000040000000003, 0x80000000000fff], 0x8080000, 0x4})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ptrace$poke(0x4, r3, &(0x7f0000000200), 0x5)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8edc11615cb9fab16"})
getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000240), &(0x7f0000000300)=0x8)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x21, 0x0, &(0x7f0000000180)=[@clear_death={0x400c630f, 0x2}, @free_buffer={0x40086303, r2}, @register_looper, @dead_binder_done], 0x55, 0x0, &(0x7f0000000500)="860c0000c9c07baf3789df6d877eac314ecc82d9c71ab1eceb0900000000000000820245a3692f3ac6a588df8de17d26b23105f63a0eeca6f09a8fe84b267ea7bd0e06c1f342a81542e35e27b0431c30a12ff4db2b"})

917.752542ms ago: executing program 8 (id=3776):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1}) (async)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, 0x0)
r1 = socket(0x1, 0x80c, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async)
unshare(0x8000400) (async)
r4 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r4, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
fstat(r0, &(0x7f0000000b40)) (async)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) (async)
r5 = socket(0x1e, 0x805, 0x0)
sendmsg$tipc(r5, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) (async)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "9c21ae2a"}]}}, 0x0}, 0x0) (async)
r6 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x59, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf, 0xa0, 0x9, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x1, 0xd, {0x9, 0x21, 0x80, 0x6, 0x1, {0x22, 0x2e4}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0xc, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x7, 0x5, 0x7}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0xf9, 0x4d, 0x2, 0x40, 0x8}, 0x168, &(0x7f00000009c0)={0x5, 0xf, 0x168, 0x4, [@generic={0xcb, 0x10, 0xa, "bfae889a5809b92c08cda6887d612b1f0dcf93e13c8c9bb53cd067d3a1fe4a1f7d16fd644a091ac2387015cfa0b852e5d44b540aec0f99bb31d64a1fc3832a4095311540b0ea2f758cd805bff8e5d2ea8ec914fdb825c0d2a8d9c5cd3557cb58fbc556307034586d9865bdab5fd5d8dcbb02bda2e7d3e1406b3978701a3973939daee1249193857bc31cd8de3878588bff2f190539f065eea16c0c8b1aae42860de9e7e8e58ed948f6aa406e71a6a089d03ce8bb9ed06ce54cc01884cdfb0527adb3adf3b1324338"}, @generic={0x84, 0x10, 0xa, "d9aec5bb7fe6cd39e4c690818c88db636d5b3d38ae27c4ea5b7cee368a14d1ea37958bf6fc141833b077effb79bb7b417e8123ec5062ae0e0e571891c418f1dfb97f3fbc6475361d4b0a9c3ac98909ad14e7e1fa12510f0003c83a5bcca27e2848fa36ce5f23bbe4ff97f1e5d5323caba704d63f3e91b2fc1a4bf041fc95635c0f"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0xe6, 0xf7, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x6, 0xfb}]}, 0x155555fb, [{0x8f, &(0x7f0000000240)=@string={0x8f, 0x3, "77ab7fd956ba68047daa21eab92dec028905e85068dd355e62115aac379b3cfcb3ce1f28727cb05d8018b937259d0ed216f5f602e0009e7e03c15e74c887385635c4ed5446e876c96965d950aad374931d88b987575ebdd4361e767d7f9a220427cf3d27c2db5def2b10ab34aff7dc02c54d8b2653524b503115726809977a9530a44671fd1f6aff74ad1cc7ef"}}, {0xbe, &(0x7f0000000480)=@string={0xbe, 0x3, "2788d918900e16954432ed233dbb468b02f104b8008399d2dd46ae6975bb9176dd38c94782c344abb00331ad7f5ab7dab5c0dc59a2256590d5230b98aa09f1b8c5bad9c163e117ab47c2bc6a1812e016eb26c2cea223149d231d50525dc355955de3bc82d5093f66f7f2898b3ea6b16e81739b88d5ba9c23dd6aac6fc7336238ed3758df16b24ed66839ebfeb6e612c35cadc11535138d29ba0d1f02670c7054206784e61edb86355cd3bcf5c885e1b356602f7a501bd7f2965e0d55"}}]})
sendto(r2, &(0x7f0000000bc0)="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", 0x1000, 0x1, &(0x7f0000000600)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x0, "b032d4ee26d18bc15e914ee845b6a40a842825293bfc8fe38fd9f55fca19317d7e5871dba7b653fbd5d3eff4c866eccb002e0f865fcab9d94ae10e6de30986", 0x18}, 0x80) (async)
syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000140)={0xffffffffffffffd7, &(0x7f0000000880)={0x40, 0x10, 0x100, "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"}, 0x0, 0x0, 0x0, 0x0})
r7 = socket$inet_udp(0x2, 0x2, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) (async)
setsockopt$inet_buf(r7, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0000000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)
ioctl$TUNGETVNETBE(r3, 0x800454df, &(0x7f0000000540)=0x1) (async)
pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x4800) (async)
r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
sendfile(r9, r10, 0x0, 0x1) (async)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000340)={0x20, 0x16}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000440)={0x0, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x40, 0xb, 0x2, "fafd"}, &(0x7f00000005c0)={0x40, 0xf, 0x2}, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x19, 0x2, "ab7c"}, &(0x7f00000006c0)={0x40, 0x1a, 0x2, 0x401}, 0x0, &(0x7f0000000740)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000000780)={0x40, 0x21, 0x1, 0x98}}) (async)
setsockopt$TIPC_IMPORTANCE(r5, 0x10f, 0x7f, &(0x7f00000000c0)=0x2, 0x4)

835.247824ms ago: executing program 0 (id=3777):
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r1, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
listen(r1, 0x9)
close_range(r0, 0xffffffffffffffff, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15)
ioctl$KVM_CAP_MEMORY_FAULT_INFO(r2, 0x4068aea3, &(0x7f0000000000))

768.134275ms ago: executing program 0 (id=3778):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f00000000c0), 0x10) (async)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async)
pipe(&(0x7f0000001300))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) (async)
socket$inet6(0xa, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) (async)
socket$inet6(0xa, 0x80002, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0) (async)
r7 = socket(0x10, 0x80002, 0x0)
write$P9_RLERRORu(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r7, @ANYRESDEC], 0x52) (async)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6, @ANYBLOB="2c76697273696f6e3d3970323430cc2e752c00"]) (async)
sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRESDEC, @ANYRES64=<r8=>r2, @ANYRES64=0x0, @ANYRES64=r2], 0x20000600}}, 0x0) (async)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'batadv0\x00', 0x1003}) (async)
ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x1) (async)
ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000040))
fcntl$lock(0xffffffffffffffff, 0x7, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000840000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async)
read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, <r10=>0x0}, 0x2020)
write$FUSE_INIT(r9, &(0x7f0000000080)={0x50, 0x0, r10, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) (async)
r11 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESOCT=r4, @ANYBLOB=',group_id=', @ANYRES16=r8]) (async)
read$FUSE(r11, &(0x7f0000006300)={0x2020, 0x0, <r12=>0x0}, 0x2020)
write$FUSE_INIT(r11, &(0x7f0000000040)={0x50, 0x0, r12, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)

767.871935ms ago: executing program 0 (id=3779):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ff00000}]})
clock_adjtime(0x6, 0x0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000005c0)={0x3, 0x0, 0x1, 0x4, 0x9, 0x0, [{0x7, 0x8576, 0xffffffffffffffff}, {0x86, 0x0, 0x10001}, {0x6, 0x5, 0xb8ab, '\x00', 0x8}, {0x7, 0x0, 0xffffffffffffff80, '\x00', 0x100}, {0x376, 0x4, 0x8, '\x00', 0x2002}, {0x10000, 0xd3, 0xf88, '\x00', 0x800}, {0x200, 0x10, 0x4000000000000000, '\x00', 0x2}, {0x10, 0xfffffffffffffffb, 0xdbb5, '\x00', 0x3}, {0x1, 0x9, 0x2, '\x00', 0x182}]})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8edc11615cb9fab16"})
openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x60, 0x0, &(0x7f0000000340)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffdcc, 0x0, 0x0, 0x0}, 0x400}, @increfs={0x40046304, 0x80}], 0x55, 0x0, &(0x7f0000000500)="bcbc648bc9c07baf3789df6d877eac314ecc82d9c71ab1ecebefe99af20b4ab3cb820245a3692f3ac6a588df8de17d26b23105f63a0eeca6f09a8fe84b267ea7bd0e06c1f342a81542e35e27b0431c30a12ff4db2b"})

682.387097ms ago: executing program 0 (id=3780):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x2040600)
r3 = getpgid(0x0)
r4 = syz_pidfd_open(r3, 0x0)
pidfd_send_signal(r4, 0x0, 0x0, 0x4)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'vlan1\x00'})
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

617.794188ms ago: executing program 0 (id=3781):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/fscaps', 0x40, 0x40)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
epoll_create1(0x80000)
r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
syz_usb_control_io(r1, &(0x7f0000000280)={0x2c, 0x0, 0x0, &(0x7f0000000140)={0x0, 0xf, 0x54, {0x5, 0xf, 0x54, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x40, 0x0, 0x6fb7}, @generic={0x33, 0x10, 0xa, "49bbcb33fe527c5a26204c7e85c9da0054cfdd297c827f42ac87d707e2499273cb8b5e494a35de5627e11b28bd5615d8"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x4, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x80, 0x6, 0xff, 0xc}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x60, 0x3, 0xfb, "ce40bc1c", "81014ad9"}}, 0x0}, &(0x7f00000007c0)={0x84, &(0x7f00000003c0)={0x20, 0x12}, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x4, {0x1, 0x2}}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0xf, 0x2, 0x9}, 0x0, &(0x7f0000000640)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000680)={0x40, 0x19, 0x2, "ea0f"}, 0x0, 0x0, 0x0, 0x0})
fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020)

485.772271ms ago: executing program 6 (id=3782):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
keyctl$clear(0x3, 0xfffffffffffffffd)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x3, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "e5631d6f20af6daa"}, 0x10}}, 0x0)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000140), 0x4a81, &(0x7f0000000040)={[{}]})

485.484661ms ago: executing program 6 (id=3783):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xa2001, 0x0)
r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac000000000301"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000001400)=[@increfs={0x40046304, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9286f9ce86a82d0b}], 0x0, 0x0, 0x0})
clock_settime(0xfffffff0, &(0x7f0000000340)={0x0, 0x3938700})
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f00000001c0)=[@increfs, @acquire={0x40046305, 0x3}, @enter_looper, @free_buffer={0x40086303, r3}], 0xd8, 0x0, &(0x7f0000000580)="f6b50b9a697c66c53086eaefa2f9053f5fb7ee55996c8755a00a5756a795c3d63eb0ad09a26eaf0f665b700af9e5533643f6fe727bbdeba20c590b5745e1276ff41424c27eb2acb3dea7e240b0eb0359ae861e9650a9e64bb340e0d185d10ce3a4e89811bcab7ef7d5711093175b7cdacca604940b734a0ebf283389a7cbfa0dc05d315dc901dedf0061d539384c12e8e0742a1ce1e2e9f911b5b9dbd2105110afc6b0ddeaafb46cb4f95d99853b43748de6db402625d8b1544ad916b1ccbb837f2100d396e20b3f6f7423a3edf2ea895991a4cc42794423"})
ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0})

421.215592ms ago: executing program 6 (id=3784):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000)
munlockall()
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x15)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000b72000/0x400000)=nil, 0x400000}, 0x1})
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19)
mkdir(&(0x7f00000001c0)='./bus\x00', 0x102)
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2000)
r2 = getegid()
fchownat(0xffffffffffffffff, &(0x7f0000000280)='./file1\x00', r1, r2, 0x1000)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x5000, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@uuid_null}]})
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
pipe2$watch_queue(0x0, 0x80)
ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x40000)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000001)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
r4 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
ioctl$UDMABUF_CREATE(r4, 0x40187542, 0x0)
readv(r3, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x2)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4040140)

391.515783ms ago: executing program 8 (id=3785):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000040)=0x41)
pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80000)
fadvise64(r2, 0x1, 0xb36, 0x3)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0)
io_submit(0x0, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0}])
munlockall()
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000d0c10000000000000000000", 0x58}], 0x1)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000014d564b0000000001"])
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

244.181885ms ago: executing program 6 (id=3786):
prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/4096)
prctl$PR_GET_NAME(0x10, &(0x7f0000001000)) (async)
prctl$PR_GET_NAME(0x10, &(0x7f0000001000))
prctl$PR_GET_NAME(0x10, &(0x7f0000001040)=""/227) (async)
prctl$PR_GET_NAME(0x10, &(0x7f0000001040)=""/227)
prctl$PR_GET_NAME(0x10, &(0x7f0000001140)=""/187)
prctl$PR_GET_NAME(0x10, &(0x7f0000001200)=""/117)
prctl$PR_GET_NAME(0x10, &(0x7f0000001280)=""/40)
prctl$PR_GET_NAME(0x10, &(0x7f00000012c0)=""/203)
prctl$PR_GET_NAME(0x10, &(0x7f00000013c0)) (async)
prctl$PR_GET_NAME(0x10, &(0x7f00000013c0))
prctl$PR_GET_NAME(0x10, &(0x7f0000001400)=""/212)
prctl$PR_GET_NAME(0x10, &(0x7f0000001500)=""/230) (async)
prctl$PR_GET_NAME(0x10, &(0x7f0000001500)=""/230)
prctl$PR_GET_NAME(0x10, &(0x7f0000001600)=""/211)
prctl$PR_GET_NAME(0x10, &(0x7f0000001700)=""/131)
prctl$PR_GET_NAME(0x10, &(0x7f00000017c0)=""/12) (async)
prctl$PR_GET_NAME(0x10, &(0x7f00000017c0)=""/12)
prctl$PR_GET_NAME(0x10, &(0x7f0000001800)=""/68)
prctl$PR_GET_NAME(0x10, &(0x7f0000001880)=""/76) (async)
prctl$PR_GET_NAME(0x10, &(0x7f0000001880)=""/76)
prctl$PR_GET_NAME(0x10, &(0x7f0000001900)=""/251) (async)
prctl$PR_GET_NAME(0x10, &(0x7f0000001900)=""/251)
prctl$PR_GET_NAME(0x10, &(0x7f0000001a00)=""/69)
prctl$PR_GET_NAME(0x10, &(0x7f0000001a80)=""/218) (async)
prctl$PR_GET_NAME(0x10, &(0x7f0000001a80)=""/218)
prctl$PR_GET_NAME(0x10, &(0x7f0000001b80)=""/21)
prctl$PR_GET_NAME(0x10, &(0x7f0000001bc0)=""/151)
prctl$PR_GET_NAME(0x10, &(0x7f0000001c80)=""/46) (async)
prctl$PR_GET_NAME(0x10, &(0x7f0000001c80)=""/46)
prctl$PR_GET_NAME(0x10, &(0x7f0000001cc0)=""/27)
prctl$PR_GET_NAME(0x10, &(0x7f0000001d00)=""/112)
prctl$PR_GET_NAME(0x10, &(0x7f0000001d80)=""/51)
prctl$PR_GET_NAME(0x10, &(0x7f0000001dc0)=""/21)
prctl$PR_GET_NAME(0x10, &(0x7f0000001e00)=""/4)
prctl$PR_GET_NAME(0x10, &(0x7f0000001e40)=""/28)
prctl$PR_GET_NAME(0x10, &(0x7f0000001e80)=""/4096)
prctl$PR_GET_NAME(0x10, &(0x7f0000002e80)=""/45)
prctl$PR_GET_NAME(0x10, &(0x7f0000002ec0)=""/39) (async)
prctl$PR_GET_NAME(0x10, &(0x7f0000002ec0)=""/39)

239.492405ms ago: executing program 6 (id=3787):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x54, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000380)={0x30, 0x30, 0x30}}, 0x1040}], 0x5a, 0x0, &(0x7f0000000400)="cb2a499fc52c7a386ad917877700d052ef62983aca8ff936fca29e7bc7ec2ca216262dae1f7f32ff497c006ba3cd35c832d7b0320be1eecb3c8ab2ac50bae16cdedcd164b2862c43a8745bafdd94c96182643b70efd41186dc9d"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ppoll(&(0x7f0000000080)=[{r0, 0x42b}], 0x1, &(0x7f0000000100)={0x77359400}, &(0x7f0000000200)={[0xffffffff]}, 0x8)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})

67.517699ms ago: executing program 0 (id=3788):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
prlimit64(0x0, 0xd, &(0x7f0000000140)={0x9, 0x8b}, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000080008400000000a0400164008001540000000030400170058000d8014"], 0xd4}}, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendto$inet6(r1, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
futex(0x0, 0x5, 0xfffefffe, 0x0, 0x0, 0x1)
mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0)
r3 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
setrlimit(0xe, &(0x7f00000000c0)={0x280000000, 0xffffffff00000001})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x10, 0x0, &(0x7f0000000ac0)=[@free_buffer={0x40086303, r3}, @enter_looper], 0x51, 0x0, &(0x7f0000000b00)="eab7eff9f911a8687976f7a6c5998dd78bac5fab3d8503b46631f279d44ff48534e4b9696e0cfd4fb45a17df1d83d3234c9910e572e34d902837352ebb7f40e638637e2d0882b350465d585835d542960a"})
r4 = socket(0x10, 0x803, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x0, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x20000000002, 0x37}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

