last executing test programs:

2m24.380839493s ago: executing program 3 (id=3531):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={'bridge_slave_1\x00', {0x2, 0x4e24, @broadcast}})
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xffffc000)
futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000000)=0x5, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

2m24.363419104s ago: executing program 3 (id=3532):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r1, 0x4068aea3, &(0x7f00000001c0)={0xdb, 0x0, 0x8})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7fc00000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0xfffffffffffffdf4, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000000)={[0x1, 0x0, 0xdddd0000, 0x2], 0x2, 0xc9, 0x2})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000100)={0x1, <r6=>r0, 'id1\x00'})
ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r5, 0x4068aea3, &(0x7f0000000240)={0xdf, 0x0, 0x4000})
setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
socket$inet6(0xa, 0x6, 0xffffcc87)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000003c0)={0x3, &(0x7f0000000380)=[{0x1, 0x8, 0x2, 0x1}, {0xfc, 0x7f, 0x2b, 0x3a}, {0x2, 0x4, 0x0, 0x2}]}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2m24.208172646s ago: executing program 3 (id=3538):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]})
io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x600}])
io_setup(0x2, &(0x7f0000000000)=<r1=>0x0)
syz_clone3(&(0x7f0000000080)={0x21800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_destroy(r1)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'veth1_to_bond\x00', 0x400})
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x2d0102, 0x0)
fcntl$getflags(r3, 0x3)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x6}, @flat=@weak_handle={0x77682a85, 0x1000}, @fda={0x66646185, 0x1, 0x0, 0x15}}, &(0x7f00000001c0)={0x0, 0xffffffffffffffaa, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

2m23.49501633s ago: executing program 2 (id=3540):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe67000)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) (async)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) (async)
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x62002, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x62002, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x21)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000161000/0x18000)=nil, &(0x7f0000005700)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e27c3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d749cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55bdd46e5bcb3330c7edefd31c33f61275e516"})
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000168000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000168000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00'})
r4 = socket(0x10, 0x803, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000}, 0x4, &(0x7f0000000bc0)={&(0x7f0000000880)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="000125bd7000fbdbdf250300000008000300000000002400068008000300ac1414bb08000600120000000500020081000000060005004e230000050005000700e2ff07000300f09300000500050006000000040001803e4a1b271ba738699e98581045fcc1e532561705f4eaf00b58091270a016aa094fd9823a358b082ff9047785b755226a97833c0f267bc5e9b8232125357f5376e06a66fa5a23c3d9249f50671d6eed1adac1d83d9369d073de90001f08550f278fcd21c1bebd0231549ae6db80444c32601603107df3bf47a0a7f9db0ad7a142d62966d4e891c85861ae715782", @ANYRES64=0x0], 0x5c}, 0x1, 0x0, 0x0, 0x4000091}, 0x4004084)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)

2m23.350920733s ago: executing program 3 (id=3544):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r0 = epoll_create1(0x0)
fgetxattr(r0, &(0x7f0000002600)=@known='com.apple.FinderInfo\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
close_range(r2, r3, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
pipe(&(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$P9_RGETLOCK(r5, &(0x7f00000002c0)=ANY=[], 0x200002e6)
fcntl$setpipe(r4, 0x407, 0x7000001)
madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x66)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
r6 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x165342, 0x0)
write(r6, 0x0, 0x0)
mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, 0x0)

2m23.203333266s ago: executing program 2 (id=3546):
r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000000)={'netdevsim0\x00', {0x2, 0x0, @multicast2}}) (async, rerun: 64)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64)
ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) (async)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r1, 0x8008f512, &(0x7f0000000080)) (async)
r2 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x80000, 0xc0)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000100)={0x1, 0x2, 0x3, 0x2, 0xffffffff, 0x401})
close_range(r2, r0, 0x0)
r3 = socket$inet6(0xa, 0x80000, 0x1) (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r4=>0x0}, 0x400)
r5 = open(&(0x7f0000000200)='./file0\x00', 0x240000, 0x0) (async, rerun: 64)
close_range(r0, r0, 0x2) (rerun: 64)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
fsetxattr$security_evm(r6, &(0x7f0000000240), &(0x7f0000000280)=@v2={0x3, 0x3, 0xa, 0x5, 0xfe, "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"}, 0x107, 0x2) (async)
syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f00000005c0)={0x14, &(0x7f00000003c0)={0x0, 0x1, 0xe5, {0xe5, 0xa, "7264c9ddcbc4e5143a8b49bafe6ae803c90bf4a7d040286f4e68c713a0d111f635bc08060a3c65b38e458e309bcf1b75069855706c8dba1d50db62192c79e94661961a0640b93cab18ea116dc221fef6ddc1a52e43b596e308ff85a0c254e37964612ed651680e612414947dd3837f0d1fd47bd403610624165ada28ae164f07ba6d0c11e6928492ae15563625e22aa9481bbd9ba53b018778ecb468a30bf20461c697df7ecb744b25c2a3c69993209ca3e732128783966e5d5a143d3e8f8c809d3d89f3e0664fae90cb8ff48253688bacdc84b14081f84044ce99575557c2602aa6b9"}}, &(0x7f00000004c0)={0x0, 0x3, 0xc7, @string={0xc7, 0x3, "cc9c7f891b7b9f2b01f6a6973b3ca54107cebc54f23fb06c418be7449bd973738b1af353f02f9554c5f0f0815f89cd1b058d46636cb06b2b735d3a761be277260b92b74bbb4cd5d6cb06e885daadf0a922877b4bf7e1aed910482292138399a814ec6d55e16361aff7c366aa6f6b3a78ad78c657b4bb671de09fd27c4d509398cb507e66894029a4190449d3d1b24b7603ee691291b4718312573f9bfc23dfda8199eca16ca5ebe3778d11173e4e830c5e5f697faa07909654204d395cae31d1617b8f261d"}}}, &(0x7f00000008c0)={0x34, &(0x7f0000000600)={0x0, 0x11, 0xc4, "cab312e4752d50cacd8fa6301a36cdf1d3a7cb49f67a5297dc243c006e139fce8395c9aad0258dbef8cadf01f66daed296eb0b4ad45659212d76a55bb1b3c9077eab011407a3405f34f6f4a5876972e5a476d79720d5cb1050460b784bc7b1b21654ed02a271adec1ffd94c9d48f953160a0ac8b9418102137617b5a8d59c696a7a0efc7c288541e4d6d6972013b3b448b0c1d11c642dc1109c7da5bd66b2e83a4b63d17b2d413c0a1316f55807403f632c4c19dbe3128d446a3bd75c0e10092641f389a"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x58}, &(0x7f0000000780)={0x20, 0x0, 0x96, {0x94, "771b68c8ab29b74030b6e3b2191a56ec4c79919452d07bf99bf66fcc2ca1a8fd6e57f94f91eff3923ad0e71c517a002b352007f06dd7b73f1c283e759e3792f29501cc9fd0f1ad543090a71982be1a51b0e75fa8c2b7c0921c29f605a977f45419404a599e05e0896e59633b3af7fd4e351df101ab4119a7d6756dce173f21b1aa8a7272bb798a13e5c48723e3066318bd125504"}}, &(0x7f0000000840)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000880)={0x20, 0x0, 0x1, 0x4}})
r7 = openat$zero(0xffffffffffffff9c, &(0x7f0000000900), 0x480, 0x0) (async)
r8 = socket(0x15, 0xa, 0x1)
poll(&(0x7f0000000940)=[{r7, 0xf31fb5782a07ded5}, {r8, 0x1088}, {r5, 0x400}, {r6}, {0xffffffffffffffff, 0x5152}, {r0, 0x100}, {r2}, {r2, 0x10}, {r5, 0x4000}], 0x9, 0x800)
ioctl$TIOCSIG(r5, 0x40045436, 0x38)
fstat(r1, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}) (async)
syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000a40)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x458, 0x5014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3a, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0xea, {0x9, 0x21, 0x1, 0x4, 0x1, {0x22, 0xf53}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x6, 0x89, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x5, 0x2, 0xc9}}]}}}]}}]}}, &(0x7f0000000cc0)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x310, 0xbc, 0x7f, 0x7f, 0xff, 0x6}, 0x20, &(0x7f0000000ac0)={0x5, 0xf, 0x20, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xc, "c59789441864e401d7ca90cc06b763eb"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x5, 0x1}]}, 0x4, [{0x4c, &(0x7f0000000b00)=@string={0x4c, 0x3, "21b3b71058033b1bcbee44fc27abd3634cc905d536062e8dd9c1da76ab2f5118a4b111ab593d80f79d4682891ea53aeeb254ce3312a2648cf0ef6e8740c903076745beeaf885fdead529"}}, {0xac, &(0x7f0000000b80)=@string={0xac, 0x3, "316cb4ed905235013eb97c9563dc14f57759d24b48620ad6c46148be1658ae76e2a2891f73a9e07282d2063a055917fddd2f3fa63861c856558f43de5773ee4a50cd1429f3c73fc45188f01aed097dadc5cafdb13101c33898bcb0c04d659792bd6666e5025deae5531c272d11915003e337e298838e74a5a1132f8b314288cebda5966e6a3542163dad119175d32d29b69e1d4db8bd44c9a9c1bb351f1b25d8934b02448164d5aa2935"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x1407}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x43f}}]})
syz_usb_connect(0x0, 0x226, &(0x7f0000000d40)={{0x12, 0x1, 0x201, 0x3d, 0xf, 0x8, 0x10, 0x6cd, 0x112, 0x23ef, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x214, 0x3, 0xc, 0xb, 0x20, 0x0, [{{0x9, 0x4, 0xe, 0x0, 0x0, 0x53, 0x34, 0x4c, 0x5, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x7, 0xef, 0x1002}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x1, 0x2, 0x6, 0x7, "5795"}]}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "b1ea"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x4, 0x7, 0x6f}, {0x6, 0x24, 0x1a, 0x6, 0x10}, [@mdlm_detail={0x81, 0x24, 0x13, 0x0, "4f158dced17642960745ebbd41e4c36cceb5b42a31607056f040cc4cea1c333a0fd5d03ba68019d94d78521d978c22bdbcc573e2331087e691894315a7af59fef623edd6dc00be71b0987ea5185e7ed32c0a74c0972b79989841e6da477fa6f75e8e961d4fd31bb03b5baaf3e59804af6a3ecff79aa2b5998f0d15c7b1"}, @mdlm={0x15, 0x24, 0x12, 0x9}, @acm={0x4, 0x24, 0x2, 0xb}]}]}}, {{0x9, 0x4, 0xfd, 0x1a, 0xc, 0xf, 0x84, 0x63, 0x8, [@hid_hid={0x9, 0x21, 0x0, 0x81, 0x1, {0x22, 0xfffb}}], [{{0x9, 0x5, 0x2, 0x1, 0x200, 0xf7, 0x9, 0xfc}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x5, 0x81, 0x5}}, {{0x9, 0x5, 0x4, 0x10, 0x200, 0xb1, 0x6, 0x6}}, {{0x9, 0x5, 0xd, 0x14, 0x8, 0x3, 0xd6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x102, 0x7, 0x65}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x4e, 0x1}]}}, {{0x9, 0x5, 0xa, 0x4, 0x10, 0xfc, 0xda, 0xe, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x800}]}}, {{0x9, 0x5, 0x4, 0x10, 0x408, 0x9, 0x1, 0xd, [@generic={0x4, 0x5, '\a='}]}}, {{0x9, 0x5, 0x2, 0x3, 0x200, 0x3, 0x2, 0xc0}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x7, 0x3, 0x7}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0xb, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0xa5aa}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x9, 0x6, 0xa5}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x0, 0x7f, 0x40, [@generic={0x6a, 0x29, "653ab2e4063c2a18ae26e33ec8ee850f0ab375c6aa615a5b8f19add296aabd0d44685847a4c9a4478bbeefdad1a3df6300dd295309fcc28ce59681e09ffd548e1bc1af8175f64ce6cda76e47a77155f388ab88de1007e946c4fcd6c4cb5e88113bf4e9f9a6f7f8ac"}]}}, {{0x9, 0x5, 0x5, 0x8, 0x8, 0x78, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x1ff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc4, 0x3}]}}]}}, {{0x9, 0x4, 0x8c, 0xa, 0x1, 0xff, 0xff, 0xff, 0xf, [@hid_hid={0x9, 0x21, 0x2, 0x5, 0x1, {0x22, 0x7e0}}], [{{0x9, 0x5, 0xd, 0x10, 0x400, 0x1, 0xb3, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x18}]}}]}}]}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x300, 0x3, 0x1, 0x6b, 0x20, 0xa}, 0x3e, &(0x7f0000000fc0)={0x5, 0xf, 0x3e, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x415a0ff648c00480, 0x9, 0x3, 0x8, 0x81}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0xe29, 0xf000, 0x2, [0xc000, 0xc0, 0xff003f]}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "31be5a6dcd6ec1fbc13df8aa9d10bdbc"}]}, 0x1, [{0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x457}}]})
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001080)={<r10=>r7, 0xc, 0x5, 0x3})
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r10, 0x6, 0x21, &(0x7f00000010c0)="2d3c936fcd6b213904a9f191d18f6abd", 0x10) (async, rerun: 32)
ioctl$BLKTRACESETUP(r10, 0xc0481273, &(0x7f0000001100)={'\x00', 0x8, 0xb, 0x5, 0x1, 0x3, <r11=>0xffffffffffffffff}) (rerun: 32)
kcmp(r11, 0xffffffffffffffff, 0x1, r3, r6) (async)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r7, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001280)={&(0x7f00000011c0)={0x9c, 0x0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x3}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x4010) (async, rerun: 64)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r10, 0x6, 0x2, &(0x7f0000001300)={0x2, "06b0ce"}, 0x6) (async, rerun: 64)
eventfd(0xe) (async, rerun: 64)
write$FUSE_ENTRY(r2, &(0x7f0000003380)={0x90, 0x0, 0x0, {0x5, 0x3, 0x81, 0x0, 0x6a, 0x2c, {0x3, 0xff, 0x1, 0x100000000, 0x5, 0x8000, 0x3ff, 0x4, 0x9, 0x5000, 0x1000, r4, r9, 0x3, 0x80000001}}}, 0x90) (rerun: 64)

