last executing test programs:

3m33.872991958s ago: executing program 3 (id=4):
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f003f0041010000aa11f6bbf44d00000000008984", 0x39}], 0x1)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_VDPA_SET_STATUS(r1, 0x4001af72, &(0x7f00000001c0)=0x8)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003})
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f0000a44000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0xfffffffffffffffc)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r4, 0x89b1, &(0x7f0000000900)={'wg1\x00', @remote})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r5, 0x11, 0x64, 0x0, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x35}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000080)=0x1)

3m33.710828161s ago: executing program 3 (id=5):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x10)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18)
write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58)
mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
chdir(&(0x7f0000000100)='./file0\x00')
read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101081, 0x0)
ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xae44, 0x8000000000000000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
setrlimit(0xd, &(0x7f0000000000)={0x66e, 0x96ed})
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})
ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r3, 0x2, 0x4002)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415603, 0x3})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000006c0)={0x4, 0x0, &(0x7f0000000540)=[@enter_looper], 0x50, 0x0, &(0x7f0000000600)="8dcdbd6d42ccdb4d556e7c2df713f0976fa3babb5f759be053e97109c9075d28dd5945ae6cb4e4d7866fe0493fb5c9157fdee7247f8cbf6c4e75526dc08c3ae8609b8760a00535639755c0fd5010ceba"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

3m33.709223921s ago: executing program 3 (id=6):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYRES64=0x0], 0x2c}}, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='overlay\x00', 0x2809003, 0x0)

3m33.484225325s ago: executing program 3 (id=11):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x409, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x24, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0xfc, 0x1000, 0xf1, 0x6, 0x6, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0xfffffff3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x5, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x200, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x206, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

3m33.406790897s ago: executing program 32 (id=11):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz0\x00', {0xfff7, 0xc, 0x100, 0x81}, 0x1d, [0x7b, 0xb7e2, 0x3, 0x9, 0x100, 0x3, 0x1, 0x7, 0x9, 0x2, 0x7, 0xa, 0x3, 0x0, 0x7f, 0xd, 0x7fff, 0x6, 0x6, 0x5, 0x6, 0x6, 0x7, 0x6, 0xff, 0x2, 0xa5f2b87a, 0x409, 0x0, 0xfc75, 0x8, 0x9, 0x4, 0x2, 0xffffffff, 0x81, 0xfffff765, 0x2, 0x3, 0x6, 0xa, 0x2, 0x5, 0x0, 0x3ff, 0x6, 0x7, 0x8000, 0xfffffffd, 0x80, 0x8, 0x8, 0x9, 0x7, 0x101, 0xc3c, 0x1733, 0x7fff, 0x7ffc, 0x1, 0x6, 0x5, 0x1, 0x4], [0x8, 0x3, 0x8, 0x8, 0x0, 0x8, 0x4, 0x0, 0x24, 0x10, 0x6, 0x7, 0x8, 0xe62, 0xffffff73, 0x1000, 0x6, 0x13e5, 0x3, 0x3, 0x1000, 0x7, 0x1, 0x3b40, 0x4, 0x1000, 0x5, 0x7fff, 0x8, 0x5a, 0xffff2503, 0x7fffffff, 0x6995, 0x1, 0x80000000, 0x8, 0xdab, 0x5, 0x2, 0x76c4, 0xfffffffd, 0x5, 0x4, 0x10000, 0xd, 0x2, 0x9, 0x10, 0x4000e, 0x9, 0x7, 0xa, 0x9, 0x3, 0x8, 0x3, 0x2, 0x3a6, 0x0, 0xc0d, 0xfffffffd, 0x9, 0xc, 0xfffffffb], [0x3, 0x6, 0x6, 0x9, 0x1000, 0x0, 0x80000000, 0x5, 0x7f, 0xa, 0xfc, 0x1000, 0xf1, 0x6, 0x6, 0x10000, 0x72, 0xc, 0x633, 0xd, 0x7, 0x6, 0x80000000, 0x6, 0x0, 0x7, 0x8, 0x2ef3adcb, 0x10, 0x2, 0x8, 0x8, 0x74, 0x4, 0x7, 0x7ff, 0xfffffff2, 0x63, 0x7, 0x2, 0x3, 0xfffffff3, 0x20a7fd9e, 0xfffffffd, 0x2, 0xa1, 0x0, 0x9d, 0x7, 0xa8a, 0x2, 0x6, 0x77, 0x8, 0x1ff, 0x7, 0x7, 0x2, 0x0, 0x2, 0x8, 0x2, 0x3, 0x5], [0x4, 0x4, 0x5, 0x8000, 0x493e, 0x3, 0x35ff4447, 0x7, 0x5, 0x5, 0x5d3a, 0x5, 0x5, 0x3ff, 0xb88f, 0xffff0000, 0x9, 0xf7df, 0x2, 0x10, 0x8, 0x2, 0xff, 0x6, 0x4, 0x4, 0x200, 0x0, 0x7, 0x4e6, 0x8, 0x40000000, 0x5ef, 0x8000, 0xc, 0x41, 0x400, 0x1, 0x5, 0x0, 0x9a8, 0x99f, 0x231, 0x3ff, 0x8, 0x1, 0xffff0001, 0x1, 0x1, 0x10, 0x8, 0x5396, 0x6161, 0x9, 0x101, 0x206, 0x8, 0x431, 0x6, 0x5, 0x4, 0x7b, 0x7fc, 0x9]}, 0x45c)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

3m32.398767046s ago: executing program 2 (id=28):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x2, 0xff, 0x7, "ea71061d0000000001000200", 0x0, 0x80})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x6)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x303943, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_NR_MMU_PAGES(r4, 0xae44, 0x80000001)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
close_range(r1, 0xffffffffffffffff, 0x0)

3m32.398337346s ago: executing program 2 (id=29):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 64)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 64)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) (async)
mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff) (async)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x21000, 0x0) (async, rerun: 32)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async, rerun: 32)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x54, 0x0, &(0x7f0000001400)=[@increfs={0x40046304, 0x1}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9286f9ce86a82d0b}], 0x0, 0x0, 0x0})

3m32.383686686s ago: executing program 2 (id=30):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
r1 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000001d80))
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x8)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000300))
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}])
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000140001", @ANYBLOB="bd6ebcd0525cfec06d1f1e1f006296709b481e0b485ed22c1d51ee10", @ANYRESHEX=r3, @ANYRES8=r4], 0x14}}, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0x0, 0x0, 0xa, 0x0, "dc16dfaaf4dd81976bfe1ba4d1aab1f3f0b97196e3fefb66c6e9805f176a27e68791c17a60b40cf57f8d9a9c63589849b23f66838f29e0b2f6f2f6acb4b370f88b00f22656e7bd97583054612168f153"}, 0xd8)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, &(0x7f0000000080))
sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=@newsa={0xf0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@private0={0xfc, 0x0, '\x00', 0xff}, 0x0, 0x6c}, @in6=@remote, {0x0, 0x0, 0x0, 0x0, 0x80000001}, {}, {0x0, 0x0, 0x6}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x40}}, 0xf0}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats=globCl,stats=global,max=00000000000000000000003,max=0000000000000000000001:,silent,rootcontext='])

3m32.327037377s ago: executing program 2 (id=31):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140), 0x3c00) (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140), 0x3c00)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
socket(0x26, 0x6, 0x0) (async)
r0 = socket(0x26, 0x6, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000a00)={0x5c, r2, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "7004f1eaad3339d0130f6eb1df1acf5b51c471e7"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040000)
unshare(0x22020600)
r3 = accept$inet6(r0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000400)=0x1c)
socket$inet6(0xa, 0x80000, 0xd10)
getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@mcast1, @in6=@private1}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, 0x0)
wait4(0x0, 0x0, 0x2, 0x0)
mount$9p_unix(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240), 0x20000, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020) (async)
read$FUSE(r4, &(0x7f00000005c0)={0x2020}, 0x2020)

3m32.260891429s ago: executing program 2 (id=32):
r0 = getpid()
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x8995, &(0x7f0000000080)={'syztnl2\x00', 0x0})
open(&(0x7f0000000140)='./file0\x00', 0x182900, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0)
r3 = syz_open_procfs(r0, &(0x7f0000000100)='net/dev_snmp6\x00')
r4 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000540)={0x0, 0x0, 0x100000001, 0x9})
fchdir(r3)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
r5 = syz_pidfd_open(r0, 0x0)
flistxattr(r2, &(0x7f0000000580)=""/4096, 0x1000)
setns(r5, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
inotify_add_watch(r3, &(0x7f0000000180)='./file2\x00', 0x400)

3m32.2040204s ago: executing program 2 (id=33):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
fsmount(r2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x58)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r3, &(0x7f00000004c0)='./file0\x00', 0x2)
r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201100100000040435503000000000000010902240001000000000904000006030004000000000000002207000905810340000d0110a1983fb43628367c7639ad4e3bb6b5522da5a905d561adb7c758a3543af90f732692be3d1696b226110c49303ae05c033dd745100759884192c4eb101e2b461bc331c28b144bf8a5b6842f75c57c84f0c2"], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x2, "001000"}, @global=@item_012={0x1, 0x1, 0x8, 'O'}]}}, 0x0}, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000001640)=0x9, 0x4)
sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
r6 = syz_usb_connect$cdc_ecm(0x4, 0xe6, &(0x7f0000000500)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd4, 0x1, 0x1, 0xa, 0x80, 0xee, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x2, 0x4, 0x9}, [@obex={0x5, 0x24, 0x15, 0x8fa0}, @mdlm_detail={0x14, 0x24, 0x13, 0xa, "5671522d94c88e4810cc98f183935909"}, @mdlm_detail={0x77, 0x24, 0x13, 0xa, "add5c69c2b307be3ee6e85bbd752a5007a6488c22d284a179058c49a12a5af6bded5a1204ba83d06cdfd6d8fee7a3cb2e24bc9c33ecf20f62b5acdf2bf4c0c8550770b95e4d4f271c1446488e1a957c21e38af91771d56532d70fc85bc8b3626b0b29988f859640c889d2075f636f3949295ea"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x8, 0xf}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x9, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xdb, 0x2, 0x9c}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x2, 0x9, 0x2, 0x10, 0xd2}, 0x4f, &(0x7f00000003c0)={0x5, 0xf, 0x4f, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0xf4, 0x5, 0xae, 0xff00, 0x0, [0x0, 0x30, 0xc000, 0xff00, 0xfe80]}, @ssp_cap={0x1c, 0x10, 0xa, 0xf9, 0x4, 0x5, 0x0, 0x0, [0xff0000, 0xff3f30, 0xc04e, 0xff0030]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x30, 0x5, 0x6, 0x4, 0x40}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44f}}]})
syz_usb_control_io$cdc_ecm(r6, &(0x7f00000006c0)={0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="4021500000005007a037adb929af23465640841d4d9a5bba04e3318666f9c7f58a9aff000a658c549914b09e01c5a77983cf721e27d07644dbb89e069492b365c12fa45c75d8cb282eb5d530f763cef99e57b1747dac"], &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x1c, &(0x7f0000000780)={0x0, 0x14, 0x8c, "f3ca3f93a34f0796de5c9bdce6de2aadc816efe3d618cf0a441e8218fd6b3ef1d5034c21fb583a1e94d3112d5a44f2d2ffb1f440d727ae67dd31ed689c379d4bcebb0fc30139325d96a77325fcda0023a99f1d783625de4195e7bcba4c7daa5f26318c2f52dbd760442753a8a5e2e7ef26c754edb5176237400aa40785346afb7b9d9b2766c85068fb46e307"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x6}})
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r7, 0x11, 0x1, &(0x7f0000000040)=0xffffffff, 0x4)
setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000000)=0x6, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f00000008c0)={0x0, 0x80000000, 0x52c2})
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]})
sendmmsg$inet6(r4, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0xd46, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xffffffffffffff5d}}], 0x300, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000dc0)={0x8, 0x0, 0x0, 0x1, 0xe, "0062ba7d02000000000000f7ffffff00"})
ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f00000000c0)=0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000180)=0x8)

3m32.143420331s ago: executing program 33 (id=33):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
fsmount(r2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x42, 0x58)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r3, &(0x7f00000004c0)='./file0\x00', 0x2)
r5 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201100100000040435503000000000000010902240001000000000904000006030004000000000000002207000905810340000d0110a1983fb43628367c7639ad4e3bb6b5522da5a905d561adb7c758a3543af90f732692be3d1696b226110c49303ae05c033dd745100759884192c4eb101e2b461bc331c28b144bf8a5b6842f75c57c84f0c2"], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@local=@item_4={0x3, 0x2, 0x2, "001000"}, @global=@item_012={0x1, 0x1, 0x8, 'O'}]}}, 0x0}, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000001640)=0x9, 0x4)
sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
r6 = syz_usb_connect$cdc_ecm(0x4, 0xe6, &(0x7f0000000500)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd4, 0x1, 0x1, 0xa, 0x80, 0xee, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x2, 0x6, 0x0, 0x5, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x2, 0x4, 0x9}, [@obex={0x5, 0x24, 0x15, 0x8fa0}, @mdlm_detail={0x14, 0x24, 0x13, 0xa, "5671522d94c88e4810cc98f183935909"}, @mdlm_detail={0x77, 0x24, 0x13, 0xa, "add5c69c2b307be3ee6e85bbd752a5007a6488c22d284a179058c49a12a5af6bded5a1204ba83d06cdfd6d8fee7a3cb2e24bc9c33ecf20f62b5acdf2bf4c0c8550770b95e4d4f271c1446488e1a957c21e38af91771d56532d70fc85bc8b3626b0b29988f859640c889d2075f636f3949295ea"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x8, 0xf}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x9, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xdb, 0x2, 0x9c}}}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x2, 0x9, 0x2, 0x10, 0xd2}, 0x4f, &(0x7f00000003c0)={0x5, 0xf, 0x4f, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0xf4, 0x5, 0xae, 0xff00, 0x0, [0x0, 0x30, 0xc000, 0xff00, 0xfe80]}, @ssp_cap={0x1c, 0x10, 0xa, 0xf9, 0x4, 0x5, 0x0, 0x0, [0xff0000, 0xff3f30, 0xc04e, 0xff0030]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x30, 0x5, 0x6, 0x4, 0x40}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44f}}]})
syz_usb_control_io$cdc_ecm(r6, &(0x7f00000006c0)={0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="4021500000005007a037adb929af23465640841d4d9a5bba04e3318666f9c7f58a9aff000a658c549914b09e01c5a77983cf721e27d07644dbb89e069492b365c12fa45c75d8cb282eb5d530f763cef99e57b1747dac"], &(0x7f0000000680)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x1c, &(0x7f0000000780)={0x0, 0x14, 0x8c, "f3ca3f93a34f0796de5c9bdce6de2aadc816efe3d618cf0a441e8218fd6b3ef1d5034c21fb583a1e94d3112d5a44f2d2ffb1f440d727ae67dd31ed689c379d4bcebb0fc30139325d96a77325fcda0023a99f1d783625de4195e7bcba4c7daa5f26318c2f52dbd760442753a8a5e2e7ef26c754edb5176237400aa40785346afb7b9d9b2766c85068fb46e307"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x6}})
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r7, 0x11, 0x1, &(0x7f0000000040)=0xffffffff, 0x4)
setsockopt$inet6_udp_encap(r7, 0x11, 0x64, &(0x7f0000000000)=0x6, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f00000008c0)={0x0, 0x80000000, 0x52c2})
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]})
sendmmsg$inet6(r4, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0xd46, @empty}, 0x1c, 0x0, 0x0, 0x0, 0xffffffffffffff5d}}], 0x300, 0x0)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000dc0)={0x8, 0x0, 0x0, 0x1, 0xe, "0062ba7d02000000000000f7ffffff00"})
ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f00000000c0)=0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000140), &(0x7f0000000180)=0x8)

3m30.502943082s ago: executing program 4 (id=56):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0xffffffff, 0x4) (async)
setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f0000000040)=0xffffffff, 0x4)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0x5000, 0xeeee6001, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0x3}, {0xeeef0000, 0x5000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0x3000, 0x1, 0x9, 0x3, 0x4, 0x42, 0xb, 0xff, 0xa, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xb, 0x3, 0x15, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x0, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8000000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0xff, 0x70}, {0x100000, 0x1000, 0xe, 0x5, 0xf, 0x4, 0x1, 0x34, 0x2, 0xb, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0xffff1000, 0x7}, 0x80000031, 0x0, 0x8000000, 0x2024, 0x3, 0x0, 0x1, [0x6800000000000000, 0x4, 0x5e, 0xff]})
close_range(r0, 0xffffffffffffffff, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

3m30.456301573s ago: executing program 4 (id=57):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000040)=0x1, 0x4)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
close(0xffffffffffffffff)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x46})
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0xffffff80, 0x4)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}, 0x200}], 0x1, 0x0, 0x0)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
mknodat$loop(0xffffffffffffffff, &(0x7f0000001280)='./file0\x00', 0xe300, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c)
pipe(&(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={<r7=>0xffffffffffffffff})
ioctl$int_in(r6, 0x5452, &(0x7f0000000100)=0x100000001)
splice(r7, 0x0, r5, 0x0, 0x100000004, 0x0)
sendmmsg$inet6(r4, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48)
sendto$inet6(r4, 0x0, 0x0, 0x10, &(0x7f0000000140)={0xa, 0x4e27, 0x0, @mcast1, 0x946e}, 0x1c)
r8 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r8, &(0x7f0000000240)={0xa, 0xfffe, 0x0, @local, 0x9f0}, 0x1c)
connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0)
ioctl$UI_DEV_CREATE(r2, 0x5501)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

3m29.843045925s ago: executing program 4 (id=75):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x1b, 0x0, &(0x7f0000000000))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f00000001c0)=[@request_death], 0x0, 0x0, 0x0})

3m29.841560455s ago: executing program 4 (id=76):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1)
write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e0000008200000005ae4c1d6250f37824c6a290d084cd249154582f75cdf45411ef4209525b8e04a09f26ba25f4196a2bcc7d3f162218211d1dcebee2d606cec8c19db6f579078935b94b1ced5506"], 0x56)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
chdir(&(0x7f0000000240)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
getdents64(r1, 0x0, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r3, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="24000000000000002900000032000000fe800000000000000000000000000030", @ANYRES32=0x0, @ANYBLOB="0000002074fa3a5930e7f96c4c96e5597fd6d48a21178ddbb0e92106e184cece8c9982f9a87d9baf264922c5f27d16aa7eea5e36be0d4d9560d3ad69a007b3c05759f39c4d903de8f37dafa8f4d139cb56badc2bdfdc750054322f248e19623a63ddff9702cf3fd4ecb4ea07d85758893fa438dd0a64ed144444fffb17d0358fc75c0f44da5e309f6916418f7dccf7ae176942a86118ece367ba37df22a21bd35ac4f2aeb45a9bc149160cae9056e9d7608405c7ac686c29204e8f34c22247fc5077cfccbeb667bada54923f2eeb42e881ac1a4c38853387"], 0x20000}}], 0x1, 0x1)
write(r2, &(0x7f0000000400)="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", 0x1f000)

3m29.786532226s ago: executing program 4 (id=77):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0xe5441000)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000c00)=ANY=[], 0x4fc}}, 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x558af6cc005a28ae, 0x30, 0xffffffffffffffff, 0x5bc4000)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000040)={&(0x7f0000000000)=""/55, 0x37})

3m29.628267909s ago: executing program 4 (id=80):
keyctl$instantiate(0xc, 0x0, 0xfffffffffffffffe, 0x2d, 0x0) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async, rerun: 32)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) (rerun: 32)
unlinkat(r0, &(0x7f0000000040)='.\x00', 0x0) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async, rerun: 64)
mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r1, 0x4) (async, rerun: 64)
rt_sigprocmask(0x0, &(0x7f0000000080)={[0x8]}, 0x0, 0x8)
execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x9, 0x0, 0x0, 0xff, 0x8, 0x0, 0x0, 0xe4}) (async, rerun: 64)
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
fsopen(&(0x7f0000000000)='ext3\x00', 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
execveat$binfmt(r0, 0x0, &(0x7f0000000300)={[&(0x7f0000000180)='fd/3\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000280)='/selinux/policy\x00']}, &(0x7f0000000440)={[&(0x7f0000000340)='./binderfs/binder0\x00', &(0x7f0000000400)='fd/3\x00']}, 0x400) (async)
socket$inet(0x2, 0x3, 0x2)
r2 = socket$inet(0x2, 0x801, 0x0) (async)
r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) (async)
sendto$inet(r2, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) (async)
sendmmsg$inet(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000140)="df6b", 0x2}], 0x1}}], 0x1, 0x4000051) (async, rerun: 64)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async, rerun: 64)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (rerun: 32)

3m29.534527631s ago: executing program 34 (id=80):
keyctl$instantiate(0xc, 0x0, 0xfffffffffffffffe, 0x2d, 0x0) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async, rerun: 32)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) (rerun: 32)
unlinkat(r0, &(0x7f0000000040)='.\x00', 0x0) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) (async, rerun: 64)
mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r1, 0x4) (async, rerun: 64)
rt_sigprocmask(0x0, &(0x7f0000000080)={[0x8]}, 0x0, 0x8)
execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000)
socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x9, 0x0, 0x0, 0xff, 0x8, 0x0, 0x0, 0xe4}) (async, rerun: 64)
socket$inet_udp(0x2, 0x2, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
fsopen(&(0x7f0000000000)='ext3\x00', 0x0) (async)
socket$packet(0x11, 0x2, 0x300) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
execveat$binfmt(r0, 0x0, &(0x7f0000000300)={[&(0x7f0000000180)='fd/3\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000280)='/selinux/policy\x00']}, &(0x7f0000000440)={[&(0x7f0000000340)='./binderfs/binder0\x00', &(0x7f0000000400)='fd/3\x00']}, 0x400) (async)
socket$inet(0x2, 0x3, 0x2)
r2 = socket$inet(0x2, 0x801, 0x0) (async)
r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10) (async)
sendto$inet(r2, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) (async)
sendmmsg$inet(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000140)="df6b", 0x2}], 0x1}}], 0x1, 0x4000051) (async, rerun: 64)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async, rerun: 64)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (rerun: 32)