262.15µs ago: executing program 8 (id=3789):
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5, 0x4})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001400010000000000000000000a0000000400000014000100ff01000000000000000000000000000115000680"], 0x44}, 0x1, 0x0, 0x0, 0x4018}, 0x0)
write(r0, &(0x7f0000001c80)="b1", 0x1)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
getdents64(r2, &(0x7f0000000100)=""/80, 0x2f)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x4, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x1}], 0xfffffffffffffff5, 0x0, 0x0})

0s ago: executing program 8 (id=3790):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ptrace$setregs(0xd, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r3, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="bce1400d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0)
syz_usb_control_io$printer(r3, 0x0, 0x0)

kernel console output (not intermixed with test programs):

fffb9
[  175.364209][  T445] asix 5-1:0.0: probe with driver asix failed with error -71
[  175.376084][  T445] usb 5-1: USB disconnect, device number 15
[  175.408559][ T6613] binder: Bad value for 'stats'
[  175.444161][ T6617] netlink: 'syz.0.1984': attribute type 11 has an invalid length.
[  175.509429][ T6629] overlayfs: failed to clone upperpath
[  175.826814][   T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  175.930746][ T6655] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  175.957587][   T10] usb 9-1: device descriptor read/64, error -71
[  176.205734][ T6687] 9pnet_fd: Insufficient options for proto=fd
[  176.209041][   T10] usb 9-1: device descriptor read/64, error -71
[  176.330616][  T445] usb 5-1: new low-speed USB device number 16 using dummy_hcd
[  176.450481][   T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  176.492209][  T445] usb 5-1: config 0 interface 0 has no altsetting 0
[  176.499007][  T445] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  176.508142][  T445] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.517091][  T445] usb 5-1: config 0 descriptor??
[  176.591747][   T10] usb 9-1: device descriptor read/64, error -71
[  176.724409][  T445] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  176.832703][   T10] usb 9-1: device descriptor read/64, error -71
[  176.943566][   T10] usb usb9-port1: attempt power cycle
[  177.285565][   T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  177.317774][   T10] usb 9-1: device descriptor read/8, error -71
[  177.373256][ T6768] fuse: Bad value for 'fd'
[  177.449265][ T6781] overlayfs: failed to clone upperpath
[  177.455720][   T10] usb 9-1: device descriptor read/8, error -71
[  177.698489][   T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  177.718856][   T10] usb 9-1: device descriptor read/8, error -71
[  177.734312][  T445] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  177.746321][  T445] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  177.756896][  T445] asix 5-1:0.0: probe with driver asix failed with error -71
[  177.765622][  T445] usb 5-1: USB disconnect, device number 16
[  177.860322][   T10] usb 9-1: device descriptor read/8, error -71
[  177.969248][   T10] usb usb9-port1: unable to enumerate USB device
[  178.320493][ T6827] __vm_enough_memory: pid: 6827, comm: syz.4.2060, bytes: 18014402804453376 not enough memory for the allocation
[  178.346508][ T6830] overlay: ./file1 is not a directory
[  178.364564][   T36] audit: type=1400 audit(2000000030.252:543): avc:  denied  { setattr } for  pid=6834 comm="syz.4.2062" name="ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1
[  178.587972][ T6839] syz.8.2063: attempt to access beyond end of device
[  178.587972][ T6839] loop8: rw=0, sector=0, nr_sectors = 1 limit=0
[  178.600903][ T6839] FAT-fs (loop8): unable to read boot sector
[  179.015121][ T3278] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  179.165897][ T3278] usb 9-1: Using ep0 maxpacket: 16
[  179.172354][ T3278] usb 9-1: config 0 has an invalid interface number: 251 but max is 0
[  179.181933][ T3278] usb 9-1: config 0 has no interface number 0
[  179.188131][ T3278] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  179.198223][ T3278] usb 9-1: config 0 interface 251 altsetting 0 endpoint 0x82 has invalid maxpacket 16448, setting to 1024
[  179.209606][ T3278] usb 9-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  179.221387][ T3278] usb 9-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  179.230608][ T3278] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.238755][ T3278] usb 9-1: Product: syz
[  179.242985][ T3278] usb 9-1: Manufacturer: syz
[  179.247660][ T3278] usb 9-1: SerialNumber: syz
[  179.256631][ T3278] usb 9-1: config 0 descriptor??
[  179.262165][ T6847] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  179.269883][ T6847] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  179.281429][ T6870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6870 comm=syz.4.2076
[  179.437150][ T6881] veth0_vlan: entered allmulticast mode
[  179.448062][ T6881] veth0_vlan: left promiscuous mode
[  179.453786][ T6881] veth0_vlan: entered promiscuous mode
[  179.488345][ T6847] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  179.495626][ T6847] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  179.739044][  T445] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  179.870141][  T445] usb 5-1: device descriptor read/64, error -71
[  180.111810][  T445] usb 5-1: device descriptor read/64, error -71
[  180.352735][  T445] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  180.483139][  T445] usb 5-1: device descriptor read/64, error -71
[  180.724985][  T445] usb 5-1: device descriptor read/64, error -71
[  180.733949][   T36] audit: type=1400 audit(2000000032.599:544): avc:  denied  { write } for  pid=6905 comm="syz.0.2089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  180.855344][  T445] usb usb5-port1: attempt power cycle
[  180.984932][ T6914] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2091'.
[  181.197065][  T445] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  181.218302][  T445] usb 5-1: device descriptor read/8, error -71
[  181.348891][  T445] usb 5-1: device descriptor read/8, error -71
[  181.589110][  T445] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  181.610685][  T445] usb 5-1: device descriptor read/8, error -71
[  181.741988][  T445] usb 5-1: device descriptor read/8, error -71
[  181.768370][ T3278] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  181.779454][ T3278] asix 9-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71
[  181.779872][ T6924] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  181.789655][ T3278] asix 9-1:0.251: probe with driver asix failed with error -5
[  181.808483][ T3278] usb 9-1: USB disconnect, device number 6
[  181.821260][ T6926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2096'.
[  181.850652][  T445] usb usb5-port1: unable to enumerate USB device
[  182.446464][   T36] audit: type=1326 audit(2000000034.310:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6945 comm="syz.4.2104" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee00b8eba9 code=0x0
[  182.696235][ T6963] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2108'.
[  182.724632][ T6965] rust_binder: Error while translating object.
[  182.724683][ T6965] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  182.731082][ T6965] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:121
[  182.824062][ T6975] rust_binder: Write failure EFAULT in pid:57
[  182.862745][ T6984] rust_binder: 59: no such ref 3
[  182.907277][ T6993] overlayfs: failed to clone upperpath
[  183.074690][ T7011] fuse: Bad value for 'fd'
[  183.079278][ T1118] usb 5-1: new low-speed USB device number 21 using dummy_hcd
[  183.157654][   T10] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  183.237818][ T1118] usb 5-1: Invalid ep0 maxpacket: 64
[  183.309437][   T10] usb 9-1: config 0 has an invalid interface number: 190 but max is 0
[  183.317888][   T10] usb 9-1: config 0 has no interface number 0
[  183.324391][   T10] usb 9-1: New USB device found, idVendor=19d2, idProduct=1111, bcdDevice= 7.75
[  183.334156][   T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.346786][   T10] usb 9-1: config 0 descriptor??
[  183.368508][ T1118] usb 5-1: new low-speed USB device number 22 using dummy_hcd
[  183.529337][ T1118] usb 5-1: Invalid ep0 maxpacket: 64
[  183.534853][ T1118] usb usb5-port1: attempt power cycle
[  183.557369][   T10] usb 9-1: string descriptor 0 read error: -71
[  183.566816][   T10] usb 9-1: bad CDC descriptors
[  183.575738][   T10] usb 9-1: USB disconnect, device number 7
[  183.641844][ T7026] overlayfs: failed to clone upperpath
[  183.881182][ T1118] usb 5-1: new low-speed USB device number 23 using dummy_hcd
[  183.901686][ T1118] usb 5-1: Invalid ep0 maxpacket: 64
[  184.031993][ T1118] usb 5-1: new low-speed USB device number 24 using dummy_hcd
[  184.052565][ T1118] usb 5-1: Invalid ep0 maxpacket: 64
[  184.058054][ T1118] usb usb5-port1: unable to enumerate USB device
[  184.081366][ T7044] __vm_enough_memory: pid: 7044, comm: syz.8.2139, bytes: 18014402804453376 not enough memory for the allocation
[  184.156869][ T7047] rust_binder: Failed to allocate buffer. len:18446744073709551352, is_oneway:false
[  184.156898][ T7047] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  184.166824][ T7047] rust_binder: Failure BR_FAILED_REPLY { source: ENOSPC } during reply - delivering BR_FAILED_REPLY to sender.
[  184.176406][ T7047] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:66
[  184.193777][ T1118] rust_binder: 7046: removing orphan mapping 0:24
[  184.394363][   T36] audit: type=1400 audit(2000000036.250:546): avc:  denied  { listen } for  pid=7056 comm="syz.0.2143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  184.564691][ T1118] usb 9-1: new low-speed USB device number 8 using dummy_hcd
[  184.717142][ T1118] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  184.726866][ T1118] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.736482][ T1118] usb 9-1: config 0 descriptor??
[  184.944668][ T1118] asix 9-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  185.086825][ T7065] overlayfs: failed to clone upperpath
[  185.347530][ T1118] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  185.357808][ T1118] asix 9-1:0.0: probe with driver asix failed with error -61
[  185.983729][ T7091] +$<¶: renamed from bridge0 (while UP)
[  185.991539][ T7091] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2153'.
[  186.001088][ T7091] af_packet: tpacket_rcv: packet too big, clamped from 72 to 4294967272. macoff=96
[  186.071692][ T7102] rust_binder: 141: no such ref 3
[  186.074233][ T7104] netlink: 165 bytes leftover after parsing attributes in process `syz.6.2159'.
[  186.077052][ T7102] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:141
[  186.088294][ T7102] rust_binder: Error while translating object.
[  186.097974][ T7102] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  186.104528][ T7102] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:141
[  186.116399][   T36] audit: type=1400 audit(2000000037.961:547): avc:  denied  { setattr } for  pid=7101 comm="syz.4.2158" path="socket:[60279]" dev="sockfs" ino=60279 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  186.169471][ T7117] ptm ptm7: ldisc open failed (-12), clearing slot 7
[  186.424078][  T616] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  186.574779][  T616] usb 5-1: Using ep0 maxpacket: 32
[  186.581712][  T616] usb 5-1: unable to get BOS descriptor or descriptor too short
[  186.590335][  T616] usb 5-1: config 7 has an invalid interface number: 103 but max is 2
[  186.598922][  T616] usb 5-1: config 7 has an invalid interface number: 3 but max is 2
[  186.607471][  T616] usb 5-1: config 7 has an invalid interface number: 134 but max is 2
[  186.615936][  T616] usb 5-1: config 7 has no interface number 0
[  186.622378][  T616] usb 5-1: config 7 has no interface number 1
[  186.628559][  T616] usb 5-1: config 7 has no interface number 2
[  186.634688][  T616] usb 5-1: config 7 interface 3 altsetting 1 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  186.645540][  T616] usb 5-1: config 7 interface 103 has no altsetting 0
[  186.652445][  T616] usb 5-1: config 7 interface 3 has no altsetting 0
[  186.659206][  T616] usb 5-1: config 7 interface 134 has no altsetting 0
[  186.667793][  T616] usb 5-1: New USB device found, idVendor=4971, idProduct=1012, bcdDevice=36.82
[  186.677233][  T616] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.685506][  T616] usb 5-1: Product: syz
[  186.689711][  T616] usb 5-1: Manufacturer: syz
[  186.694341][  T616] usb 5-1: SerialNumber: syz
[  186.699706][  T616] usb 5-1: Interface #103 referenced by multiple IADs
[  186.706604][  T616] usb 5-1: Interface #134 referenced by multiple IADs
[  186.917682][ T7125] rust_binder: Write failure EINVAL in pid:150
[  187.304683][ T3278] usb 9-1: USB disconnect, device number 8
[  187.360463][ T7135] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  187.385245][ T7137] /dev/rnullb0: Can't open blockdev
[  187.447296][ T7139] rust_binder: 81: no such ref 2
[  187.556359][   T36] audit: type=1326 audit(2000000039.394:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7157 comm="syz.6.2177" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f625698eba9 code=0x0
[  188.614758][   T46] usb 9-1: new low-speed USB device number 9 using dummy_hcd
[  188.766670][   T46] usb 9-1: config 0 has an invalid interface number: 192 but max is 0
[  188.775104][   T46] usb 9-1: config 0 has no interface number 0
[  188.781529][   T46] usb 9-1: config 0 interface 192 has no altsetting 0
[  188.788966][   T46] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  188.799395][   T46] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.808870][   T46] usb 9-1: config 0 descriptor??
[  189.021366][   T46] usb 9-1: string descriptor 0 read error: -71
[  189.039391][   T46] asix 9-1:0.192 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  189.050262][   T46] asix 9-1:0.192: probe with driver asix failed with error -71
[  189.063111][   T46] usb 9-1: USB disconnect, device number 9
[  189.220749][  T616] usb-storage 5-1:7.103: USB Mass Storage device detected
[  189.249643][  T616] usb-storage 5-1:7.103: Quirks match for vid 4971 pid 1012: 800000
[  189.319679][  T616] usb-storage 5-1:7.3: USB Mass Storage device detected
[  189.348303][  T616] usb-storage 5-1:7.3: Quirks match for vid 4971 pid 1012: 800000
[  189.401751][  T616] usb-storage 5-1:7.134: USB Mass Storage device detected
[  189.439002][  T616] usb-storage 5-1:7.134: Quirks match for vid 4971 pid 1012: 800000
[  189.484897][  T616] usb 5-1: USB disconnect, device number 25
[  189.830519][  T616] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  189.881707][ T7214] rust_binder: Write failure EINVAL in pid:97
[  189.881847][ T7214] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:97
[  189.991258][  T616] usb 5-1: Using ep0 maxpacket: 8
[  190.032833][  T616] usb 5-1: unable to get BOS descriptor or descriptor too short
[  190.041365][  T616] usb 5-1: config 7 has an invalid interface number: 204 but max is 0
[  190.049673][  T616] usb 5-1: config 7 has no interface number 0
[  190.071637][  T616] usb 5-1: too many endpoints for config 7 interface 204 altsetting 80: 241, using maximum allowed: 30
[  190.103826][  T616] usb 5-1: config 7 interface 204 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 241
[  190.127806][  T616] usb 5-1: config 7 interface 204 has no altsetting 0
[  190.144007][  T616] usb 5-1: string descriptor 0 read error: -22
[  190.150488][  T616] usb 5-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe
[  190.170586][  T616] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.383598][  T616] asix 5-1:7.204 (unnamed net_device) (uninitialized): invalid hw address, using random
[  190.586729][  T616] asix 5-1:7.204 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  190.604120][  T616] asix 5-1:7.204 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0
[  190.627592][  T616] asix 5-1:7.204: probe with driver asix failed with error -32
[  190.654389][  T616] usb 5-1: USB disconnect, device number 26
[  190.684253][ T7216] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  190.794393][ T7202] kvm: user requested TSC rate below hardware speed
[  190.818970][ T7202] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer.
[  190.975859][ T1118] usb 9-1: new full-speed USB device number 10 using dummy_hcd
[  191.127876][ T1118] usb 9-1: unable to get BOS descriptor or descriptor too short
[  191.146134][ T1118] usb 9-1: not running at top speed; connect to a high speed hub
[  191.163454][ T1118] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  191.176776][ T1118] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  191.195922][ T1118] usb 9-1: config 1 has no interface number 1
[  191.204720][ T1118] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  191.222084][ T1118] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  191.235489][ T1118] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  191.245687][ T1118] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.255959][ T1118] usb 9-1: Product: 䪢红즦稤ںꄽ
[  191.263947][ T1118] usb 9-1: Manufacturer: ଈ䣚娋蕈�呂鿄�ￊ￿
[  191.272863][ T1118] usb 9-1: SerialNumber: syz
[  191.491707][ T1118] hub 9-1:1.0: Invalid hub with more than one config or interface
[  191.496720][ T7242] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2202'.
[  191.503786][ T1118] hub 9-1:1.0: probe with driver hub failed with error -22
[  191.517586][ T1118] usb 9-1: 2:1 : no or invalid class specific endpoint descriptor
[  191.531454][ T1118] usb 9-1: USB disconnect, device number 10
[  191.894011][ T7254] kvm: kvm [7253]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7
[  191.902613][ T7254] kvm: kvm [7253]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7
[  191.987347][ T7254] kvm: kvm [7253]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0xedd4
[  192.001172][ T7254] kvm: kvm [7253]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0xed8d
[  192.014720][ T7254] kvm: kvm [7253]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xec2d
[  192.054007][ T7254] kvm: kvm [7253]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0xebe7
[  192.066315][ T7254] kvm: kvm [7253]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xeba0