2m23.123980998s ago: executing program 2 (id=3547):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket(0x28, 0x805, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000440), 0x10)
socket$inet6(0xa, 0x1, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0)
ioctl$FICLONERANGE(r5, 0x4020940d, &(0x7f00000000c0)={{r5}, 0xfffffffffffffffc, 0x1ff, 0x100000})
close(r4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
close_range(r0, 0xffffffffffffffff, 0x0)

2m23.053678129s ago: executing program 3 (id=3548):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
poll(&(0x7f0000000000)=[{r0, 0x1000}], 0x1, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_MPATH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r2, 0x800, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x11}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4)
r4 = gettid()
fcntl$setown(r1, 0x8, r4)
setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000001c0), 0x4)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000200)={0x0, <r5=>0x0})
ptrace$PTRACE_GETSIGMASK(0x420a, r5, 0x8, &(0x7f0000000280))
r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0)
ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000300)={'bridge_slave_1\x00', 0xef9c})
r7 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x259, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x30, 0xf, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x7, 0x93, {0x9, 0x21, 0x5, 0x80, 0x1, {0x22, 0x15a}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0xc6, 0x7, 0x3}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x110, 0x1, 0xff, 0x40, 0x40, 0x81}, 0x24, &(0x7f00000003c0)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0xa, 0x4, 0x4, 0x280, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "28b2c146939370c1db3ae36ed1e2172c"}]}, 0x2, [{0xc6, &(0x7f0000000400)=@string={0xc6, 0x3, "be11aeb53a8b91d8f48a8a9d9ba5eed751201cfc0317752961fdf78dadbcaac1d68c71e4d78adfc0814dd7495d7da4d72d8e96a3eec1b134e2477d4dd0bc1144386d22fe78328a7a073dff7d57fad0cc4bdbb9727e477a3ac6531f099539a3dc4f066d01ce83f46747c9cd8e2b919967631b15aa0028dead085fff41f2038191e4b350472d2024162219d7a811c9ddb014aaa23ccaa8e70521d98629ec00c34ffe05c6de3db3b991dadfece8dc406614721eafc5338ee285d0a76f18e31327f0dd1858b2"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x380a}}]})
syz_usb_control_io$hid(r7, &(0x7f0000000700)={0x24, &(0x7f0000000580)={0x20, 0x23, 0x4b, {0x4b, 0x22, "b0741ab2abe821bec59ab2413640865bcc9915e5b2c2122eaaa65e7e944985e2316315030584af5cd9fd3141ba1fed16e1aa979a2de28ced0ba9de9acaf068565115416e7ede2970ce"}}, &(0x7f0000000600)={0x0, 0x3, 0x69, @string={0x69, 0x3, "f11b56110a8c7397293cfef57f88c9fc6eb105f6efa8c19871b8f8793dc32dc2ef1d30cafee5c3336514f3cf3e311c7c3929f9ac962bd2c8de5b26fcedae01ac04efe5666bf2db6023417ea00ad87b8a4a71a1c9c5ad01a6879b94b392eb8fce68b07c02ca1b8c"}}, &(0x7f0000000680)={0x0, 0x22, 0x2, {[@local=@item_012={0x1, 0x2, 0x9, "de"}]}}, &(0x7f00000006c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x4e, 0x1, {0x22, 0xc08}}}}, &(0x7f00000009c0)={0x2c, &(0x7f0000000740)={0x20, 0x4, 0x97, "bfed241508eff2f35fab44d4e6411480a1060f16538431654297167e35be0693f8bb8798890617291102cf4bf01922e9092af4048e7fecc0dc9e64e5f5423159ce764a5716e04e6be9732d72afb0526306daaf6bbb80257978cd227b3c5f7d23dc8e556134da8abc7b11d3d8669c3cf15a79d057ca89d80d19d9ada914852c54b7899763c73d833b315a4cf2dbe70fa544ee03af0858a2"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000880)={0x20, 0x1, 0xec, "9a6d7df3e5db5f3e72160ffea3919da1102cc867d107180980ca59c96194cf1e6e9dda903c2a895564c6cdd74bb58139140f53f97569f040daa56cce0e1755d96d26594faa40d7d566594336e40dc02542aadd07faf0c4daf3594860bbcedebbb5b5ed59e9b1c00933b4d4e6bf2e16188a80d7a7b0f271f40a58369979ae20df3034450fe5d3e0261dc3276c7ee574994c55152ed7e10cfea9abfcc9f513d044f4945ede8c649773d8c801003e8f2e6a3dd02b834226f822f861fad07f9a865b4fea7d0256f1266887d2e931d53ec97be78673dd39d76d8aa7d37c77b646696db03b9a2047845308921975da"}, &(0x7f0000000980)={0x20, 0x3, 0x1, 0x4}})
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a40), r6)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r6, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xd4, r8, 0x300, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x100000001}, {0xc, 0x90, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0xfffffffffffffff9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x7ff}, {0xc, 0x90, 0x8}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x4)
write$P9_RMKNOD(r6, &(0x7f0000000c00)={0x14, 0x13, 0x2, {0x10, 0x3, 0x4}}, 0x14)
getsockopt$bt_rfcomm_RFCOMM_LM(r6, 0x12, 0x3, &(0x7f0000000c40), &(0x7f0000000c80)=0x4)
bind$netlink(r6, &(0x7f0000000cc0)={0x10, 0x0, 0x25dfdbff}, 0xc)
write$char_usb(r6, &(0x7f0000000d00)="c7362c7b18ffe3fb7780a90842c78c2e6c1cfd52543d2924aa3d0795e45e8cc891c9945d7a3b1a9c2554631ad172c52c813b9d9e9e4de483c4e602505fdf2ec742026190993c108cd5bed677c0a385d821c3ad24d45ce89945979e287ebda65f598232d4130a0fafdc9465aad8c46a8458df86dc08618112990c384526a07b06414346989f7ed3c819c29acff2187546f0871048ac0efe1c41c76975e9ed32b7a147f3d0543f492559e7366d38588fc7ee0454ddf5e808d45847a1550b5adbe4d3bb8b52165e77ec531346461d3c6c219d35d8e0c93a0b17926d", 0xda)
write$tun(r1, &(0x7f0000000e00)={@val={0x0, 0x6006}, @val={0x3, 0x0, 0x0, 0xe8d7, 0x3edc, 0x3}, @x25={0x0, 0x3, 0x0, "18ea1e54437aa6b1f6936edcd4adda734e04a7cd34e7c6c26fa1cc1a613bdf75671b5be522f255779d3ac09c0b5958f90a49edeec4e4602d2e045231476eea285da6f56f11988902c44d269b816bc4b378a429968813f472b87d9680a47b6c98091cd12aad06f9135c60d4b4acb15f4236789090cd4345ec59a17f8f4b7197951e33401eb1e43c7013636e617dadd937f7907f9ea19104cd8c602e5c37ac84a7e5f9059d5586b6ba433cd973b2a4fe449a2f2f7fcf7ab16cb0d650dd834f1da0387177f79f0bd666b3f93fabd5f97b63c366e62c86a7f89f4331c21e"}}, 0xed)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000f00)=0x4, 0x4)
epoll_pwait2(r6, &(0x7f0000000f40)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000000fc0), &(0x7f0000001000)={[0x200]}, 0x8)
epoll_pwait(r6, &(0x7f0000001040)=[{}, {}, {}, {}, {}], 0x5, 0x5, &(0x7f0000001080)={[0x2]}, 0x8)
ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f00000010c0)=@generic={0x3, 0x0, 0x1})
syz_usb_control_io(r7, &(0x7f0000001280)={0x2c, &(0x7f0000001100)={0x48ed86f92cfd9d67, 0x23, 0x51, {0x51, 0xe, "cbe30afa0d33557d0d01a3d1a3af19c61b9868f269a7edd3a6ba7077918abdfa5eb13393db79a144970829ccddcf1bab2f194033d149b959cb57147b997e8208b18cec1f230c33b92a6592a8b040e0"}}, &(0x7f0000001180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2418}}, &(0x7f00000011c0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000001200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x81, 0x0, 0x6e, 0x1, "950e2748", "9e27182e"}}, &(0x7f0000001240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x18, 0x3, 0x29, 0x1, 0x3, 0xff}}}, &(0x7f00000016c0)={0x84, &(0x7f00000012c0)={0x0, 0x15, 0x12, "484fe8340eef19bd93bc90c5ddc667dd2130"}, &(0x7f0000001300)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001340)={0x0, 0x8, 0x1, 0x81}, &(0x7f0000001380)={0x20, 0x0, 0x4, {0x2, 0x5}}, &(0x7f00000013c0)={0x20, 0x0, 0x4, {0x200, 0x1}}, &(0x7f0000001400)={0x40, 0x7, 0x2, 0x8000}, &(0x7f0000001440)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000001480)={0x40, 0xb, 0x2, "9865"}, &(0x7f00000014c0)={0x40, 0xf, 0x2, 0x44}, &(0x7f0000001500)={0x40, 0x13, 0x6, @random="dc62cd0927f8"}, &(0x7f0000001540)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, &(0x7f0000001580)={0x40, 0x19, 0x2, "1ffd"}, &(0x7f00000015c0)={0x40, 0x1a, 0x2, 0x41}, &(0x7f0000001600)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000001640)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000001680)={0x40, 0x21, 0x1, 0x7}})
rt_sigprocmask(0x0, &(0x7f0000001780)={[0x80000001]}, &(0x7f00000017c0), 0x8)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000001800)={0x1, 0x0, [{0x188, 0x0, 0xfffffffffffffeaa}]})
quotactl_fd$Q_SYNC(r6, 0xffffffff80000100, 0x0, 0x0)