3.685258749s ago: executing program 1 (id=3828):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000) (async)
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x17, 0x0, &(0x7f0000004480)) (async)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/warn_count', 0x200000, 0x81)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfe000/0x400000)=nil) (async)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000034000/0x400000)=nil)
r2 = socket$inet(0x2, 0x802, 0x1)
connect$inet(r2, &(0x7f0000002780)={0x2, 0x4e24, @loopback}, 0x10) (async)
write(r2, &(0x7f0000000440)="08008edf773c8000", 0x8)
read(r2, &(0x7f0000000100)=""/39, 0x27)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 64)
r3 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) (rerun: 64)
pread64(r3, &(0x7f00000000c0)=""/36, 0xfffffe49, 0x800000000004)
r4 = gettid()
rt_sigqueueinfo(r4, 0x21, &(0x7f0000002d00)={0xfffffffe, 0x0, 0xffffffff})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000640)={<r5=>0x0, <r6=>0x0}, &(0x7f0000000680)=0xc) (async)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000006c0)={0x0, <r7=>0x0, <r8=>0x0}, &(0x7f0000000700)=0xc) (async, rerun: 64)
r9 = socket(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_generic(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x184, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4c, 0xf8, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x31, 0xfb, 0x0, 0x1, [@generic="b5416b2b80f72979594745504f3a0aa6b036f86ce32d83591c6224e53de96804e6172083eaaa90cf56dd042b72"]}]}]}, @nested={0x120, 0x6, 0x0, 0x1, [@nested={0x11c, 0xce, 0x0, 0x1, [@nested={0x118, 0x13e, 0x0, 0x1, [@nested={0x114, 0x55, 0x0, 0x1, [@nested={0x110, 0x61, 0x0, 0x1, [@nested={0x10c, 0x9d, 0x0, 0x1, [@nested={0x106, 0x63, 0x0, 0x1, [@nested={0x99, 0x16, 0x0, 0x1, [@generic="0a5885771e643bb4f2cf1399f9a35aa759241f4897111a3edd19eff75dae07a7d5a8aec4d35c0818e64ae6e0b002c255a038d6d5057a5a1846938cc35a2053d20919e7b90c89c3d96fc6cb3734235e166bb3227b9a6b5efa0722164bb8a588d19ddb8d2b6eb882309a9b59b69868083f6b112f53025eb7ff7c795b4961aceafd71b035e13908fb2abbe10f7b2ba21e759cd4478afd"]}, @typed={0x4, 0xa5}, @nested={0xc, 0x90, 0x0, 0x1, [@typed={0x8, 0x144, 0x0, 0x0, @uid}]}, @nested={0x19, 0x10d, 0x0, 0x1, [@generic="5496c55f4ca81b90c3f359c78c", @nested={0x8, 0x19, 0x0, 0x1, [@nested={0x4, 0x7c}]}]}, @typed={0xc, 0x11c, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0x12e, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x73, 0x0, 0x0, @str='$\'^\x00'}, @generic="67bc0ca816bfd690a5b2bc965f642f86fcbaa1ef938c5fa6678169512216"]}]}]}]}]}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async, rerun: 64)
r10 = fcntl$getown(r0, 0x9) (async, rerun: 64)
r11 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r12=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$netlink(r11, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000200)={0x2c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x2, 0x0, 0x0, @uid=r12}, @nested={0xb, 0x2, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xea}]}]}, 0x2c}], 0x1}, 0xcc000)
r13 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r14=>0x0, <r15=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(0xffffffffffffffff, r15, r15) (async)
r16 = socket(0x2d, 0x80000, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005640)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000005c0)=[{&(0x7f00000001c0)="c4732df863096e766ce729e11e44a2bafa100715ecfc5828b37b2044503d76c73d01393716598f63fdcf3a6e527d959784989d396e751e35b7d5fa169a53b69f984fea5e053e5dd887154078b8f69e8597b6a60e8c8dcf0d3e57a17a1188f97e96ca6148ad0ccf8bc49ae9da8d9698ce68e0de8f866dee5691aff990e3cd50af7793564f64b6449e063a72effd408f4d79291399ff9bf9f3a09573587d662ed3a7d48da0f0f0abf30bf5d9b6b7012822f75dc2c5c532929257e73a474315ae1eb2cc4004be4128ef55635dac5c8c0565a3a7d22de1ee1f32df96286605bb29921546dab78de85ffb719252", 0xeb}, {&(0x7f00000002c0)="94d8bad20a7525a62f03bcb75ce89d90b781b12759d430a2a8bdda240356d3d690f58c92f82905cdb8596e26c7d9c818a1f013193574c880761e2e76476fe00d6ba8338301f13e49901f3b1af31efdb863da2e", 0x53}, {&(0x7f0000000340)="fcf15c7063bd93b7989ea73f102793cc730e838c7ae13a854dd57db19ceeb42ea70cd6", 0x23}, {&(0x7f0000000380)='g', 0x1}, {&(0x7f00000003c0)="b09c5d55449e2157b6b537b9bd532f38a176b7a59388317dd12281ef14f1793d459792d88ccd81f84bfa4ce678ecfb34fb4a252ebd14850b69b96bb812482aeda1c468440a333d6d3f054bd4fa", 0x4d}, {&(0x7f0000000480)="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", 0xfa}, {&(0x7f0000000580)="23d0246c378fca8db7400cf804a034ae87c0d2c9a8c5be80ad7419af56fb6b9875788f6123d4ef1fd78a299a1f4bac21cb2434", 0x33}, {&(0x7f0000001180)="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", 0x1000}], 0x8, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {r4, r6, r8}}}, @rights={{0x30, 0x1, 0x1, [r3, r1, 0xffffffffffffffff, 0xffffffffffffffff, r9, 0xffffffffffffffff, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {r10, r12, r15}}}, @rights={{0x18, 0x1, 0x1, [r3, r1]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r16, 0xffffffffffffffff]}}], 0xa8, 0x8800}}, {{&(0x7f0000000800)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000d80)=[{&(0x7f0000000880)="f2f629bbbb24e7435c02141a16a7d81fdfc9a2ed0ce8228d725f48c0def22d9bad28bdda9915d2f4f13c0eeb30db774834d1c077c982f08f79640faa55b077aca6fe1cc63c545f21", 0x48}, {&(0x7f0000000900)="59ef4725469df7fc1bfa1fa91f66e0ca2133b82d483afba13df37e47e97bc442ac2fcc45facfb749efb9d8a5c1d1299fe6037532836747feceddfba77e48262194f57ed518fffe7ed21aeaac1096f5e09d48b4bb0e81a1f2e1abd2a539a73afa77edc9c07de97be5e714965165885cfb1be56106139afb4a44f97772f1e0de1c73c630b4c3baae9fc6789f13f4033878ea8b7215254d2c0550c8cdd4ce9c69b4617be74852a0662e510b4b26c5e9e4e22ee14ea1af0c915795ecf06326010b583686d359f33a90d40bd38072b2b62fc47c8edcbd6918dbb34e06ea26cc9d993ea5851c801e41", 0xe6}, {&(0x7f0000000a00)="805c3e743bdcb0ecb26363f6bf013edb9fcb2396cb87fa119595b39c743181badbdcba8376734f208a302a492363b4cbd8ce818ab5b93ab2ca41e45f1bd35ad8871c3bfa48097c2747beb279fd6b8b4ed1928431cd4d9f56039d3b1eb0304425ca644f97052514e20860b180d98338d3ee9209e5c81af39970fbb1b68da72e05b7633e2d1b238d8aab31b48a0db874e8f514bd6330d4ee3c80b8d9ea54bef92a74fbbabe8007410328a89e1f5038928ac398a013532a72", 0xb7}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)="7ef9a8db7af7732dd280f13b31294256f1445f8d129cb061580feb91ab7a21c0b0515697c20bef05c947eafad1a6c5a91798688c6dfb62f9ad5cd31a28a8fc81ef5b5196c840728406cbd014ad0fd150b727053eefd157ea92b2dfa51790f01742fff1b4dc507f7f28c8af10eadda6929ded3cdfc32016858a8e65c7634f0913c651c0b3fb5cf3e9fd7a19a5f8dc9288d9adf4ee5a102c3757f4ac02be07e74abee255d0c122fd96dcf8f4067a49e11cccf7817a2a85422aeb7e03292da74e78d59f33f398b16fc6923c27519d43ebb22fe42283fe4dbaf15ecfbd57f02c844157a72ec09ad68f8cd0baf2b2b33c4031", 0xf0}, {&(0x7f0000000c40)="261b7a03e4a19c3782fec19d1dcf0bac7470a9370933c8bb8f51c61718e360a47a81b39fae27496dbafbaf13bd3bd958f5de77240d5d74f54c97be151d0af54bce0ab4ebcd213d0e1baf94607348dd11089f61fe9a7297e746304ef5298740241f6a96dcdc396746b75c00b0387e09335065b5bb3cccc1932e46c69d826fd8ece11802528bd75f4e836ade183667a8c0bd5175d6464a071d4285cc67e4c71457abdac7fa8c28a3ff3525171d9f21902d502dce4c09e844a70f66b4c6e889998120f457ed8490ee8e8aba17bd139d87d35d34adfcb67a", 0xd6}, {&(0x7f0000000d40)="5477cbb22ca07701742266290044066836fd5fbf0d076c3fbff996c46e85167c096a29efcca579c145cca3dd2c26be8feed1ec", 0x33}], 0x7, &(0x7f0000000e40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r11]}}], 0x20}}, {{&(0x7f0000000e80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002380)=[{&(0x7f0000000f00)="1635694788c834f30f2465b7b9cfe59906d3a1a9a8b3b4290d4c2e9fdba73f7423301c9e16dec4af5c2aa278e19e56a27dde9645ed1517134cb8533fa967874ed4c670aeec08071bd3c25a1f2a2f872fcfcf342eb9b46f83a21d2146eb824d574018ab20eb4d4c0057f8b8ac44f767d5c726ce1c2285b9dfbcc8e9bfa057cc09e87a4d5d7174d7164d40fe786860a95a01da67967d4b338645e0d36c835d8a9103ec54735e670c64a31aeaff45c885386c01f6c650eb31edb91a88d583f1b5e7d122763ae3426280d5202d39d9d0eeb969f8f283", 0xd4}, {&(0x7f0000001000)="6ca7fcadd13f83f670c0899692f0ed1b038e251fd5fa2cbb83a36a6c175673a02d92f90ae5cbf3c7147360e5694443ce78b3ee4da8ea66b46562ec5b84c28cadd68f46a7637857edb4a4b3471153e0bce7f1c8db8065f2bf22d5c7ab9e52b68decf8cae59e27f45c927bd6d474bd112374874104ebfebe8492431f947a63d8d52958e1dd0ab48ba3d00de0d8d48fb84ee11b89635194e1abd598643716b7c82986689eb014adf530e5defa7733d1ddc186a150f630863dd93be1d45b6660c3ffaf759cc3695780971103c298b90b54917d8d62235938eb4252a55b982f", 0xdd}, {&(0x7f0000002180)="3408a34f0f166368a7c89a5123959cf51931602aef8a49d93e8152426a92d0c7f36f63abe75096e38c403c552630bd6f5878b03001480a352211388a0bb557171c48948e55d359ebc88b0fa92b10ec380fb3a976144ff5e293b9ec212a35e820fa9f727e3b7ad6d82addba27d13742b4a65933dedbe1137943579ef2c567c432bab5297e1c88bab1060bedd0644d2178c99eed6a5524e4c08eb7494388b5650a1f0e7cef2a6d10939ac7ac671c4398cce44dbe9997d99924a9a3ae8a808743e25b2e49293ff8d455cf05b4034ef57b7786b10a1691b30397adc4743f6449e8f10d3ef48f9f970d8cae015183486e68dfd371d0bb", 0xf4}, {&(0x7f0000002280)="b066e038f0516d7bd8339bafa80edb8543836b517b837c88594c2dc04f94077d382fce97b674a84e7cb1e11b20cb465653c1b9cfb0b3de69e714336ddc1347faf1e466a7d3d3716443b4384c1cb45fd39b390f66ace973c1bcbb363293d31e589258ca81d6f91741daf12a3b7ef90504dcb4b53027046d9868f61bccab570b68904122cf3de88914af5ba307051d5fd8843accee30e3b383c8c0dfd4ff7948443d5470780427d8ee4f0bc3a9d23548ebf834ee9cb287cb84ddbd0e5b25d9912175f587233129a9f06e5b2bf52112efc64dc95debc0dd61432bd3230ac98f32", 0xdf}, {&(0x7f0000001100)="97b05255058267705197a93d860f95128398e8fd766d5d794f43df8d5e1c9fcfce95cce621449138b54eda", 0x2b}], 0x5, &(0x7f0000002400)=[@cred={{0x1c, 0x1, 0x2, {0x0, r14, r8}}}], 0x20, 0x8801}}, {{&(0x7f0000002440)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002700)=[{&(0x7f0000002d80)="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", 0x1000}, {&(0x7f00000044c0)="fe8c6572d15781ead7563342154f7f865e1235251a637bd59a273830dd9bb0ebe1b6f835c5d3ccb3441b627b6abb02c8de5496def485f9cf194ca7912827c3621217514672c1eccf30c6ed607ae9112c6bb76223919224c22c8cfdc990d77f1f2da1aaec994036d2ff454d119ebed10d6da63b7e264506673ea7068dee51afb7ddc65532c60df926eb871803868ee9ca09743e390e811e172fede1297bb0c770831053e541ca9ec56a2ab84f303c749ef90119910e1db80dae6dff4d8137299b4747d0a3053b0b075bfc09e7f45e4876fb52f4613cb8710326bcae37ef59bce2272047adb5611fc3abc078d37daad4773e83067aab0c0d1526e9da4c473b58233fade8e4987b6c31d58fcc81dfd43eece4c134224a077dc1d4fd8033b59f25d40119f1a00608fe05a512f18fd6e8a61901ad2795dcb41aaeac98e84973530a948cd871ee643328ae5ee8be2cb28dd84ba1c5b3c22b9899aba7f850017469259defe25a2d834fa9f0d3eef3e7c38dc7a1564a536207aa3619c0ae2c53210bf395c3c157d27041e68da0eb928dad21d98476f12db91c2272b30f52f24a850597eb450b4979bd4a6f57b14fb30c35cd4da2bbb3e996730dfc662313c5a2bb2fabe7b2144bb81cb70fd22826657debe39ce25bb1739f3018b9cf98e6588cb2b983c81aab4a47d8fb31ef761b2728877121b2f63ee24164d281d940b107ab829a55cd1eba0605e500f1e275eaada9662f092472aa133b466de7d908e7f78c48068a89970a28f40fbf566a0dd5cb04b4a0b86f4b250f67b3237e2020693e24f77e5361319aaf9ad29082741fcd6c4cb692a0f91429e11621e933bc1d864b6efa8ebad7d806378519ac837001da3a6550f4f083b024087590fe2443180c1fd1837378a8574f7f1936d35d7b34222a970f24d4d1e9599f4b576a11ffd9477dbab47083ec9bc8379f7b09f2a279fcb36d33973202a3a82edb0ce20c9ce4ae1944e3b4ec7b43659f83d7aae0fcac712463608c3c198eee9272fd231f4d792eb354ce9b9a7aa8b1e339ac2a3ea456b0e9df1a9c838c3c59e559c9f71360dd5744a3d94ee2a5c34923240b0297eb03f90137e7f6394fcf384c14239d0ea04f74372ee190cb506c434e1976527542d512cfecea917c85db8c6c65ad81c37d27bb0dbb5e7082e09093d2c4c8d3e629e0983dbbceccf691e438145ba6dfa5a85df91ab4880fb5e0a7fc0d7a918e1b084bea072b43387a9e990c29818c966e586d810df00475c8f29da1c50e7d8f03c9560a9bf5b9298d79557ee45ccd50820a131d6c9dea19b861aa5a48037f7f196fe798742f488dbc24b14f8b623814b4999bcafe28d6593521e5fed5b12ab5d3e08bd796dcd1aa5643c596c8a72d0dc3a0abd9c5466f5321ffdae6c003b3e4b0c0380bbb6075a81f116bd56a005b1fdd4df749fb6ee5b187c99786d2a3a3384ec4b090637a7026f09d58ace097320769bbffc89bbc6692deeb631bf169cc326f36c6b5f122127d722601dfe27f312f210d292e9e81a56d59963126d34460de7039994ee4942c7f23791f73d4379749ac27dbe743bf552499154cea3efa5c98c21a920ba381e39133288bba3753e7786724f043765031cdc211a9c1003841e3017c2d3986c190bde51417ac097932fbaf2333942e93740c8abe140518b7ec4fc4a1d8806a22308b13cd8a8b716aedb33c37f632066ebe0264942be8d4a50fbc85b673d62f4e1cc7dde546ed7365b04ff9ecedaaa81a504952ad9345b0fe7a8b88f7c2d570d46a43250b597932176dc5e38907b6c670d1f994badaa275e60a4dc2574aabb62e0517b42b71c661df85b0d53373c9d4462f5da13403f830b7411203162d232cfb49a3ab6dd9f58def8cec7fe9657a09c0bdacf71bd7e5198fa96fd478be120db81d29f996f0167f9c3b733f4d91def1bde20e25e6c34397df3a2f35af20dc1f2bb68f73694e98ff61976b39118fc9398411afe29f6bd9d3ada55cbb3c36c03060e1ae539d9d1526aeb9046129373bf4e432139e75a7ea71d14c182590bc704ffd5f6a9e6ff72961bf9791f8229bf234f331e56bbac9970502f809bc8821fe5e49a738a1fea0556a613b7e14f33881c634c4e5ba7a870bfcf0f5b41950f6889f6244ddc3a82c77a17d4ffd959c152e735bed23a5cf66a17db2978734ca217be60efd8d1e460a6505aefabfe65d2148d38d883a39992946788c955991600a0aa6a6f085a066cbcb9f5dc504b2aeeff2699c4f6aa286539af941d33cacb8f420da7f68dcbe63f142e675af87bdccc1b980f26aa5f3911cc3ba22d58a38efdef45862e3d3ac7e93a3dac9e7a3eb3478bb9986be947ad7843f01cb9407a200c781ec4b0283d5e47f4e5805dcc769e46bd441d6cd3b4584c4715a878c2a3efa781ccf2164558cbde87c21091bf94000770030a522f880ea593523be5859ab8a2e3e731885650df77401ebed7b5f2dadcb974e8f16694a4bc0a18dab443dfa422cbe4357f2aaf9d12790842eeca5d84de5241b136ecf9cd7ad452f8dcd149e6d1c8051a4e600f02f5bd70b6b65d4be2bfd28eaa41162224a2ede0a156a80755a345197f055652080869cac28db8f457e0bb325f7f0433333ab7bca1ae94efc748460c6d4e07476fb0086b16606b6c6b46fbb91ac79fd9799056628f0c271df077778e8860a1ed165587ea23fd3aabdacb9b33b87bf8507af76c35a1bdbeaba1858a5b7e2296a0254cc122e8eb714f0077ad141aaf8fa9fadca98de0274b14027f7788d5f00c7d1359b430d96facc78cfd96ad9b22f893b4f00805b5b3951a960dd972ce6359562ce835897ba29916b3b5467c384c7680579d048af9149379c636dfcf82f3d6907e861e74f47b0a567327d20a3756a9020a1bb9962d147123594bd35227a7e0d3e94010f04c61ec53739605174838952babac661d90374215cdf295b7191dcb261c39f994046937f73aedbfb865bd50fe0a78b838da2dcf5df3b06aa1569d5b3eb5fab4cf81a187eea12a3f8bbb3f78543dc9d7d3849ed3b81e83055c98f3a9743a1ff0b1523b0a9cf014f4b0670c143b8faabd00a3799640bc8b760592c0c60ecd27b1621201f8d99a90ac241064dccf056eec65401cb64cde5275550aa87b75d90f0b00d8d89327d02e1786af705f359eef85566e32133bb57c431ccbd85db07cef2db4943ff2585211b761dea7baf6de70e85232bc2cb9232bc40b3c6089d4c85c7294e8c58b31c0737afd2c56b82eecb59bb6edc72eea0df4e4d4107caf74e091ddda27eca8713ad95eedb4473fff897c924cd5c20ca4f6578d469f9e897492fbbb24e5463a2cf287677eb88fa27fe21652d4484848ec19f6d1e527906cee0083810b17a47b442c46022be8438718b99a4dbdac62eb6ec0792f49ca1b4e7b49fb3a8e99e1dac667e101af9daf25ce1728009207fa325040452e63b5bd6e1c33f9658f8e6c6dee2167cdc58496f4094984d45310a6e1b021e09d196217ac3c8f0dca02c5ab791183ca0b901caa81e5063f719a1d0ff6839f47ac9fe7516d658b26d9a95398ededf750affb98c438c8a7e914df6252db93ddec6d25947547d0439f93c13db40b3d20d03feebacc0a84b161da62bc23d98db137fc40fd38d3cb88a0e675269a8ebbe794928ff719005464f897939dccf73e7f044c1d410d9d5cd7cef61dff6ee8b05a4cd3c593061ee111a786a43988cff053c246fa729f2010f5f08b475f42aebc03fc01094bd0a26709ca19ae2f98c7c4900fa829d3c9276058ca8a9a1f98b65f04d58077826f46ea17b008dac5ec07a8b8fda81abd68d5320810bc050b4fe16d4e0ffd942106ab6894fc224fbd5dba61ae9c192452dfd5b9f40e5465f4a89592da616c4858da6bea0656e14ea1a96397a48916a483c61ebc04f6e0c3c527ace69893f8039c0b8ced1048278d12e9d9aa796d6632bc6ec2f5e0595b36d16b2c76348a008d8a71345d3f3004d3ede3f0d98fa6254a872641e383bc72b33b5f5ba9abc8beabc14c7e72bb0df754a739c644282ab16e5844d98d4382ad2bc39015595036762ab4fbf46bddb01138da1c181bec2e5810261cdae73d943c6f69c4ca8063debf73412ace0cd681a7691e7e3cbca0e8c02175eb4582f8d7a4418ad809f29dfeed5c6113b8a0ecfb07506c1c3dbcb6921c20061bd3d9e5c2d4ee20f008fa20207c609a5fd8b7485ae5045d442c0b641ff525248df4bbfc260749e428a1e6b7a0b7f177e9f88f4441bbf0c8e017660c09bb26639755a5d530e58b307c6fcb88a628b443a98435e41598f8ce0777fd2bc707bdb10a27c0e685d7b5f980d80b023732ead9a0680c7ac4bc7bddc32b5e56d1a3629536adb36af932ca8f670584939b3641e5091b581305469fc321e2eae15868a5fd2eb1f99994a75aed9527bda4c8264a22911d816658621f7eaf33f335cd5c1a900ccc480b61815efcd54948ec1c0d02dc30918c5917f6f89333528bb8602facbc24f646adbd06de039d3a24414368c73a864fba7b807b420e82068906da1c2e5a0e70906fd31906bf44dc97f98a57af2624fcf5716c771e76e0f06cbc771aeeffba70ceb7d3a234570c002007651930f5c6f50e8605c426d2abed41e65fda9bca9f4a4159cedbcb898f3f1c3b9c713d85aa816d65de1bbb67382528c930c0d61d28db9c56901aa448af74c5fd296b38c46c72cccd08c58503b3e276972b6b95baaf5a5c0acf3ab114735605bfc329fc4cf110a41a4c47d473e2feba0dba3fba0803c5105f03c91bb770187b7ee95c04a18a1bd241b111ca44c73f912b0b0ad2b8e5870deac19f438aab25687d364ae68bd45a0b7800456f42fdbed8ef116684292e142548dbdb2257eedd0e54671bf0f92a97a144a511be07c9e1525f02a1c10c1413833d28bc3ed213db66bf8cf4d11a5e7a4e50811be312d750b8c6519a8dcc011c3a89bdcbe0e33161544b6bfa6c09cdc747506f4cb0b283b8b118d7869f2c4b59ede62a475f0eec9e8b30c3ac4baf8340274c612f37e7c73bf5be47bc8749698467304acc3cab7022454935916b35e5e023e73ba477e864bad8d5e24e9fb6b9186ee2c452a9bdb59a9a275f1cd37fa33eae9dc6bff3912bd9620f6ae99d8392a6e5e4ffd77850e3be7760266e83639c49a925e80c97233f6d344286971d0ec94af25829770b5b1cc241d85de5d48310f201c2a73d6d06a5f97c4a10a8d01d2997c4f4badac4c65872427415635b9d3476372a9f6b9e543ac9ce66bd0d092fbb243145fc0fff432f87862a755cd452299589ebaf482aee060701241b9794dde69685afd1d018c86c104cd4c36476be6d9d654280b65f1435bd19c47b18a680f0047504573d405decb809f4819ec1256bf5d56e516c45e10565a5655ce1f64a1013a00a5567de8cb45f357005e6e2bc465ef5c3b769331dabecdecc64249125a6b497f7996ffb73f894b24dff134466bbc79e64a6fb3545aaf770fa01eae762c9f4886d79824972d048050e80986f3805001cc3f0ab4eb0860c87a8210c8bbc4f389049408c454697f55a6dadbf5b797186180b1dbe7abf4d93596d33e39083ed7d0cc0fd5851e06cabb94f641ce5d13ddda2014c8f5eb7b502700cb3df6b5f6254c54af3bb230e6cb648a7b2b1be933b8d65e257c644b682c0a281355805b9e927804b7ae2c2d6037e84477f02136937e20e95f54123067744ff5e3b578d94c282d6311da30e3df1440180d06c01c128a1592a1615350a3f4f070ca652aae538ff32fe1a903e59bc7c25226a2e0c44c45e74312", 0x1000}, {&(0x7f00000024c0)="5ed6d25870a83a2e3c870e8b38f984c647f00284ab6c02e5eecfe04f7445a227f2ca9bd99d48e3f9fb099adc8bc05fa11e4263834964d9a6ab2f130f98ca16a00bec5f64ccb07e1c8bc6c3057803d56bed2cb55bd499c32719c632fdbfdb874b9f170db3cac3d761491e068dc5db76c3059e7cab88a176333b28c1ac380f0f97db9cebb24290190888823c291e8c4e042663c62a66b374307a91b8abd479ade627ba0f8cf4edfb087ee3", 0xaa}, {&(0x7f0000002580)="963116188c4a9006709db16bbeaea2788e7f968cf8fb8a4e05f2f4cf0fce6c970ba077b88c9b914b196f4c21b09bd65acbc0738f7cfaabe9de98bcce559e7552a15586491b5698c697aa4c47ac2dae236457e4460cda030b9fefbf2eb4a0e56113f00f6c62a41e8eb814200712dc36969debc822198c493535d511e6362026c3484a80f37369e3f28a5b3ab858607ff34f1e70f87998b85268c97ba8e630b96516b3e2e6fe4460c33adc42827b22ff7c0c34af2aba197b9d1dac1e926346ab94be93c7d4eb3beca5ff09421dc30451fd7830d0737cad1cca3617a2d283af98455da73d9b5bedd3bbc98399588a4e7c34d2775665ee", 0xf5}, {&(0x7f0000002680)="2e6f382304964cb499cd16657c60ea68eaa59321df648f34dd4226ef4e221ecf3f79db893c8bbe77fdac8661488cf2cb1d6305d2a930e3348cf7", 0x3a}, {&(0x7f00000027c0)="8c66cf42cf65726d044b110cfca63ff40776d704c7cc74a5b4c3f2b7edbdb3534469ed46f349dec0b0e45d4f91b71b2e5151f32cd6833e4f9dff3973445883bb5887d3079260493476ee11c680cadc62319a50f551e79bfcc8c1881799ee74e4e434481c38afc9ac884228f735ba37bacbbf5b332d15c08f29421deec112b9b857b509fd6818ca90075bf800d37c9f2d3fc4e8a0039aee73b3baf036e685916fc4d83589f8054bb8a08f125c1a4f13d600f680a3dcc3d1e69348635cfdb22afbc0b9843ae60f601c90c77f093e64831a4ab1e3fe5588ff560155283be46c2d", 0xdf}, {&(0x7f00000026c0)="ae3f4cefb1286c2a6baaa147c46bf9aabf4573b4044ae9c4ce879487224cface82e426eb870ed34f6f8391", 0x2b}], 0x7, &(0x7f0000002900)=[@rights={{0x1c, 0x1, 0x1, [r3, r1, r3]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r12, r8}}}, @rights={{0x14, 0x1, 0x1, [r16]}}], 0x58, 0x4040001}}, {{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000002980)="e209cb7caacbf369805bf75aaba680db7cc711bdd65f4bf25bca61748a560efd2d745dd7e66d1d1e702aa6c79df9e3c9f5952c7774fabdb1ead10e9a76033ab6d9f9fb53b76290c3b05dac3793df31cd12c8ab8f525f4a1e84a9019ff95e173ee4b16e5b83f3607d688b831b0cd4b3b9681f9c96e8cf8f1de8ec46019513bb02b958695fd52ab8826ab2b67a6aa39c7b14c37187c3e0d7e74638b3e22e", 0x9d}, {&(0x7f0000002a40)="30e31020b697067e7e75d68b0721e7daf60d5dd84522897b964e8d76cc7391d5589fc139e9e609662e2513e233889c4abc536c1cb48a5367819b944cda261e6347673b0984bdb9ebf350c4f0f0c203f6b3dc72861ce570a8c62015301ddcb67879054e4de51f3fb426c5f1fd64d2509b51364e356af0be3d48400bdbb8fb3837f7aa1863b10336ce30aa6861adfe9a6681e9cce5aaedff7e67a5a194d8647aaea658c7c6c76a4ca54de799d0228d9c292bbddd2f9bd49b3f8d5de5ee608b15eb04cc946b", 0xc4}, {&(0x7f0000002b40)="5fdf13d244bce72029f89d082364815c7847f992de130da73059965e617e89d32a0c5c9f00f2cbf94194291c41945e22bdce2253468cc6bdeb8eebc3680867bc9ab92ccbfc468b1f28ef2ba3c9a5f07e15de9b059e0a115f4c5d11580fbb4478127bec4fe29e0857fe03cbcfece82932f91856923d4ddd29e30e284d17dbf9fe086bcb85581a61baa68694610a", 0x8d}, {&(0x7f0000002c00)="a5730224135f7353217641e666a16058b99ff039eff5dccfd9d9c8864ab1b92c856479c49b57889f55e64f1a9910f6e91d45d5a2344e95e257e70e63b8b99825dc623d669d6d87e9974ba1367086ed41b38f4cb1714eaa9f8bf57d67e13eaf1c6ce28759b533002b7e33f63a87fa8e3d1b9b84b89195e06691b2168a6bca3578e92941875d9acae54e9d5574ef91819fcca3edc12fd7f7d69dc5850dd35b3c3abdfb1af615032d82d33a8f7cd3a42522d31b7a59e725bd93cfb43a7b16c752864143baccc45a5dca03da5d8627bc056de6a162b61272becac86bfaa740de4a6161fec1ee", 0xe4}, {&(0x7f0000003d80)="0b11576d2ba516a0ab9cacced0fce1ea593da780b010f8b3e144401faeb4799026eb8996b417a293e7621b4a8d2b34464d492ed41a2b882bdcef072c67066286b228799a027030bb205bab785bf724f4d25ca9526cce23645d", 0x59}, {&(0x7f00000057c0)="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"/425, 0x1a9}, {&(0x7f0000003f00)="a8c6fe21e8973d9492ab5a86e3d56f013d57dc570e050fba85b6f34987ea9a63", 0x20}], 0x7, &(0x7f0000003fc0), 0x0, 0x20040019}}, {{&(0x7f0000004000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000054c0)=[{&(0x7f0000004080)="8dc9b292f5dd5a24c9b3aeb035f80d9472ab1edefbe1178e7d062d04c8bcf66fdd4627d882cccf1a3c9b61d6115bfedbaf056f25ff6da08333", 0x39}, {&(0x7f00000040c0)="66e7f92e10bd44cd7d096edac10d1e448e5323b6d04433dd9bfa5e6e8b845914c30ffd4a1e19cd1e89a4cc9eb9a6e55a0034e993fe9bd9cd5caf27b36f9b143edba7dc72995392c9241815d2126c47e522a2a16318c1f5b7b3a96c9db763046f7089b3b3c60e33c3d52fb64753e5260c7af418e63b1b566e8a21a381b00bfef690553dd076520a9d93739d541c5f76074928b5335a56075dfea602c7c120d1633c18ca3c045f1acbdc231eee9e8b46006007823a97942e8b7e61340762fba966ace8e4f2abcc04009d147337d03838bd3441a77d6ed417fcc0c9f786ad", 0xdd}, {&(0x7f00000041c0)="b7615f14f7f95e465896e388bf392788b04018ee93d1188381d5399d3ea0f9cb90ea7c7b361cfd99e3238588f9a758ac0a8d154f8e813ce0413b31c130b7a3261834d0f205d5674c6ddfc5ab6f0ae99c469795bbd2a1b54ad20ad0721672726bb6a7955920cdb337092729632270a0bdd26d4a12cecf85f9008f5334aea46b4e5767253cf76b6772ae40f640da5f448d140574cc556664e155ededceef92", 0x9e}, {&(0x7f0000004280)="7b5dd35876c4ef0bd3c6091c05bd644ba654c67df1d8cc3e76f488fc34de2be87d697f5274442bbcc902299173944020dadaabedf4faba0650d2dff2d7", 0x3d}, {&(0x7f00000042c0)="601ce0fd356a15b3e94aed7f174844d8b804d93245851917ca73cd40f1e1febb552a3fba0367c35747adcdf5ae32e77a0f706523b27e1439a21dcd2323ed5f3aedf6c2c3e1a9fa08783f81665f0cc201ce1cb8594b307c5703512bd953c050c65bc6a219411332bd9b5ffb75df68d91f26c9429d23b4632d856d42b29d0fb2593d077201f9793817a2250c0e774984c6b583445f90f2b3a4aaab5d38b64d07a5cc9c5acf129c02026f6a1441cde8faa27a1ef5802b48026c0cae82c5347308", 0xbf}, {&(0x7f0000004380)="92e62384ed85218ca775d5ed4c0b260f5c6f3143219f328736a53143990b2719ee190fbafde5534807f4441a00ce89e08241472cf8d52867b98c96e304c9d48da0b920b8d0e9bc9825c519e363b5d846", 0x50}, {&(0x7f0000004400)="a4f437576afaf87e0dd99915897a2b3ce2188cb41f902db7f82b2670888596c26066695a0f6fedc7116f00454b75c53d7e5b385891bb5969234e67bd288e56f16c285b3d7fa27c0fc6b9abe6c1c8855d4cce90cb", 0x54}], 0x7, &(0x7f00000055c0)=[@cred={{0x1c, 0x1, 0x2, {r5, r7, r15}}}, @rights={{0x18, 0x1, 0x1, [r3, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r1, r9, r13, r3, r11, 0xffffffffffffffff, r3]}}], 0x68, 0x20000000}}], 0x6, 0x0)