[  192.251710][   T46] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  192.413563][   T46] usb 5-1: Using ep0 maxpacket: 8
[  192.422780][   T46] usb 5-1: unable to get BOS descriptor or descriptor too short
[  192.431443][   T46] usb 5-1: config 6 has an invalid interface number: 248 but max is 0
[  192.440115][   T46] usb 5-1: config 6 has no interface number 0
[  192.446484][   T46] usb 5-1: config 6 interface 248 has no altsetting 0
[  192.455072][   T46] usb 5-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  192.464490][   T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.472610][   T46] usb 5-1: Product: syz
[  192.477190][   T46] usb 5-1: Manufacturer: syz
[  192.481927][   T46] usb 5-1: SerialNumber: syz
[  192.701008][   T46] ums-karma 5-1:6.248: USB Mass Storage device detected
[  192.787238][   T46] usb 5-1: USB disconnect, device number 27
[  193.251645][   T36] audit: type=1400 audit(2000000045.067:549): avc:  denied  { write } for  pid=7301 comm="syz.4.2222" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1
[  193.265718][ T7306] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  193.430511][ T7316] /dev/rnullb0: Can't open blockdev
[  193.599171][ T7322] kvm: kvm [7321]: vcpu2, guest rIP: 0x911d Unhandled WRMSR(0xc1) = 0xffff
[  193.608148][ T7322] kvm: kvm [7321]: vcpu2, guest rIP: 0x911d Unhandled WRMSR(0xc2) = 0xffff
[  193.620260][ T7318] fuse: Unknown parameter 'f90x0000000000000006'
[  193.622815][ T7322] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  193.703169][ T7337] overlayfs: failed to clone upperpath
[  193.739081][ T7347] can: request_module (can-proto-0) failed.
[  193.745868][   T36] audit: type=1400 audit(2000000045.555:550): avc:  denied  { accept } for  pid=7346 comm="syz.8.2238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  193.754858][ T7347] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  193.768351][ T7347] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true
[  193.773956][ T7349] validate_nla: 1 callbacks suppressed
[  193.773983][ T7349] netlink: 'syz.0.2239': attribute type 4 has an invalid length.
[  193.774888][ T7347] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  193.803852][ T7347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:117
[  193.839804][   T36] audit: type=1400 audit(2000000045.655:551): avc:  denied  { setattr } for  pid=7348 comm="syz.0.2239" name="file0" dev="tmpfs" ino=2530 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  193.893461][ T7358] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  193.894048][ T7358] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:119
[  193.922125][ T7365] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2246'.
[  193.928919][ T7367] bridge0: entered allmulticast mode
[  193.933394][ T7365] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  193.948380][ T7367] bridge0: left allmulticast mode
[  194.109574][   T36] audit: type=1400 audit(2000000045.914:552): avc:  denied  { lock } for  pid=7384 comm="syz.6.2254" path="socket:[61364]" dev="sockfs" ino=61364 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  194.141526][   T36] audit: type=1400 audit(2000000045.953:553): avc:  denied  { execute } for  pid=7384 comm="syz.6.2254" path="pipe:[61361]" dev="pipefs" ino=61361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  194.282620][ T7394] rust_binder: Write failure EINVAL in pid:203
[  194.320274][ T7399] tipc: Started in network mode
[  194.331538][ T7399] tipc: Node identity b681a38926a3, cluster identity 4711
[  194.338758][ T7399] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  194.347088][ T7402] tipc: Disabling bearer <eth:syzkaller0>
[  194.954897][ T7425] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  194.998837][ T7425] rust_binder: Error in use_page_slow: ESRCH
[  195.005483][ T7425] rust_binder: use_range failure ESRCH
[  195.012306][ T7425] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false
[  195.018172][ T7425] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  195.031163][ T7428] kvm: kvm [7424]: vcpu2, guest rIP: 0x911d Unhandled WRMSR(0xc1) = 0xffff
[  195.047867][ T7425] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:125
[  195.150950][ T7445] fuse: Bad value for 'group_id'
[  195.165905][ T7445] fuse: Bad value for 'group_id'
[  195.275251][ T7465] ªªªªª$: renamed from bridge_slave_0 (while UP)
[  195.536229][  T616] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  195.688313][  T616] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 159, changing to 11
[  195.699750][  T616] usb 5-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  195.712722][  T616] usb 5-1: config 1 interface 0 has no altsetting 0
[  195.722797][  T616] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.40
[  195.731925][  T616] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.739992][  T616] usb 5-1: Product: syz
[  195.744164][  T616] usb 5-1: SerialNumber: syz
[  195.831460][   T36] audit: type=1400 audit(2000000047.636:554): avc:  denied  { watch } for  pid=7472 comm="syz.6.2287" path="/204/file0" dev="tmpfs" ino=1112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  195.971379][  T616] usbhid 5-1:1.0: can't add hid device: -71
[  195.972509][ T7475] x_tables: duplicate underflow at hook 2
[  195.979646][  T616] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  195.992527][  T616] usb 5-1: USB disconnect, device number 29
[  196.016025][   T36] audit: type=1400 audit(2000000047.815:555): avc:  denied  { accept } for  pid=7480 comm="syz.0.2290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  196.496936][ T7494] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  196.653109][ T7514] batadv_slave_0: mtu less than device minimum
[  197.163186][  T349] usb 5-1: new low-speed USB device number 30 using dummy_hcd
[  197.315039][  T349] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  197.324239][  T349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.332869][  T349] usb 5-1: config 0 descriptor??
[  197.494065][ T7563] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  197.503988][ T7563] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  197.539747][  T349] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  197.663669][ T7584] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  197.687183][ T7587] 9pnet_fd: p9_fd_create_tcp (7587): problem connecting socket to 127.0.0.1
[  197.696906][ T7588] 9pnet_fd: p9_fd_create_tcp (7588): problem connecting socket to 127.0.0.1
[  197.720865][ T7591] batadv_slave_0: mtu less than device minimum
[  197.727255][ T7590] batadv_slave_0: mtu less than device minimum
[  197.795391][   T36] audit: type=1400 audit(2000000049.588:556): avc:  denied  { execute } for  pid=7601 comm="syz.6.2332" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63494 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  197.861349][   T36] audit: type=1326 audit(2000000049.657:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7603 comm="syz.6.2333" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f625698eba9 code=0x0
[  197.946896][  T349] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  197.954173][ T7610] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=7610 comm=syz.8.2336
[  197.957408][  T349] asix 5-1:0.0: probe with driver asix failed with error -61
[  197.971511][ T7610] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2336'.
[  198.641543][ T7634] 9pnet_fd: Insufficient options for proto=fd
[  198.718417][   T36] audit: type=1400 audit(2000000050.504:558): avc:  denied  { setattr } for  pid=7645 comm="syz.6.2350" name="PACKET" dev="sockfs" ino=63643 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  198.772597][ T7660] overlayfs: failed to clone upperpath
[  198.781072][   T36] audit: type=1400 audit(2000000050.574:559): avc:  denied  { nlmsg_read } for  pid=7661 comm="syz.6.2355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  198.871432][ T7666] cgroup: fork rejected by pids controller in /syz8
[  199.275855][   T36] audit: type=1400 audit(2000000051.062:560): avc:  denied  { map } for  pid=7729 comm="syz.0.2363" path="socket:[62926]" dev="sockfs" ino=62926 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  199.946033][ T1109] usb 5-1: USB disconnect, device number 30
[  199.987201][ T7776] fuse: Unknown parameter 'qroup_id'
[  200.155426][   T36] audit: type=1326 audit(2000000051.938:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7788 comm="syz.4.2379" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee00b8eba9 code=0x0
[  200.170254][ T7793] fuse: Bad value for 'group_id'
[  200.183309][ T7793] fuse: Bad value for 'group_id'
[  200.189323][ T7793] veth0_virt_wifi: entered allmulticast mode
[  200.196888][ T7792] veth0_virt_wifi: left allmulticast mode
[  200.751124][ T7811] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=66 sclass=netlink_xfrm_socket pid=7811 comm=syz.0.2387
[  200.763679][ T7811] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=62 sclass=netlink_xfrm_socket pid=7811 comm=syz.0.2387
[  200.776539][ T7811] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=45 sclass=netlink_xfrm_socket pid=7811 comm=syz.0.2387
[  200.927462][   T36] audit: type=1326 audit(2000000052.705:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7825 comm="syz.0.2390" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbb1338eba9 code=0x0
[  200.973566][ T7834] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2392'.
[  200.985164][   T36] audit: type=1400 audit(2000000052.765:563): avc:  denied  { watch } for  pid=7833 comm="syz.8.2392" path="/file0" dev="incremental-fs" ino=41540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  201.057639][   T36] audit: type=1400 audit(2000000052.835:564): avc:  denied  { unmount } for  pid=6145 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  201.324359][   T46] usb 5-1: new low-speed USB device number 31 using dummy_hcd
[  201.481823][   T46] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  201.491122][   T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.501460][   T46] usb 5-1: config 0 descriptor??
[  201.688977][ T7884] netlink: 'syz.0.2410': attribute type 4 has an invalid length.
[  201.696901][ T7884] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2410'.
[  201.710014][   T46] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  201.732963][ T7884] netlink: 'syz.0.2410': attribute type 4 has an invalid length.
[  201.751692][ T7884] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2410'.
[  201.801961][ T7889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=7889 comm=syz.0.2412
[  201.898671][ T7894] tmpfs: Unknown parameter '00000000000000000000000'
[  202.022537][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2416'.
[  202.043511][ T7900] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2416'.
[  202.122078][   T46] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  202.136966][   T46] asix 5-1:0.0: probe with driver asix failed with error -61
[  202.248035][ T7924] skbuff: bad partial csum: csum=65506/2 headroom=146 headlen=65526
[  202.285382][ T7927] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2426'.
[  202.304950][ T7932] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2428'.
[  202.863930][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2434'.
[  202.874131][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2434'.
[  203.581545][   T36] audit: type=1326 audit(2000000055.355:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7990 comm="syz.8.2447" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f04f0b8eba9 code=0x0
[  203.780660][ T7996] x_tables: unsorted entry at hook 2
[  203.925624][ T8021] fuseblk: Unknown parameter 'default_permissiïns'
[  203.937572][ T8021] fuse: Unknown parameter '0x0000000000000009'
[  204.059272][ T8023] 9pnet_fd: p9_fd_create_tcp (8023): problem connecting socket to 127.0.0.1
[  204.100278][   T46] usb 5-1: USB disconnect, device number 31
[  204.119940][ T8028] netlink: 'syz.4.2460': attribute type 19 has an invalid length.
[  204.137495][ T8028] __nla_validate_parse: 1 callbacks suppressed
[  204.137519][ T8028] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2460'.
[  204.155499][ T8028] fuse: Unknown parameter 'rdE'
[  204.243057][ T8034] rust_binder: Error while translating object.
[  204.243135][ T8034] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  204.255941][ T8034] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:275
[  204.491265][ T8062] fuse: Bad value for 'fd'
[  204.574479][ T8065] netlink: 'syz.8.2475': attribute type 1 has an invalid length.
[  204.582686][   T46] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  204.597105][ T8070] overlayfs: failed to clone upperpath
[  204.733067][   T46] usb 5-1: Using ep0 maxpacket: 32
[  204.742656][   T46] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  204.751014][   T46] usb 5-1: config 0 has no interface number 0
[  204.757340][   T46] usb 5-1: config 0 interface 184 has no altsetting 0
[  204.765754][   T46] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  204.775157][   T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.783569][   T46] usb 5-1: Product: syz
[  204.788012][   T46] usb 5-1: Manufacturer: syz
[  204.792795][   T46] usb 5-1: SerialNumber: syz
[  204.798764][   T46] usb 5-1: config 0 descriptor??
[  204.804784][   T46] smsc75xx v1.0.0
[  204.927402][ T8084] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2483'.
[  205.408350][ T8034] rust_binder: 275: no such ref 1
[  205.413511][ T8034] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:275
[  205.414784][   T46] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  205.435106][   T46] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  205.444802][   T46] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  205.455241][   T46] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71
[  205.466196][   T46] usb 5-1: USB disconnect, device number 32
[  206.248681][  T616] usb 5-1: new low-speed USB device number 33 using dummy_hcd
[  206.400360][  T616] usb 5-1: config 0 has an invalid interface number: 192 but max is 0
[  206.409090][  T616] usb 5-1: config 0 has no interface number 0
[  206.415425][  T616] usb 5-1: config 0 interface 192 has no altsetting 0
[  206.422396][  T616] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  206.426855][ T8134] netlink: 'syz.6.2502': attribute type 4 has an invalid length.
[  206.431496][  T616] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.447376][ T8134] netlink: 'syz.6.2502': attribute type 4 has an invalid length.
[  206.449653][  T616] usb 5-1: config 0 descriptor??
[  206.568477][ T8136] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2502'.
[  206.667591][  T616] usb 5-1: string descriptor 0 read error: -71
[  206.680471][  T616] asix 5-1:0.192 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  206.691078][  T616] asix 5-1:0.192: probe with driver asix failed with error -71
[  206.701368][  T616] usb 5-1: USB disconnect, device number 33
[  206.777343][ T8153] overlayfs: failed to clone upperpath
[  206.872056][ T8165] overlayfs: failed to clone upperpath
[  206.940060][ T8171] fuse: Bad value for 'fd'
[  206.946076][ T8171] fuse: Bad value for 'fd'
[  207.112310][ T8189] netlink: 'syz.8.2520': attribute type 30 has an invalid length.
[  207.296241][ T8200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2524'.
[  207.313543][ T8200] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  207.341953][ T8203] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[  207.514047][ T8205] netlink: 344 bytes leftover after parsing attributes in process `syz.4.2526'.
[  207.542557][   T36] audit: type=1400 audit(2000000059.290:566): avc:  denied  { setattr } for  pid=8204 comm="syz.4.2526" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  207.804975][ T8221] fuse: Bad value for 'group_id'
[  207.804975][ T8220] fuse: Bad value for 'group_id'
[  207.805002][ T8220] fuse: Bad value for 'group_id'
[  207.820136][ T8221] fuse: Bad value for 'group_id'
[  208.334283][ T8244] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[  208.398935][ T8248] binder: Bad value for 'stats'
[  208.757680][   T46] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  208.909375][   T46] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  208.917535][   T46] usb 5-1: config 0 has no interface number 0
[  208.923725][   T46] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  208.934737][   T46] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.944529][   T46] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  208.953616][   T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.962493][   T46] usb 5-1: config 0 descriptor??
[  209.248420][ T8303] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2562'.
[  209.277721][ T8311] 9pnet_fd: Insufficient options for proto=fd
[  209.298027][ T8314] overlay: Unknown parameter 'smackfstransmute'
[  209.321349][   T36] audit: type=1400 audit(2000000061.074:567): avc:  denied  { associate } for  pid=8317 comm="syz.0.2568" name="memory.events" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[  209.375951][   T36] audit: type=1326 audit(2000000061.124:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8251 comm="syz.4.2543" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fee00b8eba9 code=0x0
[  209.427982][   T46] prodikeys 0003:041E:2801.0014: item fetching failed at offset 5/7
[  209.436439][   T46] prodikeys 0003:041E:2801.0014: hid parse failed
[  209.443478][   T46] prodikeys 0003:041E:2801.0014: probe with driver prodikeys failed with error -22
[  209.639289][ T8321] SELinux: security_context_str_to_sid () failed with errno=-22
[  209.826499][ T8326] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2571'.
[  209.881997][ T8340] netlink: 'syz.6.2574': attribute type 16 has an invalid length.
[  209.891274][ T8340] netlink: 'syz.6.2574': attribute type 2 has an invalid length.
[  209.899309][ T8340] netlink: 64086 bytes leftover after parsing attributes in process `syz.6.2574'.
[  210.159743][ T8381] netlink: 'syz.8.2588': attribute type 11 has an invalid length.
[  210.168077][ T8381] netlink: 'syz.8.2588': attribute type 2 has an invalid length.
[  210.534485][ T8412] netlink: 'syz.6.2597': attribute type 4 has an invalid length.
[  210.542335][ T8411] netlink: 'syz.6.2597': attribute type 4 has an invalid length.