2m23.00837745s ago: executing program 3 (id=3549):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000880)="66be8f037545cda1011298f0", 0xc)
r1 = userfaultfd(0x801)
read(r1, 0x0, 0x0)
r2 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
write$binfmt_format(r2, &(0x7f0000000100)='0\x00', 0xfffffed8)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0)
ioctl$BLKRRPART(r3, 0x125f, 0x0)
r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
quotactl_fd$Q_QUOTAOFF(r4, 0xffffffff80000300, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r5=>0x0})
ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f00000003c0)={{r2}, r5, 0x10, @inherit={0x68, &(0x7f00000013c0)={0x1, 0x4, 0x1, 0x50b, {0x0, 0x8, 0x3, 0x2001, 0xffffffffffffff00}, [0x7, 0x6, 0x2, 0x1]}}, @subvolid=0xffffffffffffffff})

2m22.931790751s ago: executing program 32 (id=3549):
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000880)="66be8f037545cda1011298f0", 0xc)
r1 = userfaultfd(0x801)
read(r1, 0x0, 0x0)
r2 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
write$binfmt_format(r2, &(0x7f0000000100)='0\x00', 0xfffffed8)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0)
ioctl$BLKRRPART(r3, 0x125f, 0x0)
r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
quotactl_fd$Q_QUOTAOFF(r4, 0xffffffff80000300, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000000140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r5=>0x0})
ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f00000003c0)={{r2}, r5, 0x10, @inherit={0x68, &(0x7f00000013c0)={0x1, 0x4, 0x1, 0x50b, {0x0, 0x8, 0x3, 0x2001, 0xffffffffffffff00}, [0x7, 0x6, 0x2, 0x1]}}, @subvolid=0xffffffffffffffff})

2m22.929208402s ago: executing program 2 (id=3551):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000090, &(0x7f00000005c0)={0xa, 0x4e20, 0xa3, @loopback, 0x1ff}, 0x1c)
r4 = socket(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a00010200000000000000000a"], 0x164}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000001c0)={"d5259906e58148a8fe6757ab748714f8203687f3db652f562abfde2459e51dcacb54cbbcc2f6c327687a6070d7de9ae5b7eb5e3f242b06a3bbaa05b4d5f7aab39c62bd719fc32eb0c48e4014f7ec59cb63caf95126a95e75ff68438bed6fac017e2242359a1b065bc83a27de5ac0545af0db8609d947375efcb2bf6d5c4b548f91ba8a365ce1645f1a88a369526a68730adb0a8e8c6ff4cc6be9073d9a7dd0937f785d9b3024fde5f2287d48ea75830b5d067bbd2e5f9644ac732647c55cc073b7e01e281e4ee6a78c952ed0d1eb5c94eded6ac1f7c9ef1b71c04ddbab4dc44cbfe29dfdb3b6100d3b6cae4741574bbcf6c5f017a9fb6040d62b2e7ea3d8e36bc72fd879ebfcba9004cc3513f0217cb1d8fd6a60a16b0e5aa05e0f972bbe53b114204edd511111e0f611fccc51cc195d767eceda762f67569c7a0798bfc02a2d7bbac8f1eda421e9b7bbb8ced8f6522d37cbbed5daed10fb95a4390ef0b51a9bc61480ddbc2bb817733ee81ee656985416c51d8dc939a298f8fd26a20a5042d25c0c38b135999f9c79983ae9c007087a23160602e33043cd7b0c0ded210b694eb0e801bdd9cf2eb3aaab9628523cb18e652f9d427f93720a8c21db32cb29ce6645b7e68131d781f6c0a82f365ebfa31987bbf61c9c7e5b09f538bd6b195b991d197a1735f5e361b22ba96fc208f34d90eacf5c42fc5f750da0d31ce7f84f736d5d4a4ba7070463553aac2cbd1b5e68e02b54acefc7a7fe2895ffc7b81049abdbf02b68b20ee0577dd186d5a1acadea312bd1bc553c4dc773fdb349f1434d17bb05d72d33b3604c0d238882ea0adfb39b952b7dc733bd1a8623ad4016be5b6c2752d0d1a35622960e62ed50ae9604ae3ad24d075b43eb81e3d651634203042064a9e281e0838d600a12596efe80a436f9beba4b5ddc3c3c5b477f4c10e06abba5dce087a5c511e1085bbc2104da7ad6cd18aa39276738442d1bee368497fe3e2fb1a864375d86ee3b45b30036f32084bf41cbc0c0c969357ea87f168c81b34f34d412f153fd00de759199a20fd681cea3f92408a4a5e9b0cc9b33e70a40d887cc08476b8c67fa4567361e1b075d7b5ad073d8087a069e480fc961f3f21adcd11fc14a7dca3ead4f8abec4d099a46dde98c85bed5f7cfdfcc83d1f6280ef71f9aa13c9cf6f0c4c5a02e0acfa8a488e090e80f5efd72f14a02239510625c3ed4a7aca6da468c4ed4e1f5259c131383a0c4425bd31730f657d366c72857c6deab5c25a212b596d54cc78f4d21eb50e1c6296e278bcf70febe3fd851af22ebeaad1b2b387ac3801fe25f416ff4d24063298f2709ab66293d50d76ad95cb12baf4169de19888f652204fb76b040c1dda305254f4ce352d71001ee7396c550a8735f2e1cb7a7cf65a6906af16e368d794892d734bda14d48441cd5a829f86c31a3fcf7f"})
syz_clone(0x200200, &(0x7f0000000000)="89ea20d905d1891251e7312be19f885a5a3951889408b7f89752b2bdf659dab866194999b744c37b30e9f43d8bf812df90e243ddb02872ade16b743c02e3796f0bcccf815afbd5fd93f2d9bcfc6658cc9df7db9269dbcf650f22842bce75cf775c6c10c315e41e1911d27ae316fd708d703f5366e24ebd41143129571be194177667a634c8c92b3dc3610226d7676e10ab70585cf906860804fc0d714666dd314fdff61b8448", 0xa6, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000005c0)="725aebc3423e0c8429e36f64fd436216682fe8ebe8f4cbe2d4032609ce460f21fb94fb3675afb9bad20b3141a86ad6afbe2fb19b17d7593297c44d2e63f349424f2f0a53d380dae665492917a4a4603ef10ce82ac522491ab801b849aeb6f3388421189560dee7710f154a848a484407b6eb236b481a24a387073d88ce8518")
close_range(r2, r0, 0x0)

2m22.720632866s ago: executing program 2 (id=3553):
unshare(0x62040200) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6(0x10, 0x3, 0x0)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f2000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0)
sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000140001000000000000000000020000000400000014000100ff01000600000000000000000000000115000280bf"], 0x44}}, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) (async)
r2 = socket(0x2, 0x2, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x19, &(0x7f00000001c0)="a2", 0x1) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r3 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async)
fsmount(r3, 0x0, 0x0) (async)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) (async)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000003480)=ANY=[@ANYBLOB="1300000065ffff001000000600395032303030"], 0x13)
r5 = dup(r4) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000edff9c000040"])
write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) (async)
r9 = socket$tipc(0x1e, 0x5, 0x0)
getsockopt$TIPC_IMPORTANCE(r9, 0x10f, 0x89, &(0x7f0000000000), &(0x7f0000000040)=0x4)
write$FUSE_INIT(r5, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) (async)
r10 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r10, &(0x7f0000003800)={0x2020}, 0x2020)

2m22.192515176s ago: executing program 2 (id=3557):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x4a, 0x0, &(0x7f0000000100)="de547eee20bc43f7feb4371472dd8a822a0000000000e55e854564e7d309f20d222f9220c8d9b1b0d196137252589d056c46d181117ab17948adf2dcaea03d2f3e0e647c2e70e62a2385"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
keyctl$clear(0x7, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2000000076001f03000000000000000008000000", @ANYRES32, @ANYBLOB="802f690807175b0c22ef170509", @ANYRES32=0x0, @ANYBLOB], 0x20}], 0x1, 0x0, 0x0, 0x4004000}, 0x0)
setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10001})
setpriority(0x1, 0x0, 0x80000000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

2m22.133495007s ago: executing program 33 (id=3557):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x4a, 0x0, &(0x7f0000000100)="de547eee20bc43f7feb4371472dd8a822a0000000000e55e854564e7d309f20d222f9220c8d9b1b0d196137252589d056c46d181117ab17948adf2dcaea03d2f3e0e647c2e70e62a2385"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
keyctl$clear(0x7, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="2000000076001f03000000000000000008000000", @ANYRES32, @ANYBLOB="802f690807175b0c22ef170509", @ANYRES32=0x0, @ANYBLOB], 0x20}], 0x1, 0x0, 0x0, 0x4004000}, 0x0)
setrlimit(0xd, &(0x7f0000000280)={0xc800, 0x10001})
setpriority(0x1, 0x0, 0x80000000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

2m17.512593528s ago: executing program 0 (id=3645):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_FREEZE(r0, 0x400c620e, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x11, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3, 0x3}, 0x10)
r5 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
sendmsg$tipc(r4, &(0x7f0000000280)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}, 0xffffffff}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x14)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r6=>0x0})
bind$packet(r2, &(0x7f0000000180)={0x11, 0x5, r6, 0x1, 0x3, 0x6, @multicast}, 0x14)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES64=r1], 0xdd12}], 0x1}, 0x10)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_vlan\x00', &(0x7f0000000000)=@ethtool_rxfh={0x47, 0x9, 0x5, 0x9, 0x81, "a07fd8", 0x4, [0x8d8, 0x5, 0x9]}})

2m17.497070618s ago: executing program 0 (id=3646):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x1}], 0xfffffffffffffff5, 0x0, 0x0}) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x13, 0x0, 0x300) (async)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) (async)
r3 = socket(0x8000000010, 0x2, 0x0)
write(r3, &(0x7f00000006c0)="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", 0xfc) (async)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0x3, 0x1, 0x200, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000044}, 0x4000)

2m17.42582549s ago: executing program 0 (id=3647):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