3.61471622s ago: executing program 1 (id=3829):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x800455c9, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup3(r2, r3, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x29, 0x0, &(0x7f0000001380))
getsockopt$MRT6(r4, 0x29, 0xd0, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

3.61447502s ago: executing program 1 (id=3830):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x20048000)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
writev(r1, &(0x7f0000000240)=[{&(0x7f00000020c0)="bbf73d0c1e2044a11659f21eff48036983349dc43874210e104912bffb8f598101112dcc8dcf8700a489490d63", 0x2d}], 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000280)={{<r2=>0x0, 0xffffffffffffffff, 0x5, 0x746, 0x12, 0x5, 0x3ff, 0x0, 0x200, 0x774, 0x9, 0xeb, 0x0, 0x2, 0x2}})
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000003100)={{r2, 0xe, 0x1bd25ab3, 0x9, 0x9, 0x0, 0x1, 0x5, 0xe99f, 0x8, 0xf, 0x1, 0x8, 0x5, 0x8}})

3.11450994s ago: executing program 5 (id=3832):
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="20189fbd"], 0x14}, 0x1, 0x0, 0x0, 0x4040004}, 0x8001)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffc, 0x0, 0x0, 0x10, "0062ba5d8200"})
r1 = syz_open_pts(r0, 0x20800)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x5)

2.981449243s ago: executing program 5 (id=3836):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2c, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @empty, 0x2}, 0x1c)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x202}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100), 0x4)

2.961197103s ago: executing program 5 (id=3837):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x90, 0x0, &(0x7f00000001c0)=[@decrefs={0x40046307, 0x3}, @exit_looper, @enter_looper, @increfs_done={0x40106308, 0x1}, @request_death={0x400c630e, 0x1}, @clear_death={0x400c630f, 0x2}, @acquire={0x40046305, 0x1}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@flat=@handle={0x73682a85, 0x100a}, @flat=@binder={0x73622a85, 0x1001, 0x2}, @fda={0x66646185, 0x4, 0x1, 0x15}}, &(0x7f00000000c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$TIOCCONS(0xffffffffffffffff, 0x541d)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f00000004c0)=[@request_death, @release], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f00000004c0)=[@request_death, @release], 0x0, 0x0, 0x0})

2.774945857s ago: executing program 5 (id=3842):
r0 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000340)='cgroup.stat\x00', 0x300, 0x0)
read$eventfd(r2, &(0x7f0000000340), 0x8)
r3 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_debug_messages', 0x0, 0x80)
r5 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x10800)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r4, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x4]}})
ioctl$BLKRRPART(r3, 0x125f, 0x0)

2.773108117s ago: executing program 5 (id=3843):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
sendmmsg$sock(r1, &(0x7f0000006c40)=[{{&(0x7f0000000100)=@generic={0x1e, "434d8dbde5bce8a39d593b8aac53df179b6d0924d1a67720190ffd67fb2a9edb2ac144f29a7c4df349b2f6c8d3d63c7338ad0248dd321d474c27b492cec44457395c5e307f4319a0b44107779d57e4036f92e9e21f0e028cacf42f3fd8f61531e6c92ca7d587a8f5649d6dd349568f4b1020340a74ce5722995fbc217a80"}, 0x80, 0x0}}], 0x1, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3) (async)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) (async, rerun: 64)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2<Z l\xdfDh\xa1\x99Bj<\r\x87\xa3\xd1?$\x8b\x02\x00\x00\x00h\x1b\x01\x00\x00\x00\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[<Y4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v<H\x8cmD\x8e\x9e\x18\xf7\xac\xa5\x17\x89\xc6\x88\x86\xe9\x15\x87WV\xfbF\xb1\x1fo\x85t\xf1\r\x8a\x9c\xe8\xac^\x19cp\xcceJ\xa6\x0e_\aE\bZ\x9f\xfa\xdf$\xad\xf0\xa5E\xeb\xd6\x80\xb7 \rd\xcc\x92\b\x01\x1bG\xb4su\x90\xcfs\x18LQ\x81^\x17\x80\xca\xdc\xe2\xb3\x01\x85\xa4r\x87G\xb8\x92\xdaJt\xa2g\xb7Azy+\x8f\xee\xb9\xa9\xa6\x04\xd1a\xca1~\x03\xbc\x87\xd1\xbaY\xf3\x8ai\xff[\xde\xde\xc6\xb1\xb9T{\xe2>\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') (async, rerun: 64)
setuid(0xee01) (async)
close_range(r0, r0, 0x0)

2.756581277s ago: executing program 1 (id=3831):
r0 = socket$packet(0x11, 0x3, 0x300)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x45833af92e4bbbfe, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001040)={'sit0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x8000, 0x1, 0x7, 0x0, {{0x5, 0x4, 0x3, 0x31, 0x14, 0x68, 0x0, 0x8b, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}})
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000200)=0x8)
ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000100)=0x2000004)
pwritev(r5, &(0x7f00000002c0)=[{&(0x7f0000000300)="00214717a7070000000003060000000000000000aaa6", 0x16}], 0x1, 0x73a, 0x1)
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x7, 0x100000000, 0x0, 0x7dd, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0)
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x4, 0x5, 0x2, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000000, 0x0, 0x3346c4e8, 0x0, 0xffffffffffffffff, 0x6, 0x967], 0x0, 0x41901})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
mount(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x200000, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', <r7=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
read$FUSE(r8, &(0x7f00000021c0)={0x2020}, 0x2020)

2.700803038s ago: executing program 5 (id=3845):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa)
r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x19, 0x9c, 0x4f, 0x20, 0x7c9, 0xe, 0x5d4f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xd6, 0x2, 0x2, 0xff, 0xff, 0x0, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x10}}]}}]}}]}}, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000240)="390000001300034700ab65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x44000, 0x0)
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$sierra_net(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000140)={0x40, 0x0, 0xa8, "a84f70ecba4cb059eb2bc37ae2b2517656ac71d42fcf991ffe774a06c8d3fd55f3bb0d328a46279a6b67fe61dd2bf22d4de9c9de41256ea640503cdcf7f5bf7f768ee27f26f9ecbe3300d600eb1b655a6254fdee1d4faec257a0fea309fc8724aa3e51ea771f9fafee96ed173238b30527ad45c8a0872f5b482c613fb3ec4aac498fe028b06be33a15c3306103458090de4b9f12456e7ef78a7118c223d08f2d467b0767cb487c90"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r1, &(0x7f0000000240)={0x14, &(0x7f00000000c0)={0x20, 0x21, 0xf0, {0xf0, 0x22, "f1d93dec7056b66610353a80a09951efd439f6b6243ef2d333db198d6bd83a2f6c5d648ed4e9f4e80eeeaf4b0584ce3f26132dd01ebe355505a4e031babe7dc52464a58872b204fced94c9842fe501100b0961a9b3e8381aa70ad416074822d6bf2961c0459b91c806b6e0d73f753b844d62973e200f458b74a3d9b6d706c7cbba514dec6d16e1d8602afbdc650dd49309c641a0bc62bc9b9dc24074c4b5862966aefad8bfec737d8a82f2b7eb82107c2d9d99189ee0ee620234c8d485ccf95c0dad213e09842a0b9212c3e698dc6259b521d4d9115e04b5f552b3e382b2a8ad1079b9e50079e6b721d609de473b"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000500)={0x44, &(0x7f0000000280)={0x40, 0xf, 0xae, "8cc4db70be82bf6032121bf57eeb14134d9025b8544e5a18da59fc742bb6c94e47489203a92f5646a34e5f242d3dec6958839ecf6f00b7452ab7203d5fb923df23f072707822a4b82a6264c6039cfbd0330c90ca67827081b00935910f906089a1709149ef668498aebebaf660d79997c516bfa15b126d190a187be4b0333e2677b82bb3b6d9cb14ebee2d1099dc804c6500f7a0399c269eb57c461d9697d01033154ba2999359774e07b9ac3cd8"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xd9}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000003c0)={0x20, 0x80, 0x1c, {0x88af, 0xef5, 0x101, 0x3, 0x5, 0xfbff, 0x5, 0x9, 0x4, 0x0, 0xff, 0xfffc}}, &(0x7f0000000400)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000440)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000480)={0x20, 0x87, 0x2, 0x200}, &(0x7f00000004c0)={0x20, 0x89, 0x2, 0x1}})
mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='}.\x00')
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r4)
mremap(&(0x7f0000702000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000702000/0x1000)=nil)

2.430979513s ago: executing program 1 (id=3855):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/disk', 0xa0042, 0x182)
write$tcp_mem(r0, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0)
r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r2)
r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x4, &(0x7f0000000040)=ANY=[])
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
listen(r4, 0x401)
close_range(r1, 0xffffffffffffffff, 0x0)

598.668068ms ago: executing program 6 (id=3870):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x667ef6a0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000200)={0x7f, 0xb7, 0x100, 0x63, 0x3, 0xfffffffe})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)={@flat=@handle={0x73682a85, 0x1, 0x1}, @flat=@binder={0x73622a85, 0x100a, 0x2}, @flat=@handle={0x73682a85, 0x180a, 0x3}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

598.112108ms ago: executing program 6 (id=3871):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000440)={0x1, 0x0, @pic={0x2, 0x45, 0x6, 0x3, 0x7, 0x0, 0x6, 0x2, 0x81, 0xd, 0x9, 0x4, 0x40, 0x6f, 0xad, 0x3}}) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) (async)
ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000400)={0xfffffffe, 0xe7, 0x6, 0x9357, 0x9, "ea7174ddb80fc7000002f7ffffffffd2a2d975", 0x4, 0x4})
ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x2) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32)
ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, 0x0)

592.664388ms ago: executing program 6 (id=3872):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000002040), 0x410281, 0x0)
lsm_get_self_attr(0x64, 0x0, 0x0, 0x1)
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r2 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="5500000020007f2fb72d13b2a4a271930200007ffdaab88bb5969e41789848a3c728f1afa823ff0000010100005ae583de0d32d6ed9098d100000042e718f94b02000000000000002ce9c95d92fb38675800000000", 0x55}], 0x1}, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x0, &(0x7f0000002c40)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x6}, @fda={0x66646185, 0x2, 0x0, 0x10}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1002, 0x37}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

579.117189ms ago: executing program 6 (id=3873):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom1\x00', 0x0, 0x0) (rerun: 64)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x138a, 0x2}) (async)
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0xfffffffffffffffc)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f00000003c0)={@fd={0x66642a85, 0x0, r1}, @flat=@binder={0x73622a85, 0x110b, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})
pipe2(&(0x7f0000000080)={<r3=>0xffffffffffffffff}, 0x8800)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x27, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"})

548.36908ms ago: executing program 6 (id=3874):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
splice(r0, &(0x7f0000000000)=0xff, r0, &(0x7f0000000040)=0x8, 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0}, 0xfffffffffffffff9}], 0x0, 0x0, 0x0})