[  210.690125][ T8427] 9pnet_fd: Insufficient options for proto=fd
[  210.923553][ T8465] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2614'.
[  211.501826][   T46] usb 5-1: USB disconnect, device number 34
[  211.642030][ T8519] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  211.642155][ T8519] rust_binder: Failed to allocate buffer. len:1136, is_oneway:false
[  211.661322][   T36] audit: type=1400 audit(2000000063.406:569): avc:  denied  { read write } for  pid=8520 comm="syz.4.2633" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  211.692793][   T36] audit: type=1400 audit(2000000063.406:570): avc:  denied  { open } for  pid=8520 comm="syz.4.2633" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  212.007876][ T8544] SELinux:  Context system_u:object_r:pinentry_exec_t:s0 is not valid (left unmapped).
[  212.026241][   T36] audit: type=1400 audit(2000000063.755:571): avc:  denied  { relabelto } for  pid=8543 comm="syz.8.2642" name="NETLINK" dev="sockfs" ino=65154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_route_socket permissive=1 trawcon="system_u:object_r:pinentry_exec_t:s0"
[  212.138231][ T8551] netlink: 220 bytes leftover after parsing attributes in process `syz.0.2645'.
[  212.632482][ T8575] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2654'.
[  212.645144][ T8575] overlayfs: failed to clone lowerpath
[  212.681010][ T1109] syz_tun: tun_net_xmit 90
[  212.710353][ T8581] netlink: 'syz.0.2657': attribute type 11 has an invalid length.
[  213.207926][   T36] audit: type=1400 audit(2000000064.941:572): avc:  denied  { sys_nice } for  pid=8615 comm="syz.8.2669" capability=23  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[  213.470953][   T46] syz_tun: tun_net_xmit 90
[  213.505103][ T8631] tmpfs: Unknown parameter 'noinode32'
[  213.528460][ T8631] rust_binder: Write failure EFAULT in pid:339
[  213.731475][ T8647] overlayfs: failed to clone lowerpath
[  213.796366][ T8658] 9pnet_fd: Insufficient options for proto=fd
[  213.815911][ T8660] overlayfs: failed to clone upperpath
[  213.833234][ T8662] netlink: 'syz.6.2686': attribute type 1 has an invalid length.
[  213.841767][ T8662] netlink: 'syz.6.2686': attribute type 2 has an invalid length.
[  213.850217][ T8663] netlink: 'syz.6.2686': attribute type 1 has an invalid length.
[  213.858146][ T8663] netlink: 'syz.6.2686': attribute type 2 has an invalid length.
[  213.927274][ T8662] fuse: Unknown parameter 'f'
[  213.932691][ T8662] overlayfs: failed to resolve './file1': -2
[  214.025412][ T1109] usb 5-1: new low-speed USB device number 35 using dummy_hcd
[  214.058757][ T8670] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2689'.
[  214.080676][ T8672] overlayfs: failed to clone upperpath
[  214.176948][ T1109] usb 5-1: config 0 interface 0 has no altsetting 0
[  214.183819][ T1109] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  214.193647][ T1109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.205987][ T1109] usb 5-1: config 0 descriptor??
[  214.414904][ T1109] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  214.483028][ T8685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=8685 comm=syz.6.2694
[  214.495628][ T8685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=8685 comm=syz.6.2694
[  214.508584][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2694'.
[  215.419791][ T1109] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  215.431098][ T1109] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  215.441494][ T1109] asix 5-1:0.0: probe with driver asix failed with error -71
[  215.452343][ T1109] usb 5-1: USB disconnect, device number 35
[  215.552568][ T8704] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2702'.
[  215.650202][   T36] audit: type=1400 audit(2000000067.373:573): avc:  denied  { create } for  pid=8719 comm="syz.8.2708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1
[  215.713781][ T8733] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2713'.
[  215.742439][ T8740] netlink: 'syz.0.2716': attribute type 27 has an invalid length.
[  215.763748][ T8741] netlink: 'syz.0.2716': attribute type 27 has an invalid length.
[  215.978028][ T8743] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.985349][ T8743] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.992587][ T8743] bridge_slave_0: entered allmulticast mode
[  215.999133][ T8743] bridge_slave_0: entered promiscuous mode
[  216.006769][ T8743] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.014004][ T8743] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.021113][ T8743] bridge_slave_1: entered allmulticast mode
[  216.027862][ T8743] bridge_slave_1: entered promiscuous mode
[  216.040358][ T1895] bridge_slave_1: left allmulticast mode
[  216.046959][ T1895] bridge_slave_1: left promiscuous mode
[  216.049349][ T8760] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2723'.
[  216.053116][ T1895] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.063237][ T8760] rust_binder: Error while translating object.
[  216.068808][ T8760] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  216.075227][ T8760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:354
[  216.075308][ T1895] bridge_slave_0: left allmulticast mode
[  216.100057][ T1895] bridge_slave_0: left promiscuous mode
[  216.106066][ T1895] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.169846][ T8762] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 1
[  216.177405][ T8762] rust_binder: Write failure EINVAL in pid:356
[  216.206753][ T1895] tipc: Left network mode
[  216.218794][ T1895] veth1_macvtap: left promiscuous mode
[  216.224951][ T1895] veth0_vlan: left promiscuous mode
[  216.302776][ T8743] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.309983][ T8743] bridge0: port 2(bridge_slave_1) entered forwarding state
[  216.317356][ T8743] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.324543][ T8743] bridge0: port 1(bridge_slave_0) entered forwarding state
[  216.352895][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.361366][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.373036][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.380112][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  216.389488][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.396771][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  216.434857][ T8743] veth0_vlan: entered promiscuous mode
[  216.446738][ T8743] veth1_macvtap: entered promiscuous mode
[  216.495984][ T8793] rust_binder: Error while translating object.
[  216.496021][ T8793] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  216.502274][ T8793] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:4
[  216.743597][ T8797] rust_binder: Read failure Err(EFAULT) in pid:6
[  216.766995][   T36] audit: type=1400 audit(2000000068.490:574): avc:  denied  { create } for  pid=8805 comm="syz.0.2735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  216.794178][  T445] usb 5-1: new full-speed USB device number 36 using dummy_hcd
[  216.945799][  T445] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.955985][  T445] usb 5-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00
[  216.961932][ T8811] overlayfs: failed to clone upperpath
[  216.966850][  T445] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.980440][  T445] usb 5-1: config 0 descriptor??
[  217.008484][ T8815] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2738'.
[  217.031959][ T8820] bridge0: entered promiscuous mode
[  217.037664][ T8820] bridge0: entered allmulticast mode
[  217.398603][  T445] usbhid 5-1:0.0: can't add hid device: -71
[  217.404636][  T445] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  217.414852][  T445] usb 5-1: USB disconnect, device number 36
[  217.577188][   T36] audit: type=1400 audit(2000000069.304:575): avc:  denied  { mount } for  pid=8844 comm="syz.8.2748" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  217.579454][ T8845] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  217.618810][ T8845] .N: renamed from veth0_to_bond (while UP)
[  217.715648][ T8870] sit0: entered promiscuous mode
[  217.725052][ T8870] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2757'.
[  217.730272][ T8873] 9pnet_fd: Insufficient options for proto=fd
[  217.738820][ T8870] binder: Unknown parameter 'defcontextz º…çlžD*JŸ³?f© 01777777777777777777777'
[  217.858422][   T36] audit: type=1400 audit(2000000069.584:576): avc:  denied  { ioctl } for  pid=8881 comm="syz.4.2762" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x1278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  217.992056][   T36] audit: type=1400 audit(2000000069.714:577): avc:  denied  { mounton } for  pid=8892 comm="syz.4.2764" path="/130/file0" dev="tmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  218.026182][  T445] usb 1-1: new low-speed USB device number 58 using dummy_hcd
[  218.174803][ T8895] 9pnet_fd: p9_fd_create_tcp (8895): problem connecting socket to 127.0.0.1
[  218.185154][  T445] usb 1-1: config 0 interface 0 has no altsetting 0
[  218.192303][  T445] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  218.202176][  T445] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.215175][  T445] usb 1-1: config 0 descriptor??
[  218.421405][  T445] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  218.891325][ T8925] 9pnet_fd: Insufficient options for proto=fd
[  219.424494][  T445] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  219.435958][  T445] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  219.448010][   T36] audit: type=1400 audit(2000000071.174:578): avc:  denied  { getopt } for  pid=8957 comm="syz.6.2785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  219.468296][  T445] asix 1-1:0.0: probe with driver asix failed with error -71
[  219.477899][  T445] usb 1-1: USB disconnect, device number 58
[  219.985923][  T349] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  220.097228][ T8980] rust_binder: 8980 RLIMIT_NICE not set
[  220.107760][ T8987] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  220.108382][ T8980] rust_binder: 8980 RLIMIT_NICE not set
[  220.116381][ T8986] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:28
[  220.137231][  T349] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.159919][  T349] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  220.170186][  T349] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  220.179666][  T349] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.189829][  T349] usb 5-1: config 0 descriptor??
[  220.322829][ T9005] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2802'.
[  220.332151][ T9005] netlink: 43 bytes leftover after parsing attributes in process `syz.8.2802'.
[  220.341232][ T9005] netlink: 'syz.8.2802': attribute type 6 has an invalid length.
[  220.349115][ T9005] netlink: 'syz.8.2802': attribute type 5 has an invalid length.
[  220.357347][ T9005] netlink: 43 bytes leftover after parsing attributes in process `syz.8.2802'.
[  220.457390][ T9007] syz_tun: tun_net_xmit 42
[  220.462161][ T9007] syz_tun: tun_net_xmit 42
[  220.467061][ T9007] syz_tun: tun_net_xmit 42
[  220.471650][ T9007] syz_tun: tun_net_xmit 42
[  220.476423][ T9007] syz_tun: tun_net_xmit 42
[  220.481103][ T9007] syz_tun: tun_net_xmit 42
[  220.485719][ T9007] syz_tun: tun_net_xmit 42
[  220.493922][ T9007] syz_tun: tun_net_xmit 42
[  220.498505][ T9007] syz_tun: tun_net_xmit 42
[  220.503004][ T9007] syz_tun: tun_net_xmit 42
[  220.507889][ T9007] syz_tun: tun_net_xmit 42
[  220.512511][ T9007] syz_tun: tun_net_xmit 42
[  220.517504][ T9007] syz_tun: tun_net_xmit 42
[  220.535950][   T10] usb 1-1: new low-speed USB device number 59 using dummy_hcd
[  220.630295][   T36] audit: type=1326 audit(2000000072.354:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9027 comm="syz.8.2812" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04f0b8eba9 code=0x0
[  220.697053][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  220.703920][   T10] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  220.713283][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.722459][   T10] usb 1-1: config 0 descriptor??
[  220.790205][ T9036] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock
[  220.928470][   T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  221.004586][  T349] hid-led 0003:27B8:01ED.0015: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0
[  221.021195][  T349] hid-led 0003:27B8:01ED.0015: ThingM blink(1) initialized
[  221.238125][  T349] usb 5-1: USB disconnect, device number 37
[  221.538352][ T9054] overlayfs: failed to clone upperpath
[  221.843826][ T9061] rust_binder: 9061 RLIMIT_NICE not set
[  221.844262][ T9061] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  221.849985][ T9061] rust_binder: Failure BR_FAILED_REPLY { source: ENOMEM } during reply - delivering BR_FAILED_REPLY to sender.
[  221.859749][ T9061] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:416
[  221.879762][ T3278] rust_binder: 9060: removing orphan mapping 0:1048
[  221.930750][   T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  221.955004][   T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  221.971305][   T10] asix 1-1:0.0: probe with driver asix failed with error -71
[  221.988086][   T10] usb 1-1: USB disconnect, device number 59
[  222.007542][ T9072] netlink: 'syz.6.2827': attribute type 27 has an invalid length.
[  222.064971][ T9081] 9pnet_fd: Insufficient options for proto=fd
[  222.093112][ T9088] can: request_module (can-proto-4) failed.
[  222.124023][   T36] audit: type=1400 audit(2000000073.844:580): avc:  denied  { create } for  pid=9097 comm="syz.8.2837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  222.163139][ T9105] overlayfs: failed to clone upperpath
[  222.270060][ T9109] overlayfs: failed to clone upperpath
[  222.351100][ T9117] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2306 sclass=netlink_route_socket pid=9117 comm=syz.8.2843
[  222.453136][ T9132] __vm_enough_memory: pid: 9132, comm: syz.4.2850, bytes: 18014402804453376 not enough memory for the allocation
[  222.471707][ T9130] netlink: 188 bytes leftover after parsing attributes in process `syz.8.2849'.
[  222.502204][ T9135] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0
[  222.502233][ T9135] rust_binder: Error while translating object.
[  222.523761][ T9135] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  222.539584][ T9135] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:434
[  222.577194][ T9139] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  222.577401][ T9139] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0
[  222.591830][ T9139] rust_binder: Error while translating object.
[  222.608981][ T9139] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  222.616537][ T9139] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:434
[  222.756427][ T9158] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  222.797207][ T9158] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:444
[  223.175924][ T3278] usb 5-1: new low-speed USB device number 38 using dummy_hcd
[  223.276149][ T9198] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2871'.
[  223.314016][ T9201] rust_binder: Write failure EFAULT in pid:43
[  223.347086][ T3278] usb 5-1: config 0 interface 0 has no altsetting 0
[  223.360188][ T3278] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  223.369854][ T3278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.379108][ T3278] usb 5-1: config 0 descriptor??
[  223.585202][ T3278] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  223.840236][ T9208] tipc: Started in network mode
[  223.845312][ T9208] tipc: Node identity 2d57e396000000000000000000000013, cluster identity 4711
[  223.854503][ T9208] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  223.863704][ T9208] netlink: 277 bytes leftover after parsing attributes in process `syz.8.2875'.
[  223.879471][   T36] audit: type=1400 audit(2000000075.604:581): avc:  denied  { setattr } for  pid=9209 comm="syz.6.2876" name="CAN_BCM" dev="sockfs" ino=70158 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  223.889598][ T9213] overlayfs: failed to resolve './file1': -2
[  223.994818][ T9223] usb usb8: usbfs: process 9223 (syz.0.2881) did not claim interface 0 before use
[  224.069924][ T9233] syz_tun: tun_net_xmit 62
[  224.094889][ T9229] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2883'.
[  224.104979][ T9229] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  224.105573][ T9229] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2883'.
[  224.200628][ T9247] rust_binder: Failed to allocate buffer. len:18446744073709551352, is_oneway:false
[  224.200672][ T9247] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  224.210501][ T9247] rust_binder: Failure BR_FAILED_REPLY { source: ENOSPC } during reply - delivering BR_FAILED_REPLY to sender.
[  224.220214][ T9247] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:58
[  224.295036][ T9256] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  224.340266][   T36] audit: type=1400 audit(2000000076.064:582): avc:  denied  { map } for  pid=9259 comm="syz.0.2894" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  224.363533][   T36] audit: type=1400 audit(2000000076.064:583): avc:  denied  { execute } for  pid=9259 comm="syz.0.2894" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  224.408428][ T9264] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2896'.
[  224.603464][ T3278] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  224.617474][ T3278] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  224.627772][ T3278] asix 5-1:0.0: probe with driver asix failed with error -71
[  224.639315][ T3278] usb 5-1: USB disconnect, device number 38
[  225.177172][ T9321] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false
[  225.193270][ T9329] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  225.202110][ T9329] rust_binder: Failed to allocate buffer. len:8815263377109862608, is_oneway:false
[  225.268759][ T9331] rust_binder: 457: no such ref 0
[  225.283577][ T9331] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  225.290864][ T9331] rust_binder: Write failure EINVAL in pid:457
[  225.291477][ T9331] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:457
[  225.499651][   T13] bridge_slave_1: left allmulticast mode
[  225.514609][   T13] bridge_slave_1: left promiscuous mode
[  225.520628][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.528589][   T13] bridge_slave_0: left allmulticast mode