2m17.233512154s ago: executing program 0 (id=3651):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000100)="c46239923cb00f20e035000004000f22e0f30f7f9ffd6200000fc7710566bad10466b8002066ef0f231200019f0f01cf400f01c3f3460fc77767"}], 0xfd, 0x10, 0x0, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x6e})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x6c)
mount$incfs(&(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r4 = openat$incfs(r3, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130)
fremovexattr(r1, &(0x7f0000000500)=@known='com.apple.FinderInfo\x00')
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x40, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x9}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0xc}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x7}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_FORWARDING={0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x11}, 0x10000000)
ioctl$TIOCL_GETKMSGREDIRECT(r4, 0xc0386723, &(0x7f00000002c0))
r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000480)={0x81, 0x0, 0x3})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x3f, 0x0, 0x101}})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x1, 0x41, 0x2000000, 0x0, 0x7, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2, 0x0, 0x190ed474], 0x10000, 0x202})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)
syz_clone3(&(0x7f0000000080)={0xa690b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000000240)=""/215)
ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000001c0))
r7 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00')
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@newsa={0x140, 0x10, 0x623, 0x200, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x2e}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0xfffffffffffffffd, 0x0, 0x0, 0x2dcd, 0x8, 0x0, 0x400000, 0x8000}, {0x0, 0x0, 0x800000000000000, 0x8}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8, 0x16, 0x5}]}, 0x140}, 0x1, 0x0, 0x0, 0x20008000}, 0x4048040)
pread64(r7, &(0x7f0000000140)=""/120, 0x78, 0x7)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x4c, &(0x7f0000000500), 0x0, 0x0, 0x0})

2m17.095745717s ago: executing program 0 (id=3653):
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) (async)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0xfffe, 0x3000004, @mcast2, 0x6}, 0x1c) (async)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) (async)
write(r0, &(0x7f00000000c0)="8f2a0a65070000000000000080a7b6070d000886a5cefe00", 0x18) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000001c0)={{0xffff, 0x401, 0x8, 0xe1a4}, 'syz0\x00', 0x3a}) (async)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x15) (async)
ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) (async)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x4}, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000000201010100000000000000000200000004000180180002801400018008000100b04c94a708000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
setpgid(0x0, 0x0) (async)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x1, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'ip6tnl0\x00'}) (async)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={<r5=>0x0, @local, @broadcast}, &(0x7f0000000080)=0xc)
sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788801c09102c28", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) (async)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)=0x4) (async)
socket$can_raw(0x1d, 0x3, 0x1) (async)
io_cancel(0x0, 0x0, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async)
mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])

2m16.93782096s ago: executing program 0 (id=3654):
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000002c0)=[@cpuid={0x14, 0x18, {0x8, 0x7fffffff}}, @wr_drn={0x6e, 0x20, {0x4000000005, 0x4}}, @rdmsr={0x32, 0x18, {0x587}}, @in_dx={0x82, 0x20, {0x3e99, 0x2}}, @wr_drn={0x6e, 0x20, {0x4, 0x4}}, @wr_drn={0x6e, 0x20, {0x7, 0x10000002}}, @code={0xa, 0x47, {"c40210f287d40e0ae9c4837d09e876c42121ec17c402d9be748da20fc769a20f01c8d8c3c4c2e0f3d30f01cac4a1ff108cce00280000"}}, @in_dx={0x82, 0x20, {0x0, 0x6}}, @code={0xa, 0x64, {"6466460f38826f0f66b80f000f00d0c4c265de707a0f20e035000040000f22e0c74424009f000000c744240206220000ff1c243e66400f38f6241c0f0131c4c1f82e900d000000c441f8ae52006465420fc73e"}}, @rdmsr={0x32, 0x18, {0x972}}, @rdmsr={0x32, 0x18, {0xb22}}, @wr_crn={0x46, 0x20, {0x2, 0x80}}, @wr_crn={0x46, 0x20, {0x8, 0x7fffffffffffffff}}, @uexit={0x0, 0x18, 0x5}, @uexit={0x0, 0x18}, @cpuid={0x14, 0x18, {0x0, 0x100000}}, @wr_drn={0x6e, 0x20, {0x7, 0x6}}, @in_dx={0x82, 0x20, {0x492f, 0x4}}, @in_dx={0x82, 0x20, {0x354e, 0x2}}, @wr_drn={0x6e, 0x20, {0x3}}], 0x28a})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000cba000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000580)="0fd9990a000000b9c7080000b800000100ba000000000f308fc9b001bf3690bb22c4e259034800c744240000000000c74424021d7f0000c7442406000000000f011c24c4c1935dab04000000660f0f42b5a49a000000001c01b805000000b9ef60f6c80f01c1c7442400842a0000c7442402282d0000c7442406000000000f011424", 0x82}], 0x1, 0x4, &(0x7f0000000100)=[@dstype3={0x7, 0x2}, @efer={0x2, 0x1000}], 0x2)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
r2 = socket(0x2, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f00000001c0)=[{0x30, 0x3, 0x51, 0xfffff034}, {0x6, 0x4, 0x6, 0x6}]}, 0x10)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = syz_open_procfs(0x0, &(0x7f0000000800)='net/wireless\x00')
read$FUSE(r4, &(0x7f0000002f00)={0x2020}, 0x2020)
connect$inet6(r3, &(0x7f0000003e00)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x80, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x3, 0x1, 0x1}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendfile(r5, r5, 0x0, 0x8000)

2m16.92868354s ago: executing program 34 (id=3654):
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000002c0)=[@cpuid={0x14, 0x18, {0x8, 0x7fffffff}}, @wr_drn={0x6e, 0x20, {0x4000000005, 0x4}}, @rdmsr={0x32, 0x18, {0x587}}, @in_dx={0x82, 0x20, {0x3e99, 0x2}}, @wr_drn={0x6e, 0x20, {0x4, 0x4}}, @wr_drn={0x6e, 0x20, {0x7, 0x10000002}}, @code={0xa, 0x47, {"c40210f287d40e0ae9c4837d09e876c42121ec17c402d9be748da20fc769a20f01c8d8c3c4c2e0f3d30f01cac4a1ff108cce00280000"}}, @in_dx={0x82, 0x20, {0x0, 0x6}}, @code={0xa, 0x64, {"6466460f38826f0f66b80f000f00d0c4c265de707a0f20e035000040000f22e0c74424009f000000c744240206220000ff1c243e66400f38f6241c0f0131c4c1f82e900d000000c441f8ae52006465420fc73e"}}, @rdmsr={0x32, 0x18, {0x972}}, @rdmsr={0x32, 0x18, {0xb22}}, @wr_crn={0x46, 0x20, {0x2, 0x80}}, @wr_crn={0x46, 0x20, {0x8, 0x7fffffffffffffff}}, @uexit={0x0, 0x18, 0x5}, @uexit={0x0, 0x18}, @cpuid={0x14, 0x18, {0x0, 0x100000}}, @wr_drn={0x6e, 0x20, {0x7, 0x6}}, @in_dx={0x82, 0x20, {0x492f, 0x4}}, @in_dx={0x82, 0x20, {0x354e, 0x2}}, @wr_drn={0x6e, 0x20, {0x3}}], 0x28a})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000cba000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000580)="0fd9990a000000b9c7080000b800000100ba000000000f308fc9b001bf3690bb22c4e259034800c744240000000000c74424021d7f0000c7442406000000000f011c24c4c1935dab04000000660f0f42b5a49a000000001c01b805000000b9ef60f6c80f01c1c7442400842a0000c7442402282d0000c7442406000000000f011424", 0x82}], 0x1, 0x4, &(0x7f0000000100)=[@dstype3={0x7, 0x2}, @efer={0x2, 0x1000}], 0x2)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
r2 = socket(0x2, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f00000001c0)=[{0x30, 0x3, 0x51, 0xfffff034}, {0x6, 0x4, 0x6, 0x6}]}, 0x10)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = syz_open_procfs(0x0, &(0x7f0000000800)='net/wireless\x00')
read$FUSE(r4, &(0x7f0000002f00)={0x2020}, 0x2020)
connect$inet6(r3, &(0x7f0000003e00)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
sendto$inet6(r3, 0x0, 0x0, 0x80, 0x0, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x3, 0x1, 0x1}, 0x1c)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendfile(r5, r5, 0x0, 0x8000)

3.454941291s ago: executing program 4 (id=5965):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
lremovexattr(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00')
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="49483ea3abd1565ea4", 0x9}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x5, 0xff0, 0x7, 0x400, 0x6}, 0x14)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000540))
ptrace$cont(0x20, r1, 0x0, 0x0)
getgroups(0x2, &(0x7f0000000240)=[<r2=>0xee00, <r3=>0xffffffffffffffff])
setgroups(0x3, &(0x7f0000002140)=[r3, r2, r3])
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x9)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000003c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async)
lremovexattr(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)=@known='system.posix_acl_access\x00') (async)
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)="49483ea3abd1565ea4", 0x9}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ptrace(0x10, r1) (async)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x5, 0xff0, 0x7, 0x400, 0x6}, 0x14) (async)
ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000540)) (async)
ptrace$cont(0x20, r1, 0x0, 0x0) (async)
getgroups(0x2, &(0x7f0000000240)=[0xee00, 0xffffffffffffffff]) (async)
setgroups(0x3, &(0x7f0000002140)=[r3, r2, r3]) (async)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x9) (async)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000003c0), 0x4) (async)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) (async)

3.165774457s ago: executing program 4 (id=5978):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300090c0000000000000000000000030006000000000002000000e00000010000000000000000020001000000000000000300000000000300050000000000020000007f0000010000000000000000020013", @ANYRES8=0x0, @ANYRES32=r0], 0x60}}, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda')

3.101597678s ago: executing program 4 (id=5980):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e24, @empty}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x2, 0x4e20, @multicast1}, 0x190, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000000)='pim6reg0\x00', 0x1, 0x7fff, 0x100})
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000100)={0x0, 0x1, 0x800})

3.080979209s ago: executing program 4 (id=5982):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xf9}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xb6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000050}, 0x4) (async)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
r3 = open(&(0x7f0000000300)='.\x00', 0x400000, 0x0)
flock(r3, 0x2)
r4 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
r5 = open(&(0x7f0000000000)='./file0\x00', 0x10000, 0x12)
flock(r5, 0x1) (async)
flock(r4, 0x1) (async)
flock(r3, 0x1) (async)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x40000100000200) (async)
ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f00000000c0)='\xc2\xedE\\\xe3\xd5>\x8c\x1b\xa7\bj\xa4\xc4\xde\xd8\x15\xa6|,\xfdD\xcc\x8a\r_H!\x11t\xfc\xac\xe0s\x81\xf8\xae\x98It\x12&\x12\xd6&\xc3\xe4\x11\x8b\xae\xc1#B\x11\xa2\xb2\xf9\x90\xff0\x1e]\x8a]n`\xff\x97\xdf\xe3|i\xd0\xe4Z^\x8cD\x82\x92\xfd\x84\x13\x83n\xc2VW>4\x06\xe6j\x1d\x05\xfc\xa5o\xbc\x93\xcd\x8cSg\xa9\xefo\x11|\x10\xe6\x1b\x02/m\xcd\xdeN\xcb\xb1\xfel\x0f\xeb\xc5\xefF\xa85\x99D\xb0\xf2]\xdf\x93\xc4Z\xf1\xb3\xce\xcc\xe2qc\xc6\x1c\x0e\x12\xbdx\x01\xe8\x0e\x13\xe3r\x9csAJV\x99\xe6qN>$\xb3V\x12Kd\xb7\xc8\xd3\xcb\x88S\x90j^\\x\x1f\v\xc9\xc2{e\x82{\tEH\x90\xa8\x18\x0fG\xeb\xf8\xde\x91\x99\xaf\xe1\x88q\x81IQN\x92h\x980\x03+\xf3\x1a\xd1}\xf7\x87\xd1\xe5@4l\xdci\xd5\x1f\x7f\xaa\xb3k\x8a\xba\x12\x91^\xcb3H\xf00\x8b\x11\x1b\xfcR\xc3\x11\xe2\x8dU\x01\xee\x8eU\xf2\xd8Y>\x86+') (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000380)={0x5, 0x6, 0xeeee0000, 0x1000, &(0x7f0000019000/0x1000)=nil}) (async)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x85b83000)