490.87052ms ago: executing program 6 (id=3875):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x1ac}, 0x1, 0x0, 0x0, 0x81c}, 0x20000004)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) (async, rerun: 64)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
syz_usb_connect$cdc_ecm(0x0, 0x7e, &(0x7f0000002080)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109026c00010100000309040000ff020200000b24060000a35c5b81c49d05240000000d240f010000000000008501001324120300a317a88b045e4f01a607c0ffcb7e392a0524e8020808241c050002000009058103200000000009058202ff03000000090503020800000000"], 0x0)
syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x46d, 0x49, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x10, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x2, 0x58, {0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0xa5b}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x3}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x6edb91db283b073e, 0x2, 0x51, 0x19, 0x8, 0x6}, 0x150, &(0x7f0000000200)={0x5, 0xf, 0x150, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x2, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "b9ad2e84aba9c42e2a65d22b37f96d0c"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x6, 0xa}, @generic={0x100, 0x10, 0xb, "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"}, @generic={0x1e, 0x10, 0x3, "d1347f34215ffca012b307e84a7fc10bb8bcf9536eb14bc260312d"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0x80, 0x2, 0xd, 0x5}]}, 0x6, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x446}}, {0x17, &(0x7f00000003c0)=@string={0x17, 0x3, "13db9f685d739b6968a9444ae920fc475f7181f2cb"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xccb3d84ac78198a9}}, {0x98, &(0x7f00000004c0)=@string={0x98, 0x3, "0ecd446323f7e8d2faecae228c08259a7c2e751a8af1559fb36710da82a0725bd6870ad3240e2a39908ffd0d21e7a40de9957fc298085d3093a4faa8199470b50d5401c3f48845ab7fa4161e47cba891e759fa6fdbde1363921de1ffe5d625b03d7c4c44fc838b4bfa29b83670bc55c5136a45b674e43e67b66a93b637839dfeecc9ac929c42fec8e3e6f21e20590907c05df468e963"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x42a}}, {0x45, &(0x7f00000005c0)=@string={0x45, 0x3, "8b84af51fd7e2f63d5a634cdca1c69eb21e739d142d513808bb0827726d4ebe86bf8f0e4ddd6864e26caab6de2087faed5d8f90ea6a083a39946a791b105c06bb623ac"}}]}) (async)
r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x800000, 0x0)
ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0)
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0x8ee46000) (async)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async)
dup(r2) (async, rerun: 64)
r5 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64)
listen(r5, 0x0) (async, rerun: 64)
r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x400000, 0x0) (rerun: 64)
close_range(r6, r0, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) (async)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000085, 0x0, 0x0) (async)
r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f00000006c0)) (async)
ptrace(0x10, r7)
ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f00000000c0)={0x2}) (async)
ptrace$setregs(0xd, r7, 0x0, 0x0)
ptrace$cont(0x20, r7, 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0x100000000, 0x200000)

248.749595ms ago: executing program 0 (id=3881):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_debug_messages', 0x0, 0x80)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000200)=@ethtool_rx_ntuple={0x35, {0x11, @tcp_ip4_spec={@private=0xa010100, @empty, 0x4e23, 0x4e23, 0x5}, @ah_ip4_spec={@dev={0xac, 0x14, 0x14, 0x3e}, @local, 0x5, 0x61}, 0x2, 0x8af5, 0xe5, 0x2, 0xffffffffffffffff}}})
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
setreuid(0xffffffffffffffff, 0xee00)
ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}})
ioctl$BLKRRPART(r0, 0x125f, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7)
syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_debug_messages', 0x0, 0x80) (async)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000200)=@ethtool_rx_ntuple={0x35, {0x11, @tcp_ip4_spec={@private=0xa010100, @empty, 0x4e23, 0x4e23, 0x5}, @ah_ip4_spec={@dev={0xac, 0x14, 0x14, 0x3e}, @local, 0x5, 0x61}, 0x2, 0x8af5, 0xe5, 0x2, 0xffffffffffffffff}}}) (async)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async)
setreuid(0xffffffffffffffff, 0xee00) (async)
ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, 0x0) (async)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) (async)
ioctl$BLKRRPART(r0, 0x125f, 0x0) (async)
ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7) (async)

248.425965ms ago: executing program 0 (id=3882):
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x84100)
write$P9_RREADDIR(r1, &(0x7f0000000040)={0x2a, 0x29, 0x1, {0xdea, [{{0x0, 0x0, 0x2}, 0x8, 0x4, 0x7, './file0'}]}}, 0x2a) (async)
r2 = dup(0xffffffffffffffff)
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) (async, rerun: 32)
statx(r2, &(0x7f0000000100)='./file0\x00', 0x100, 0x4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0}) (rerun: 32)
quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f00000000c0)=@nullb, r3, &(0x7f0000000240)) (async, rerun: 64)
read$FUSE(r2, &(0x7f00000002c0)={0x2020, 0x0, <r5=>0x0, <r6=>0x0, <r7=>0x0, <r8=>0x0}, 0x2020) (rerun: 64)
write$FUSE_DIRENT(r2, &(0x7f0000002300)={0x30, 0xfffffffffffffffe, r5, [{0x6, 0x7, 0x2, 0x2aa5, '!\\'}]}, 0x30) (async)
ioctl$int_in(r0, 0x5421, &(0x7f0000002340)=0xfff) (async, rerun: 32)
lsetxattr$system_posix_acl(&(0x7f0000002380)='./file0\x00', &(0x7f00000023c0)='system.posix_acl_default\x00', &(0x7f0000002400)={{}, {0x1, 0x5}, [{0x2, 0x3, r3}, {0x2, 0x3, r6}, {0x2, 0x3, r3}], {0x4, 0x4}, [{0x8, 0x2, r4}, {0x8, 0x4, r4}, {0x8, 0x4, r7}, {0x8, 0x6, r7}, {0x8, 0xa, r4}, {0x8, 0x0, r7}], {0x10, 0x3}}, 0x6c, 0x2) (async, rerun: 32)
fstatfs(r2, &(0x7f0000002480)=""/27) (async)
getxattr(&(0x7f00000024c0)='./file0\x00', &(0x7f0000002500)=@random={'os2.', '8\x00'}, &(0x7f0000002540)=""/159, 0x9f) (async)
read$FUSE(r2, &(0x7f0000002600)={0x2020, 0x0, <r9=>0x0}, 0x2020) (async, rerun: 64)
openat$cgroup_procs(r2, &(0x7f0000004640)='cgroup.threads\x00', 0x2, 0x0) (async, rerun: 64)
r10 = fsopen(&(0x7f0000004680)='iso9660\x00', 0x1)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r10, 0x4, &(0x7f00000046c0)='!\\', &(0x7f0000004700)='./file0\x00', r2)
recvfrom$unix(r2, &(0x7f0000004740)=""/99, 0x63, 0x10001, &(0x7f00000047c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) (async, rerun: 64)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004880), 0xffffffffffffffff) (async, rerun: 64)
r13 = syz_open_procfs$userns(r8, &(0x7f00000048c0)) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000004900)={'wpan0\x00', <r14=>0x0})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r11, &(0x7f00000049c0)={&(0x7f0000004840)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004980)={&(0x7f0000004940)={0x24, r12, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
setresuid(r3, r3, r3)
r15 = openat$fuse(0xffffffffffffff9c, &(0x7f0000004a00), 0x2, 0x0)
write$FUSE_BMAP(r15, &(0x7f0000004a40)={0x18, 0xfffffffffffffffe, r9, {0x1}}, 0x18) (async)
r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r17 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000004ac0), r11)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r16, &(0x7f0000004b80)={&(0x7f0000004a80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000004b40)={&(0x7f0000004b00)={0x1c, r17, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x9001) (async)
ioctl$FITHAW(r10, 0xc0045878) (async)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000004cc0)={&(0x7f0000004bc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004c80)={&(0x7f0000004c40)={0x1c, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe295}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x80)

235.971515ms ago: executing program 0 (id=3883):
sched_setaffinity(0x0, 0x0, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x2, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000200)=[@acquire], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x0, 0x1000000}, @clear_death], 0x0, 0x0, 0x0})

189.118076ms ago: executing program 0 (id=3884):
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523720fd4002002cfc03d81a8ca55b39c01802c4dae4162e43ac61b7ad3300", [0x2, 0x7]}}) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001300000008000a"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x7)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async)
r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000d40), 0x1, 0x0)
read$FUSE(r2, 0x0, 0x0) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) (async)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
close(r4) (async, rerun: 32)
r6 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 32)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) (async)
ioctl$PPPIOCGL2TPSTATS(r4, 0x40047452, 0x0)
ioctl$BINDER_GET_EXTENDED_ERROR(r3, 0xc00c6211, &(0x7f0000000080)) (async)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'ip_vti0\x00', 0x1000}) (async)
setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)={@private=0xa010101, @broadcast, 0x1, 0x6, [@empty, @multicast2, @private=0xa010100, @multicast2, @private=0xa010101, @multicast2]}, 0x28)

127.732197ms ago: executing program 0 (id=3885):
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@aname={'aname', 0x3d, '!%()-\\)*'}}, {@debug={'debug', 0x3d, 0x4}}]}})
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r3, &(0x7f00000029c0)={0x2020}, 0x2020)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYRESDEC=r5, @ANYBLOB="5470f38f03dd484bc17968de93965a269dd5cf7901f35dcc6520a290b93ee7a44e7475fd16ddc6f92cab2cdc2c220b74a88f504ae0821691296f30d21a94d35cda7ce996855c9bbf4c3bf5a8f6098861c8a834f8cacb21eb91365bbcd74c6b5fec7367a35321c91e325e73dcf5ac59d5a07820e2f1340cd025fb26148a02e0173937abfb822322337f94683769f3c39084c4f93ff00575d9b2ca1e81605764689f7fa5dacfcc061b69d0f37814a2c399c14832b10e0afff6b8601e5b54be7e6ee4a0e676a7f974d5b5011909c0e91cb02db45726fae41423f10abf99d50905beb5ff50", @ANYBLOB="054117be57bf6f40a5227ff8b4b264e3b963de11a832026d5db89f4f877de338d025c82c8d09c403655ad79ca37f2095dc7503b6746d0bf6e7dcc793b5d08733d7da1cbf53b75a7f86dbc09674268714d3ba683808bb3f2bd44a175d8b4a2857cfa333f949d678075408758671626adecfcb2e65f15d8da5e35f0ec529488f0dab5402ee256f7e23a6d70ced439f"], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000000180))

90.992178ms ago: executing program 0 (id=3886):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda')
r1 = socket$netlink(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x4000, 0x8000, 0x40024e}, 0x0, 0x0)
futex_waitv(&(0x7f0000002100)=[{0x1000, 0x0}, {0x10001, 0x0, 0x2}, {0x6, 0x0, 0x82}, {0x9, 0x0}, {0x2, &(0x7f0000000ac0)=0x3a5, 0x2}, {0x24, &(0x7f0000000b00)=0x9, 0x2}, {0x9, &(0x7f0000000b40)=0xf2a6, 0x82}, {0x8, 0x0, 0x80}, {0x7, &(0x7f0000000bc0)=0x5, 0x2}, {0x800000000010, &(0x7f0000000c00)=0x3, 0x2}, {0x8, &(0x7f0000000c40)=0x7, 0x82}, {0x7, &(0x7f0000000c80)=0x4, 0x2}, {0x4, &(0x7f0000000cc0)=0x7fffffff, 0x82}, {0x7, &(0x7f0000000d00)=0xcf, 0x82}, {0xbf4, &(0x7f0000000d40)=0x6, 0x2}, {0xa1, &(0x7f0000000d80)=0xd, 0x2}, {0x7fffffff, 0x0, 0x82}, {0x7, &(0x7f0000000e00), 0x2}, {0x6, &(0x7f0000000e40)=0xb}, {0x9, 0x0}, {0x0, &(0x7f0000000f80)=0xd2, 0x2}, {0x6, 0x0, 0x82}, {0x100000001, &(0x7f0000001040)=0xfffffffffffff800, 0x82}, {0x6, 0x0, 0x82}, {0x8, 0x0, 0x2}, {0x6, 0x0, 0x82}, {0x9, 0x0, 0x2}, {0x9, 0x0, 0x19537d1e78996864}, {0x8000000000000000, 0x0, 0x2}, {0xe, 0x0, 0x82}, {0x100, 0x0, 0x82}, {0x7fff, &(0x7f0000002b40)=0x5650, 0x2}, {0xa74, &(0x7f0000001480)=0x8000, 0x82}, {0x7, 0x0, 0x82}, {0x3, 0x0, 0x2}, {0x7, 0x0, 0x2}, {0xe14, 0x0, 0x82}, {0x5, 0x0, 0x2}, {0xc10b, &(0x7f0000001a80)=0x9, 0x2}, {0x8000000000000001, 0x0, 0x82}, {0x2, 0x0, 0x82}, {0x2, 0x0}, {0x6d000, &(0x7f0000001c80)=0x30, 0x82}, {0x8, &(0x7f0000001d00)=0x401, 0x82}, {0x1, 0x0, 0x82}, {0xdd02, &(0x7f0000001d80)=0x5, 0x82}, {0x5, &(0x7f0000001e00)=0xa, 0x82}, {0x7, 0x0, 0x2}, {0x81, 0x0, 0x82}, {0x10001, 0x0, 0x82}, {0x1, &(0x7f0000001f00), 0x82}, {0x3ff, &(0x7f0000001f40)=0x3, 0x2}, {0x10001, &(0x7f0000001f80)=0x1, 0x82}, {0x3, &(0x7f0000001fc0)=0x9, 0x82}, {0x0, &(0x7f0000002040)=0x3b7, 0x2}, {0x7, &(0x7f00000020c0)=0x7, 0x2}], 0x38, 0x0, 0x0, 0x2)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x8000)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, 0x0)
sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="2000000011000100c71f6fd1ff080025100000000b00000056ccabf869c2"], 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60)
ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000002300090028bd7000ffd3df2501000000080003"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r8=>0x0)
io_submit(r8, 0x1, &(0x7f0000000400)=[&(0x7f0000000440)={0x18, 0x7000000, 0x41, 0x7, 0x0, r7, 0x0, 0x0, 0x10000000}])
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000280)='/dev/ashmem\x00')

0s ago: executing program 1 (id=3887):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r1, 0x4068aea3, &(0x7f0000000100)={0xed, 0x0, 0x3})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x1a0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f0000000000)={@multicast1, @empty}, 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x1019, &(0x7f0000000000)={[{@uuid_off}, {@volatile}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_off}]})
r4 = openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)={0x40, 0x99, 0x2}, 0x18)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000002c0)=0x1d11, 0xfffffffffffffecd)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
r6 = socket$inet(0x2, 0x2, 0x1)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000)='veth1_virt_wifi\x00', 0x10)
setsockopt$inet_mreqn(r6, 0x0, 0x20, &(0x7f0000000080)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2e}}, 0xc)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @mss={0x2, 0x7}], 0x8)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="de05b6d5d684a2eaf8625875221db8510bc33904c399e8c53ac987a6f38d5c3332e507ea3bc201f70ac2a6a6146c2fe5fc8a785f4fa82f15fe523925031c7e18eba8c6ee9dfd3d92eab47eed5ae79075905db26012ab7732b62e45b8cf4da44d962054c544d4ceab46f7eeae25abf4a2efedb9dce85df18eb8dcb52f088b8c5f69ea0b3d2be03ce889c3c5157ed6d02a33a7e3d627e14bc93ed5e9f2af1b7d172207", 0xa2}], 0x1)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r5, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)
fchown(r4, 0x0, 0x0)
pipe2$9p(&(0x7f0000000180), 0x80000)
sendfile(r4, r1, 0x0, 0xfffffffffffffff9)

kernel console output (not intermixed with test programs):