[  225.534277][   T13] bridge_slave_0: left promiscuous mode
[  225.540513][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.637825][   T13] tipc: Left network mode
[  225.644778][   T13] veth1_macvtap: left promiscuous mode
[  225.650563][   T13] veth0_vlan: left promiscuous mode
[  225.756276][ T9339] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.763593][ T9339] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.770800][ T9339] bridge_slave_0: entered allmulticast mode
[  225.777119][ T9339] bridge_slave_0: entered promiscuous mode
[  225.783398][ T9350] netlink: 'syz.8.2931': attribute type 6 has an invalid length.
[  225.791664][ T9339] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.798843][ T9339] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.806164][ T9339] bridge_slave_1: entered allmulticast mode
[  225.812569][ T9339] bridge_slave_1: entered promiscuous mode
[  225.868706][ T9339] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.875934][ T9339] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.883273][ T9339] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.890381][ T9339] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.919079][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.927042][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.938433][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.945577][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.960993][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.968273][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[  225.994467][ T9339] veth0_vlan: entered promiscuous mode
[  226.006055][ T9339] veth1_macvtap: entered promiscuous mode
[  226.185993][ T3278] usb 1-1: new low-speed USB device number 60 using dummy_hcd
[  226.296032][ T1109] usb 10-1: new low-speed USB device number 2 using dummy_hcd
[  226.315966][ T3278] usb 1-1: device descriptor read/64, error -71
[  226.447152][ T1109] usb 10-1: config 0 interface 0 has no altsetting 0
[  226.454005][ T1109] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  226.463394][ T1109] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.472362][ T1109] usb 10-1: config 0 descriptor??
[  226.565976][ T3278] usb 1-1: device descriptor read/64, error -71
[  226.678769][ T1109] asix 10-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  226.805926][ T3278] usb 1-1: new low-speed USB device number 61 using dummy_hcd
[  226.935916][ T3278] usb 1-1: device descriptor read/64, error -71
[  227.175982][ T3278] usb 1-1: device descriptor read/64, error -71
[  227.240551][ T9377] IPv6: Can't replace route, no match found
[  227.286028][ T3278] usb usb1-port1: attempt power cycle
[  227.626054][ T3278] usb 1-1: new low-speed USB device number 62 using dummy_hcd
[  227.627271][ T9388] fuse: Bad value for 'group_id'
[  227.633666][   T36] audit: type=1400 audit(2000000079.354:584): avc:  denied  { mounton } for  pid=9387 comm="syz.6.2941" path="/390/file0" dev="tmpfs" ino=2100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  227.639211][ T9388] fuse: Bad value for 'group_id'
[  227.681729][ T1109] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  227.692832][ T1109] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  227.703888][ T1109] asix 10-1:0.0: probe with driver asix failed with error -71
[  227.711701][ T3278] usb 1-1: device descriptor read/8, error -71
[  227.719440][ T1109] usb 10-1: USB disconnect, device number 2
[  227.727242][ T9389] netlink: 596 bytes leftover after parsing attributes in process `syz.6.2941'.
[  227.847057][ T3278] usb 1-1: device descriptor read/8, error -71
[  228.086105][ T3278] usb 1-1: new low-speed USB device number 63 using dummy_hcd
[  228.107693][ T3278] usb 1-1: device descriptor read/8, error -71
[  228.237112][ T3278] usb 1-1: device descriptor read/8, error -71
[  228.283488][ T9395] rust_binder: Got transaction with invalid offset.
[  228.283526][ T9395] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  228.290233][ T9395] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:5
[  228.356067][ T3278] usb usb1-port1: unable to enumerate USB device
[  228.595965][ T1118] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[  228.725950][ T1118] usb 10-1: device descriptor read/64, error -71
[  228.965972][ T1118] usb 10-1: device descriptor read/64, error -71
[  229.047018][ T9413] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  229.079924][ T9413] netlink: 9 bytes leftover after parsing attributes in process `syz.8.2950'.
[  229.089141][ T9413] gretap0: entered promiscuous mode
[  229.094911][ T9413] netlink: 5 bytes leftover after parsing attributes in process `syz.8.2950'.
[  229.104031][ T9413] 0ªî{X¹¦: renamed from gretap0
[  229.109692][ T9413] 0ªî{X¹¦: left promiscuous mode
[  229.114739][ T9413] 0ªî{X¹¦: entered allmulticast mode
[  229.120673][ T9413] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  229.150388][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2954'.
[  229.159639][ T9422] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2954'.
[  229.206015][ T1118] usb 10-1: new full-speed USB device number 4 using dummy_hcd
[  229.335950][ T1118] usb 10-1: device descriptor read/64, error -71
[  229.345955][   T10] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[  229.495950][   T10] usb 1-1: Using ep0 maxpacket: 32
[  229.502532][   T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  229.510691][   T10] usb 1-1: config 0 has no interface number 0
[  229.518350][   T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  229.528264][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.536493][   T10] usb 1-1: Product: syz
[  229.540688][   T10] usb 1-1: Manufacturer: syz
[  229.545304][   T10] usb 1-1: SerialNumber: syz
[  229.550983][   T10] usb 1-1: config 0 descriptor??
[  229.556790][   T10] smsc95xx v2.0.0
[  229.575978][ T1118] usb 10-1: device descriptor read/64, error -71
[  229.686094][ T1118] usb usb10-port1: attempt power cycle
[  230.026232][ T1118] usb 10-1: new full-speed USB device number 5 using dummy_hcd
[  230.046710][ T9432] Dead loop on virtual device ip6_vti0, fix it urgently!
[  230.054674][ T1118] usb 10-1: device descriptor read/8, error -71
[  230.187135][ T1118] usb 10-1: device descriptor read/8, error -71
[  230.358346][   T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  230.425918][ T1118] usb 10-1: new full-speed USB device number 6 using dummy_hcd
[  230.447256][ T1118] usb 10-1: device descriptor read/8, error -71
[  230.559293][   T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  230.571002][   T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[  230.585580][   T10] usb 1-1: USB disconnect, device number 64
[  230.597641][ T1118] usb 10-1: device descriptor read/8, error -71
[  230.716163][ T1118] usb usb10-port1: unable to enumerate USB device
[  231.129549][ T9466] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  231.129843][ T9466] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  231.136344][ T9466] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:77
[  231.171860][ T9472] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  231.181164][ T9472] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:83
[  231.297112][ T9486] overlayfs: failed to clone upperpath
[  231.410535][ T9498] netlink: 'syz.9.2981': attribute type 3 has an invalid length.
[  232.005912][ T1118] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  232.176770][ T1118] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  232.188134][ T1118] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  232.205438][ T1118] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  232.220838][ T1118] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.236379][ T1118] usb 10-1: config 0 descriptor??
[  232.465932][ T3278] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[  232.635939][ T3278] usb 1-1: Using ep0 maxpacket: 16
[  232.642682][ T3278] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  232.653504][ T9505] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  232.653636][ T9505] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18
[  232.660627][ T3278] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  232.682371][ T3278] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  232.683593][ T1118] usbhid 10-1:0.0: can't add hid device: -71
[  232.692221][ T3278] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  232.711100][ T3278] usb 1-1: config 7 interface 0 has no altsetting 0
[  232.716015][ T1118] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  232.717788][ T3278] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  232.734698][ T3278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.744467][ T1118] usb 10-1: USB disconnect, device number 7
[  233.169965][ T3278] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.0016/input/input17
[  233.196259][ T3278] kye 0003:0458:5010.0016: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0
[  233.281351][ T9553] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  233.281393][ T9553] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21
[  233.561220][ T1118] usb 1-1: USB disconnect, device number 65
[  233.705060][ T9559] fuse: Bad value for 'fd'
[  234.077511][ T9579] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[  234.337037][ T9596] incfs: iterate_incfs_dir / -22
[  234.342149][ T9596] incfs: iterate_incfs_dir / -22
[  234.356471][ T9598] 9pnet_fd: Insufficient options for proto=fd
[  234.405835][ T9602] overlayfs: cannot append lower layer
[  234.476035][   T46] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  234.605931][   T46] usb 10-1: device descriptor read/64, error -71
[  234.635929][ T1118] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[  234.797087][ T1118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  234.808107][ T1118] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  234.818327][ T1118] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  234.827947][ T1118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.836985][ T1118] usb 1-1: config 0 descriptor??
[  234.846064][   T46] usb 10-1: device descriptor read/64, error -71
[  234.964769][ T9609] overlayfs: failed to clone upperpath
[  235.085963][   T46] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  235.215941][   T46] usb 10-1: device descriptor read/64, error -71
[  235.455978][   T46] usb 10-1: device descriptor read/64, error -71
[  235.546705][ T9639] overlayfs: failed to clone upperpath
[  235.566001][   T46] usb usb10-port1: attempt power cycle
[  235.653346][ T9600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  235.662038][ T9600] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  235.670907][ T1118] hid-led 0003:27B8:01ED.0017: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0
[  235.698095][ T1118] hid-led 0003:27B8:01ED.0017: ThingM blink(1) initialized
[  235.872182][ T3278] usb 1-1: USB disconnect, device number 66
[  235.905945][   T46] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  235.927220][   T46] usb 10-1: device descriptor read/8, error -71
[  236.057246][   T46] usb 10-1: device descriptor read/8, error -71
[  236.295928][   T46] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  236.317307][   T46] usb 10-1: device descriptor read/8, error -71
[  236.455251][   T46] usb 10-1: device descriptor read/8, error -71
[  236.544244][ T9656] 9pnet_fd: Insufficient options for proto=fd
[  236.570468][   T46] usb usb10-port1: unable to enumerate USB device
[  236.590627][ T9667] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3039'.
[  236.722920][   T36] audit: type=1400 audit(2000000088.444:585): avc:  denied  { watch_reads } for  pid=9680 comm="syz.8.3043" path="/326/file0" dev="tmpfs" ino=1779 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  236.875976][ T1109] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[  237.025944][ T1109] usb 1-1: Using ep0 maxpacket: 16
[  237.032156][ T1109] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  237.042404][ T1109] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  237.053433][ T1109] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  237.063405][ T1109] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  237.076489][ T1109] usb 1-1: config 7 interface 0 has no altsetting 0
[  237.083169][ T1109] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  237.092353][ T1109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.238322][ T9708] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  237.372733][ T9728] syz.6.3062: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0
[  237.387855][ T9728] CPU: 1 UID: 0 PID: 9728 Comm: syz.6.3062 Not tainted syzkaller #0 064bd8e71db8281f775729d9237f740d6717dea5
[  237.387893][ T9728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  237.387912][ T9728] Call Trace:
[  237.387921][ T9728]  <TASK>
[  237.387931][ T9728]  __dump_stack+0x21/0x30
[  237.387981][ T9728]  dump_stack_lvl+0x10c/0x190
[  237.388012][ T9728]  ? __cfi_dump_stack_lvl+0x10/0x10
[  237.388045][ T9728]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  237.388072][ T9728]  dump_stack+0x19/0x20
[  237.388102][ T9728]  warn_alloc+0x1bc/0x2a0
[  237.388132][ T9728]  ? stack_depot_save_flags+0x38/0x800
[  237.388160][ T9728]  ? __cfi_warn_alloc+0x10/0x10
[  237.388189][ T9728]  ? kasan_save_track+0x4f/0x80
[  237.388213][ T9728]  ? __kmalloc_cache_noprof+0x1a5/0x3c0
[  237.388249][ T9728]  ? xskq_create+0x68/0x2a0
[  237.388275][ T9728]  ? xsk_init_queue+0xb6/0x120
[  237.388299][ T9728]  ? xsk_setsockopt+0x43f/0x6f0
[  237.388323][ T9728]  ? do_sock_setsockopt+0x26d/0x400
[  237.388350][ T9728]  ? __x64_sys_setsockopt+0x1b8/0x250
[  237.388376][ T9728]  ? x64_sys_call+0x2adc/0x2ee0
[  237.388411][ T9728]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  237.388443][ T9728]  __vmalloc_node_range_noprof+0x135/0x1420
[  237.388483][ T9728]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  237.388516][ T9728]  ? avc_has_perm+0x144/0x220
[  237.388557][ T9728]  ? kasan_save_alloc_info+0x40/0x50
[  237.388589][ T9728]  ? __kasan_kmalloc+0x96/0xb0
[  237.388613][ T9728]  vmalloc_user_noprof+0x77/0x90
[  237.388643][ T9728]  ? xskq_create+0xdb/0x2a0
[  237.388663][ T9728]  xskq_create+0xdb/0x2a0
[  237.388683][ T9728]  xsk_init_queue+0xb6/0x120
[  237.388704][ T9728]  xsk_setsockopt+0x43f/0x6f0
[  237.388723][ T9728]  ? __cfi_xsk_setsockopt+0x10/0x10
[  237.388743][ T9728]  ? do_futex+0x309/0x500
[  237.388764][ T9728]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[  237.388789][ T9728]  ? security_socket_setsockopt+0x33/0xd0
[  237.388808][ T9728]  ? __cfi_xsk_setsockopt+0x10/0x10
[  237.388828][ T9728]  do_sock_setsockopt+0x26d/0x400
[  237.388849][ T9728]  ? __cfi_do_sock_setsockopt+0x10/0x10
[  237.388872][ T9728]  __x64_sys_setsockopt+0x1b8/0x250
[  237.388894][ T9728]  x64_sys_call+0x2adc/0x2ee0
[  237.388921][ T9728]  do_syscall_64+0x58/0xf0
[  237.388939][ T9728]  ? clear_bhb_loop+0x50/0xa0
[  237.388964][ T9728]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  237.388988][ T9728] RIP: 0033:0x7f625698eba9
[  237.389009][ T9728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  237.389026][ T9728] RSP: 002b:00007f625783d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  237.389047][ T9728] RAX: ffffffffffffffda RBX: 00007f6256bd5fa0 RCX: 00007f625698eba9
[  237.389062][ T9728] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  237.389075][ T9728] RBP: 00007f6256a11e19 R08: 0000000000000004 R09: 0000000000000000
[  237.389087][ T9728] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  237.389100][ T9728] R13: 00007f6256bd6038 R14: 00007f6256bd5fa0 R15: 00007ffd9a39b778
[  237.389117][ T9728]  </TASK>
[  237.389148][ T9728] Mem-Info:
[  237.451878][ T9741] fuse: Unknown parameter 'roo'
[  237.452695][ T9728] active_anon:7234 inactive_anon:11 isolated_anon:0
[  237.452695][ T9728]  active_file:18912 inactive_file:32653 isolated_file:0
[  237.452695][ T9728]  unevictable:15452 dirty:44 writeback:0
[  237.452695][ T9728]  slab_reclaimable:6923 slab_unreclaimable:75166
[  237.452695][ T9728]  mapped:24717 shmem:213 pagetables:1150
[  237.452695][ T9728]  sec_pagetables:3 bounce:0
[  237.452695][ T9728]  kernel_misc_reclaimable:0
[  237.452695][ T9728]  free:1470052 free_pcp:5028 free_cma:0
[  237.595985][ T1118] usb 10-1: new low-speed USB device number 12 using dummy_hcd
[  237.612893][ T1109] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.0018/input/input18
[  237.618315][ T9728] Node 0 active_anon:28984kB inactive_anon:44kB active_file:75648kB inactive_file:130612kB unevictable:61808kB isolated(anon):0kB isolated(file):0kB mapped:98916kB dirty:176kB writeback:0kB shmem:852kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6048kB pagetables:4620kB sec_pagetables:12kB all_unreclaimable? no
[  237.638024][ T1109] kye 0003:0458:5010.0018: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0
[  237.646664][ T9728] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965952kB mlocked:0kB bounce:0kB free_pcp:5740kB local_pcp:68kB free_cma:0kB
[  237.844479][ T9728] lowmem_reserve[]: 0 3921 3921
[  237.849599][ T9728] Normal free:2920560kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29004kB inactive_anon:44kB active_file:75648kB inactive_file:130612kB unevictable:61808kB writepending:176kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:13136kB local_pcp:9544kB free_cma:0kB
[  237.881797][ T9728] lowmem_reserve[]: 0 0 0
[  237.886344][ T9728] DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[  237.902389][ T9728] Normal: 1158*4kB (UME) 1191*8kB (UME) 1778*16kB (UME) 1093*32kB (UME) 735*64kB (UME) 351*128kB (UME) 198*256kB (UME) 111*512kB (UME) 63*1024kB (UME) 19*2048kB (UME) 620*4096kB (UM) = 2920016kB
[  237.921900][ T9728] 67239 total pagecache pages
[  237.926686][ T9728] 11 pages in swap cache
[  237.930948][ T9728] Free swap  = 124144kB
[  237.935106][ T9728] Total swap = 124996kB
[  237.939432][ T9728] 2097051 pages RAM
[  237.943267][ T9728] 0 pages HighMem/MovableOnly
[  237.948344][ T9728] 351533 pages reserved
[  237.952651][ T9728] 0 pages cma reserved
[  237.958134][ T1109] usb 1-1: USB disconnect, device number 67
[  237.959997][ T9728] Memory allocations:
[  237.968553][ T9728]          0 B        0 init/main.c:1370 func:do_initcalls