2.985881631s ago: executing program 4 (id=5984):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
pipe(&(0x7f0000000400)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28)
splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000080)={'\x00', 0xa4, 0x1, 0x5, 0x401, 0x1, <r3=>0x0})
ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)={r3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x5, 0x0, &(0x7f0000000040)=[@increfs], 0x0, 0x0, 0x0})

2.53544964s ago: executing program 6 (id=5999):
write$binfmt_register(0xffffffffffffffff, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0xd, 0x3a, 'debugfs\x00\x9c\xf52X\x8b\xf2\xee^\x9e\a\xd7\xad+\xad~\xc4Q\x8d\xf1GWh\xa4\'\x0e:\b+\xb9U/\xc5<8o\x8d\x0f\xa6\x8094\xb2\xe2\x17I0\v\x8a\xbb\xbei\xf4\x1d\xf6q\xa5\xb3W\x96]\x9e\x82\xfaA\x0e\xe4\xbd\xffxg\xb6_\xeav\xcf\xa0', 0x3a, 'D,>\xfb\xf1\xa3cn\t\xb2\xf8\x80\xd0=\xae\x00C\x82zb\xf0\xebs\x80\xf0\x1ep:\xed\xdb\x1db\x0f\xe6Ow\x85s\xf0`N\xe1s\x1cm\x0e\xea\xfb\xeaUy\xaaz`\'\xf4\xed\x90T\a\xeb\xb7\x8em\xd0\x92b\x0e\xce\x8e\x96f\x1e\x89\xa2\xa2\xba\x8a\xa1\xce\xc5\xec5((u\x12\x1d\x119B\ftG\xfa\xe3!\x01c\x9a\xd68\x86\xeay\x89\xaeX\x90IO\x8c;\x0e&\xa7\xf9K\xf5\v3M\x91\xdfy;3\xb8<\xe7\xa0F\xe9\xf4\xb4\x80\x15\xacu1\x1f[\xb8\x12\xad\x06{\xf5OA\xda\x83\xa1\x01\x80\x19\xd3\xc5\xb2cI\xba\x12\xae1\xb6\x043\x8f\xfb=\xc2\xb1\xa0\\\xabg\xcf\xa6\x95\x9cV+z\"\x89\x06\xa9\x8f)\x14\xf4\x1d,%\xca|\xcf\x18<\x8a\xce\xbbL\x8c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8bL\xad\x13}\xf4\xc2y\x06\xb4\xaf\xac\b\xc9\x14\x1b\x89IRJ\xa1\x80h\x10\x1f\x1c\xc1\a\x98\xcc\x01\xf8 \xbcQ\x89\x139\x0e\x87\x87l\x03W\x15\xb0Q\xc5\xe5\xdb\x89\x1d\x1b:\x9d\xd7\x0e#\xfd\x0e\x12\x90MvE\xa2x\xb4\x1b\x9a\xb1\xf9\b\x00\x00\x00\x00\x00\x00\x00V\x84\x81\xf7\xbf\xe9\xdc\xab\xba\xea\x87\xff', 0x3a, './file0'}, 0x1bc)
syz_io_uring_setup(0x149d, &(0x7f0000000280)={0x0, 0x0, 0x1000, 0x3, 0x36b}, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e24, 0x1, @empty, 0x65}, 0x1c)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc1400002c4788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
sendfile(r2, r2, 0x0, 0x8004)

2.51950447s ago: executing program 6 (id=6000):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$IEEE802154_DISASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000600)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="100028bd20667000fedbdf25030000aaaaaaaaaaaa0c000900"/48], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x39}, @fda={0x66646185, 0x1, 0x2, 0x100000e}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/191, 0xbf, 0x2, 0x36}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0})

1.671094497s ago: executing program 6 (id=6011):
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000240)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r1, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_BSS_SELECT={0x38, 0xe3, 0x0, 0x1, {0x34, 0x0, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xa, 0x7}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x8}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x3}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0xb}]}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000080}, 0x20040080)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x1, 0x0, 0x6}, [""]}, 0x14}}, 0x48090)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000040)=[@increfs], 0x0, 0x0, 0x0})

1.605821698s ago: executing program 6 (id=6012):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=<r1=>0x0)
capset(&(0x7f0000000100)={0x20080522, r1}, &(0x7f0000000080)={0x0, 0x3}) (async)
capset(&(0x7f0000000100)={0x20080522, r1}, &(0x7f0000000080)={0x0, 0x3})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2)
r4 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000200)={'wg2\x00'})
sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048080}, 0x20048800)
setrlimit(0x40000000000008, &(0x7f0000000000)) (async)
setrlimit(0x40000000000008, &(0x7f0000000000))
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0)
connect$netlink(0xffffffffffffffff, 0x0, 0x0) (async)
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

1.5134132s ago: executing program 6 (id=6015):
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)={0x10000, 0x0, 0x33}, 0x18) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async, rerun: 32)
r1 = socket$pptp(0x18, 0x1, 0x2) (rerun: 32)
connect$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x3, @private=0xa010102}}, 0x1e)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x0) (async)
r2 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0)
ioctl$EVIOCSCLOCKID(r2, 0x40084504, 0x0)