z.5.1964': attribute type 4 has an invalid length.
[  139.125255][ T6454] SELinux:  policydb magic number 0x2512 does not match expected magic number 0xf97cff8c
[  139.125582][   T36] audit: type=1400 audit(1774204340.195:25125): avc:  denied  { load_policy } for  pid=6452 comm="syz.1.1967" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  139.135357][ T6454] SELinux: failed to load policy
[  139.257794][ T6465] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1972'.
[  139.737052][ T6481] overlayfs: failed to resolve './file1': -2
[  139.988562][ T6508] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1986'.
[  140.217942][ T6512] netlink: 'syz.0.1986': attribute type 1 has an invalid length.
[  140.343485][ T6521] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  140.351940][ T6520] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  140.353526][ T6521] overlayfs: failed to clone upperpath
[  141.418587][  T328] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  141.580067][  T328] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  141.589353][  T328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.598796][  T328] usb 2-1: config 0 descriptor??
[  141.615763][ T6559] netlink: 8540 bytes leftover after parsing attributes in process `syz.6.2003'.
[  141.624979][ T6559] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2003'.
[  141.633876][ T6559] netlink: 5 bytes leftover after parsing attributes in process `syz.6.2003'.
[  142.040099][  T328] usb 2-1: Cannot set autoneg
[  142.044893][  T328] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  142.058790][  T328] usb 2-1: USB disconnect, device number 16
[  142.087727][ T6610] /dev/rnullb0: Can't open blockdev
[  142.250035][    T9] rust_binder: 6620: removing orphan mapping 0:8
[  142.270456][ T6635] sit0: entered promiscuous mode
[  142.276867][ T6635] netlink: 'syz.1.2026': attribute type 1 has an invalid length.
[  142.284670][ T6635] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2026'.
[  142.311315][   T36] audit: type=1400 audit(1774204343.177:25126): avc:  denied  { write } for  pid=6637 comm="syz.1.2027" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  142.361367][ T6646] netlink: 'syz.1.2029': attribute type 4 has an invalid length.
[  142.500413][ T6652] netlink: 'syz.5.2032': attribute type 1 has an invalid length.
[  142.508299][ T6652] netlink: 'syz.5.2032': attribute type 2 has an invalid length.
[  142.574060][ T6653] overlayfs: failed to clone upperpath
[  142.650490][ T6662] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2036'.
[  142.712606][  T328] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  142.874881][  T328] usb 2-1: config 0 has an invalid interface number: 199 but max is 1
[  142.883195][  T328] usb 2-1: config 0 has no interface number 1
[  142.889342][  T328] usb 2-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  142.899277][  T328] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  142.910915][  T328] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  142.920020][  T328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  142.928067][  T328] usb 2-1: SerialNumber: syz
[  142.933316][  T328] usb 2-1: config 0 descriptor??
[  142.939352][  T328] usb 2-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  142.946257][  T328] usb 2-1: No valid video chain found.
[  143.154960][ T6650] tipc: New replicast peer: 255.255.255.255
[  143.161137][ T6650] tipc: Enabled bearer <udp:syz2>, priority 10
[  143.167775][ T6650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2031'.
[  143.176785][ T6650] tipc: Disabling bearer <udp:syz2>
[  143.184677][ T6650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  143.193196][ T6650] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  143.201933][ T6650] rust_binder: Write failure EFAULT in pid:232
[  143.435165][   T36] audit: type=1400 audit(1774204344.224:25127): avc:  denied  { accept } for  pid=6725 comm="syz.6.2059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  143.480936][   T36] audit: type=1400 audit(1774204344.271:25128): avc:  denied  { getopt } for  pid=6732 comm="syz.6.2061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  143.749396][  T330] usb 2-1: USB disconnect, device number 17
[  143.791649][  T328] usb 7-1: USB disconnect, device number 2
[  143.914400][ T6771] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.921566][ T6771] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.932121][ T6771] bridge_slave_0: entered allmulticast mode
[  143.938540][ T6771] bridge_slave_0: entered promiscuous mode
[  143.945292][ T6771] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.952452][ T6771] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.959676][ T6771] bridge_slave_1: entered allmulticast mode
[  143.966024][ T6771] bridge_slave_1: entered promiscuous mode
[  144.016138][ T6771] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.023232][ T6771] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.030554][ T6771] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.037596][ T6771] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.060589][  T206] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.067860][  T206] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.077514][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.084616][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  144.093785][  T206] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.100871][  T206] bridge0: port 2(bridge_slave_1) entered forwarding state
[  144.128091][ T6771] veth0_vlan: entered promiscuous mode
[  144.139733][ T6771] veth1_macvtap: entered promiscuous mode
[  144.188567][  T330] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  144.299317][ T6794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  144.318442][ T6794] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  144.352696][  T330] usb 2-1: Using ep0 maxpacket: 8
[  144.370437][  T330] usb 2-1: unable to get BOS descriptor or descriptor too short
[  144.380021][  T330] usb 2-1: config 6 has an invalid interface number: 248 but max is 0
[  144.388595][  T330] usb 2-1: config 6 has no interface number 0
[  144.395003][  T330] usb 2-1: config 6 interface 248 has no altsetting 0
[  144.403797][  T330] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  144.413139][  T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.421999][  T330] usb 2-1: Product: syz
[  144.429754][  T330] usb 2-1: Manufacturer: syz
[  144.434385][  T330] usb 2-1: SerialNumber: syz
[  144.499156][ T6815] rust_binder: Write failure EFAULT in pid:11
[  144.610614][   T36] audit: type=1400 audit(1774204345.328:25129): avc:  denied  { mount } for  pid=6824 comm="syz.6.2084" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  144.641004][   T36] audit: type=1400 audit(1774204345.356:25130): avc:  denied  { unmount } for  pid=6771 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  144.660333][  T330] ums-karma 2-1:6.248: USB Mass Storage device detected
[  144.706295][  T330] usb 2-1: USB disconnect, device number 18
[  144.711662][ T6834] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set
[  145.387559][ T6866] IPv6: NLM_F_CREATE should be specified when creating new route
[  145.441877][ T6866] rust_binder: Failed to vm_insert_page(35184372101120): vma_addr:35184372097024 i:1 err:EFAULT
[  145.441917][ T6866] rust_binder: Error in use_page_slow: EFAULT
[  145.459502][ T6866] rust_binder: use_range failure EFAULT
[  145.466171][ T6866] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false
[  145.471778][ T6866] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  145.480333][ T6862] netlink: 'syz.0.2096': attribute type 16 has an invalid length.
[  145.498393][ T6866] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:247
[  145.498495][ T6862] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2096'.
[  145.518731][ T6862] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2096'.
[  145.630609][   T36] audit: type=1326 audit(1774204346.281:25131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6879 comm="syz.6.2101" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f040b58ebe9 code=0x0
[  145.761837][   T36] audit: type=1400 audit(1774204346.403:25132): avc:  denied  { ioctl } for  pid=6889 comm="syz.0.2103" path="socket:[31306]" dev="sockfs" ino=31306 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  145.815086][   T36] audit: type=1400 audit(1774204346.431:25133): avc:  denied  { mounton } for  pid=6901 comm="syz.1.2108" path="/proc/262/task/262/net/dev_snmp6" dev="proc" ino=4026532886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[  145.934336][ T6908] incfs: Options parsing error. -22
[  145.950468][ T6908] incfs: mount failed -22
[  146.231844][   T36] audit: type=1400 audit(1774204346.852:25134): avc:  denied  { read } for  pid=6955 comm="syz.1.2126" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  146.261404][   T36] audit: type=1400 audit(1774204346.870:25135): avc:  denied  { open } for  pid=6955 comm="syz.1.2126" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  146.284984][   T36] audit: type=1400 audit(1774204346.870:25136): avc:  denied  { write } for  pid=6955 comm="syz.1.2126" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  146.382696][   T36] audit: type=1400 audit(1774204346.982:25137): avc:  denied  { create } for  pid=6959 comm="syz.1.2128" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=chr_file permissive=1
[  146.704363][ T6973] overlayfs: failed to clone upperpath
[  146.764983][   T36] audit: type=1400 audit(1774204347.338:25138): avc:  denied  { setattr } for  pid=6988 comm="syz.6.2140" name="RAWv6" dev="sockfs" ino=30329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  147.300908][ T6997] netlink: 'syz.0.2143': attribute type 4 has an invalid length.
[  147.358269][ T7013] netlink: 'syz.1.2148': attribute type 1 has an invalid length.
[  147.369181][ T7013] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2148'.
[  147.465260][ T7049] overlayfs: failed to clone upperpath
[  147.494659][ T7053] overlayfs: failed to clone upperpath
[  147.625720][ T7078] overlayfs: failed to clone upperpath
[  147.639353][ T7081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2170'.
[  147.647491][ T7084] cgroup2: Unknown parameter 'memo9��I��events'
[  147.704662][ T7094] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2174'.
[  147.781443][ T7098] cgroup: Bad value for 'name'
[  149.043206][ T7168] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2199'.
[  149.053323][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2199'.
[  149.099588][ T7183] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2203'.
[  149.109382][ T7183] 9pnet_fd: Insufficient options for proto=fd
[  149.115884][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.123594][ T7183] bridge0: entered promiscuous mode
[  149.128917][ T7183] bridge0: entered allmulticast mode
[  149.142637][ T7187] overlayfs: failed to clone upperpath
[  149.165080][ T7191] netlink: 'syz.5.2208': attribute type 7 has an invalid length.
[  149.187680][ T7196] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2209'.
[  149.196785][ T7196] netlink: 43 bytes leftover after parsing attributes in process `syz.5.2209'.
[  149.205774][ T7196] netlink: 'syz.5.2209': attribute type 6 has an invalid length.
[  149.214000][ T7196] netlink: 'syz.5.2209': attribute type 5 has an invalid length.
[  149.320631][ T7212] overlayfs: failed to clone upperpath
[  149.331503][ T7212] netlink: 'syz.0.2207': attribute type 4 has an invalid length.
[  150.512783][ T7286] tipc: New replicast peer: 255.255.255.255
[  150.519027][ T7286] tipc: Enabled bearer <udp:syz2>, priority 10
[  150.525601][ T7286] tipc: Disabling bearer <udp:syz2>
[  150.557398][ T7295] 9pnet_fd: Insufficient options for proto=fd
[  150.592262][ T7300] fuse: Bad value for 'group_id'
[  150.597437][ T7300] fuse: Bad value for 'group_id'
[  150.616121][ T7305] overlayfs: failed to clone upperpath
[  150.914788][ T7328] __nla_validate_parse: 4 callbacks suppressed
[  150.914811][ T7328] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2253'.
[  150.931004][ T7328] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=7328 comm=syz.0.2253
[  151.112937][ T7342] tipc: Enabling of bearer <ib:geneve0> rejected, media not registered
[  151.182732][ T7354] tipc: Enabling of bearer <Yth:v> rejected, media not registered
[  151.227531][   T13] tipc: Subscription rejected, illegal request
[  151.274160][ T7376] 9pnet: Unknown protocol version 9
[  151.699590][   T36] kauditd_printk_skb: 3 callbacks suppressed
[  151.699609][   T36] audit: type=1326 audit(1774204351.957:25142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7424 comm="syz.5.2287" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f12bdd8ebe9 code=0x0
[  151.955004][ T7446] netlink: 'syz.1.2295': attribute type 4 has an invalid length.
[  151.963496][ T7446] netlink: 'syz.1.2295': attribute type 4 has an invalid length.
[  152.223602][ T7463] netlink: 'syz.6.2301': attribute type 4 has an invalid length.
[  152.233878][ T7463] netlink: 'syz.6.2301': attribute type 4 has an invalid length.
[  152.318774][ T7471] overlayfs: failed to clone upperpath
[  152.462176][ T7475] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2306'.
[  152.508905][ T7483] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2310'.
[  152.543936][ T7490] 9pnet_fd: p9_fd_create_unix (7490): problem connecting socket: ./file0: -111
[  152.803329][ T7517] tmpfs: Bad value for 'nr_inodes'
[  152.991299][ T7525] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2325'.
[  153.012902][ T7530] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.2326'.
[  153.023615][ T7530] overlay: Unknown parameter 'audit'
[  153.881304][ T7568] fuse: Unknown parameter '0x0000000000000003'
[  153.888144][ T7568] SELinux:  Context system_u:object_r:ppp_device_t:s0 is not valid (left unmapped).
[  153.897953][   T36] audit: type=1400 audit(1774204354.004:25143): avc:  denied  { relabelto } for  pid=7567 comm="syz.5.2338" name="file0" dev="tmpfs" ino=2728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ppp_device_t:s0"
[  153.932198][   T36] audit: type=1400 audit(1774204354.004:25144): avc:  denied  { associate } for  pid=7567 comm="syz.5.2338" name="file0" dev="tmpfs" ino=2728 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ppp_device_t:s0"
[  153.959915][   T36] audit: type=1400 audit(1774204354.051:25145): avc:  denied  { create } for  pid=7572 comm="syz.5.2339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  154.073949][ T7578] netlink: 'syz.6.2341': attribute type 4 has an invalid length.
[  154.357975][ T7597] overlayfs: failed to clone upperpath
[  154.454842][ T7609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7609 comm=syz.0.2354
[  154.521059][ T7618] overlayfs: failed to resolve './file1': -2
[  154.547893][   T36] audit: type=1400 audit(1774204354.621:25146): avc:  denied  { getopt } for  pid=7622 comm="syz.0.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  154.775564][ T7656] fuse: Bad value for 'fd'
[  154.822191][ T7665] syz.6.2372(7665): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  155.499241][ T7700] fuse: Bad value for 'user_id'
[  155.504397][ T7701] fuse: Bad value for 'user_id'
[  155.509299][ T7700] fuse: Bad value for 'user_id'
[  155.514251][ T7701] fuse: Bad value for 'user_id'
[  155.510765][   T36] audit: type=1401 audit(1774204355.519:25147): op=setxattr invalid_context=73797374656D5F753A6F626A6563745F723A667361646D5F657865635F743A73300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002E2F66696C65300066732F62696E6465723100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
[  155.520603][ T7700] 9pnet_fd: p9_fd_create_unix (7700): problem connecting socket: ./file0: -111
[  155.745126][ T7733] 9pnet_fd: Insufficient options for proto=fd
[  155.904241][   T36] audit: type=1400 audit(1774204355.884:25148): avc:  denied  { mounton } for  pid=7758 comm="syz.5.2406" path="/508/file0" dev="tmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  155.904346][ T7759] overlayfs: failed to resolve './cgroup': -2
[  156.213740][ T7788] overlayfs: failed to clone upperpath
[  156.736697][ T7815] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2425'.
[  156.745848][ T7815] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2425'.
[  157.009361][ T7826] overlayfs: failed to resolve './file1': -2
[  157.041880][   T36] audit: type=1400 audit(1774204356.950:25149): avc:  denied  { setattr } for  pid=7832 comm="syz.0.2432" name="file0" dev="tmpfs" ino=2393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  157.084700][ T7837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2434'.
[  157.650545][   T36] audit: type=1326 audit(1774204357.520:25150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7851 comm="syz.0.2440" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f052a78ebe9 code=0x0
[  158.183782][ T7874] overlayfs: failed to clone upperpath
[  158.192594][ T7874] overlayfs: failed to clone upperpath
[  159.317172][   T36] audit: type=1400 audit(1774204359.081:25151): avc:  denied  { read } for  pid=7888 comm="syz.0.2452" path="socket:[32416]" dev="sockfs" ino=32416 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  159.886735][ T7895] No source specified
[  159.926166][ T7903] tipc: Can't bind to reserved service type 2
[  160.027092][ T7928] overlayfs: missing 'workdir'
[  160.032894][   T36] audit: type=1400 audit(1774204359.745:25152): avc:  denied  { bind } for  pid=7927 comm="syz.6.2465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  160.101307][ T7931] overlayfs: failed to clone upperpath
[  160.276052][ T7939] netlink: 'syz.0.2469': attribute type 2 has an invalid length.
[  160.801998][   T36] audit: type=1400 audit(1774204360.465:25153): avc:  denied  { map } for  pid=7940 comm="syz.1.2470" path="pipe:[32488]" dev="pipefs" ino=32488 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  161.199270][ T7971] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=771 sclass=netlink_tcpdiag_socket pid=7971 comm=syz.0.2478
[  161.247692][   T36] audit: type=1326 audit(1774204360.886:25154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7976 comm="syz.0.2481" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f052a78ebe9 code=0x0
[  161.978411][ T7999] No source specified
[  162.663259][ T8040] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2503'.
[  162.674954][ T8042] overlayfs: failed to resolve './file1': -2
[  162.707811][ T8047] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2505'.
[  162.729124][ T8052] netlink: 'syz.5.2506': attribute type 4 has an invalid length.
[  162.739580][ T8054] netlink: 'syz.5.2506': attribute type 4 has an invalid length.
[  162.887713][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2510'.
[  162.897220][ T8063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2510'.
[  162.978661][ T8069] SELinux:  Context ϧ�-�)�:E�2�٭�ؾ�)đJu36���ޢ{�@�m�[ is not valid (left unmapped).
[  163.387578][   T36] audit: type=1400 audit(1774204362.887:25155): avc:  denied  { create } for  pid=8082 comm="syz.5.2518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  164.489460][   T36] audit: type=1400 audit(1774204363.915:25156): avc:  denied  { shutdown } for  pid=8126 comm="syz.0.2535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  164.727874][ T8136] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8136 comm=syz.6.2539
[  165.108270][   T36] audit: type=1400 audit(1774204364.486:25157): avc:  denied  { map } for  pid=8142 comm="syz.5.2542" path="socket:[34845]" dev="sockfs" ino=34845 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  165.667063][   T36] audit: type=1400 audit(1774204365.019:25158): avc:  denied  { create } for  pid=8160 comm="syz.5.2549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  165.712825][ T8170] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2550'.
[  165.901854][ T8197] netlink: 'syz.6.2561': attribute type 58 has an invalid length.
[  165.911239][ T8197] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2561'.
[  166.273849][ T8205] veth1_to_bridge: mtu less than device minimum
[  166.294612][ T8207] overlayfs: failed to clone upperpath
[  166.374541][ T8226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7762 sclass=netlink_route_socket pid=8226 comm=syz.0.2571
[  166.397473][ T8228] netlink: 'syz.0.2572': attribute type 6 has an invalid length.
[  166.432948][   T36] audit: type=1326 audit(1774204365.729:25159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8232 comm="syz.0.2574" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f052a78ebe9 code=0x0
[  166.514889][ T8237] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2574'.
[  166.528031][ T8237] bridge_slave_0 (unregistering): left allmulticast mode
[  166.535379][ T8237] bridge_slave_0 (unregistering): left promiscuous mode
[  166.542661][ T8237] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.575136][ T8239] overlayfs: missing 'lowerdir'
[  166.720857][ T8255] netlink: 182 bytes leftover after parsing attributes in process `syz.6.2581'.
[  166.840619][   T36] audit: type=1326 audit(1774204366.103:25160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8201 comm="syz.1.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9398ebe9 code=0x7fc00000
[  166.864210][   T36] audit: type=1326 audit(1774204366.103:25161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8201 comm="syz.1.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0b9398ebe9 code=0x7fc00000
[  166.888461][   T36] audit: type=1326 audit(1774204366.103:25162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8201 comm="syz.1.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9398ebe9 code=0x7fc00000
[  166.912006][   T36] audit: type=1326 audit(1774204366.103:25163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8201 comm="syz.1.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9398ebe9 code=0x7fc00000
[  166.935798][   T36] audit: type=1326 audit(1774204366.103:25164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8201 comm="syz.1.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9398ebe9 code=0x7fc00000
[  167.450095][ T8283] netlink: 'syz.6.2592': attribute type 3 has an invalid length.
[  167.488392][ T8287] 9pnet: Could not find request transport: !m
[  167.517417][ T8291] overlayfs: failed to clone upperpath
[  167.586208][ T8313] overlayfs: failed to clone upperpath
[  168.174516][ T8332] overlay: ./file0 is not a directory
[  168.290408][ T8334] overlayfs: failed to resolve './bus/file0': -2
[  168.299861][ T8337] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17688 sclass=netlink_route_socket pid=8337 comm=syz.6.2612
[  168.926772][ T8370] 9pnet_fd: Insufficient options for proto=fd
[  168.939433][ T8370] netlink: 'syz.0.2623': attribute type 11 has an invalid length.
[  168.947466][   T36] kauditd_printk_skb: 5508 callbacks suppressed
[  168.947484][   T36] audit: type=1400 audit(1774204368.076:30673): avc:  denied  { setopt } for  pid=8371 comm="syz.1.2624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  168.956265][ T8370] netlink: 'syz.0.2623': attribute type 1 has an invalid length.
[  168.981981][ T8370] netlink: 3593 bytes leftover after parsing attributes in process `syz.0.2623'.
[  169.528162][ T8419] No source specified
[  169.602975][   T36] audit: type=1326 audit(1774204368.693:30674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8420 comm="syz.1.2641" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b9398ebe9 code=0x0
[  169.884460][   T36] audit: type=1326 audit(1774204368.955:30675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8434 comm="syz.0.2645" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f052a78ebe9 code=0x0
[  170.198464][ T8476] syz.5.2658: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0
[  170.214888][ T8476] CPU: 0 UID: 0 PID: 8476 Comm: syz.5.2658 Not tainted syzkaller #0 1976820a860199aae9d2abf4727fc3b97aa7bbea
[  170.214921][ T8476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  170.214937][ T8476] Call Trace:
[  170.214961][ T8476]  <TASK>
[  170.214971][ T8476]  __dump_stack+0x21/0x30
[  170.215007][ T8476]  dump_stack_lvl+0x10c/0x190
[  170.215036][ T8476]  ? __cfi_dump_stack_lvl+0x10/0x10
[  170.215066][ T8476]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  170.215101][ T8476]  dump_stack+0x19/0x20
[  170.215129][ T8476]  warn_alloc+0x1bc/0x2a0
[  170.215155][ T8476]  ? stack_depot_save_flags+0x38/0x800
[  170.215179][ T8476]  ? __cfi_warn_alloc+0x10/0x10
[  170.215205][ T8476]  ? kasan_save_track+0x4f/0x80
[  170.215226][ T8476]  ? __kmalloc_cache_noprof+0x1a5/0x3c0
[  170.215258][ T8476]  ? xskq_create+0x68/0x2a0
[  170.215280][ T8476]  ? xsk_init_queue+0xb6/0x120
[  170.215302][ T8476]  ? xsk_setsockopt+0x43f/0x6f0
[  170.215322][ T8476]  ? do_sock_setsockopt+0x26a/0x400
[  170.215344][ T8476]  ? __x64_sys_setsockopt+0x1b8/0x250
[  170.215373][ T8476]  ? x64_sys_call+0x2adc/0x2ee0
[  170.215404][ T8476]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  170.215433][ T8476]  __vmalloc_node_range_noprof+0x135/0x1420
[  170.215468][ T8476]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  170.215498][ T8476]  ? avc_has_perm+0x144/0x220
[  170.215528][ T8476]  ? kasan_save_alloc_info+0x40/0x50
[  170.215556][ T8476]  ? __kasan_kmalloc+0x96/0xb0
[  170.215579][ T8476]  vmalloc_user_noprof+0x77/0x90
[  170.215607][ T8476]  ? xskq_create+0xdb/0x2a0
[  170.215629][ T8476]  xskq_create+0xdb/0x2a0
[  170.215651][ T8476]  xsk_init_queue+0xb6/0x120
[  170.215678][ T8476]  xsk_setsockopt+0x43f/0x6f0
[  170.215700][ T8476]  ? __cfi_xsk_setsockopt+0x10/0x10
[  170.215722][ T8476]  ? do_futex+0x309/0x500
[  170.215745][ T8476]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[  170.215773][ T8476]  ? security_socket_setsockopt+0x33/0xd0
[  170.215794][ T8476]  ? __cfi_xsk_setsockopt+0x10/0x10
[  170.215835][ T8476]  do_sock_setsockopt+0x26a/0x400
[  170.215858][ T8476]  ? __cfi_do_sock_setsockopt+0x10/0x10
[  170.215885][ T8476]  __x64_sys_setsockopt+0x1b8/0x250
[  170.215909][ T8476]  x64_sys_call+0x2adc/0x2ee0
[  170.215942][ T8476]  do_syscall_64+0x58/0xf0
[  170.215974][ T8476]  ? clear_bhb_loop+0x50/0xa0
[  170.216002][ T8476]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  170.216029][ T8476] RIP: 0033:0x7f12bdd8ebe9
[  170.216056][ T8476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  170.216075][ T8476] RSP: 002b:00007f12bec22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  170.216099][ T8476] RAX: ffffffffffffffda RBX: 00007f12bdfc5fa0 RCX: 00007f12bdd8ebe9
[  170.216118][ T8476] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007
[  170.216132][ T8476] RBP: 00007f12bde11e19 R08: 0000000000000004 R09: 0000000000000000
[  170.216146][ T8476] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  170.216161][ T8476] R13: 00007f12bdfc6038 R14: 00007f12bdfc5fa0 R15: 00007fff49427808
[  170.216180][ T8476]  </TASK>
[  170.216246][ T8476] Mem-Info:
[  170.531837][ T8476] active_anon:67937 inactive_anon:518 isolated_anon:0
[  170.531837][ T8476]  active_file:13618 inactive_file:34323 isolated_file:0
[  170.531837][ T8476]  unevictable:16360 dirty:51 writeback:0
[  170.531837][ T8476]  slab_reclaimable:6637 slab_unreclaimable:81176
[  170.531837][ T8476]  mapped:23783 shmem:61755 pagetables:1273
[  170.531837][ T8476]  sec_pagetables:0 bounce:0
[  170.531837][ T8476]  kernel_misc_reclaimable:0
[  170.531837][ T8476]  free:1405879 free_pcp:8461 free_cma:0
[  170.581716][ T8476] Node 0 active_anon:249748kB inactive_anon:2072kB active_file:54472kB inactive_file:137292kB unevictable:65440kB isolated(anon):0kB isolated(file):0kB mapped:95132kB dirty:204kB writeback:0kB shmem:225020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6168kB pagetables:5092kB sec_pagetables:0kB all_unreclaimable? no
[  170.615001][ T8476] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965952kB mlocked:0kB bounce:0kB free_pcp:5740kB local_pcp:5672kB free_cma:0kB
[  170.645048][ T8476] lowmem_reserve[]: 0 3921 3921
[  170.649994][ T8476] Normal free:2703184kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:225400kB inactive_anon:2072kB active_file:54472kB inactive_file:137292kB unevictable:65440kB writepending:204kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:34916kB local_pcp:12996kB free_cma:0kB
[  170.682222][ T8476] lowmem_reserve[]: 0 0 0
[  170.686602][ T8476] DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[  170.702055][ T8476] Normal: 1156*4kB (UME) 494*8kB (UME) 467*16kB (UME) 177*32kB (UME) 56*64kB (UME) 25*128kB (UME) 62*256kB (UME) 45*512kB (UM) 16*1024kB (UM) 11*2048kB (UME) 634*4096kB (M) = 2703184kB