[  237.976108][ T9728]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  237.984428][ T9728]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  237.992137][ T9728]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  238.000185][ T9728]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  238.008317][ T9728]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  238.017034][ T9728]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  238.025171][ T1118] usb 10-1: device descriptor read/64, error -71
[  238.025830][ T9728]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  238.039581][ T9728]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  238.047565][ T9728]          0 B        0 init/initramfs.c:101 func:find_link
[  238.265954][ T1118] usb 10-1: device descriptor read/64, error -71
[  238.506312][ T1118] usb 10-1: new low-speed USB device number 13 using dummy_hcd
[  238.563000][   T36] audit: type=1400 audit(2000000090.284:586): avc:  denied  { shutdown } for  pid=9762 comm="syz.8.3072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  238.594672][ T9765] netlink: 5 bytes leftover after parsing attributes in process `syz.8.3073'.
[  238.604635][ T9765] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  238.635986][ T1118] usb 10-1: device descriptor read/64, error -71
[  238.875990][ T1118] usb 10-1: device descriptor read/64, error -71
[  238.986854][ T1118] usb usb10-port1: attempt power cycle
[  239.211388][ T9779] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  239.211629][ T9779] rust_binder: Error while translating object.
[  239.218325][ T9779] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  239.224684][ T9779] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:116
[  239.325983][ T1118] usb 10-1: new low-speed USB device number 14 using dummy_hcd
[  239.357116][ T1118] usb 10-1: device descriptor read/8, error -71
[  239.487943][ T1118] usb 10-1: device descriptor read/8, error -71
[  239.725977][ T1118] usb 10-1: new low-speed USB device number 15 using dummy_hcd
[  239.747516][ T1118] usb 10-1: device descriptor read/8, error -71
[  239.752143][   T36] audit: type=1400 audit(2000000091.474:587): avc:  denied  { accept } for  pid=9792 comm="syz.0.3083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  239.887071][ T1118] usb 10-1: device descriptor read/8, error -71
[  239.996093][ T1118] usb usb10-port1: unable to enumerate USB device
[  240.438887][ T9807] rust_binder: Write failure EFAULT in pid:50
[  240.439692][ T9808] rust_binder: Write failure EINVAL in pid:50
[  240.643313][ T9817] 9pnet_fd: Insufficient options for proto=fd
[  240.697366][ T1109] usb 10-1: new high-speed USB device number 16 using dummy_hcd
[  240.865927][ T1109] usb 10-1: Using ep0 maxpacket: 16
[  240.872544][ T1109] usb 10-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  240.883026][ T1109] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  240.894248][ T1109] usb 10-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  240.904393][ T1109] usb 10-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  240.917864][ T1109] usb 10-1: config 7 interface 0 has no altsetting 0
[  240.924694][ T1109] usb 10-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  240.934172][ T1109] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  241.055938][   T46] usb 1-1: new low-speed USB device number 68 using dummy_hcd
[  241.185958][   T46] usb 1-1: device descriptor read/64, error -71
[  241.366045][ T1109] input: HID 0458:5010 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:7.0/0003:0458:5010.0019/input/input19
[  241.395996][ T1109] kye 0003:0458:5010.0019: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.9-1/input0
[  241.435958][   T46] usb 1-1: device descriptor read/64, error -71
[  241.566036][   T36] audit: type=1326 audit(2000000093.294:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.8.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04f0b8eba9 code=0x7ffc0000
[  241.589865][   T36] audit: type=1326 audit(2000000093.294:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.8.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f04f0b8eba9 code=0x7ffc0000
[  241.613728][   T36] audit: type=1326 audit(2000000093.294:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.8.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04f0b8eba9 code=0x7ffc0000
[  241.637886][   T36] audit: type=1326 audit(2000000093.294:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.8.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04f0b8eba9 code=0x7ffc0000
[  241.661883][   T36] audit: type=1326 audit(2000000093.294:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.8.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f04f0b8eba9 code=0x7ffc0000
[  241.686370][   T36] audit: type=1326 audit(2000000093.294:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.8.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04f0b8eba9 code=0x7ffc0000
[  241.710535][   T46] usb 1-1: new low-speed USB device number 69 using dummy_hcd
[  241.711035][ T9850] netlink: 'syz.8.3100': attribute type 16 has an invalid length.
[  241.718188][   T36] audit: type=1326 audit(2000000093.294:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.8.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f04f0b8eba9 code=0x7ffc0000
[  241.726433][ T9850] netlink: 64138 bytes leftover after parsing attributes in process `syz.8.3100'.
[  241.751744][  T445] usb 10-1: USB disconnect, device number 16
[  241.763494][   T36] audit: type=1326 audit(2000000093.294:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.8.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04f0b8eba9 code=0x7ffc0000
[  241.789975][   T36] audit: type=1326 audit(2000000093.294:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9837 comm="syz.8.3096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04f0b8eba9 code=0x7ffc0000
[  241.813698][   T36] audit: type=1400 audit(2000000093.414:597): avc:  denied  { unmount } for  pid=9849 comm="syz.8.3100" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[  241.895924][   T46] usb 1-1: device descriptor read/64, error -71
[  241.907120][ T9871] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3108'.
[  241.916701][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3108'.
[  242.136032][   T46] usb 1-1: device descriptor read/64, error -71
[  242.256288][   T46] usb usb1-port1: attempt power cycle
[  242.287826][ T9907] veth0_virt_wifi: entered allmulticast mode
[  242.294664][ T9906] veth0_virt_wifi: left allmulticast mode
[  242.516771][ T9926] tipc: Can't bind to reserved service type 0
[  242.546183][ T9928] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  242.546221][ T9928] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:72
[  242.570127][ T9932] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  242.579289][ T9932] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:74
[  242.604233][   T36] audit: type=1400 audit(2000000094.324:598): avc:  denied  { write } for  pid=9933 comm="syz.9.3131" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  242.605924][   T46] usb 1-1: new low-speed USB device number 70 using dummy_hcd
[  242.657529][   T46] usb 1-1: device descriptor read/8, error -71
[  242.756268][ T9938] __vm_enough_memory: pid: 9938, comm: syz.9.3132, bytes: 18014402804453376 not enough memory for the allocation
[  242.781529][ T9941] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  242.781562][ T9941] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  242.787086][   T46] usb 1-1: device descriptor read/8, error -71
[  242.807631][   T36] audit: type=1400 audit(2000000094.534:599): avc:  denied  { read } for  pid=9945 comm="syz.9.3134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  242.808175][ T9946] binder: Unknown parameter 'uid'
[  242.866114][ T9950] tipc: Started in network mode
[  242.871065][ T9950] tipc: Node identity 2e40b546e544, cluster identity 4711
[  242.878474][ T9950] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  242.885609][ T9950] +
: renamed from syzkaller0
[  242.891354][ T9950] tipc: Disabling bearer <eth:syzkaller0>
[  243.005348][ T9965] rust_binder: pid 9965 performed invalid decrement on ref
[  243.036075][   T46] usb 1-1: new low-speed USB device number 71 using dummy_hcd
[  243.057107][   T46] usb 1-1: device descriptor read/8, error -71
[  243.187101][   T46] usb 1-1: device descriptor read/8, error -71
[  243.190679][ T9991] overlayfs: failed to clone upperpath
[  243.199713][ T9991] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  243.208658][ T9991] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  243.230041][ T9993] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3153'.
[  243.296023][   T46] usb usb1-port1: unable to enumerate USB device
[  243.656612][T10042] netlink: 148 bytes leftover after parsing attributes in process `syz.8.3167'.
[  243.758387][   T36] audit: type=1400 audit(2000000095.484:600): avc:  denied  { create } for  pid=10047 comm="syz.6.3169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  243.823794][T10050] rust_binder: 97: no such ref 1
[  243.828934][T10050] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  243.836647][T10050] rust_binder: 97: no such ref 0
[  243.841682][T10050] rust_binder: inc_ref_done called when no active inc_refs
[  244.759422][T10078] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  244.882584][T10085] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  244.940630][T10096] KVM: debugfs: duplicate directory 10096-5
[  244.948275][T10096] binder: Unknown parameter '00000000000000000000'
[  245.040068][T10106] incfs: Error accessing: ./file0.
[  245.045451][T10106] incfs: mount failed -20
[  245.050574][   T36] audit: type=1400 audit(2000000096.772:601): avc:  denied  { map } for  pid=10103 comm="syz.0.3192" path="socket:[73226]" dev="sockfs" ino=73226 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  245.301090][T10105] rust_binder: 10105 RLIMIT_NICE not set
[  245.345942][   T10] usb 1-1: new low-speed USB device number 72 using dummy_hcd
[  245.476023][T10121] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3197'.
[  245.485379][T10121] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3197'.
[  245.516293][   T10] usb 1-1: no configurations
[  245.520969][   T10] usb 1-1: can't read configurations, error -22
[  245.528164][T10132] overlayfs: failed to clone upperpath
[  245.649498][T10143] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3204'.
[  245.665963][   T10] usb 1-1: new low-speed USB device number 73 using dummy_hcd
[  245.826333][   T10] usb 1-1: no configurations
[  245.831232][   T10] usb 1-1: can't read configurations, error -22
[  245.837698][   T10] usb usb1-port1: attempt power cycle
[  246.175976][   T10] usb 1-1: new low-speed USB device number 74 using dummy_hcd
[  246.206657][   T10] usb 1-1: no configurations
[  246.211331][   T10] usb 1-1: can't read configurations, error -22
[  246.244516][T10169] netlink: 'syz.8.3213': attribute type 19 has an invalid length.
[  246.248078][T10167] fuse: Bad value for 'fd'
[  246.254023][T10169] netlink: 5 bytes leftover after parsing attributes in process `syz.8.3213'.
[  246.281779][T10182] tmpfs: Unknown parameter 'no'
[  246.346210][   T10] usb 1-1: new low-speed USB device number 75 using dummy_hcd
[  246.366683][   T10] usb 1-1: no configurations
[  246.371627][   T10] usb 1-1: can't read configurations, error -22
[  246.378130][   T10] usb usb1-port1: unable to enumerate USB device
[  246.931834][T10213] 9pnet_fd: Insufficient options for proto=fd
[  247.735141][T10222] 9pnet_fd: Insufficient options for proto=fd
[  248.143068][T10259] fuse: Bad value for 'fd'
[  248.149838][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[  248.176010][   T10] rust_binder: 10104: removing orphan mapping 0:1024
[  248.303311][T10268] netlink: 'syz.6.3247': attribute type 4 has an invalid length.
[  248.525949][   T10] usb 10-1: new full-speed USB device number 17 using dummy_hcd
[  248.677014][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  248.688275][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.698331][   T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  248.711530][   T10] usb 10-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00
[  248.720886][   T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.729776][   T10] usb 10-1: config 0 descriptor??
[  248.740523][   T10] usbhid 10-1:0.0: can't add hid device: -22
[  248.748227][   T10] usbhid 10-1:0.0: probe with driver usbhid failed with error -22
[  248.948044][   T46] usb 10-1: USB disconnect, device number 17
[  249.414627][T10292] overlayfs: failed to clone upperpath
[  249.775949][   T10] usb 10-1: new low-speed USB device number 18 using dummy_hcd
[  249.937174][   T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  249.947863][   T10] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  249.957009][   T10] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  249.966226][   T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.975121][   T10] usb 10-1: config 0 descriptor??
[  250.185926][ T1529] Bluetooth: hci0: command 0x1003 tx timeout
[  250.185928][ T5884] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  250.188063][   T10] usb 10-1: string descriptor 0 read error: -71
[  250.207374][   T10] usb 10-1: USB disconnect, device number 18
[  250.277100][T10316] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  250.315551][T10320] rust_binder: 167: no such ref 3
[  250.320816][T10320] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:167
[  250.321685][T10320] netlink: 'syz.0.3269': attribute type 1 has an invalid length.
[  250.339646][T10320] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3269'.
[  250.350339][T10320] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65304 sclass=netlink_xfrm_socket pid=10320 comm=syz.0.3269
[  250.366187][T10320] rust_binder: 167: no such ref 4194304
[  250.452966][T10342] 9pnet_fd: Insufficient options for proto=fd
[  250.461829][T10342] overlay: ./file0 is not a directory
[  250.466217][T10343] SELinux: failed to load policy
[  250.765107][T10350] rust_binder: Write failure EFAULT in pid:131
[  251.046045][   T10] syz_tun: tun_net_xmit 122
[  251.636124][   T10] syz_tun: tun_net_xmit 122
[  258.404843][T10387] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  258.404885][T10387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:175
[  258.497775][T10410] binder: Bad value for 'max'
[  258.623267][T10415] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  259.026212][T10453] fuse: Bad value for 'fd'
[  259.388719][T10472] SELinux:  Context system_u:object_r:apt_exec_t:s0 is not valid (left unmapped).
[  259.416391][   T36] audit: type=1400 audit(2000000111.142:602): avc:  denied  { relabelto } for  pid=10454 comm="syz.6.3315" name="file0" dev="tmpfs" ino=2653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:apt_exec_t:s0"
[  259.447686][   T36] audit: type=1400 audit(2000000111.142:603): avc:  denied  { associate } for  pid=10454 comm="syz.6.3315" name="file0" dev="tmpfs" ino=2653 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_exec_t:s0"
[  259.575918][   T10] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  259.679429][T10491] 9pnet_fd: Insufficient options for proto=fd
[  259.745923][   T10] usb 1-1: Using ep0 maxpacket: 16
[  259.752327][   T10] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  259.762872][   T10] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  259.774185][   T10] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  259.784283][   T10] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  259.801949][   T10] usb 1-1: config 7 interface 0 has no altsetting 0
[  259.808993][   T10] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  259.825516][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.237219][   T10] usbhid 1-1:7.0: can't add hid device: -71
[  260.243284][   T10] usbhid 1-1:7.0: probe with driver usbhid failed with error -71
[  260.252190][   T10] usb 1-1: USB disconnect, device number 76
[  260.536278][T10527] netlink: 'syz.9.3340': attribute type 19 has an invalid length.
[  260.633261][   T36] audit: type=1400 audit(2000000112.352:604): avc:  denied  { checkpoint_restore } for  pid=10531 comm="syz.8.3342" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  260.832881][   T36] audit: type=1400 audit(2000000112.552:605): avc:  denied  { create } for  pid=10547 comm="syz.0.3349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  261.035991][   T36] audit: type=1400 audit(2000000112.762:606): avc:  denied  { read } for  pid=10559 comm="syz.0.3353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  261.241798][T10585] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3362'.
[  261.355962][   T46] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  261.505907][   T46] usb 1-1: Using ep0 maxpacket: 8
[  261.512554][   T46] usb 1-1: unable to get BOS descriptor or descriptor too short
[  261.521425][   T46] usb 1-1: config 4 has an invalid interface number: 156 but max is 0
[  261.529666][   T46] usb 1-1: config 4 has no interface number 0
[  261.537192][   T46] usb 1-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=8a.2e
[  261.546326][   T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.554363][   T46] usb 1-1: Product: syz
[  261.558583][   T46] usb 1-1: Manufacturer: syz
[  261.563215][   T46] usb 1-1: SerialNumber: syz
[  261.742324][T10590] netlink: 'syz.8.3364': attribute type 4 has an invalid length.
[  261.861112][   T46] snd-usb-audio 1-1:4.156: probe with driver snd-usb-audio failed with error -71
[  261.871094][   T46] usb 1-1: USB disconnect, device number 77
[  262.385005][T10608] rust_binder: Failed to allocate buffer. len:216, is_oneway:false
[  262.628863][   T36] audit: type=1400 audit(2000000114.352:607): avc:  denied  { execmod } for  pid=10614 comm="syz.6.3375" path="/dev/rnullb0" dev="tmpfs" ino=368 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  262.674656][T10617] x_tables: duplicate underflow at hook 1
[  262.681307][T10617] x_tables: duplicate underflow at hook 1
[  262.689390][T10617] netlink: 57 bytes leftover after parsing attributes in process `syz.0.3376'.
[  262.722246][T10621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3378'.
[  263.025961][ T3278] usb 1-1: new low-speed USB device number 78 using dummy_hcd
[  263.148081][T10629] overlayfs: conflicting options: verity=require,redirect_dir=follow