1.449656161s ago: executing program 6 (id=6016):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000002c0)=0x1, 0x4)
setsockopt(r1, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x200}, 0x1c)
r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
preadv(r2, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1, 0x91, 0x5)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0505405, &(0x7f0000000000)={{0x3, 0x0, 0x1, 0x1, 0x401}, 0x0, 0x0, 'id0\x00', 'timer0\x00'})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/126, 0x7e, 0x1, 0x26}, @fda={0x66646185, 0x2, 0x0, 0x25}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})
r4 = syz_usb_connect(0x1, 0xa5c, &(0x7f0000000440)={{0x12, 0x1, 0x350, 0x68, 0x5, 0x56, 0x20, 0x5032, 0xbc7, 0x10ec, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa4a, 0x3, 0xb, 0x0, 0x20, 0x4, [{{0x9, 0x4, 0xc7, 0x5, 0x1, 0x6a, 0x99, 0xd1, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x1}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x300, 0x1, 0x4, 0x4}, @processing_unit={0xa, 0x24, 0x7, 0x4, 0x2, 0xff, '\'&\v'}, @feature_unit={0x13, 0x24, 0x6, 0x3, 0x5, 0x6, [0x7, 0x9, 0x3, 0x6, 0x5, 0xa], 0x6}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x101, 0x5, 0x5, 0x7}, @selector_unit={0x5, 0x24, 0x5, 0x5, 0xdf}, @selector_unit={0x9, 0x24, 0x5, 0x2, 0xfa, "223f1bb6"}]}], [{{0x9, 0x5, 0xa, 0x10, 0x400, 0x4, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x9a7}]}}]}}, {{0x9, 0x4, 0x85, 0x3, 0x8, 0x70, 0x7d, 0x15, 0xf, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "07a51cf43b5c"}, {0x5, 0x24, 0x0, 0xffdd}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x6, 0x80, 0x88}, [@obex={0x5, 0x24, 0x15, 0x1}, @country_functional={0x12, 0x24, 0x7, 0x2, 0x8, [0x9, 0x8001, 0x9, 0xffff, 0x1000, 0x25]}, @mdlm_detail={0x6a, 0x24, 0x13, 0xe, "171b1141b9e8413733441de6d8d32791810e4a220f36e70558976469ab86d3de88f440c53088aaa7dae4e13a45b23813c300bac465eeeb6460d08bfec7a6c7a58a0500de2ba5a13cc0e3ed7a2a9ac8e27e5b1edfebe13b964983aa4263cd8c848728d1bb38ac"}, @mdlm_detail={0xdf, 0x24, 0x13, 0x3, "cb69a74a9bf40d1d5ce6c0328a1ac21fef62c0647aac8d651fb3ef7d8aa38941f38edcf77f6d3b22bc582a2f83052a13d0345aa2f02b9bac904f3f863b5bbc1752b8e45fc9653eb9fd9dd4c15633c9a992e1e526832c585b7a696de273a7c0680502f3c4d0cd6a0c1d300462f1f70ee5181c4841a64d3b7195dcb03710b8192a67abd83f68c44d05413720c8543e8ea21b15e0c1a3e85b494bb2199c2577f5076698c5f6315985395b4493df5ee15632e7284cc7b3489bd94ce8f83973284564d56cf73090979aeff5020aed6fc6cb2981923915217fa2f32a448e"}]}, @cdc_ecm={{0x9, 0x24, 0x6, 0x0, 0x0, "853652e3"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7, 0xc09, 0x9}, [@mbim={0xc, 0x24, 0x1b, 0xe, 0x2, 0xa, 0x8, 0x0, 0x7}, @country_functional={0x10, 0x24, 0x7, 0xcf, 0x3, [0x5, 0xd, 0x2, 0x7, 0x3]}]}], [{{0x9, 0x5, 0xd, 0x2, 0x3ff, 0x8, 0xf, 0x5, [@generic={0x101, 0x2, "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"}, @generic={0xc3, 0x21, "dfeab839682c6c1431b0b2ec771dcf64f99aaee84a793a712a1be5165da13fde5b9a04e75ad55926f2ce397bd8b4e3697adbed3471b7035740bc95a572d85653ca1c27dd0522da631771e26b48b798a3abdda0fa5469770ab48740b4c6b42311a55cd885e326f5813b270e6903780647b04ecf6e509f27669912cdadb7219c70e6fae6608679f198a6c0ece188663ec5f6f5554f76b45e4bc45c5d7f422875b2916674d120c65cc05521f9b9ee29a06f92e43b841768dd6d1fa252d8cea0a3f588"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x4, 0x9, 0x2, [@generic={0x1c, 0x7, "ffbffa4756f8471439525d474c02aaa16a354fe8e777f53a05d3"}]}}, {{0x9, 0x5, 0xc, 0x1, 0x8, 0x8, 0x9, 0x8b, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x81, 0x8001}]}}, {{0x9, 0x5, 0x2, 0xa, 0x20, 0x5, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x9}]}}, {{0x9, 0x5, 0xc, 0xc, 0x40, 0x2, 0x7, 0x3, [@generic={0x74, 0x21, "c1dc86bf603d4a969b5876eaa2110d06b0b55b44b159d419bb658f72d8a56006c961ad819619816cea8f90496ba45679997fcc14a139c0fdbae329c36199b04393b29c9f43939de4747ae2bf4ee39f82c0f49e398568d1ba66ac6904c0f0504abedff4ed40054d75cde24874328d2b966ac2"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x7f, 0xe}]}}, {{0x9, 0x5, 0x1, 0x12, 0x3ff, 0x7, 0x1, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x8c, 0x3ff}]}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0x2, 0x4, 0x0, [@generic={0x29, 0x8, "c2100e28909140bd6ee4c245b1f4afd5dcde2092d10d077d691c936ab4a9ecd7e751159a33da89"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x81, 0x1, 0xfa, [@generic={0xb6, 0x5, "1084128492b3c07d128513c4f0082e4e5a0b8f5d73675dfbb54e0d863e79fd6aee6b7a660ed0800b2633642f7abe21301b0bb4c91c4ecf8de754a67ea7791e95943e08c95486e4849363add57c8abccf3102bb6061f324460e05abebfc75a1449ec5dfcf86e34fedbdd1255c9fd5fe8954940c5df3b0fcdccdd0e6e735248ed8eb5c0ab3f6df868634751e556334d1eaf672e1634ffce4ae2e058f8d259da7c5d0b2d7c5c00f9e6185ab2ef180bab1a12cbcf2a1"}]}}]}}, {{0x9, 0x4, 0x7d, 0x9, 0x7, 0xff, 0xff, 0xff, 0x0, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x9, 0x8, 0x9}, [@mdlm_detail={0x103, 0x24, 0x13, 0x0, "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"}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x5, 0x6, 0x8, 0x9, 0x2}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "3f59ce0be9"}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x5, 0x1, 0xc}, {0x6, 0x24, 0x1a, 0x2, 0x4663d27f4fdef976}, [@call_mgmt={0x5, 0x24, 0x1, 0x2, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x400, 0x8, 0x6a, 0x2, 0xe6dd, 0x4}, @country_functional={0xa, 0x24, 0x7, 0x4, 0x9, [0x81, 0x8]}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x3, 0x88, 0x5}]}], [{{0x9, 0x5, 0xb, 0x0, 0x10, 0xc0, 0xff, 0x4, [@generic={0x9e, 0x1, "f84ae92df8f3979275d30d774c107eed66aa3f4bae864c2c7eb78fed2b5f616194c1164121f42d72716972682825ad09b8bebafe43b7610771804e14fe06f7a76874d5f8321051fafbf822f5f9f9e0d2b0e8b1b6e7f9335b608f6e452d2962113f902db617216efe5834d6e7353d6bed45ea24b980022b0abe9afd15196118f35acdce9b3f19162553fde4415503bcaf42b43c7b2b3dc705962a4fb3"}, @generic={0x14, 0x24, "3fbe68f0909aa9de96c69224d1a2a8b350a9"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x6, 0xb9, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x4}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x5, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xc, 0x2}]}}, {{0x9, 0x5, 0x6, 0x3, 0x10, 0x5, 0x1, 0xfa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8b, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x8f, 0x2}]}}, {{0x9, 0x5, 0xc, 0xc, 0x200, 0xf3, 0x93, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x9}]}}, {{0x9, 0x5, 0xa, 0x0, 0x200, 0x20, 0x0, 0x1, [@generic={0xfd, 0x0, "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"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0xd3, 0x7, 0x2, [@generic={0xfc, 0xb, "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"}]}}]}}]}}]}}, &(0x7f00000010c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x9, 0xa6, 0x8, 0x20, 0x8}, 0x19, &(0x7f0000000040)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xaa, "64ebfd663371587f78a633ca71918adf"}]}, 0x7, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x3001}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x5804}}, {0xd7, &(0x7f0000000ec0)=@string={0xd7, 0x3, "77a3b8a223352264ef35a49af590fe9b6983478cd9daef7d6b0056ce10fd671d3ad315ce2261608950fa28f34e88073e4fa15c3cf09bc2c8a97cc02804e63a24c4b76eec301952737670c39b39e7346d0203dee2c273bf63676a3e9e470ad65be6b816bfce0374f400c54d1ba9b07654ecdc9bac84f0accc3881911bfe0caffd4732901ada945eb4a744f78b75f7284e142bbf461249c7916e2e319e5c10ba84e9d9efc08f8425d2d69353cdbcf73a9b5a8b5c42ee3d10025ad532e4f4793158e3c478135f62373c2644a0fac8bf5ccf68ffb883ed"}}, {0xe3, &(0x7f0000000fc0)=@string={0xe3, 0x3, "2878388a227e2f8fc80a23aa674473b6aff11f86901214aad963e8d7480e8abdfc5ebd9c658b07a045d3b0236f45a655f680e1e7349e2e85e6166f452ddc3d19d3ab14cde5beef8f2ea749bdd782a2fc5d90647c38b6d4625e90227c13ad930db7cff81337490127f4bfbbb4c6060aa08fb46844f6b6fe499573a6a630cee37e3323c916daecb76595f477a102aa1ef5a0441008f334e17c0e93d15579bd03a8c010be4aae2f35570cc4a854254a1f1e7ca9cc0c345c5a60de28cb2627e81dbc5b3f8744ab8372cf0376fd0e46d12d47560739cc1d80eec3153a2388f21fe957fa"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x40e}}, {0x40, &(0x7f00000003c0)=@string={0x40, 0x3, "14bac1eb0574ab5b3dad2224bca5cb727fa965511cba1e4d349b88a8c027eeda55767ee2d25cea6b70495a5e94277dcaec9d57c79d130055fc1801baadfa"}}]})
syz_usb_control_io(r4, &(0x7f00000013c0)={0x2c, &(0x7f0000001140)={0x20, 0x24, 0xaa, {0xaa, 0x3, "71c2c16e63ff72e7919bf124d4312b43718b2b2a8c7418896121b886054191a0ea3970a1833c767fdd203a3812dbd532782beed87e4ec8227abe9bc916f73cd83a042d9d36fae72ea2023897dcc995be1822ce195a1476563aac22cd519180161e4c6f550d70106fb591dcb632b6020dfed1b35e4652ec7fd6b349b44416edf39bdfa4aeb246592011cfcb59e5799a5f8e80f7786e79188576aee63971cdaa399785f44f44a27967"}}, &(0x7f0000001200)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}, &(0x7f0000001240)={0x0, 0xf, 0xbc, {0x5, 0xf, 0xbc, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "db42a98fdf2d36a6d5c0f8b472f28dce"}, @ssp_cap={0x1c, 0x10, 0xa, 0xbb, 0x4, 0x0, 0xf0f, 0x7, [0x0, 0xbe1e, 0x30, 0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x7, 0x8, 0x3}, @generic={0x7d, 0x10, 0x2, "512158400912802165932fd7e88a3e095668674d6ebf395b9d91cfbbe515d2d5296d14b8727ec5b806af91c3379cfe19040684e1f5dfa5d3347d73aeb1eb8dc44473ce45b459cae04a0fc5cec9c79690541374956ffe7a4a218d825048e8a56845a3b68575718ab45c1893b24a0d535a307d1b6b25883c1ceb9f"}]}}, &(0x7f0000001340)={0x20, 0x29, 0xf, {0xf, 0x29, 0x70, 0x60, 0x6, 0x8, "21e0521f", "f3aefea9"}}, &(0x7f0000001380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe, 0x0, 0x2, 0xe5, 0x2a, 0x2, 0x8}}}, &(0x7f0000001800)={0x84, &(0x7f0000001400)={0x0, 0xf, 0x24, "e1481855e089a0113d03ec7211e723bd6a6bb4fbee00c3967a8f166b6179f563d9434c0d"}, &(0x7f0000001440)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001480)={0x0, 0x8, 0x1, 0xf7}, &(0x7f00000014c0)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000001500)={0x20, 0x0, 0x8, {0x120, 0x1, [0xf0f0]}}, &(0x7f0000001540)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001580)={0x40, 0x9, 0x1, 0x4}, &(0x7f00000015c0)={0x40, 0xb, 0x2, "17a3"}, &(0x7f0000001600)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000001640)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000001680)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000016c0)={0x40, 0x19, 0x2, '\t}'}, &(0x7f0000001700)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000001740)={0x40, 0x1c, 0x1, 0xb1}, &(0x7f0000001780)={0x40, 0x1e, 0x1, 0x5}, &(0x7f00000017c0)={0x40, 0x21, 0x1, 0x6}})

996.555429ms ago: executing program 5 (id=6027):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
pipe2$9p(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000003480)=ANY=[@ANYBLOB="1300000065ffff001000000600395032303030"], 0x13)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cacIe=loose,nodevmap'])
r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r3, &(0x7f0000003800)={0x2020}, 0x2020)

963.67145ms ago: executing program 5 (id=6028):
r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
write$cgroup_subtree(r0, 0x0, 0x7)
add_key(&(0x7f0000000400)='asymmetric\x00', 0x0, &(0x7f0000000780)="df6556a8", 0x4, 0xfffffffffffffffe)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = dup(r1)
write$tun(r2, 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000440)={0x1, 0x0, @ioapic={0xddddd002, 0x3, 0x800, 0x673c, 0x0, [{0x24, 0x9, 0x7, '\x00', 0x2}, {0xca, 0x20, 0x4, '\x00', 0xfb}, {0x6, 0x3, 0x2, '\x00', 0xb}, {0x7f, 0xd9, 0x4, '\x00', 0x7}, {0x9, 0xf8, 0x3, '\x00', 0x7}, {0x0, 0x8, 0x7, '\x00', 0xf}, {0xaa, 0x1, 0x4d, '\x00', 0xfa}, {0x75, 0x5, 0x3, '\x00', 0x4}, {0xdd, 0x4, 0xb, '\x00', 0x3}, {0x9, 0x5, 0xfa, '\x00', 0xb}, {0x9, 0x4, 0x4, '\x00', 0xb8}, {0x9, 0x15, 0x6, '\x00', 0x4}, {0x9, 0xa2, 0x7, '\x00', 0x7}, {0x9, 0x48, 0x4, '\x00', 0x2}, {0x9, 0x5, 0x9, '\x00', 0x3}, {0xa5, 0x1, 0x6, '\x00', 0x4}, {0xa6, 0xc, 0xf}, {0x5, 0x0, 0x7, '\x00', 0x3}, {0x40, 0x81, 0xe, '\x00', 0xc}, {0x9, 0xf3, 0x5a, '\x00', 0x2}, {0xf8, 0x25, 0x6, '\x00', 0x6}, {0x6, 0x1, 0x8, '\x00', 0x7}, {0x3, 0x9, 0x9, '\x00', 0x28}, {0x7, 0x35, 0x8, '\x00', 0x3}]}})
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="48000000120001000000000000000000ac14140000000000ee7a637121831de5000000000000000014000d"], 0x48}}, 0x4014)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8d83, 0x0)
ioctl$BLKRRPART(r4, 0x125f, 0x0)