[  170.705226][ T8482] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2660'.
[  170.720527][ T8476] 115406 total pagecache pages
[  170.720551][ T8476] 933 pages in swap cache
[  170.738546][ T8476] Free swap  = 120632kB
[  170.742696][ T8476] Total swap = 124996kB
[  170.746901][ T8476] 2097051 pages RAM
[  170.750717][ T8476] 0 pages HighMem/MovableOnly
[  170.755419][ T8476] 351533 pages reserved
[  170.759604][ T8476] 0 pages cma reserved
[  170.765634][ T8476] Memory allocations:
[  170.769670][ T8476]          0 B        0 init/main.c:1370 func:do_initcalls
[  170.776899][ T8476]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  170.784962][ T8476]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  170.792636][ T8476]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  170.800599][ T8476]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  170.808503][ T8476]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  170.817207][ T8476]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  170.825161][ T8476]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  170.833090][ T8476]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  170.841017][ T8476]          0 B        0 init/initramfs.c:101 func:find_link
[  171.376134][ T8513] veth0_to_team: entered promiscuous mode
[  171.381920][ T8513] veth0_to_team: entered allmulticast mode
[  171.486675][ T8525] overlayfs: failed to clone upperpath
[  171.628403][ T8549] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  171.947021][ T8578] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.954477][ T8578] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.961626][ T8578] bridge_slave_0: entered allmulticast mode
[  171.969261][ T8578] bridge_slave_0: entered promiscuous mode
[  171.976225][ T8578] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.983374][ T8578] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.990694][ T8578] bridge_slave_1: entered allmulticast mode
[  171.997258][ T8578] bridge_slave_1: entered promiscuous mode
[  172.064956][ T8578] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.072152][ T8578] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.079442][ T8578] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.086482][ T8578] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.108702][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  172.116130][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  172.127217][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  172.134416][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  172.147496][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  172.154748][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  172.164344][ T8591] overlayfs: failed to resolve './file0': -2
[  172.184481][ T8593] fuse: Bad value for 'fd'
[  172.195336][ T8578] veth0_vlan: entered promiscuous mode
[  172.209463][ T8578] veth1_macvtap: entered promiscuous mode
[  172.243009][ T8599] x_tables: unsorted underflow at hook 3
[  172.250670][ T8601] netlink: 'syz.5.2690': attribute type 20 has an invalid length.
[  172.345650][ T8614] binder: Unknown parameter 'defcontext01777777777777777777777'
[  172.364900][ T8618] rust_binder: Write failure EFAULT in pid:9
[  173.244756][ T8641] overlayfs: failed to clone upperpath
[  173.398453][ T8653] 9pnet_fd: Insufficient options for proto=fd
[  173.568708][ T8674] lo: entered allmulticast mode
[  173.573794][ T8674] lo: left allmulticast mode
[  173.597046][ T8677] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2719'.
[  173.606418][ T8677] loop2: detected capacity change from 0 to 7
[  173.613703][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.622907][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  173.630893][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.640056][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  173.647957][ T8440]  loop2: unable to read partition table
[  173.654081][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.663251][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  173.672034][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.681232][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  173.689213][ T8677]  loop2: unable to read partition table
[  173.695257][ T8677] loop_reread_partitions: partition scan of loop2 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  173.696633][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.717942][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  173.726142][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.735368][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  173.743667][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.752866][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  173.761116][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.770289][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  173.778376][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.787588][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  173.796395][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  173.805578][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  173.813936][ T8681]  loop2: unable to read partition table
[  173.821255][ T8691] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  173.830470][ T8691] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  174.215506][ T8708] 9pnet_fd: Insufficient options for proto=fd
[  174.386381][ T8720] veth0: entered promiscuous mode
[  174.392414][ T8720] veth0: left promiscuous mode
[  174.480917][ T8724] 9pnet_fd: Insufficient options for proto=fd
[  174.535260][ T8728] syzkaller0: entered promiscuous mode
[  174.540852][ T8728] syzkaller0: entered allmulticast mode
[  174.755770][   T36] audit: type=1400 audit(1774204373.518:30676): avc:  denied  { nlmsg_read } for  pid=8740 comm="syz.1.2745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  174.791012][  T364] rust_binder: 8734: removing orphan mapping 0:24
[  175.065515][  T330] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  175.227046][  T330] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.236956][  T330] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  175.246005][  T330] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.255244][  T330] usb 6-1: config 0 descriptor??
[  175.383996][ T8767] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  175.401449][ T8769] overlayfs: failed to clone lowerpath
[  175.693258][  T330] lenovo 0003:17EF:6047.0010: unknown main item tag 0x1
[  175.700492][  T330] lenovo 0003:17EF:6047.0010: item fetching failed at offset 1/5
[  175.708711][  T330] lenovo 0003:17EF:6047.0010: hid_parse failed
[  175.714926][  T330] lenovo 0003:17EF:6047.0010: probe with driver lenovo failed with error -22
[  176.067271][ T8842] tmpfs: Invalid uid '0x00000000ffffffff'
[  176.259881][ T8850] SELinux:  Context system_u:object_r:ptmx_t:s0 is not valid (left unmapped).
[  176.269574][   T36] audit: type=1400 audit(1774204374.930:30677): avc:  denied  { relabelto } for  pid=8849 comm="syz.6.2782" name="file0" dev="tmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:ptmx_t:s0"
[  176.296402][   T36] audit: type=1400 audit(1774204374.930:30678): avc:  denied  { associate } for  pid=8849 comm="syz.6.2782" name="file0" dev="tmpfs" ino=951 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ptmx_t:s0"
[  176.302513][ T8856] netlink: 188 bytes leftover after parsing attributes in process `syz.6.2784'.
[  176.664233][ T8858] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=8858 comm=syz.0.2785
[  176.687078][ T8863] overlayfs: failed to clone upperpath
[  176.692142][ T8865] netlink: 'syz.0.2787': attribute type 12 has an invalid length.
[  176.763152][ T8877] overlayfs: failed to clone upperpath
[  176.912666][ T8890] 9pnet_fd: Insufficient options for proto=fd
[  176.919539][ T8892] 9pnet_fd: Insufficient options for proto=fd
[  176.938570][ T8894] netlink: 5308 bytes leftover after parsing attributes in process `syz.6.2800'.
[  177.329284][ T8897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2801'.
[  177.494942][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2802'.
[  177.528201][ T8907] fuse: Bad value for 'user_id'
[  177.533094][ T8907] fuse: Bad value for 'user_id'
[  177.561370][ T8914] netlink: 37 bytes leftover after parsing attributes in process `syz.6.2806'.
[  177.637691][ T8919] 9pnet_fd: Insufficient options for proto=fd
[  177.894423][ T8944] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2815'.
[  178.029314][  T355] usb 6-1: USB disconnect, device number 30
[  178.186185][ T8960] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2822'.
[  178.223127][ T8963] netlink: 'syz.6.2823': attribute type 2 has an invalid length.
[  178.232597][ T8965] netlink: 'syz.6.2823': attribute type 2 has an invalid length.
[  178.512561][ T9002] futex_wake_op: syz.1.2835 tries to shift op by 144; fix this program
[  178.521568][ T9002] tipc: MTU too low for tipc bearer
[  178.573534][  T328] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  178.733950][  T328] usb 6-1: Using ep0 maxpacket: 16
[  178.740151][  T328] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  178.752006][  T328] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  178.761110][  T328] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.769194][  T328] usb 6-1: Product: syz
[  178.773389][  T328] usb 6-1: Manufacturer: syz
[  178.778025][  T328] usb 6-1: SerialNumber: syz
[  178.783369][  T328] usb 6-1: config 0 descriptor??
[  178.789201][  T328] asix 6-1:0.0: probe with driver asix failed with error -22
[  179.011213][ T8990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=771 sclass=netlink_route_socket pid=8990 comm=syz.5.2831
[  179.102744][   T36] audit: type=1326 audit(1774204633.581:30679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9007 comm="syz.6.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040b58ebe9 code=0x7ffc0000
[  179.126337][   T36] audit: type=1326 audit(1774204633.581:30680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9007 comm="syz.6.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f040b58ebe9 code=0x7ffc0000
[  179.150123][   T36] audit: type=1326 audit(1774204633.581:30681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9007 comm="syz.6.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040b58ebe9 code=0x7ffc0000
[  179.173896][   T36] audit: type=1326 audit(1774204633.581:30682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9007 comm="syz.6.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040b58ebe9 code=0x7ffc0000
[  179.197854][   T36] audit: type=1326 audit(1774204633.581:30683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9007 comm="syz.6.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040b58ebe9 code=0x7ffc0000
[  179.221568][   T36] audit: type=1326 audit(1774204633.581:30684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9007 comm="syz.6.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f040b58ebe9 code=0x7ffc0000
[  179.244962][   T36] audit: type=1326 audit(1774204633.581:30685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9007 comm="syz.6.2837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040b58ebe9 code=0x7ffc0000
[  179.601927][  T364] usb 6-1: USB disconnect, device number 31
[  179.626310][ T9028] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=9028 comm=syz.5.2844
[  179.653113][ T9030] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2845'.
[  179.657644][ T9032] 9pnet: Could not find request transport: f`
[  179.675131][ T9030] bridge0: port 1(bridge_slave_0) entered disabled state
[  179.685354][ T9030] bridge_slave_0 (unregistering): left allmulticast mode
[  179.699567][ T9030] bridge_slave_0 (unregistering): left promiscuous mode
[  179.706654][ T9030] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.510544][ T9052] rust_binder: Write failure EINVAL in pid:78
[  180.694240][ T9075] rust_binder: Failed copying into alloc: EFAULT
[  180.700415][ T9075] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  180.706913][ T9075] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  180.715273][ T9075] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:96
[  180.971858][ T9089] fuse: Unknown parameter ''
[  181.165506][   T36] kauditd_printk_skb: 32 callbacks suppressed
[  181.165525][   T36] audit: type=1400 audit(1774204635.507:30718): avc:  denied  { map } for  pid=9118 comm="syz.0.2876" path="socket:[37955]" dev="sockfs" ino=37955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  181.194870][   T36] audit: type=1400 audit(1774204635.507:30719): avc:  denied  { read } for  pid=9118 comm="syz.0.2876" path="socket:[37955]" dev="sockfs" ino=37955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  181.519254][   T36] audit: type=1400 audit(1774204635.834:30720): avc:  denied  { mounton } for  pid=9127 comm="syz.5.2879" path="/31/file0" dev="tmpfs" ino=193 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  181.519271][ T9128] EXT4-fs: Ignoring removed check option
[  181.519303][ T9128] No source specified
[  181.648510][ T9139] overlayfs: failed to clone upperpath
[  181.666583][ T9139] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2882'.
[  181.689648][   T36] audit: type=1400 audit(1774204635.993:30721): avc:  denied  { mounton } for  pid=9140 comm="syz.5.2883" path="/32/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  181.728186][   T36] audit: type=1400 audit(1774204636.030:30722): avc:  denied  { unmount } for  pid=8578 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  181.815982][ T9143] SELinux:  Context system_u:object_r:ldconfig_cache_t:s0 is not valid (left unmapped).
[  181.842819][   T36] audit: type=1400 audit(1774204636.133:30723): avc:  denied  { relabelto } for  pid=9142 comm="syz.5.2884" name="file1" dev="tmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:ldconfig_cache_t:s0"
[  181.880803][   T36] audit: type=1400 audit(1774204636.133:30724): avc:  denied  { associate } for  pid=9142 comm="syz.5.2884" name="file1" dev="tmpfs" ino=206 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ldconfig_cache_t:s0"
[  181.946557][   T36] audit: type=1400 audit(1774204636.133:30725): avc:  denied  { setattr } for  pid=9142 comm="syz.5.2884" name="file1" dev="tmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:ldconfig_cache_t:s0"
[  181.979396][   T36] audit: type=1400 audit(1774204636.180:30726): avc:  denied  { rmdir } for  pid=8578 comm="syz-executor" name="file1" dev="tmpfs" ino=206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:ldconfig_cache_t:s0"
[  182.284761][  T364] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  182.445178][  T364] usb 6-1: Using ep0 maxpacket: 8
[  182.451524][  T364] usb 6-1: unable to get BOS descriptor or descriptor too short
[  182.459948][  T364] usb 6-1: config 1 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 16
[  182.469939][  T364] usb 6-1: config 1 interface 0 altsetting 12 bulk endpoint 0x3 has invalid maxpacket 1023
[  182.479972][  T364] usb 6-1: config 1 interface 0 has no altsetting 0
[  182.488043][  T364] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  182.497120][  T364] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.505713][  T364] usb 6-1: Product: syz
[  182.509935][  T364] usb 6-1: Manufacturer: syz
[  182.514537][  T364] usb 6-1: SerialNumber: syz
[  182.520080][ T9180] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  182.527268][ T9180] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  182.616790][ T9206] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  182.625082][ T9206] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22
[  182.779280][ T9180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  182.787894][ T9180] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.723991][ T9257] 9pnet_fd: Insufficient options for proto=fd
[  183.763525][ T9266] 9pnet_fd: Insufficient options for proto=fd
[  184.239088][ T9290] tipc: Started in network mode
[  184.244059][ T9290] tipc: Node identity fffeffff, cluster identity 4711
[  184.250902][ T9290] tipc: Node number set to 4294901759
[  184.328997][ T9302] fuse: blksize only supported for fuseblk
[  184.967287][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2952'.
[  185.050722][ T9344] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2955'.
[  185.283714][  T364] usb 6-1: bad CDC descriptors
[  185.294116][  T364] usb 6-1: USB disconnect, device number 32
[  185.309681][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.317597][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.325411][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.333296][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.341057][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.349090][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.356926][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.364786][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.372583][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.380415][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.388325][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.396134][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.403916][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.411713][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.419530][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.427236][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.441962][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.449696][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.457457][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.465267][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.473317][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.476221][ T9356] overlayfs: failed to clone upperpath
[  185.481094][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.494294][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.502632][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.510395][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.518248][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.526055][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.533866][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.541701][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.549536][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.557302][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.565055][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.573683][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.586436][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.595426][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.603212][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.611104][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.618893][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.626690][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.634476][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.642217][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.650208][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.660405][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.668541][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.676324][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.684128][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.691879][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.699647][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.707416][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.715139][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.722872][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.730600][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.738311][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.746093][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.753815][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.761560][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.769276][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.777041][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.784790][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.792537][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.800619][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.808391][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.816154][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.823890][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  185.831648][ T9353] SELinux: security_context_str_to_sid () failed with errno=-22
[  186.298704][ T9385] 9pnet_fd: Insufficient options for proto=fd
[  186.306526][ T9385] netlink: 'syz.1.2967': attribute type 1 has an invalid length.
[  186.314330][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2967'.
[  186.336961][ T9387] 9p: Unknown access argument 00000000000000000000<!: -22
[  186.435438][ T9400] netlink: 'syz.1.2972': attribute type 11 has an invalid length.
[  186.460542][ T9402] overlayfs: failed to clone upperpath
[  186.490510][ T9408] overlayfs: failed to clone upperpath
[  186.511140][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2976'.
[  186.520284][ T9410] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=28 sclass=netlink_audit_socket pid=9410 comm=syz.1.2976
[  186.894851][ T9431] rust_binder: Write failure EFAULT in pid:134
[  186.894919][ T9432] rust_binder: Write failure EFAULT in pid:134
[  186.901482][ T9431] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[  186.980537][ T9446] 9pnet: p9_errstr2errno: server reported unknown error 184467
[  187.162071][ T9454] batadv_slave_0: mtu less than device minimum
[  187.233020][ T9458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2991'.
[  187.311503][   T36] audit: type=1326 audit(1790982086.251:30727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9462 comm="syz.1.2993" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b9398ebe9 code=0x0
[  187.953220][ T9473] rust_binder: Write failure EFAULT in pid:154
[  188.007705][ T9484] incfs_lookup_dentry err:-13
[  188.018743][ T9484] incfs: Can't find or create .index dir in ./file0
[  188.025462][ T9484] incfs: mount failed -13
[  188.080821][ T9487] rust_binder: 168: no such ref 0
[  188.085995][ T9487] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:168
[  188.099050][ T9489] 9pnet_fd: Insufficient options for proto=fd
[  188.667183][ T9557] fuse: Bad value for 'group_id'
[  188.672305][ T9557] fuse: Bad value for 'group_id'
[  188.972264][ T9590] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  188.994960][ T9592] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  189.003775][ T9592] overlayfs: missing 'lowerdir'
[  189.044117][    T9] usb 6-1: new full-speed USB device number 33 using dummy_hcd
[  189.059313][ T9601] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9601 comm=syz.0.3041
[  189.279244][   T36] audit: type=1326 audit(1790982088.084:30728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9611 comm="syz.6.3045" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f040b58ebe9 code=0x0
[  189.437555][    T9] usb 6-1: unable to read config index 0 descriptor/start: -71
[  189.445227][    T9] usb 6-1: can't read configurations, error -71
[  189.711612][   T36] audit: type=1326 audit(1790982088.495:30729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9629 comm="syz.0.3051" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f052a78ebe9 code=0x0
[  189.990478][ T9647] fuse: Bad value for 'user_id'
[  189.995589][ T9647] fuse: Bad value for 'user_id'
[  190.043057][ T9649] rust_binder: Error in use_page_slow: ESRCH
[  190.043074][ T9649] rust_binder: use_range failure ESRCH
[  190.049119][ T9649] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[  190.054906][ T9649] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  190.063011][ T9649] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:193
[  190.084350][ T9653] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[  190.106794][ T9656] loop2: detected capacity change from 0 to 7
[  190.121384][    C0] blk_print_req_error: 1 callbacks suppressed
[  190.121403][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  190.136737][    C0] buffer_io_error: 1 callbacks suppressed
[  190.136757][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  190.150574][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  190.159783][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  190.167767][ T9656]  loop2: unable to read partition table
[  190.173600][ T9656] loop_reread_partitions: partition scan of loop2 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  190.180645][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  190.196266][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  190.204627][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  190.213850][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  190.222023][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  190.231183][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  190.239385][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  190.248596][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  190.256755][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  190.265959][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  190.642736][ T9680] netlink: 'syz.6.3066': attribute type 16 has an invalid length.
[  190.650666][ T9680] netlink: 64122 bytes leftover after parsing attributes in process `syz.6.3066'.
[  190.723284][    T9] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  190.883692][    T9] usb 6-1: Using ep0 maxpacket: 32
[  190.890064][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  190.900222][    T9] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[  190.914026][    T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  190.923114][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  190.931127][    T9] usb 6-1: SerialNumber: syz
[  191.153981][    T9] usb 6-1: USB disconnect, device number 35
[  191.437433][ T9699] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  191.736133][ T9705] cgroup: Need name or subsystem set
[  192.123122][   T36] audit: type=1400 audit(1790982090.749:30730): avc:  denied  { append } for  pid=9739 comm="syz.5.3087" name="pfkey" dev="proc" ino=4026533033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  192.160857][ T9740] syzkaller0: entered promiscuous mode
[  192.167137][ T9740] syzkaller0: entered allmulticast mode
[  192.206546][ T9749] overlay: filesystem on ./bus is read-only
[  192.223937][   T36] audit: type=1326 audit(1790982090.852:30731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.1.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9398ebe9 code=0x7ffc0000
[  192.250349][   T36] audit: type=1326 audit(1790982090.852:30732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.1.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b9398d550 code=0x7ffc0000
[  192.279191][   T36] audit: type=1326 audit(1790982090.852:30733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.1.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9398ebe9 code=0x7ffc0000
[  192.303100][   T36] audit: type=1326 audit(1790982090.852:30734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.1.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f0b9398ebe9 code=0x7ffc0000
[  192.317270][ T9756] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3092'.
[  192.326908][   T36] audit: type=1326 audit(1790982090.852:30735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.1.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9398ebe9 code=0x7ffc0000
[  192.359837][   T36] audit: type=1326 audit(1790982090.852:30736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9751 comm="syz.1.3091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9398ebe9 code=0x7ffc0000
[  192.388700][ T9761] netlink: 'syz.1.3094': attribute type 4 has an invalid length.
[  192.425570][  T206] syzkaller0: tun_net_xmit 76
[  192.433270][ T9758] syzkaller0: create flow: hash 2060029718 index 1
[  192.440166][  T206] syzkaller0: tun_net_xmit 48
[  192.456400][    T9] syzkaller0: tun_net_xmit 76
[  192.488749][ T9758] syzkaller0: delete flow: hash 2060029718 index 1
[  192.674810][ T9783] 9pnet_fd: Insufficient options for proto=fd
[  192.969255][  T328] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[  192.982008][ T9816] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  193.055096][ T9828] netlink: 'syz.1.3115': attribute type 3 has an invalid length.
[  193.130934][  T328] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  193.149617][  T328] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  193.171135][  T328] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.181587][  T328] usb 6-1: config 0 descriptor??