[  263.187187][ T3278] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  263.196437][ T3278] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  263.205513][ T3278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.215551][ T3278] usb 1-1: config 0 descriptor??
[  263.340548][T10665] netlink: 168 bytes leftover after parsing attributes in process `syz.8.3392'.
[  263.804980][T10677] netlink: 'syz.9.3396': attribute type 4 has an invalid length.
[  264.240970][   T36] audit: type=1400 audit(2000000115.962:608): avc:  denied  { mount } for  pid=10688 comm="syz.8.3401" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  264.241704][T10689] overlayfs: failed to clone upperpath
[  265.027944][T10736] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  265.244164][T10762] overlayfs: failed to clone upperpath
[  265.244164][T10763] overlayfs: failed to clone upperpath
[  265.320147][T10766] 9pnet_fd: p9_fd_create_tcp (10766): problem connecting socket to 127.0.0.1
[  265.773997][   T46] usb 1-1: USB disconnect, device number 78
[  265.936674][T10811] netlink: 'syz.6.3445': attribute type 4 has an invalid length.
[  265.968015][T10817] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[  265.976341][T10817] rust_binder: Write failure EINVAL in pid:231
[  266.030921][T10820] netlink: 'syz.0.3443': attribute type 28 has an invalid length.
[  266.555252][T10831] veth0_vlan: left promiscuous mode
[  266.561024][T10831] veth0_vlan: entered promiscuous mode
[  266.753238][T10836] overlayfs: failed to clone lowerpath
[  266.827776][T10839] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226)
[  266.827810][T10839] rust_binder: Error while translating object.
[  266.838836][T10839] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  266.845129][T10839] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:235
[  267.118957][   T36] audit: type=1400 audit(2000000118.842:609): avc:  denied  { connect } for  pid=10846 comm="syz.6.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  267.484300][T10857] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3464'.
[  267.507003][T10862] x_tables: duplicate underflow at hook 2
[  267.682470][   T36] audit: type=1400 audit(2000000119.402:610): avc:  denied  { setattr } for  pid=10885 comm="syz.0.3473" name="IEEE-802.15.4-MAC" dev="sockfs" ino=77624 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  267.770788][T10896] fuseblk: Unknown parameter 'ro!i™€ô¥y
ot0000sar_id'
[  267.794740][   T36] audit: type=1400 audit(2000000119.512:611): avc:  denied  { accept } for  pid=10897 comm="syz.9.3476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  268.399887][T10916] overlayfs: failed to clone upperpath
[  268.536213][T10928] netlink: 3 bytes leftover after parsing attributes in process `syz.8.3487'.
[  268.546525][T10928] netlink: 3 bytes leftover after parsing attributes in process `syz.8.3487'.
[  268.555734][T10928] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  268.597539][   T36] audit: type=1400 audit(2000000120.322:612): avc:  denied  { map } for  pid=10931 comm="syz.8.3489" path="socket:[78013]" dev="sockfs" ino=78013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  268.725934][   T10] usb 1-1: new low-speed USB device number 79 using dummy_hcd
[  268.877067][   T10] usb 1-1: config 0 interface 0 has no altsetting 0
[  268.883719][   T10] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  268.892883][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.901606][   T10] usb 1-1: config 0 descriptor??
[  268.984922][T10954] cgroup: Invalid name
[  268.990235][T10954] 9pnet_fd: Insufficient options for proto=fd
[  269.109250][   T10] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  269.129584][   T10] asix 1-1:0.0: probe with driver asix failed with error -32
[  270.730645][T11012] netlink: 188 bytes leftover after parsing attributes in process `syz.6.3515'.
[  270.740396][T11011] fuse: Unknown parameter 'vootmode'
[  270.760094][   T36] audit: type=1400 audit(2000000122.482:613): avc:  denied  { ioctl } for  pid=11014 comm="syz.6.3516" path="socket:[78116]" dev="sockfs" ino=78116 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1
[  270.963313][T11020] overlayfs: conflicting options: userxattr,metacopy=on
[  271.252866][T11025] netlink: 44 bytes leftover after parsing attributes in process `syz.9.3519'.
[  271.261977][T11025] netlink: 43 bytes leftover after parsing attributes in process `syz.9.3519'.
[  271.271145][T11025] netlink: 'syz.9.3519': attribute type 5 has an invalid length.
[  271.279011][T11025] netlink: 43 bytes leftover after parsing attributes in process `syz.9.3519'.
[  271.356043][T11028] veth0_vlan: entered allmulticast mode
[  271.496027][   T46] usb 1-1: USB disconnect, device number 79
[  271.596828][   T36] audit: type=1400 audit(2000000123.322:614): avc:  denied  { execute } for  pid=11037 comm="syz.0.3524" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  271.695138][T11050] can0: slcan on ttyS3.
[  271.744837][T11050] can0 (unregistered): slcan off ttyS3.
[  271.906661][   T36] audit: type=1400 audit(2000000123.632:615): avc:  denied  { mount } for  pid=11058 comm="syz.6.3529" name="/" dev="pstore" ino=2756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[  272.542586][T11106] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3536'.
[  272.565936][  T616] usb 1-1: new high-speed USB device number 80 using dummy_hcd
[  272.699736][T11123] netlink: 'syz.8.3544': attribute type 4 has an invalid length.
[  272.707755][T11123] netlink: 'syz.8.3544': attribute type 6 has an invalid length.
[  272.715807][T11123] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.3544'.
[  272.725512][T11131] netlink: 288 bytes leftover after parsing attributes in process `syz.9.3547'.
[  272.735714][  T616] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  272.749402][T11123] netlink: 182 bytes leftover after parsing attributes in process `syz.8.3544'.
[  272.755617][  T616] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  272.771743][  T616] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  272.781417][  T616] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.796953][  T616] usb 1-1: Product: syz
[  272.801179][  T616] usb 1-1: Manufacturer: syz
[  272.806145][  T616] usb 1-1: SerialNumber: syz
[  272.817628][  T616] cdc_mbim 1-1:1.0: skipping garbage
[  272.958277][T11150] 9pnet_fd: Insufficient options for proto=fd
[  273.018213][T11104] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  273.246700][T11188] cgroup: subsys name conflicts with all
[  273.342869][T11192] overlayfs: failed to clone upperpath
[  273.342869][T11193] overlayfs: failed to clone upperpath
[  273.366666][T11195] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3571'.
[  273.637407][T11104] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  273.644880][  T616] cdc_mbim 1-1:1.0: setting tx_max = 48
[  273.651093][  T616] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device
[  273.658045][  T616] wwan wwan0: port wwan0mbim0 attached
[  273.665212][  T616] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, f2:23:c5:c2:cf:ca
[  273.803834][  T150] 8021q: adding VLAN 0 to HW filter on device wwan0
[  273.937282][ T3278] usb 1-1: USB disconnect, device number 80
[  273.943768][ T3278] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM
[  273.997085][ T3278] wwan wwan0: port wwan0mbim0 disconnected
[  274.427104][T11276] overlayfs: failed to clone upperpath
[  274.638340][T11293] overlayfs: failed to clone upperpath
[  274.725906][  T616] usb 1-1: new high-speed USB device number 81 using dummy_hcd
[  274.875903][  T616] usb 1-1: Using ep0 maxpacket: 16
[  274.882216][  T616] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  274.892551][  T616] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  274.903489][  T616] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  274.913303][  T616] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  274.926223][  T616] usb 1-1: config 7 interface 0 has no altsetting 0
[  274.932852][  T616] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  274.941968][  T616] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.239186][T11332] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3600'.
[  275.264655][   T36] audit: type=1400 audit(2000000126.982:616): avc:  denied  { audit_write } for  pid=11336 comm="syz.8.3601" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  275.371228][  T616] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.001A/input/input20
[  275.409917][  T616] kye 0003:0458:5010.001A: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0
[  275.466695][T11360] overlayfs: failed to clone upperpath
[  275.472802][T11360] netlink: 188 bytes leftover after parsing attributes in process `syz.8.3609'.
[  275.482773][T11360] incfs: mount failed -22
[  275.505278][T11362] veth0_virt_wifi: entered allmulticast mode
[  275.507717][   T36] audit: type=1400 audit(2000000127.232:617): avc:  denied  { create } for  pid=11361 comm="syz.8.3610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  275.532819][T11362] veth0_virt_wifi: left allmulticast mode
[  275.601285][T11381] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22
[  275.610001][T11381] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3615'.
[  275.757957][  T616] usb 1-1: USB disconnect, device number 81
[  276.046880][T11437] SELinux:  Context /dev/fuse is not valid (left unmapped).
[  276.054802][   T36] audit: type=1400 audit(2000000127.772:618): avc:  denied  { relabelto } for  pid=11436 comm="syz.6.3633" name="file0" dev="tmpfs" ino=3097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="/dev/fuse"
[  276.072002][T11440] overlayfs: missing 'lowerdir'
[  276.080061][   T36] audit: type=1400 audit(2000000127.772:619): avc:  denied  { associate } for  pid=11436 comm="syz.6.3633" name="file0" dev="tmpfs" ino=3097 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="/dev/fuse"
[  276.125739][T11442] netlink: 'syz.6.3635': attribute type 4 has an invalid length.
[  276.134668][T11442] netlink: 'syz.6.3635': attribute type 4 has an invalid length.
[  276.177731][   T36] audit: type=1326 audit(2000000127.902:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11451 comm="syz.6.3638" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f625698eba9 code=0x0
[  276.351478][   T36] audit: type=1400 audit(2000000128.072:621): avc:  denied  { create } for  pid=11483 comm="syz.6.3650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1
[  276.605919][  T349] usb 1-1: new high-speed USB device number 82 using dummy_hcd
[  276.735901][  T349] usb 1-1: device descriptor read/64, error -71
[  276.769010][T11493] netlink: 'syz.9.3652': attribute type 4 has an invalid length.
[  276.829072][T11498] netlink: 'syz.9.3653': attribute type 4 has an invalid length.
[  276.836921][T11498] netlink: 'syz.9.3653': attribute type 5 has an invalid length.
[  276.844745][T11498] netlink: 3657 bytes leftover after parsing attributes in process `syz.9.3653'.
[  276.860366][T11500] 9pnet_fd: Insufficient options for proto=fd
[  276.880259][T11507] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3656'.
[  276.975930][  T349] usb 1-1: device descriptor read/64, error -71
[  277.215916][  T349] usb 1-1: new high-speed USB device number 83 using dummy_hcd
[  277.345964][  T349] usb 1-1: device descriptor read/64, error -71
[  277.585932][  T349] usb 1-1: device descriptor read/64, error -71
[  277.696034][  T349] usb usb1-port1: attempt power cycle
[  277.764608][T11541] fuse: Bad value for 'group_id'
[  277.769748][T11541] fuse: Bad value for 'group_id'
[  278.035924][  T349] usb 1-1: new high-speed USB device number 84 using dummy_hcd
[  278.057020][  T349] usb 1-1: device descriptor read/8, error -71
[  278.196948][  T349] usb 1-1: device descriptor read/8, error -71
[  278.355548][   T36] audit: type=1400 audit(2000000130.072:622): avc:  denied  { create } for  pid=11555 comm="syz.8.3674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  278.435991][  T349] usb 1-1: new high-speed USB device number 85 using dummy_hcd
[  278.457044][  T349] usb 1-1: device descriptor read/8, error -71
[  278.587033][  T349] usb 1-1: device descriptor read/8, error -71
[  278.696052][  T349] usb usb1-port1: unable to enumerate USB device
[  279.097162][T11567] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3678'.
[  279.226561][T11575] fuse: Bad value for 'user_id'
[  279.235956][T11575] fuse: Bad value for 'user_id'
[  279.319841][T11577] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.327155][T11577] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.334406][T11577] bridge_slave_0: entered allmulticast mode
[  279.346389][T11577] bridge_slave_0: entered promiscuous mode
[  279.353167][T11577] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.360657][T11577] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.367931][T11577] bridge_slave_1: entered allmulticast mode
[  279.374223][T11577] bridge_slave_1: entered promiscuous mode
[  279.384489][   T13] bridge_slave_1: left allmulticast mode
[  279.390199][   T13] bridge_slave_1: left promiscuous mode
[  279.396199][   T13] +$<¶: port 2(bridge_slave_1) entered disabled state
[  279.404181][   T13] ªªªªª$: left allmulticast mode
[  279.410235][   T13] ªªªªª$: left promiscuous mode
[  279.415267][   T13] +$<¶: port 1(ªªªªª$) entered disabled state
[  279.578330][   T13] tipc: Left network mode
[  279.578992][T11577] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.589909][T11577] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.597290][T11577] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.604438][T11577] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.613415][   T13] veth1_macvtap: left promiscuous mode
[  279.619059][   T13] veth0_vlan: left promiscuous mode
[  279.677820][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[  279.685781][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[  279.698832][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.706009][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.717015][ T1895] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.724170][ T1895] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.749975][T11577] veth0_vlan: entered promiscuous mode
[  279.755916][  T349] usb 1-1: new high-speed USB device number 86 using dummy_hcd
[  279.763603][T11577] veth1_macvtap: entered promiscuous mode
[  279.785099][   T36] audit: type=1400 audit(2000000131.502:623): avc:  denied  { mount } for  pid=11577 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  279.917193][  T349] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  279.928253][  T349] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  279.938060][  T349] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  279.951344][  T349] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  279.961392][  T349] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.970257][  T349] usb 1-1: config 0 descriptor??
[  280.177639][  T349] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving
[  280.187377][  T349] plantronics 0003:047F:FFFF.001B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  280.338054][T11620] veth0_virt_wifi: entered allmulticast mode
[  281.118685][T11650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  281.127311][T11650] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  281.169122][T11619] veth0_virt_wifi: left allmulticast mode
[  281.200352][T11655] overlayfs: failed to clone upperpath
[  281.218553][T11657] overlayfs: failed to clone upperpath
[  281.224494][T11657] netlink: 'syz.8.3705': attribute type 16 has an invalid length.
[  281.605918][   T10] usb 1-1: reset high-speed USB device number 86 using dummy_hcd
[  281.691341][T11669] rust_binder: 292: no such ref 262146
[  281.696939][T11669] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  281.738653][T11676] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  281.738683][T11676] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:299
[  281.749200][T11678] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  281.764900][T11677] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  281.764956][T11677] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:299
[  281.801711][T11682] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[  281.819414][T11682] rust_binder: Write failure EINVAL in pid:305
[  281.819467][T11683] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[  281.834793][T11683] rust_binder: Write failure EINVAL in pid:305
[  282.654069][T11709] tipc: Started in network mode
[  282.665243][T11709] tipc: Node identity fa940cf9f44f, cluster identity 4711
[  282.672990][T11709] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  282.681284][T11709] tipc: Disabling bearer <eth:syzkaller0>
[  282.917463][T11722] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226)
[  282.917494][T11722] rust_binder: Error while translating object.
[  282.928332][T11722] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  282.934712][T11722] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:8
[  283.135346][T11737] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  283.144496][T11737] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19
[  283.197359][T11752] overlayfs: conflicting options: userxattr,metacopy=on
[  283.357082][T11765] netlink: 'syz.0.3742': attribute type 4 has an invalid length.
[  283.680184][T11776] netlink: 64 bytes leftover after parsing attributes in process `syz.9.3746'.
[  284.060796][T11803] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.068145][T11803] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.075396][T11803] bridge_slave_0: entered allmulticast mode
[  284.082041][T11803] bridge_slave_0: entered promiscuous mode
[  284.103675][T11803] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.119138][T11803] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.139836][T11803] bridge_slave_1: entered allmulticast mode
[  284.150146][T11803] bridge_slave_1: entered promiscuous mode
[  284.235659][T11803] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.242818][T11803] bridge0: port 2(bridge_slave_1) entered forwarding state
[  284.250285][T11803] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.257370][T11803] bridge0: port 1(bridge_slave_0) entered forwarding state