942.132611ms ago: executing program 5 (id=6029):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async)
r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='lp', 0x2) (async, rerun: 32)
r2 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@timestamp, @timestamp, @mss={0x2, 0x88a}, @mss, @sack_perm, @mss={0x2, 0x6}, @sack_perm, @timestamp, @window={0x3, 0x0, 0xa}, @sack_perm], 0xa) (async)
r3 = accept(r1, &(0x7f0000000140)=@hci, &(0x7f00000001c0)=0x80)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000200)={<r4=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000000400)={{r4, 0x1, 0x5d8c, 0x3d0d, 0x3, 0x1, 0x3, 0x10001, 0x10000, 0x3, 0x10001, 0xfffffffffffffffa, 0x459, 0x3, 0x1ff}}) (async)
write$binfmt_register(r1, &(0x7f0000001400)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x81, 0x3a, 'lp', 0x3a, 'nl80211\x00', 0x3a, './file0', 0x3a, [0x46, 0x4f]}, 0x33) (async)
readv(r2, &(0x7f0000001540)=[{&(0x7f0000001440)=""/248, 0xf8}], 0x1) (async)
sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, r0, 0x214, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x18}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c880}, 0xe041)
write$uinput_user_dev(r1, &(0x7f0000001680)={'syz1\x00', {0x4, 0xfff, 0xd4, 0xfc00}, 0x31, [0x3, 0x80, 0x2, 0x4b9, 0x0, 0x3ff, 0xffffff80, 0xda, 0xfffffffc, 0x4, 0x8, 0x101, 0x358, 0x9, 0x100, 0xff, 0x80000001, 0x3, 0x4, 0x1, 0x5, 0xfffffff8, 0x3a34, 0x0, 0x4, 0x7250438f, 0x6, 0x4, 0x4569, 0x1, 0x5, 0x4, 0x401, 0x1, 0x7, 0x6, 0x9, 0x2, 0x6, 0x1db, 0x2, 0x81, 0x1, 0x6, 0xffff, 0xae, 0x0, 0x7, 0x5, 0x7, 0x7, 0x1, 0x8, 0x6, 0x7ff, 0xffff, 0x1, 0x8, 0x5, 0x100, 0x3, 0x6, 0x36ca, 0x5], [0x1, 0x68e2ee31, 0x3, 0x6, 0xfffffd6a, 0x5, 0x88f6, 0x7, 0x600, 0x80000001, 0xf, 0x80, 0x3, 0x0, 0x6, 0x20, 0x4, 0xffff51a8, 0x9, 0x9, 0x8, 0x1, 0x4, 0xa5f4, 0xf, 0x858, 0x8000, 0x0, 0x8, 0x1, 0x7, 0x0, 0x7, 0x4, 0x8, 0x4, 0x8f, 0x1, 0x6, 0x89, 0x10000, 0x8, 0x6, 0xfff, 0x6, 0x7fff, 0x6, 0x1, 0xd42a, 0x3, 0x3, 0x8, 0x6, 0x1ff, 0x3, 0xe4, 0x3ff, 0x16355639, 0x1, 0x10001, 0x0, 0x6, 0xfffffc01, 0xfffffffe], [0x1, 0x6f, 0x1, 0x2, 0xffffffe8, 0x1, 0xd0000, 0x0, 0x3, 0x3, 0x4, 0x2, 0x7, 0x1, 0x10, 0x6, 0x3, 0x3, 0x5, 0x0, 0x8fc, 0x3, 0x3, 0xf, 0xe, 0x8387, 0x7, 0x2, 0x5, 0x6, 0x10, 0x5, 0xa, 0xbc2, 0xcf, 0x2, 0x80000001, 0x6, 0x4, 0xfc000000, 0x7, 0x4, 0x5, 0xffff, 0x9, 0x6, 0x2d7, 0xfffff43f, 0x4, 0x81, 0xf, 0x3, 0x4, 0x5, 0xb, 0xff, 0xfff, 0x0, 0x8, 0x4, 0x5, 0x80000001, 0x7, 0xe4], [0x1, 0x59, 0x7ff, 0x8, 0xfffffffa, 0xc6, 0x24, 0x2, 0x48c, 0x8001, 0x1, 0x32c, 0xffffffff, 0xd4, 0x1, 0x21ab, 0xfffffffc, 0x8, 0x8, 0x5, 0x9, 0x175, 0x4, 0xfbf, 0xffffffff, 0x8, 0x6, 0xb3, 0x6185, 0x8c, 0x9, 0x5, 0x7, 0x7, 0x15, 0x9, 0x1e, 0x0, 0x7, 0x5, 0x3, 0x3, 0x8, 0x3ff, 0xfffff001, 0x7f, 0x1ff, 0x8, 0x2, 0x5, 0x4, 0x1ff, 0x3, 0x7, 0x3, 0x6ac, 0x8, 0xc, 0x0, 0x10000, 0x80, 0x8, 0x4, 0x43e3]}, 0x45c) (async)
recvfrom$inet(r1, &(0x7f0000001b00)=""/91, 0x5b, 0x2401a5a1d1d30274, &(0x7f0000001b80)={0x2, 0x4e21, @multicast2}, 0x10)
set_tid_address(&(0x7f0000001bc0))
sendmmsg(0xffffffffffffffff, &(0x7f0000004300)=[{{&(0x7f0000001c00)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000001c80)="c85d914006c9568718778b58f3f4bc9571f84f710c068259451f728e5af45869c42e142676d45642017f5b9539b4c9a8e954c780b0a744d72de341948cc38b20fea163b6a306736a34458c9f500b53ebda2945e00039c2d6e981d2593edc4dd05f28ec0ab6c3a3", 0x67}, {&(0x7f0000001d00)="fa085396f3c8f9672cccc54931689c9ab9991251538ae0405f64b2404f5a95a93c5eb13dc5a87f30ba114fac60dd5584eb42d9feb86fedbd2eaff07f6ae7651f71705f44d9a191ee0ac3e5887dcb9166698b865abdaed3c6ad", 0x59}, {&(0x7f0000001d80)="33ae738e1eb84b0c3af5a11d34bc284110de8486dd6426887c0204299ffb93d0ec13", 0x22}, {&(0x7f0000001dc0)="135f0258", 0x4}, {&(0x7f0000001e00)="82564d0371743113a8165006b6cc0f5be05a7c3b02a0785e45828d7743ccfc34db366b54e539ae40f6e8418a618b3a6d9d0a3c769db8fdf0e0e620483165e0aa16f18caa1ab73be2b12980ca739383e30ac8df3e4e32c28681f272104a56b96c71029698da1c0ccf7daf4b958acf4058d94486f58d76e5ec29e68fc59b2cc8ddbff681096b69672fc20a16c9e8b55fc215acf10cb59863204a651a936fb13389ee6665108e10bf521b72718c4b536bfd801fddee3893809467861e27583cd92a5a8747a088411fa9d8348f81dbe370b7228dd62d03b81f3c1d2c8904d93dc4c3166290adca15ec4a4ef348cfc74ad80881ecffc81fbf84", 0xf7}, {&(0x7f0000001f00)="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", 0x1000}, {&(0x7f0000002f00)="56d07071ac2a0ee925772134bb3e19ccc155b1f843660324c7d6f4e545810efc23033dcc0dac20e6b7084c3a017f9660ad869c52e2dae107dd197bd7e797626b8477eb8bd40d65b097341b032f8405505919abaa4039e4dba03cf5d0d5d97fd3232d061883600b6429de8b7d31f8676c8bfa1e24b48a518242d576c9d095c3524cfb37a1300701cc910f08a3358a8830d50dfa4caf49b3f237df6ef4136838c60a8d7d6a2d3e5e75", 0xa8}, {&(0x7f0000002fc0)="deac18b3efa50c65eaeadb7a3e835bf15854f233d5381c731c76f16da074681d3901b8430bad9e8705c4c4859c27e9e2512ff90ca3ab4b033aba2bf9ec7b8104819685d7e2c599f964553cc1915e77613e7a1faab6e5ae7d4955c11cf0a4a09fa87aedeb0d9d47da577c2168b5b95a7ea8aac2269e2cd12c7c932b44defc7fa5de5709e510146c41ff5a0340ae587b506823f5b8cee4a487b7bcdeb731c421de4c6e0c0a7d95a8b391b32696abb6fe59259bbf6fa60f7fee6630b0b1c394daf4415d7bfb4f36e4dcad9146a12dc2efd11c67cd95c88893dbb85718ea40d07a", 0xdf}], 0x8, &(0x7f0000003140)=[{0x60, 0x114, 0xa, "33c6a6f432f5568be6cae3808358c7056941232d4298269ee3fa51e698b9b3f0381e2dc66a2b8bb483cb4423b8775afc1028d5e0b4dd27fc77044123e57ef46fdc84d71da9299f4b3a5ed45929e8b6"}, {0x58, 0x1, 0x4, "a6089e7474dc651e463bfb1487d889898b3f5e43c021a9b74740ce7893b6bce6c5936fcb3510c592bbb3e1a8ddcf120b067f1be542b699da34d296b1b6d3db24c9dca04b"}, {0x1010, 0x88, 0x2b21de58, "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"}, {0xf8, 0x109, 0x6, "21613e694cdaca1ffdae4d326f5358d845690bcbe3d48a5e9eff34a8b490f7823acca9d8bbf115bce5dd831a94619ef7e6fea7a5977cedb38c0448bab9f693c1ce8982a24ad20e6857dfc1a0ba4043432e5ede63d620be4c822efa6fd6cb9250bd8a2a56ba48d20885ef8abbe2adba75f41e885ec0b8e803f9f7822c9462c15e86b90bfa240aaf5bb0741d0b3b4a2ade15675701ecedbf76b6bb4add03f37892bbb8591da65d1e8d2543f12cf2bf40c7eb706ca89a9caa2beb81bf51c5ea8f07666d264e38a7a6ee0ee67abdbf29afaf85fdb1105cf845cb071e7ca14f6dd889597d3c4d22fd"}], 0x11c0}}], 0x1, 0x10) (async)
r5 = open(&(0x7f0000004340)='./file0\x00', 0x2800, 0x4b) (async)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000043c0), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r5, &(0x7f0000004480)={&(0x7f0000004380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004440)={&(0x7f0000004400)={0x2c, r6, 0x600, 0x70bd25, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xf8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040081}, 0x40000) (async)
readv(r3, &(0x7f00000067c0)=[{&(0x7f00000044c0)=""/38, 0x26}, {&(0x7f0000004500)=""/238, 0xee}, {&(0x7f0000004600)=""/217, 0xd9}, {&(0x7f0000004700)=""/4096, 0x1000}, {&(0x7f0000005700)=""/136, 0x88}, {&(0x7f00000057c0)=""/4096, 0x1000}], 0x6) (async)
sendmsg$tipc(r1, &(0x7f0000006a00)={&(0x7f0000006840)=@name={0x1e, 0x2, 0x2, {{}, 0x4}}, 0x10, &(0x7f00000069c0)=[{&(0x7f0000006880)="b59c058b0f00859a1be1b984a8d019dae59b8397627f42a80abb9d877403383f3e9e85d0d7aae314361af9d6e0303261505c9a20daa91b97d3d8875a746df8d0eadd2a3773269a", 0x47}, {&(0x7f0000006900)="9def345b10f6452e51c3487bdb8db68d98986d7a0b6ed8476f368d9980aa5469d059e7d48202c2", 0x27}, {&(0x7f0000006940)="4981896cf073374c9154b28e03b00ef0b07e0584ae403112e5a5d8562a5a086dd12b95010c8b8a747d52f64b510e2c9388fdf89516226e63d300345aa0d74d4a38f226a8f379de880f5ba71816bfc9684895aced4d6d1023c536975de200ca564fb48755e430528223976e", 0x6b}], 0x3, 0x0, 0x0, 0x4000}, 0x4000001)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000006a80), r5)
sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000006bc0)={&(0x7f0000006a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000006b80)={&(0x7f0000006ac0)={0xb0, r7, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa42}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0xc880}, 0x95)
ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000006c40)={{r5}, 0x1, &(0x7f0000006c00)=[0x7f], 0x3, 0x3})
syz_genetlink_get_family_id$gtp(&(0x7f0000006cc0), r1) (async, rerun: 32)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000006d00)=0x14) (rerun: 32)
write$selinux_load(r5, &(0x7f0000006d40)={0xf97cff8c, 0x8, 'SE Linux', "bcf0aaebe7bcf0012901e1c902530bb39859322173c90ff0a87a4ebdce5ebb6c0bc39e7797595c89890c49e3918ad7d98ca52b97d2cb96410248bba29bd59f18b4661ea11a69de7e7784f3b3e955eed77d8f40510199ec8b902e0a1e568cb88db98eb1cb16de74713c50f4a6deaf11a0d8d2d8f8c7f3f26c40aafe62469b120952a0b3a78c3092eee7255d91b575ddff3c4c4fc8a80c65929ee9576d121c3b57cd61db"}, 0xb3)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0xf8)
ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000006e00)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) (async)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000006e40)={0xffff, 0x1a8, 0x7, 0x97a, 0x4d9}, 0x14)