[  193.245757][ T9848] overlayfs: failed to clone upperpath
[  193.348573][   T36] audit: type=1326 audit(1790982091.899:30737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9858 comm="syz.0.3123" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f052a78ebe9 code=0x0
[  193.402865][ T9867] overlay: Unknown parameter 'fowner<00000000000000000000'
[  193.421817][  T328] usbhid 6-1:0.0: can't add hid device: -71
[  193.427878][  T328] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  193.439113][  T328] usb 6-1: USB disconnect, device number 36
[  193.495060][ T9883] syzkaller0: tun_chr_ioctl cmd 1074025673
[  193.550576][ T9889] /dev/rnullb0: Can't open blockdev
[  193.794664][   T36] audit: type=1326 audit(1790982092.320:30738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9795 comm="syz.6.3104" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f040b58ebe9 code=0x7fc00000
[  194.241203][ T9935] cgroup: Name too long
[  194.487971][  T355] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[  194.627013][  T355] usb 6-1: device descriptor read/64, error -71
[  194.883702][  T355] usb 6-1: device descriptor read/64, error -71
[  195.140384][  T355] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[  195.300804][  T355] usb 6-1: device descriptor read/64, error -71
[  195.557484][  T355] usb 6-1: device descriptor read/64, error -71
[  195.582248][ T9975] netlink: 'syz.6.3159': attribute type 27 has an invalid length.
[  195.675560][  T355] usb usb6-port1: attempt power cycle
[  195.679907][T10001] overlayfs: failed to clone upperpath
[  195.688666][T10001] overlayfs: failed to clone upperpath
[  195.695395][T10001] fuse: Bad value for 'fd'
[  196.038772][  T355] usb 6-1: new high-speed USB device number 39 using dummy_hcd
[  196.061230][  T355] usb 6-1: device descriptor read/8, error -71
[  196.200254][  T355] usb 6-1: device descriptor read/8, error -71
[  196.455894][  T355] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[  196.478362][  T355] usb 6-1: device descriptor read/8, error -71
[  196.523224][T10017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3175'.
[  196.617344][  T355] usb 6-1: device descriptor read/8, error -71
[  196.734052][  T355] usb usb6-port1: unable to enumerate USB device
[  197.240133][T10055] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3184'.
[  197.250079][T10055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3184'.
[  197.425134][T10064] overlay: ./file0 is not a directory
[  197.467477][   T36] audit: type=1326 audit(1790982095.751:30739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.1.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9398ebe9 code=0x7fc00000
[  197.491148][   T36] audit: type=1326 audit(1790982095.751:30740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.1.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b9398ebe9 code=0x7fc00000
[  197.515140][   T36] audit: type=1326 audit(1790982095.751:30741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.1.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9398ebe9 code=0x7fc00000
[  197.538920][   T36] audit: type=1326 audit(1790982095.751:30742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.1.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9398ebe9 code=0x7fc00000
[  197.562831][   T36] audit: type=1326 audit(1790982095.751:30743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.1.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9398ebe9 code=0x7fc00000
[  197.587336][   T36] audit: type=1326 audit(1790982095.751:30744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.1.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9398ebe9 code=0x7fc00000
[  197.613895][   T36] audit: type=1326 audit(1790982095.751:30745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.1.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9398ebe9 code=0x7fc00000
[  197.637640][   T36] audit: type=1326 audit(1790982095.751:30746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10018 comm="syz.1.3176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b9398ebe9 code=0x7fc00000
[  197.705533][T10092] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:292
[  197.752786][T10107] netlink: 'syz.5.3202': attribute type 4 has an invalid length.
[  197.771903][T10107] netlink: 'syz.5.3202': attribute type 4 has an invalid length.
[  197.861914][T10126] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[  197.870381][T10126] rust_binder: Write failure EINVAL in pid:300
[  198.006754][T10133] netlink: 'syz.6.3210': attribute type 46 has an invalid length.
[  198.043860][T10137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=10137 comm=syz.6.3212
[  198.501877][T10155] fuse: Bad value for 'user_id'
[  198.506818][T10155] fuse: Bad value for 'user_id'
[  198.782487][T10166] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:303
[  198.818249][T10170] binder: Bad value for 'max'
[  198.919389][T10182] /dev/loop0: Can't lookup blockdev
[  198.940838][T10186] netlink: 'syz.5.3230': attribute type 4 has an invalid length.
[  198.950066][T10186] netlink: 'syz.5.3230': attribute type 21 has an invalid length.
[  198.968456][T10186] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.3230'.
[  199.031986][T10198] pim6reg1: entered promiscuous mode
[  199.039537][T10198] pim6reg1: entered allmulticast mode
[  199.113091][   T36] kauditd_printk_skb: 60 callbacks suppressed
[  199.113110][   T36] audit: type=1326 audit(1790982097.284:30807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10216 comm="syz.6.3243" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f040b58ebe9 code=0x0
[  199.182952][T10224] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[  199.461228][  T355] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[  199.621646][  T355] usb 6-1: Using ep0 maxpacket: 8
[  199.630975][  T355] usb 6-1: unable to get BOS descriptor or descriptor too short
[  199.639691][  T355] usb 6-1: config index 0 descriptor too short (expected 2066, got 18)
[  199.648227][  T355] usb 6-1: config 122 has an invalid descriptor of length 0, skipping remainder of the config
[  199.658654][  T355] usb 6-1: config 122 has no interfaces?
[  199.665998][  T355] usb 6-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.06
[  199.667685][T10232] netlink: 37 bytes leftover after parsing attributes in process `syz.1.3249'.
[  199.675313][  T355] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.692286][  T355] usb 6-1: Product: syz
[  199.696686][  T355] usb 6-1: Manufacturer: syz
[  199.701354][  T355] usb 6-1: SerialNumber: syz
[  199.718033][T10236] overlayfs: failed to clone upperpath
[  199.923420][  T355] usb 6-1: USB disconnect, device number 41
[  200.301455][   T36] audit: type=1400 audit(1790982098.397:30808): avc:  denied  { relabelfrom } for  pid=10255 comm="syz.1.3258" name="NETLINK" dev="sockfs" ino=41368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  200.584260][T10291] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  200.593532][   T36] audit: type=1400 audit(1790982098.668:30809): avc:  denied  { search } for  pid=10292 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  200.636446][T10279] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.656002][T10279] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.680526][T10279] bridge_slave_0: entered allmulticast mode
[  200.691519][T10304] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  200.691574][T10304] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  200.701213][T10279] bridge_slave_0: entered promiscuous mode
[  200.721783][   T36] audit: type=1400 audit(1790982098.696:30810): avc:  denied  { read } for  pid=10298 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  200.746519][T10279] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.757320][T10279] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.764468][   T36] audit: type=1400 audit(1790982098.696:30811): avc:  denied  { open } for  pid=10298 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  200.789790][T10279] bridge_slave_1: entered allmulticast mode
[  200.796785][T10279] bridge_slave_1: entered promiscuous mode
[  200.803358][   T36] audit: type=1400 audit(1790982098.696:30812): avc:  denied  { getattr } for  pid=10298 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  200.846395][T10317] overlayfs: failed to clone upperpath
[  200.859887][   T36] audit: type=1400 audit(1790982098.696:30813): avc:  denied  { getattr } for  pid=10298 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  200.939911][   T36] audit: type=1400 audit(1790982098.790:30814): avc:  denied  { read } for  pid=10301 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  200.977025][   T36] audit: type=1400 audit(1790982098.790:30815): avc:  denied  { open } for  pid=10301 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=435 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  201.005473][  T206] bridge_slave_1: left allmulticast mode
[  201.012003][   T36] audit: type=1400 audit(1790982098.883:30816): avc:  denied  { write } for  pid=10292 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  201.020792][  T206] bridge_slave_1: left promiscuous mode
[  201.056292][  T206] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.169714][T10337] bpf: Bad value for 'uid'
[  201.180208][T10279] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.187443][T10279] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.194775][T10279] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.201821][T10279] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.214518][  T206] veth1_macvtap: left promiscuous mode
[  201.220145][  T206] veth0_vlan: left promiscuous mode
[  201.303210][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.310803][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.324745][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.331915][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.341406][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.348479][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.374326][T10279] veth0_vlan: entered promiscuous mode
[  201.387695][T10279] veth1_macvtap: entered promiscuous mode
[  201.604155][T10365] input: syz1 as /devices/virtual/input/input19
[  201.787211][T10381] netlink: 'syz.6.3290': attribute type 4 has an invalid length.
[  201.842218][T10395] bridge0: port 3(veth1_macvtap) entered blocking state
[  201.849295][T10395] bridge0: port 3(veth1_macvtap) entered disabled state
[  201.856323][T10395] veth1_macvtap: entered allmulticast mode
[  201.863237][T10395] veth1_macvtap: left allmulticast mode
[  201.891221][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[  201.903953][  T368] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0
[  201.911509][T10399] Bluetooth: ERR: HCILL_GO_TO_SLEEP_IND in state 0
[  201.918198][  T368] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 0
[  201.996188][    T9] usb 1-1: new full-speed USB device number 37 using dummy_hcd
[  202.157455][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  202.168502][    T9] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  202.177693][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.186411][    T9] usb 1-1: config 0 descriptor??
[  202.191747][T10369] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  202.471641][T10408] overlayfs: failed to clone upperpath
[  202.628969][    T9] hid-generic 0003:04F3:0755.0011: unknown main item tag 0x0
[  202.636470][    T9] hid-generic 0003:04F3:0755.0011: unknown main item tag 0x0
[  202.643990][    T9] hid-generic 0003:04F3:0755.0011: unknown main item tag 0x0
[  202.651434][    T9] hid-generic 0003:04F3:0755.0011: unknown main item tag 0x0
[  202.658825][    T9] hid-generic 0003:04F3:0755.0011: unknown main item tag 0x0
[  202.668488][    T9] hid-generic 0003:04F3:0755.0011: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0
[  202.846773][  T328] usb 1-1: USB disconnect, device number 37
[  203.025698][T10419] overlayfs: failed to clone upperpath
[  203.083702][T10430] overlayfs: failed to clone upperpath
[  203.453525][T10463] rust_binder: Read failure Err(EAGAIN) in pid:15
[  203.661311][T10476] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:28
[  203.918673][T10508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=10508 comm=syz.1.3333
[  204.012288][T10516] netlink: 37 bytes leftover after parsing attributes in process `syz.6.3337'.
[  204.033386][T10518] overlayfs: failed to clone upperpath
[  204.060360][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  204.066556][  T365] Bluetooth: hci0: command 0x1003 tx timeout
[  204.098332][T10528] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  204.098368][T10528] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:366
[  204.370316][    T9] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[  204.541454][    T9] usb 6-1: Using ep0 maxpacket: 32
[  204.547773][    T9] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.558707][    T9] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  204.569682][    T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  204.578833][    T9] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  204.587196][    T9] usb 6-1: Product: syz
[  204.591436][    T9] usb 6-1: Manufacturer: syz
[  204.598843][    T9] hub 6-1:4.0: USB hub found
[  204.812488][    T9] hub 6-1:4.0: config failed, hub has too many ports! (err -19)
[  204.890917][T10549] input: syz1 as /devices/virtual/input/input20
[  205.162546][    T9] usb 6-1: USB disconnect, device number 42
[  205.482602][    T9] usb 6-1: new full-speed USB device number 43 using dummy_hcd
[  205.585298][T10570] wireguard: wg2: Could not create IPv4 socket
[  205.648816][T10589] overlayfs: failed to clone upperpath
[  205.665122][    T9] usb 6-1: not running at top speed; connect to a high speed hub
[  205.675477][    T9] usb 6-1: config 1 interface 0 altsetting 218 endpoint 0x1 has invalid maxpacket 1023, setting to 64
[  205.686613][    T9] usb 6-1: config 1 interface 0 altsetting 218 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  205.701236][    T9] usb 6-1: config 1 interface 0 has no altsetting 0
[  205.715408][    T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  205.730359][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.749967][    T9] usb 6-1: Product: syz
[  205.754287][    T9] usb 6-1: Manufacturer: syz
[  205.758905][    T9] usb 6-1: SerialNumber: syz
[  205.767947][T10554] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  205.776601][T10554] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  206.021118][T10611] incfs: Options parsing error. -22
[  206.026721][T10611] incfs: mount failed -22
[  206.215310][T10554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  206.224592][T10554] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  206.238537][    T9] usb 6-1: USB disconnect, device number 43
[  206.642857][T10633] netlink: 'syz.6.3373': attribute type 4 has an invalid length.
[  206.664175][T10635] overlayfs: failed to clone upperpath
[  206.682030][T10637] netlink: 57 bytes leftover after parsing attributes in process `syz.6.3375'.
[  206.742757][T10645] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3376'.
[  206.753305][T10645] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3376'.
[  206.762304][T10645] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  206.780165][T10645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=10645 comm=syz.0.3376
[  206.795355][T10645] netlink: 'syz.0.3376': attribute type 29 has an invalid length.
[  206.804260][T10645] rust_binder: Failed to allocate buffer. len:120, is_oneway:true
[  206.819176][   T36] kauditd_printk_skb: 12 callbacks suppressed
[  206.819195][   T36] audit: type=1400 audit(1790982104.484:30829): avc:  denied  { map } for  pid=10647 comm="syz.5.3379" path="/proc/sys/net/ipv4/tcp_rmem" dev="proc" ino=44137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_net_t tclass=file permissive=1
[  206.857790][   T36] audit: type=1400 audit(1790982104.484:30830): avc:  denied  { lock } for  pid=10647 comm="syz.5.3379" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  206.966314][T10663] overlayfs: failed to clone upperpath
[  207.265037][T10683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.273976][T10683] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.514704][  T330] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  207.676860][  T330] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  207.688700][  T330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  207.705614][  T330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  207.715924][  T330] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  207.729756][  T330] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  207.738881][  T330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.747933][  T330] usb 1-1: config 0 descriptor??
[  207.839859][T10710] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  207.839901][T10710] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:386
[  207.967347][T10715] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3399'.
[  208.058341][  T330] usbhid 1-1:0.0: can't add hid device: -71
[  208.081311][  T330] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  208.107180][  T330] usb 1-1: USB disconnect, device number 38
[  208.244874][T10724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=10724 comm=syz.5.3404
[  208.289671][   T36] audit: type=1400 audit(1790982105.868:30831): avc:  denied  { unmount } for  pid=8578 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  208.686325][   T13] syzkaller0: tun_net_xmit 76
[  208.691453][T10736] syzkaller0: create flow: hash 2060029718 index 1
[  208.696175][   T13] syzkaller0: tun_net_xmit 48
[  208.709832][T10736] syzkaller0: delete flow: hash 2060029718 index 1
[  208.771478][T10745] x_tables: duplicate underflow at hook 1
[  208.778240][T10745] netlink: 'syz.6.3410': attribute type 4 has an invalid length.
[  208.817617][T10749] fuse: Bad value for 'fd'
[  208.894004][T10769] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[  210.028893][T10811] overlayfs: failed to clone upperpath
[  210.275522][T10818] rust_binder: Error in use_page_slow: ESRCH
[  210.275551][T10818] rust_binder: use_range failure ESRCH
[  210.289265][T10818] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  210.306442][T10818] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  210.314587][T10818] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:410
[  210.434469][  T355] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  210.616318][  T330] usb 6-1: new full-speed USB device number 44 using dummy_hcd
[  210.684509][T10854] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3446'.
[  210.788966][  T330] usb 6-1: unable to get BOS descriptor or descriptor too short
[  210.797144][  T330] usb 6-1: not running at top speed; connect to a high speed hub
[  210.806962][  T330] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  210.816069][  T330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.824101][  T330] usb 6-1: Product: syz
[  210.828272][  T330] usb 6-1: Manufacturer: syz
[  210.832888][  T330] usb 6-1: SerialNumber: syz
[  210.884343][T10868] overlayfs: failed to resolve './file1': -2
[  211.053882][T10837] rust_binder: Write failure EFAULT in pid:413
[  211.056879][  T330] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  211.073738][  T330] usb 6-1: USB disconnect, device number 44
[  211.083905][T10066] udevd[10066]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  211.118988][  T355] usb 1-1: device descriptor read/64, error -71
[  211.282789][T10884] netlink: 'syz.6.3458': attribute type 16 has an invalid length.
[  211.290752][T10884] netlink: 'syz.6.3458': attribute type 3 has an invalid length.
[  211.298512][T10884] netlink: 64066 bytes leftover after parsing attributes in process `syz.6.3458'.
[  211.375677][  T355] usb 1-1: device descriptor read/64, error -71
[  211.613639][T10905] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3466'.
[  211.632494][  T355] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  211.636598][T10907] netlink: 'syz.5.3467': attribute type 16 has an invalid length.
[  211.648451][T10907] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.3467'.
[  211.771432][  T355] usb 1-1: device descriptor read/64, error -71
[  211.827931][  T206] Bluetooth: hci0: Frame reassembly failed (-84)
[  212.028075][  T355] usb 1-1: device descriptor read/64, error -71
[  212.145806][  T355] usb usb1-port1: attempt power cycle
[  212.282945][T10927] 9p: Unknown access argument ���rYPt6��(����+F:DY�6�Oz~m�}�K\��ӊ�v6���G<[������	-�l)hEcD���Xb���v00000000000000000000: -22
[  212.301940][T10929] netlink: 37 bytes leftover after parsing attributes in process `syz.1.3474'.
[  212.312893][   T36] audit: type=1400 audit(1790982109.626:30832): avc:  denied  { map } for  pid=10928 comm="syz.1.3474" path="socket:[43834]" dev="sockfs" ino=43834 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  212.509369][  T355] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  212.531771][  T355] usb 1-1: device descriptor read/8, error -71
[  212.670805][  T355] usb 1-1: device descriptor read/8, error -71
[  212.926504][  T355] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  212.933234][T10945] 9pnet_fd: Insufficient options for proto=fd
[  212.967459][  T355] usb 1-1: device descriptor read/8, error -71
[  212.973496][T10949] 9pnet_fd: Insufficient options for proto=fd
[  213.109361][  T355] usb 1-1: device descriptor read/8, error -71
[  213.226043][  T355] usb usb1-port1: unable to enumerate USB device
[  213.694315][T10968] netlink: 'syz.6.3489': attribute type 11 has an invalid length.
[  213.974618][   T53] Bluetooth: hci0: command 0x1003 tx timeout
[  213.974825][  T365] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  214.113653][  T355] usb 1-1: new full-speed USB device number 43 using dummy_hcd
[  214.252658][  T330] usb 6-1: new low-speed USB device number 45 using dummy_hcd
[  214.275950][  T355] usb 1-1: not running at top speed; connect to a high speed hub
[  214.284550][  T355] usb 1-1: config 1 interface 0 has no altsetting 0
[  214.293023][  T355] usb 1-1: New USB device found, idVendor=056a, idProduct=0020, bcdDevice= 0.40
[  214.302316][  T355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.310542][  T355] usb 1-1: Product: ឤ䑓悛힤쎤ᬉᾞ쇨䏍뫨⣚⸝⪁葀硯㇀滨俬佈䭚㞿뿹漢狶༒汅羟쁶﬿輋㿽꺗쪲䬓ɿ屣绕㈪㦴窂迵缈ꩡ嬨묻엮윐⩈Ἕ漜
[  214.331073][  T355] usb 1-1: Manufacturer: 尩슪ᢥ帼㌉阽띤⸩邽⛒沤ᒴ⼇ꅫ뱰푱所軆З셔쥀晢턮夁젨斌춬೪䖨齓㋇ֶ뀆ỆꙀ瀲漑玁䆣▃箷첄堛먂樭苬왨᤯몝ㄿ죗✏Ꮣ솔褃鮤ﵩ텏炢䯊왅큝ꍃ꺟巼윁즊痈ﾜ将琮謌㗮긖龟鱭찺Ⱥ穀쮔
[  214.359960][  T355] usb 1-1: SerialNumber: syz
[  214.414543][  T330] usb 6-1: unable to get BOS descriptor or descriptor too short
[  214.429167][  T330] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 is Bulk; changing to Interrupt
[  214.445151][  T330] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt
[  214.457672][  T330] usb 6-1: string descriptor 0 read error: -22
[  214.464068][  T330] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  214.475849][  T330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.482626][   T36] audit: type=1400 audit(1790982111.655:30833): avc:  denied  { add_name } for  pid=10993 comm="syz.1.3500" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  214.497480][T10972] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  214.505724][   T36] audit: type=1400 audit(1790982111.655:30834): avc:  denied  { create } for  pid=10993 comm="syz.1.3500" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1
[  214.512390][T10972] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  214.592994][  T355] usbhid 1-1:1.0: can't add hid device: -71
[  214.599157][  T355] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  214.608046][  T355] usb 1-1: USB disconnect, device number 43
[  214.779440][  T355] usb 6-1: USB disconnect, device number 45
[  215.056627][T11012] netlink: 'syz.6.3507': attribute type 4 has an invalid length.
[  215.064469][T11012] netlink: 17 bytes leftover after parsing attributes in process `syz.6.3507'.
[  215.200842][   T36] audit: type=1400 audit(2000000000.551:30835): avc:  denied  { remount } for  pid=11016 comm="syz.0.3509" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  215.200856][T11019] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  215.211993][T11019] rust_binder: 110: no such ref 0
[  215.303059][T11027] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3512'.
[  215.355791][T11031] fuse: Unknown parameter '000000000000000000690x0000000000000045'
[  215.394285][T11038] overlayfs: failed to clone upperpath
[  215.433183][  T206] Bluetooth: hci0: Frame reassembly failed (-84)
[  216.054392][T11068] netlink: 182 bytes leftover after parsing attributes in process `syz.0.3525'.
[  216.511461][T11078] cgroup: fork rejected by pids controller in /syz6
[  216.566089][T11205] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3529'.
[  216.652772][T11220] 9pnet_fd: Insufficient options for proto=fd
[  217.323912][T11260] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  217.417909][   T36] audit: type=1400 audit(2000000002.618:30836): avc:  denied  { connect } for  pid=11263 comm="syz.0.3552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  217.418243][T11265] tmpfs: Unknown parameter '���'
[  217.443325][T11264] SELinux: security_context_str_to_sid (syste_u�Gй�:��) failed with errno=-22
[  217.520370][T11268] fuse: Unknown parameter '000000000000000000030x0000000000000004'
[  217.653728][  T365] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  217.653781][   T53] Bluetooth: hci0: command 0x1003 tx timeout
[  217.810749][T11289] syzkaller0: entered promiscuous mode
[  217.816276][T11289] syzkaller0: entered allmulticast mode
[  218.124317][  T355] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  218.284734][  T355] usb 1-1: Using ep0 maxpacket: 8
[  218.291176][  T355] usb 1-1: unable to get BOS descriptor or descriptor too short
[  218.299575][  T355] usb 1-1: config 6 has an invalid interface number: 248 but max is 0
[  218.307823][  T355] usb 1-1: config 6 has no interface number 0
[  218.313901][  T355] usb 1-1: config 6 interface 248 has no altsetting 0
[  218.322196][  T355] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  218.331297][  T355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.339377][  T355] usb 1-1: Product: syz
[  218.343550][  T355] usb 1-1: Manufacturer: syz
[  218.348139][  T355] usb 1-1: SerialNumber: syz
[  218.571000][  T355] ums-karma 1-1:6.248: USB Mass Storage device detected
[  218.595153][   T36] audit: type=1400 audit(2000000003.730:30837): avc:  denied  { listen } for  pid=11310 comm="syz.5.3566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  218.615477][   T36] audit: type=1400 audit(2000000003.730:30838): avc:  denied  { accept } for  pid=11310 comm="syz.5.3566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  218.618107][  T355] usb 1-1: USB disconnect, device number 45
[  218.841195][T11328] netlink: 'syz.1.3571': attribute type 4 has an invalid length.
[  218.943947][T11335] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3573'.
[  218.968353][T11337] overlayfs: failed to clone lowerpath
[  219.010091][T11341] netlink: 'syz.1.3576': attribute type 4 has an invalid length.
[  219.018472][T11341] netlink: 3649 bytes leftover after parsing attributes in process `syz.1.3576'.
[  219.029070][T11341] tipc: Enabled bearer <eth:xfrm0>, priority 10
[  219.140540][T11350] rust_binder: Failed to vm_insert_page(35184372101120): vma_addr:35184372097024 i:1 err:EFAULT
[  219.140573][T11350] rust_binder: Error in use_page_slow: EFAULT
[  219.151089][T11350] rust_binder: use_range failure EFAULT
[  219.157190][T11350] rust_binder: Failed to allocate buffer. len:4144, is_oneway:false
[  219.162837][T11350] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  219.170848][T11350] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:144
[  219.231216][T11354] overlayfs: failed to clone upperpath
[  219.247044][T11353] overlayfs: failed to clone upperpath
[  219.397044][  T355] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  219.419332][   T36] audit: type=1400 audit(2000000004.497:30839): avc:  denied  { create } for  pid=11355 comm="syz.5.3581" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1
[  219.530510][  T206] syzkaller0: tun_net_xmit 76
[  219.535366][  T206] syzkaller0: tun_net_xmit 48
[  219.536348][T11369] syzkaller0: create flow: hash 2060029718 index 1
[  219.546806][  T355] usb 1-1: device descriptor read/64, error -71
[  219.557542][  T907] syzkaller0: tun_net_xmit 76