[  284.288981][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  284.296892][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.308699][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.315800][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  284.344210][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.351433][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  284.369880][T11803] veth0_vlan: entered promiscuous mode
[  284.385323][T11803] veth1_macvtap: entered promiscuous mode
[  284.462286][T11817] can0: slcan on ttyS3.
[  284.508128][T11817] can0 (unregistered): slcan off ttyS3.
[  284.531105][T11824] rust_binder: Error while translating object.
[  284.531172][T11824] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  284.537612][T11824] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:330
[  284.547536][T11824] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  284.605676][T11833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  284.621132][T11833] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  284.785924][   T46] usb 9-1: new full-speed USB device number 11 using dummy_hcd
[  284.937701][   T46] usb 9-1: unable to get BOS descriptor or descriptor too short
[  284.946167][   T46] usb 9-1: not running at top speed; connect to a high speed hub
[  284.954704][   T46] usb 9-1: config 1 has an invalid interface number: 138 but max is 0
[  284.962965][   T46] usb 9-1: config 1 has no interface number 0
[  284.969108][   T46] usb 9-1: config 1 interface 138 has no altsetting 0
[  284.977423][   T46] usb 9-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae
[  284.987128][   T46] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.995476][   T46] usb 9-1: Product: syz
[  284.999925][   T46] usb 9-1: Manufacturer: syz
[  285.004648][   T46] usb 9-1: SerialNumber: syz
[  285.082734][T11839] netlink: 'syz.9.3766': attribute type 4 has an invalid length.
[  285.160621][T11847] can0: slcan on ttyS3.
[  285.171412][T11847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.181484][T11847] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.211595][T11829] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true
[  285.211624][T11829] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  285.228397][T11829] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:8
[  285.246624][   T46] usb 9-1: USB disconnect, device number 11
[  285.273780][T11860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  285.306457][T11860] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  285.367385][T11860] can0 (unregistered): slcan off ttyS3.
[  285.805694][T11889] rust_binder: 11889 RLIMIT_NICE not set
[  285.805908][T11889] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[  285.818846][T11889] rust_binder: Read failure Err(EAGAIN) in pid:13
[  285.863912][   T36] audit: type=1400 audit(2000000137.582:624): avc:  denied  { write } for  pid=46 comm="kworker/1:1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=81193 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  286.100044][T11908] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  286.108496][T11907] tipc: Disabling bearer <eth:syzkaller0>
[  286.164182][T11910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  286.173162][T11910] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  286.260899][T11914] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.261466][T11914] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3783'.
[  286.277659][T11914] rust_binder: Failed to allocate buffer. len:96, is_oneway:false
[  286.277823][T11914] rust_binder: 26: no such ref 1
[  286.291421][T11914] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:26
[  286.291892][T11914] rust_binder: 26: no such ref 3
[  286.487643][   T36] audit: type=1400 audit(2000000138.212:625): avc:  denied  { unmount } for  pid=11577 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  286.546853][T11926] rust_binder: 35: no such ref 3
[  286.551962][T11926] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35
[  286.603640][T11927] rust_binder: Error while translating object.
[  286.612992][T11927] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  286.619413][T11927] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35
[  286.717171][T11929] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3788'.
[  286.734637][T11931] rust_binder: Write failure EFAULT in pid:24
[  286.788660][T11935] rust_kernel: panicked at drivers/android/binder/prio.rs:78:9:
[  286.788660][T11935] attempt to subtract with overflow
[  286.807659][T11935] ------------[ cut here ]------------
[  286.813121][T11935] kernel BUG at rust/helpers/bug.c:7!
[  286.818906][T11935] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI
[  286.820321][   T36] audit: type=1400 audit(2000000138.542:626): avc:  denied  { read } for  pid=93 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  286.825878][T11935] CPU: 0 UID: 0 PID: 11935 Comm: syz.0.3788 Not tainted syzkaller #0 064bd8e71db8281f775729d9237f740d6717dea5
[  286.825913][T11935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  286.825941][T11935] RIP: 0010:rust_helper_BUG+0x8/0x10
[  286.848367][   T36] audit: type=1400 audit(2000000138.542:627): avc:  denied  { search } for  pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  286.859610][T11935] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 e3 8b b9 2e 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 a9 4f f0 a2 90 90 90 90 90 90 90 90 90
[  286.859637][T11935] RSP: 0018:ffffc90004ecd0b0 EFLAGS: 00010246
[  286.859662][T11935] RAX: 000000000000005f RBX: 1ffff920009d9a18 RCX: 28525933e272c400
[  286.870556][   T36] audit: type=1400 audit(2000000138.542:628): avc:  denied  { write } for  pid=93 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  286.875034][T11935] RDX: ffffc90007a66000 RSI: 0000000000004537 RDI: 0000000000004538
[  286.875057][T11935] RBP: ffffc90004ecd0b0 R08: ffffc90004eccda7 R09: 1ffff920009d99b4
[  286.875085][T11935] R10: dffffc0000000000 R11: fffff520009d99b5 R12: 0000000000000000
[  286.897035][   T36] audit: type=1400 audit(2000000138.542:629): avc:  denied  { add_name } for  pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  286.916024][T11935] R13: dffffc0000000000 R14: ffffc90004ecd0e0 R15: ffffc90004ecd110
[  286.916053][T11935] FS:  00007f5f2e7e36c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  286.916083][T11935] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  286.916100][T11935] CR2: 00007f5f2e7e2f98 CR3: 000000011e304000 CR4: 00000000003526b0
[  286.916121][T11935] Call Trace:
[  286.916130][T11935]  <TASK>
[  286.916140][T11935]  _RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x15b/0x160
[  286.916179][T11935]  ? __cfi__RNvCscSpY9Juk0HT_7___rustc17rust_begin_unwind+0x10/0x10
[  286.916207][T11935]  ? __cfi__RNvXs1b_NtCs9jEwPDbx20M_4core3fmtRNtNtNtB8_5panic10panic_info9PanicInfoNtB6_7Display3fmtCs43vyB533jt3_6kernel+0x10/0x10
[  286.916248][T11935]  ? stack_depot_save_flags+0x38/0x800
[  286.916275][T11935]  _RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x84/0x90
[  286.916303][T11935]  ? __cfi__RNvNtCs9jEwPDbx20M_4core9panicking9panic_fmt+0x10/0x10
[  286.916329][T11935]  ? _RNvMsi_NtNtCs43vyB533jt3_6kernel4sync3arcINtB5_9UniqueArcINtCshgDM7dBCdno_11rust_binder7DTRWrapNtNtBW_11transaction11TransactionEE10new_uninitBW_+0x67/0x160
[  286.916393][T11935]  ? _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread21copy_transaction_data+0x19f1/0x4760
[  286.916434][T11935]  ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x409/0x2cd0
[  286.924224][   T36] audit: type=1400 audit(2000000138.542:630): avc:  denied  { create } for  pid=93 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  286.930502][T11935]  ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100
[  286.930556][T11935]  ? __se_sys_ioctl+0x132/0x1b0
[  286.952364][   T36] audit: type=1400 audit(2000000138.542:631): avc:  denied  { append open } for  pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  286.959729][T11935]  ? __x64_sys_ioctl+0x7f/0xa0
[  286.959767][T11935]  ? x64_sys_call+0x1878/0x2ee0
[  286.968404][   T36] audit: type=1400 audit(2000000138.542:632): avc:  denied  { getattr } for  pid=93 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  286.975864][T11935]  ? do_syscall_64+0x58/0xf0
[  286.975901][T11935]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  286.975935][T11935]  _RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0xb2/0xc0
[  287.115958][   T46] usb 9-1: new low-speed USB device number 12 using dummy_hcd
[  287.120143][T11935]  ? __cfi__RNvNtNtCs9jEwPDbx20M_4core9panicking11panic_const24panic_const_sub_overflow+0x10/0x10
[  287.120195][T11935]  ? rust_helper_task_rlimit+0x5f/0xb0
[  287.253422][T11935]  _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread15do_set_priority+0xd75/0xe10
[  287.263262][T11935]  ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread15do_set_priority+0x10/0x10
[  287.273718][T11935]  ? kasan_save_alloc_info+0x40/0x50
[  287.279038][T11935]  ? __kasan_kmalloc+0x96/0xb0
[  287.284005][T11935]  ? __kmalloc_node_track_caller_noprof+0x1ad/0x440
[  287.290650][T11935]  ? krealloc_noprof+0xfa/0x130
[  287.295610][T11935]  ? rust_helper_krealloc+0x33/0xd0
[  287.300938][T11935]  ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0x91/0x100
[  287.310535][T11935]  ? __kasan_check_write+0x18/0x20
[  287.315679][T11935]  ? _raw_spin_lock+0x8c/0x120
[  287.320558][T11935]  ? __cfi__raw_spin_lock+0x10/0x10
[  287.325777][T11935]  ? _RNvMNtCshgDM7dBCdno_11rust_binder11transactionNtB2_11Transaction3new+0x15fa/0x1f90
[  287.335653][T11935]  _RNvXs_NtCshgDM7dBCdno_11rust_binder11transactionNtB4_11TransactionNtB6_13DeliverToRead18on_thread_selected+0x69d/0xae0
[  287.348578][T11935]  ? __cfi__RNvXs_NtCshgDM7dBCdno_11rust_binder11transactionNtB4_11TransactionNtB6_13DeliverToRead18on_thread_selected+0x10/0x10
[  287.362014][T11935]  ? stack_depot_save_flags+0x38/0x800
[  287.367559][T11935]  ? _RNvMs6_NtCs43vyB533jt3_6kernel4listINtB5_4ListNtNtCshgDM7dBCdno_11rust_binder6thread6ThreadE21remove_internal_innerBM_+0x22b/0x340
[  287.381605][T11935]  _RNvMs_NtCshgDM7dBCdno_11rust_binder7processNtB4_12ProcessInner9push_work+0x322/0xb30
[  287.392004][T11935]  ? __kasan_check_write+0x18/0x20
[  287.397201][T11935]  ? __cfi__raw_spin_lock+0x10/0x10
[  287.402449][T11935]  ? __cfi__RNvMs_NtCshgDM7dBCdno_11rust_binder7processNtB4_12ProcessInner9push_work+0x10/0x10
[  287.412864][T11935]  _RNvMNtCshgDM7dBCdno_11rust_binder11transactionNtB2_11Transaction6submit+0x761/0x2010
[  287.417116][   T46] usb 9-1: config 0 interface 0 has no altsetting 0
[  287.422706][T11935]  ? __cfi__RNvMNtCshgDM7dBCdno_11rust_binder11transactionNtB2_11Transaction6submit+0x10/0x10
[  287.429598][   T46] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  287.439632][T11935]  ? __kmalloc_node_track_caller_noprof+0x1ad/0x440
[  287.439684][T11935]  ? krealloc_noprof+0xfa/0x130
[  287.439709][T11935]  ? __kasan_check_write+0x18/0x20
[  287.450465][   T46] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.455418][T11935]  ? _raw_spin_lock+0x8c/0x120
[  287.455451][T11935]  ? __cfi__raw_spin_lock+0x10/0x10
[  287.461779][   T46] usb 9-1: config 0 descriptor??
[  287.465499][T11935]  ? _RNvMs6_NtCs43vyB533jt3_6kernel4listINtB5_4ListINtCshgDM7dBCdno_11rust_binder7DTRWrapDNtBL_13DeliverToReadEL_EE12insert_innerBL_+0x3c7/0x4d0
[  287.503436][T11935]  _RINvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0xb36/0xdd0
[  287.515466][T11935]  ? __cfi__RINvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB6_6Thread11transactionNvB2_17transaction_innerEB8_+0x10/0x10
[  287.528049][T11935]  ? __kasan_check_write+0x18/0x20
[  287.533307][T11935]  ? _raw_spin_lock+0x8c/0x120
[  287.538178][T11935]  ? __cfi__raw_spin_lock+0x10/0x10
[  287.543407][T11935]  ? _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x1f0f/0xa290
[  287.553438][T11935]  ? __asan_memcpy+0x5a/0x80
[  287.558175][T11935]  _RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x1f5c/0xa290
[  287.567867][T11935]  ? __cfi__RNvMs2_NtCshgDM7dBCdno_11rust_binder6threadNtB5_6Thread10write_read+0x10/0x10
[  287.577850][T11935]  ? is_bpf_text_address+0x17b/0x1a0
[  287.583162][T11935]  ? kernel_text_address+0xa9/0xe0
[  287.588300][T11935]  ? __kernel_text_address+0x11/0x40
[  287.593620][T11935]  ? unwind_get_return_address+0x51/0x90
[  287.599312][T11935]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  287.605513][T11935]  ? arch_stack_walk+0x10b/0x170
[  287.610501][T11935]  ? kasan_save_track+0x4f/0x80
[  287.615375][T11935]  ? kasan_save_track+0x3e/0x80
[  287.620238][T11935]  ? kasan_save_alloc_info+0x40/0x50
[  287.625549][T11935]  ? __kasan_kmalloc+0x96/0xb0
[  287.630334][T11935]  ? __kmalloc_node_track_caller_noprof+0x1ad/0x440
[  287.636961][T11935]  ? krealloc_noprof+0x8d/0x130
[  287.641938][T11935]  ? rust_helper_krealloc+0x33/0xd0
[  287.647218][T11935]  ? _RNvMNtNtCs43vyB533jt3_6kernel5alloc9allocatorNtB2_11ReallocFunc4call+0xaf/0x100
[  287.656790][T11935]  ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x715/0x1440
[  287.667497][T11935]  ? _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x1a4/0x2cd0
[  287.676905][T11935]  ? _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100
[  287.685630][T11935]  ? __x64_sys_ioctl+0x7f/0xa0
[  287.690424][T11935]  ? x64_sys_call+0x1878/0x2ee0
[  287.695308][T11935]  ? do_syscall_64+0x58/0xf0
[  287.699930][T11935]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  287.706116][T11935]  ? __kasan_kmalloc+0x96/0xb0
[  287.710902][T11935]  ? kasan_save_alloc_info+0x40/0x50
[  287.716257][T11935]  ? __kasan_kmalloc+0x96/0xb0
[  287.721270][T11935]  ? __kmalloc_node_track_caller_noprof+0x1ad/0x440
[  287.727909][T11935]  ? __asan_memset+0x39/0x50
[  287.732527][T11935]  ? _raw_spin_unlock+0x45/0x60
[  287.737393][T11935]  ? rust_helper_spin_unlock+0x19/0x30
[  287.742882][T11935]  ? _RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0xdfc/0x1440
[  287.753586][T11935]  ? __cfi__RNvMs3_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10
[  287.764458][T11935]  ? kvm_sched_clock_read+0x15/0x30
[  287.769683][T11935]  ? sched_clock_noinstr+0xd/0x30
[  287.774743][T11935]  ? sched_clock+0x44/0x60
[  287.779184][T11935]  ? sched_clock_cpu+0x75/0x400
[  287.784063][T11935]  ? sched_balance_newidle+0x845/0xe00
[  287.789556][T11935]  ? __switch_to+0xc7b/0x1310
[  287.794265][T11935]  ? __cfi___switch_to+0x10/0x10
[  287.799236][T11935]  _RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x409/0x2cd0
[  287.808385][T11935]  ? __kasan_check_write+0x18/0x20
[  287.813537][T11935]  ? __switch_to_asm+0x3d/0x70
[  287.818332][T11935]  ? avc_has_extended_perms+0x7c7/0xdd0
[  287.823913][T11935]  ? __asan_memcpy+0x5a/0x80
[  287.828546][T11935]  ? avc_has_extended_perms+0x921/0xdd0
[  287.834222][T11935]  ? __cfi__RNvMs5_NtCshgDM7dBCdno_11rust_binder7processNtB5_7Process5ioctl+0x10/0x10
[  287.843891][T11935]  ? do_vfs_ioctl+0xeda/0x1e30
[  287.848702][T11935]  ? __futex_queue+0x19a/0x340
[  287.853505][T11935]  ? __ia32_compat_sys_ioctl+0x850/0x850
[  287.859276][T11935]  ? __cfi___futex_queue+0x10/0x10
[  287.864422][T11935]  ? futex_wait_setup+0x1bc/0x260
[  287.869565][T11935]  ? __futex_wait+0x218/0x2a0
[  287.874268][T11935]  ? ioctl_has_perm+0x384/0x4d0
[  287.879147][T11935]  ? has_cap_mac_admin+0xd0/0xd0
[  287.884223][T11935]  ? futex_wake+0x63a/0x900
[  287.888769][T11935]  ? futex_setup_timer+0xb4/0xd0
[  287.893731][T11935]  ? futex_wait+0x29a/0x7a0
[  287.898269][T11935]  ? __cfi_futex_wait+0x10/0x10
[  287.903158][T11935]  ? __kasan_slab_alloc+0x73/0x90
[  287.908239][T11935]  ? selinux_file_ioctl+0x6e0/0x1360
[  287.913558][T11935]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  287.919141][T11935]  ? file_init_path+0x3b/0x5a0
[  287.923935][T11935]  ? do_futex+0x309/0x500
[  287.928286][T11935]  ? __cfi_do_futex+0x10/0x10
[  287.933004][T11935]  ? alloc_file_pseudo+0x171/0x1c0
[  287.938326][T11935]  ? __fget_files+0x2c5/0x340
[  287.943032][T11935]  _RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0xa0/0x100
[  287.951575][T11935]  ? __se_sys_ioctl+0x114/0x1b0
[  287.956450][T11935]  ? __cfi__RNvCshgDM7dBCdno_11rust_binder26rust_binder_unlocked_ioctl+0x10/0x10
[  287.965618][T11935]  __se_sys_ioctl+0x132/0x1b0
[  287.970414][T11935]  __x64_sys_ioctl+0x7f/0xa0
[  287.975099][T11935]  x64_sys_call+0x1878/0x2ee0
[  287.979895][T11935]  do_syscall_64+0x58/0xf0
[  287.984337][T11935]  ? clear_bhb_loop+0x50/0xa0
[  287.989130][T11935]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  287.995047][T11935] RIP: 0033:0x7f5f2d98eba9
[  287.999488][T11935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  288.019204][T11935] RSP: 002b:00007f5f2e7e3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  288.027649][T11935] RAX: ffffffffffffffda RBX: 00007f5f2dbd6090 RCX: 00007f5f2d98eba9
[  288.035664][T11935] RDX: 0000200000000180 RSI: 00000000c0306201 RDI: 0000000000000003
[  288.044012][T11935] RBP: 00007f5f2da11e19 R08: 0000000000000000 R09: 0000000000000000
[  288.052089][T11935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  288.060090][T11935] R13: 00007f5f2dbd6128 R14: 00007f5f2dbd6090 R15: 00007ffdb8198bf8
[  288.068087][T11935]  </TASK>
[  288.071117][T11935] Modules linked in:
[  288.075944][T11935] ---[ end trace 0000000000000000 ]---
[  288.081512][T11935] RIP: 0010:rust_helper_BUG+0x8/0x10
[  288.086954][T11935] Code: cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 b8 e3 8b b9 2e 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 48 89 e5 <0f> 0b 66 0f 1f 44 00 00 b8 a9 4f f0 a2 90 90 90 90 90 90 90 90 90
[  288.106788][T11935] RSP: 0018:ffffc90004ecd0b0 EFLAGS: 00010246
[  288.112885][T11935] RAX: 000000000000005f RBX: 1ffff920009d9a18 RCX: 28525933e272c400
[  288.121039][T11935] RDX: ffffc90007a66000 RSI: 0000000000004537 RDI: 0000000000004538
[  288.129065][T11935] RBP: ffffc90004ecd0b0 R08: ffffc90004eccda7 R09: 1ffff920009d99b4
[  288.137091][T11935] R10: dffffc0000000000 R11: fffff520009d99b5 R12: 0000000000000000
[  288.145081][T11935] R13: dffffc0000000000 R14: ffffc90004ecd0e0 R15: ffffc90004ecd110
[  288.153091][T11935] FS:  00007f5f2e7e36c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  288.162066][T11935] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  288.168703][T11935] CR2: 00007f5f2e7e2f98 CR3: 000000011e304000 CR4: 00000000003526b0
[  288.176723][T11935] Kernel panic - not syncing: Fatal exception
[  288.183251][T11935] Kernel Offset: disabled
[  288.187594][T11935] Rebooting in 86400 seconds..