[  219.621698][T11372] syzkaller0: entered allmulticast mode
[  219.631157][T11372] syzkaller0: tun_chr_ioctl cmd 2147783536
[  219.803540][  T355] usb 1-1: device descriptor read/64, error -71
[  219.951764][T11379] netlink: 37 bytes leftover after parsing attributes in process `syz.1.3587'.
[  219.961126][T11379] netlink: 37 bytes leftover after parsing attributes in process `syz.1.3587'.
[  219.970289][T11379] netlink: 37 bytes leftover after parsing attributes in process `syz.1.3587'.
[  219.970889][T11380] netlink: 65 bytes leftover after parsing attributes in process `syz.1.3587'.
[  219.979426][T11379] netlink: 37 bytes leftover after parsing attributes in process `syz.1.3587'.
[  219.997511][T11379] netlink: 37 bytes leftover after parsing attributes in process `syz.1.3587'.
[  220.032925][T11385] fuse: Bad value for 'fd'
[  220.038289][T11385] fuse: Bad value for 'fd'
[  220.060144][  T355] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  220.199197][  T355] usb 1-1: device descriptor read/64, error -71
[  220.455887][  T355] usb 1-1: device descriptor read/64, error -71
[  220.462904][T11370] syzkaller0: delete flow: hash 2060029718 index 1
[  220.520207][T11409] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[  220.544294][T11413] netlink: 'syz.6.3598': attribute type 4 has an invalid length.
[  220.573636][  T355] usb usb1-port1: attempt power cycle
[  220.798770][   T36] audit: type=1326 audit(2000000005.787:30840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11454 comm="syz.6.3611" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f040b58ebe9 code=0x0
[  220.937142][  T355] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  220.980990][  T355] usb 1-1: device descriptor read/8, error -71
[  221.086875][  T458] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[  221.120001][  T355] usb 1-1: device descriptor read/8, error -71
[  221.259030][  T458] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  221.269228][  T458] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  221.278942][  T458] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  221.288074][  T458] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  221.296107][  T458] usb 6-1: SerialNumber: syz
[  221.375660][  T355] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  221.398116][  T355] usb 1-1: device descriptor read/8, error -71
[  221.526059][  T458] usb 6-1: 0:2 : does not exist
[  221.533119][  T458] usb 6-1: USB disconnect, device number 47
[  221.539773][  T355] usb 1-1: device descriptor read/8, error -71
[  221.571815][T10066] udevd[10066]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  221.653862][  T355] usb usb1-port1: unable to enumerate USB device
[  222.453119][   T36] audit: type=1326 audit(2000000007.330:30841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11497 comm="syz.0.3627" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f858e18ebe9 code=0x0
[  222.630851][T11527] rust_binder: Error while translating object.
[  222.630895][T11527] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  222.637319][T11527] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:166
[  222.684714][T11531] random: crng reseeded on system resumption
[  222.751809][T11535] overlay: Unknown parameter 'dont_hash'
[  222.799496][T11552] binder: Unknown parameter 'context�'
[  222.807730][T11552] rust_binder: Error while translating object.
[  222.807793][T11552] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  222.814584][T11552] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:179
[  223.354272][  T330] usb 6-1: new low-speed USB device number 48 using dummy_hcd
[  223.526519][  T330] usb 6-1: config 1 interface 0 has no altsetting 0
[  223.535298][  T330] usb 6-1: string descriptor 0 read error: -22
[  223.542534][  T330] usb 6-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.40
[  223.551729][  T330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.833296][T11603] __nla_validate_parse: 60 callbacks suppressed
[  223.833319][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3657'.
[  223.849193][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3657'.
[  223.923357][  T330] usbhid 6-1:1.0: can't add hid device: -71
[  223.929350][  T330] usbhid 6-1:1.0: probe with driver usbhid failed with error -71
[  223.938132][  T330] usb 6-1: USB disconnect, device number 48
[  224.473288][T11612] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  224.494668][   T36] audit: type=1400 audit(2000000009.237:30842): avc:  denied  { mounton } for  pid=11613 comm="syz.5.3665" path="/154/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  224.494810][T11614] overlayfs: missing 'lowerdir'
[  224.636371][T11610] fuse: Unknown parameter '0x0000000000000006'
[  224.696121][T11617] overlayfs: failed to clone upperpath
[  224.708927][   T36] audit: type=1400 audit(2000000009.443:30843): avc:  denied  { unmount } for  pid=8578 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  224.734798][T11621] fuse: Bad value for 'user_id'
[  224.739732][T11621] fuse: Bad value for 'user_id'
[  225.002672][T11657] overlayfs: failed to clone upperpath
[  225.020032][T11661] lo: MTU too low for tipc bearer
[  225.025203][T11661] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  225.054790][  T330] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[  225.215495][  T330] usb 6-1: Using ep0 maxpacket: 32
[  225.216377][   T36] audit: type=1400 audit(2000000009.920:30844): avc:  denied  { getattr } for  pid=11671 comm="syz.1.3688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  225.221864][  T330] usb 6-1: config index 0 descriptor too short (expected 29220, got 36)
[  225.246857][T11672] netlink: 'syz.1.3688': attribute type 39 has an invalid length.
[  225.249322][  T330] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  225.266016][  T330] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81
[  225.275432][  T330] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  225.285521][  T330] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  225.295443][  T330] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  225.308685][  T330] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  225.317951][  T330] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.327219][  T330] usb 6-1: config 0 descriptor??
[  225.548887][  T330] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 49 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  225.561539][  T330] usb 6-1: USB disconnect, device number 49
[  225.568435][  T330] usblp0: removed
[  225.823041][T11713] netlink: 'syz.5.3700': attribute type 12 has an invalid length.
[  226.105584][   T36] audit: type=1400 audit(2000000010.752:30845): avc:  denied  { connect } for  pid=11714 comm="syz.5.3701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  226.105906][T11715] /dev/rnullb0: Can't open blockdev
[  226.269125][   T36] audit: type=1326 audit(2000000010.902:30846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11722 comm="syz.1.3704" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b9398ebe9 code=0x0
[  226.960370][T11734] fuse: Bad value for 'group_id'
[  226.965382][T11734] fuse: Bad value for 'group_id'
[  227.001517][T11736] 9pnet_fd: Insufficient options for proto=fd
[  227.008778][T11736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3708'.
[  227.151616][T11745] rust_binder: Failed to allocate buffer. len:24, is_oneway:true
[  227.208906][T11753] rust_binder: Error while translating object.
[  227.216866][T11753] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  227.223507][T11753] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:530
[  227.525442][  T355] usb 6-1: new low-speed USB device number 50 using dummy_hcd
[  227.698126][  T355] usb 6-1: unable to read config index 0 descriptor/start: -61
[  227.705788][  T355] usb 6-1: can't read configurations, error -61
[  227.846266][  T355] usb 6-1: new low-speed USB device number 51 using dummy_hcd
[  228.009284][  T355] usb 6-1: unable to read config index 0 descriptor/start: -61
[  228.017028][  T355] usb 6-1: can't read configurations, error -61
[  228.023498][  T355] usb usb6-port1: attempt power cycle
[  228.130012][   T36] audit: type=1400 audit(2000000012.641:30847): avc:  denied  { getattr } for  pid=11761 comm="syz.0.3718" path="cgroup:[4026532297]" dev="nsfs" ino=4026532297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  228.290710][   T36] audit: type=1400 audit(2000000012.790:30848): avc:  denied  { create } for  pid=11776 comm="syz.1.3725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1
[  228.367794][   T36] audit: type=1400 audit(2000000012.865:30849): avc:  denied  { setattr } for  pid=11782 comm="syz.1.3728" name="/" dev="configfs" ino=1162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  228.391748][  T355] usb 6-1: new low-speed USB device number 52 using dummy_hcd
[  228.416158][  T355] usb 6-1: unable to read config index 0 descriptor/start: -61
[  228.423823][  T355] usb 6-1: can't read configurations, error -61
[  228.562826][  T355] usb 6-1: new low-speed USB device number 53 using dummy_hcd
[  228.586040][  T355] usb 6-1: unable to read config index 0 descriptor/start: -61
[  228.593666][  T355] usb 6-1: can't read configurations, error -61
[  228.600136][  T355] usb usb6-port1: unable to enumerate USB device
[  228.832839][T11789] overlay: Unknown parameter 'uid'
[  228.939380][   T36] audit: type=1400 audit(2000000013.398:30850): avc:  denied  { watch watch_reads } for  pid=11792 comm="syz.1.3732" path="/555/file0" dev="tmpfs" ino=3085 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  229.063131][   T36] audit: type=1400 audit(2000000013.510:30851): avc:  denied  { accept } for  pid=11796 comm="syz.0.3734" path="socket:[48147]" dev="sockfs" ino=48147 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  229.407756][  T330] usb 1-1: new full-speed USB device number 50 using dummy_hcd
[  229.576549][  T330] usb 1-1: not running at top speed; connect to a high speed hub
[  229.585386][  T330] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  229.599120][  T330] usb 1-1: config 1 interface 0 has no altsetting 0
[  229.607793][  T330] usb 1-1: New USB device found, idVendor=056a, idProduct=0303, bcdDevice= 0.40
[  229.617305][  T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.625525][  T330] usb 1-1: Product: 텦嬡捍緘嚽ៃꙗꮷ޵ࢻ纕韯ᑔ﹚Ⲋ덯躽蟾⮆蝟ৣ㥆皪⢶〵㵀᳨䓗
[  229.637953][  T330] usb 1-1: Manufacturer: 囔ꦡ䁸㺵跏퐪ﶈ뿾ᯰꤾ渙
[  229.645743][  T330] usb 1-1: SerialNumber: syz
[  229.865673][T11803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.874273][T11803] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.882464][T11803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.891033][T11803] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.899155][T11803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.907864][T11803] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.916097][T11803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.924698][T11803] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.368464][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  230.368485][   T36] audit: type=1400 audit(2000000014.735:30853): avc:  granted  { setsecparam } for  pid=11801 comm="syz.0.3736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  230.394189][   T36] audit: type=1400 audit(2000000014.735:30854): avc:  granted  { setsecparam } for  pid=11801 comm="syz.0.3736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  230.399189][  T330] usbhid 1-1:1.0: can't add hid device: -71
[  230.413865][   T36] audit: type=1400 audit(2000000014.735:30855): avc:  granted  { setsecparam } for  pid=11801 comm="syz.0.3736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  230.421171][  T330] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  230.439811][   T36] audit: type=1400 audit(2000000014.735:30856): avc:  granted  { setsecparam } for  pid=11801 comm="syz.0.3736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  230.449225][  T330] usb 1-1: USB disconnect, device number 50
[  230.475508][   T36] audit: type=1400 audit(2000000014.735:30857): avc:  granted  { setsecparam } for  pid=11801 comm="syz.0.3736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  230.483111][T11850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.507828][   T36] audit: type=1400 audit(2000000014.735:30858): avc:  granted  { setsecparam } for  pid=11801 comm="syz.0.3736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  230.527512][   T36] audit: type=1400 audit(2000000014.735:30859): avc:  granted  { setsecparam } for  pid=11801 comm="syz.0.3736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  230.538275][T11850] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.547849][   T36] audit: type=1400 audit(2000000014.735:30860): avc:  granted  { setsecparam } for  pid=11801 comm="syz.0.3736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  230.583241][   T36] audit: type=1400 audit(2000000014.735:30861): avc:  granted  { setsecparam } for  pid=11801 comm="syz.0.3736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  230.602974][   T36] audit: type=1400 audit(2000000014.735:30862): avc:  granted  { setsecparam } for  pid=11801 comm="syz.0.3736" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security
[  230.628217][T11862] 9pnet_fd: Insufficient options for proto=fd
[  230.634712][T11862] SELinux: security_context_str_to_sid () failed with errno=-22
[  230.840914][  T330] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  231.001341][  T330] usb 1-1: Using ep0 maxpacket: 8
[  231.006523][  T458] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[  231.015220][  T330] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 32
[  231.025120][  T330] usb 1-1: config 1 interface 0 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  231.038050][  T330] usb 1-1: config 1 interface 0 has no altsetting 0
[  231.046121][  T330] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  231.055260][  T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.063264][  T330] usb 1-1: Product: 㠊
[  231.067457][  T330] usb 1-1: Manufacturer: ⠊
[  231.072068][  T330] usb 1-1: SerialNumber: syz
[  231.078903][T11849] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  231.086147][T11849] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  231.172071][T11868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3759'.
[  231.172524][  T458] usb 6-1: Using ep0 maxpacket: 8
[  231.181728][T11868] erspan0: entered promiscuous mode
[  231.197298][  T458] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  231.206531][  T458] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.214801][  T458] usb 6-1: Product: syz
[  231.219661][  T458] usb 6-1: Manufacturer: syz
[  231.224494][  T458] usb 6-1: SerialNumber: syz
[  231.310575][  T330] usb 1-1: bad CDC descriptors
[  231.323164][  T330] usb 1-1: USB disconnect, device number 51
[  231.445671][  T458] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 54 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  231.590773][T11905] overlayfs: failed to clone upperpath
[  231.723065][  T330] usb 6-1: USB disconnect, device number 54
[  231.731555][  T330] usblp0: removed
[  232.167099][  T330] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  232.244457][T11930] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3780'.
[  232.254896][T11930] 9pnet_fd: Insufficient options for proto=fd
[  232.327506][  T330] usb 1-1: Using ep0 maxpacket: 8
[  232.335039][  T330] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  232.344153][  T330] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.352200][  T330] usb 1-1: Product: syz
[  232.356368][  T330] usb 1-1: Manufacturer: syz
[  232.360994][  T330] usb 1-1: SerialNumber: syz
[  232.582262][  T330] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  232.797010][T11919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3776'.
[  232.815275][  T355] usb 1-1: USB disconnect, device number 52
[  232.828032][  T355] usblp0: removed
[  233.361833][T11965] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2
[  233.369548][T11966] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  233.418955][T11975] fuse: Bad value for 'fd'
[  233.462335][T11987] netlink: 'syz.0.3799': attribute type 1 has an invalid length.
[  233.599610][T11993] netlink: 'syz.1.3802': attribute type 4 has an invalid length.
[  233.607718][T11993] netlink: 'syz.1.3802': attribute type 4 has an invalid length.
[  233.646458][T12002] netlink: 'syz.1.3806': attribute type 4 has an invalid length.
[  233.654453][T12002] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.3806'.
[  233.874351][T12053] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3820'.
[  234.482864][T12080] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.490217][T12080] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.497361][T12080] bridge_slave_0: entered allmulticast mode
[  234.503873][T12080] bridge_slave_0: entered promiscuous mode
[  234.510914][T12080] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.518031][T12080] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.525205][T12080] bridge_slave_1: entered allmulticast mode
[  234.531699][T12080] bridge_slave_1: entered promiscuous mode
[  234.623634][T12080] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.630732][T12080] bridge0: port 2(bridge_slave_1) entered forwarding state
[  234.638072][T12080] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.645127][T12080] bridge0: port 1(bridge_slave_0) entered forwarding state
[  234.666989][  T206] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.674366][  T206] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.684616][   T46] bridge_slave_1: left allmulticast mode
[  234.690311][   T46] bridge_slave_1: left promiscuous mode
[  234.696039][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.703755][   T46] bridge_slave_0: left allmulticast mode
[  234.709505][   T46] bridge_slave_0: left promiscuous mode
[  234.715234][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.723526][   T46] tipc: Resetting bearer <eth:xfrm0>
[  234.741021][   T46] tipc: Disabling bearer <eth:xfrm0>
[  234.932373][  T206] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.939515][  T206] bridge0: port 1(bridge_slave_0) entered forwarding state
[  234.955321][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.962450][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  234.977336][   T46] tipc: Disabling bearer <udp:syz1>
[  234.985142][T12109] rust_binder: 589: no such ref 3
[  234.990246][T12109] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  234.995141][   T46] tipc: Left network mode
[  235.011304][   T46] veth1_macvtap: left promiscuous mode
[  235.017147][   T46] veth0_vlan: left promiscuous mode
[  235.017243][T12109] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[  235.039331][T12109] rust_binder: 589: no such ref 1
[  235.045841][T12117] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  235.050989][T12109] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:589
[  235.053389][T12119] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  235.071736][T12117] rust_binder: 589: no such ref 0
[  235.077057][T12119] rust_binder: 589: no such ref 0
[  235.098921][T12124] overlayfs: failed to clone upperpath
[  235.115850][T12080] veth0_vlan: entered promiscuous mode
[  235.133008][T12080] veth1_macvtap: entered promiscuous mode
[  235.303006][T12152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=12152 comm=syz.0.3852
[  235.315765][T12152] netlink: 'syz.0.3852': attribute type 27 has an invalid length.
[  235.461204][  T458] usb 6-1: new high-speed USB device number 55 using dummy_hcd
[  235.621730][  T458] usb 6-1: Using ep0 maxpacket: 32
[  235.628014][  T458] usb 6-1: config 0 has an invalid interface number: 214 but max is 0
[  235.636353][  T458] usb 6-1: config 0 has no interface number 0
[  235.642492][  T458] usb 6-1: config 0 interface 214 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 16
[  235.652668][  T458] usb 6-1: config 0 interface 214 has no altsetting 0
[  235.660922][  T458] usb 6-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f
[  235.670288][  T458] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.678422][  T458] usb 6-1: Product: syz
[  235.682673][  T458] usb 6-1: Manufacturer: syz
[  235.687348][  T458] usb 6-1: SerialNumber: syz
[  235.692615][  T458] usb 6-1: config 0 descriptor??
[  235.697959][T12137] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  235.739294][  T330] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  235.899766][  T330] usb 2-1: Using ep0 maxpacket: 32
[  235.906063][  T330] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  235.914482][  T330] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  235.923142][  T330] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  235.924031][T12137] netlink: 'syz.5.3845': attribute type 4 has an invalid length.
[  235.932539][  T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  235.943756][T12137] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  235.950100][  T330] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  235.967488][  T330] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  235.980602][  T330] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  235.989749][  T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.998551][  T330] usb 2-1: config 0 descriptor??
[  236.221482][  T330] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  236.234309][  T330] usb 2-1: USB disconnect, device number 19
[  236.241300][  T330] usblp0: removed
[  236.691221][  T330] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  236.851578][  T330] usb 2-1: Using ep0 maxpacket: 32
[  236.857837][  T330] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  236.866491][  T330] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  236.875165][  T330] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  236.884194][  T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  236.893843][  T330] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  236.903530][  T330] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  236.916805][  T330] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  236.925863][  T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.934808][  T330] usb 2-1: config 0 descriptor??
[  237.055661][T12182] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3861'.
[  237.065931][T12182] overlayfs: failed to clone upperpath
[  237.336790][T12216] netlink: 57 bytes leftover after parsing attributes in process `syz.6.3872'.
[  237.372164][  T330] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  237.396153][  T330] usb 2-1: USB disconnect, device number 20
[  237.403305][  T330] usblp0: removed
[  237.651963][  T458] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  237.671820][  T458] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0002: -71
[  237.683867][  T458] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71
[  237.696806][  T458] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71
[  237.710089][  T458] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random
[  237.728864][  T458] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71
[  237.745573][  T458] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71
[  237.762458][  T458] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  237.777458][  T458] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  237.792783][  T458] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  237.809172][  T458] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  237.829390][  T458] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71
[  237.846075][  T458] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  237.857565][  T458] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71
[  237.869039][  T458] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71
[  237.883412][  T458] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71
[  237.895046][  T458] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[  237.907327][  T458] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71
[  237.920437][  T458] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71
[  237.942311][  T458] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71
[  237.953754][  T458] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  237.966060][  T458] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[  237.978367][T12267] ------------[ cut here ]------------
[  237.983880][T12267] WARNING: CPU: 0 PID: 12267 at kernel/rcu/srcutree.c:664 cleanup_srcu_struct+0x3e9/0x4c0
[  237.988885][  T458] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  237.993908][T12267] Modules linked in:
[  238.007886][T12270] netlink: 'syz.6.3888': attribute type 4 has an invalid length.
[  238.008655][T12267] CPU: 0 UID: 0 PID: 12267 Comm: syz.1.3887 Not tainted syzkaller #0 1976820a860199aae9d2abf4727fc3b97aa7bbea
[  238.022414][  T458] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71
[  238.028014][T12267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  238.042822][  T458] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  238.048978][T12267] RIP: 0010:cleanup_srcu_struct+0x3e9/0x4c0
[  238.065796][T12267] Code: 00 48 8b 5d a0 74 08 48 89 df e8 c2 4e 6e 00 48 c7 03 00 00 00 00 48 83 c4 40 5b 41 5c 41 5d 41 5e 41 5f 5d e9 18 e0 20 04 cc <0f> 0b eb e8 0f 0b eb e4 0f 0b eb e0 0f 0b eb 0e 0f 0b 4c 8b 75 d0
[  238.078046][  T458] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[  238.085473][T12267] RSP: 0018:ffffc9000e067c88 EFLAGS: 00010202
[  238.085503][T12267] RAX: 1ffffd1ffff81c62 RBX: ffffc900054bf8e8 RCX: ffffffff816dc9a9
[  238.098819][  T458] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[  238.102487][T12267] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffe8ffffc0e310
[  238.112430][  T458] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[  238.121612][T12267] RBP: ffffc9000e067cf0 R08: ffffe8ffffc0e317 R09: 1ffffd1ffff81c62
[  238.121641][T12267] R10: dffffc0000000000 R11: fffff91ffff81c63 R12: dffffc0000000000
[  238.135066][  T458] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  238.140580][T12267] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffe8ffffc0e310
[  238.151632][  T458] ax88179_178a 6-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.5-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 4a:86:57:e8:0e:6d
[  238.156609][T12267] FS:  000055555bcf6500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  238.170765][  T458] usb 6-1: USB disconnect, device number 55
[  238.175409][T12267] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  238.175431][T12267] CR2: 00007f0409fb5990 CR3: 000000011f460000 CR4: 00000000003526b0
[  238.192174][  T458] ax88179_178a 6-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.5-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter
[  238.200217][T12267] Call Trace:
[  238.200232][T12267]  <TASK>
[  238.241021][T12267]  kvm_put_kvm+0x1100/0x12b0
[  238.245691][T12267]  ? __cfi_kvm_vm_release+0x10/0x10
[  238.250927][T12267]  kvm_vm_release+0x47/0x70
[  238.255522][T12267]  __fput+0x1fe/0xa00
[  238.259560][T12267]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  238.265196][T12267]  ____fput+0x20/0x30
[  238.269215][T12267]  task_work_run+0x1e3/0x250
[  238.273855][T12267]  ? __cfi_task_work_run+0x10/0x10
[  238.279096][T12267]  ? __kasan_check_read+0x15/0x20
[  238.284172][T12267]  resume_user_mode_work+0x36/0x50
[  238.289391][T12267]  syscall_exit_to_user_mode+0x64/0xb0
[  238.294891][T12267]  do_syscall_64+0x64/0xf0
[  238.299394][T12267]  ? clear_bhb_loop+0x50/0xa0
[  238.304114][T12267]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  238.310082][T12267] RIP: 0033:0x7ff759f8ebe9
[  238.314534][T12267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  238.334228][T12267] RSP: 002b:00007fff1b0d81b8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  238.342706][T12267] RAX: 0000000000000000 RBX: 0000000000037c82 RCX: 00007ff759f8ebe9
[  238.350772][T12267] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  238.358774][T12267] RBP: 00007ff75a1c7da0 R08: 0000000000000001 R09: 0000001e1b0d84af
[  238.366820][T12267] R10: 0000001b2ef20000 R11: 0000000000000246 R12: 00007ff75a1c5fac
[  238.374851][T12267] R13: 00007ff75a1c5fa0 R14: ffffffffffffffff R15: 00007fff1b0d82d0
[  238.382906][T12267]  </TASK>
[  238.385956][T12267] ---[ end trace 0000000000000000 ]---
[  238.487759][   T36] kauditd_printk_skb: 61 callbacks suppressed
[  238.487780][   T36] audit: type=1400 audit(2000000022.318:30924): avc:  denied  { read } for  pid=147 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1