877.812772ms ago: executing program 5 (id=6030):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48)
fallocate(r1, 0x1, 0x8, 0x9)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2<Z l\xdfDh\xa1\x99Bj<\r\x87\xa3\xd1?$\x8b\x02\x00\x00\x00h\x1b\x01\x00\x00\x00\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[<Y4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v<H\x8cmD\x8e\x9e\x18\xf7\xac\xa5\x17\x89\xc6\x88\x86\xe9\x15\x87WV\xfbF\xb1\x1fo\x85t\xf1\r\x8a\x9c\xe8\xac^\x19cp\xcceJ\xa6\x0e_\aE\bZ\x9f\xfa\xdf$\xad\xf0\xa5E\xeb\xd6\x80\xb7 \rd\xcc\x92\b\x01\x1bG\xb4su\x90\xcfs\x18LQ\x81^\x17\x80\xca\xdc\xe2\xb3\x01\x85\xa4r\x87G\xb8\x92\xdaJt\xa2g\xb7Azy+\x8f\xee\xb9\xa9\xa6\x04\xd1a\xca1~\x03\xbc\x87\xd1\xbaY\xf3\x8ai\xff[\xde\xde\xc6\xb1\xb9T{\xe2>\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9')

877.347612ms ago: executing program 5 (id=6031):
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x8000000003c)
socket$inet_udp(0x2, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x59, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/cpu_byteorder', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2020)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x11}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

869.872002ms ago: executing program 1 (id=6033):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x4, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000)
r1 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0xa)
fchdir(r2) (async)
fchdir(r2)
r3 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e29, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffc01}, 0x1c)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r4, 0x4101, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000040)={0x4}) (async)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000040)={0x4, <r7=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6}) (async)
ioctl$KVM_SET_DEVICE_ATTR(r7, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6})
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async)
r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (async)
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) (async)
openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
getdents64(r4, 0x0, 0x4f)
getdents(r4, 0x0, 0x0) (async)
getdents(r4, 0x0, 0x0)
connect$netlink(0xffffffffffffffff, 0x0, 0x0) (async)
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

869.526532ms ago: executing program 5 (id=6034):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = fsmount(0xffffffffffffffff, 0x0, 0x72)
r2 = syz_open_dev$usbmon(&(0x7f0000000140), 0x8, 0x800002)
ioctl$MON_IOCQ_URB_LEN(r2, 0x9201)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x29, 0x1f, 0x0, 0x47)
r4 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
clock_gettime(0x0, &(0x7f0000000380)={<r5=>0x0, <r6=>0x0})
ppoll(&(0x7f0000000080)=[{r1, 0x208}, {r0, 0x8}, {r0, 0xd2c8}, {r0, 0x3183}, {r0, 0x1008}, {r0, 0x20}, {r2, 0x1420}, {r0, 0xc004}, {r4, 0x802}, {r0, 0x6322}], 0xa, &(0x7f0000000100)={r5, r6+10000000}, &(0x7f0000000180)={[0x3]}, 0x8)
r7 = socket$inet(0x2, 0x3, 0x4)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10)
sendmmsg$inet(r7, &(0x7f0000000200), 0x0, 0x46000)
syz_usb_connect(0x5, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b41"], 0x0)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000000000000002"], 0x44}}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1, 0x0, 0x0, 0x2400c050}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r8)
fcntl$addseals(r3, 0x409, 0x6)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="001229bd700efddbdf255a0040000c009900010000007100000039779ef7aa78ba2126ce3c9d4596308f72f9aa2473403e26bdb833f38099060019fa936658770c3593112b3b049cd17f532f27003d162ee4b9ac7951735c2a6b8dcd4c411802e731c24592a3a82f26df0b48f02b7ca605776d5cfb27ff6836f7d9740924c300000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000014)

819.046534ms ago: executing program 1 (id=6035):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000180)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @ptr={0x70742a85, 0x1, &(0x7f0000000940)=""/4096, 0x1000, 0x1, 0x20003f}, @fda={0x66646185, 0xa, 0x2, 0xc}}, &(0x7f0000000000)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0})

807.781444ms ago: executing program 1 (id=6036):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2002b000103000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xad) (async)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffa}]}) (async)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x2, 0x5, 0xb, 0xa, 0x2, 0x0, 0x70bd23}, 0x10}}, 0x84) (async)
close_range(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) (async)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000140)=[@acquire, @decrefs], 0x0, 0x0, 0x0})

753.697545ms ago: executing program 1 (id=6037):
r0 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) (async, rerun: 32)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) (async)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 64)
r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) (rerun: 64)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async)
r6 = fsmount(r5, 0x0, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f0000000280)='notify_on_release\x00', 0x2, 0x0)
write$cgroup_int(r7, &(0x7f0000000000)=0x3fffc0004, 0x8) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) (async)
r8 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000006a80), 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
write$vga_arbiter(r8, &(0x7f0000000080)=ANY=[@ANYBLOB='decodes m'], 0xc) (async)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@request_death], 0x4d, 0x0, 0x0})

752.476345ms ago: executing program 1 (id=6038):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
getsockopt(r2, 0x111, 0x3, 0x0, &(0x7f0000000080))
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0)
r4 = socket$inet(0x2, 0x2, 0x1)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x4)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000240)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x7}}], 0x18}, 0x40010)
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
r6 = ioctl$USERFAULTFD_IOC_NEW(r5, 0xaa00)
ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000002000/0x3000)=nil, 0x3000}, 0x1})
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r8, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
bind$bt_l2cap(r8, &(0x7f0000001580)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x774, 0x2}, 0xe)
sendmsg$netlink(r7, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="340000002e000305000000000000000020000080080000000000000008000000", @ANYRES32, @ANYBLOB="0c000f0005"], 0x34}], 0x1}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, 0x14, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x3fff}, @typed={0x4, 0x1}]}, 0x1c}}, 0x0)
ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x541b, &(0x7f0000000040))
shutdown(r7, 0x0)
ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r3, 0x40046210, &(0x7f0000000100))

749.855295ms ago: executing program 1 (id=6039):
mlockall(0x6)
mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
pipe2$9p(&(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x84880)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c76657200696f6ee86bb8ae000030ae752c00f1a51ac2d12586ad989b"])
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
copy_file_range(r3, 0x0, r3, 0x0, 0x1, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host}, 0x10)
connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10)
r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r6)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r7 = inotify_init()
inotify_add_watch(r6, &(0x7f0000000240)='./cgroup\x00', 0x0)
inotify_add_watch(r7, &(0x7f0000000040)='./file0\x00', 0x1100001c)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000a8a000/0x2000)=nil, 0x2000, 0x300000e, 0x20c44fb6edc09a38, r4, 0x0)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20)
write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000280), 0xf)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'veth1_to_bond\x00', 0x200})
pidfd_send_signal(r6, 0xe, &(0x7f0000000100)={0x3c, 0x3, 0x8}, 0x0)

0s ago: executing program 4 (id=6040):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000bc0)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX, @ANYRESOCT=0x0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES64=0x0])
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x22, 0x4000}, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x40, 0x0, 0x0, 0x57, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x48801, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0xc, 0x3})
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x101, {0xe, 0xcbff, 0x0, {0x5, 0xfffffffffffffff9, 0x80001, 0x9, 0xa, 0x80000006, 0x5, 0x6, 0x101, 0x2000, 0x4, 0xffffffffffffffff, 0x0, 0x3, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet6(0x10, 0x3, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
r6 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, {{0xa, 0x4e20, 0x0, @empty}}}, 0x108)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
mkdir(0x0, 0x22)
mount$incfs(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x200000, 0x40)
r8 = openat$incfs(r7, &(0x7f0000000000)='.pending_reads\x00', 0x100, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r8, 0x40106726, &(0x7f00000000c0))
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2)
write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000010461c00600065000007019078ac1ee401ac1414aa863f000000000705342dfe070302010fa4b19a44c1c60b14f147194de20510aada7ea31f2b5ce3b6d57a605212df940c8ed0ac0b005b245c2dcf06054de4dd94040100000f00907800050b27"], 0x64)
pipe(&(0x7f0000000000)={<r9=>0xffffffffffffffff})
fstat(r9, &(0x7f0000000440))
memfd_create(&(0x7f0000000300)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4O$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\x19\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\xcdSL\b\x7f\xfe\xab\xd7\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\xa4\x83t\xdcyx', 0x8)
set_tid_address(0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)

kernel console output (not intermixed with test programs):

nect, device number 21
[  280.619362][T12768] netlink: 'syz.1.4138': attribute type 4 has an invalid length.
[  280.634577][T12768] netlink: 'syz.1.4138': attribute type 4 has an invalid length.
[  280.658728][   T36] audit: type=1326 audit(2000000311.739:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12740 comm="syz.6.4128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3f58eec9 code=0x7fc00000
[  280.734801][   T36] audit: type=1326 audit(2000000311.819:1025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12774 comm="syz.6.4141" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d3f58eec9 code=0x0
[  281.355516][T12820] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12820 comm=syz.6.4154
[  281.939641][T12832] rust_binder: Error while translating object.
[  281.939694][T12832] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  281.946092][T12832] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:359
[  281.972346][T12834] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[  282.027504][T12840] rust_binder: Error in use_page_slow: ESRCH
[  282.027536][T12840] rust_binder: use_range failure ESRCH
[  282.027552][T12839] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  282.033910][T12840] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[  282.045902][T12840] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  282.054008][T12840] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:336
[  282.470734][  T401] usb 6-1: new low-speed USB device number 15 using dummy_hcd
[  282.643438][  T401] usb 6-1: No LPM exit latency info found, disabling LPM.
[  282.651518][  T401] usb 6-1: config 1 has an invalid descriptor of length 223, skipping remainder of the config
[  282.662192][  T401] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  282.673550][  T401] usb 6-1: string descriptor 0 read error: -22
[  282.679802][  T401] usb 6-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40
[  282.689072][  T401] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  283.094240][T12879] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:371
[  283.094450][T12879] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  283.103809][T12879] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:371
[  283.183856][T12885] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12885 comm=syz.4.4177
[  283.219118][T12885] rust_binder: Error in use_page_slow: ESRCH
[  283.219144][T12885] rust_binder: use_range failure ESRCH
[  283.225434][T12885] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  283.231044][T12885] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  283.239098][T12885] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:377
[  283.281182][T12895] rust_binder: Write failure EFAULT in pid:379
[  283.416743][T12906] loop7: detected capacity change from 0 to 7
[  283.482777][    C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[  283.492749][    C0] Buffer I/O error on dev loop7, logical block 0, lost async page write
[  283.770799][  T401] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  283.800189][T12943] overlayfs: conflicting options: nfs_export=on,index=off
[  283.809408][T12945] overlayfs: conflicting options: nfs_export=on,index=off
[  283.842989][T12948] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4191'.
[  283.932061][  T401] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  283.943108][  T401] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  283.952921][  T401] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  283.966021][  T401] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  283.975198][  T401] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.989484][  T401] usb 5-1: config 0 descriptor??
[  284.000976][   T36] audit: type=1400 audit(2000000315.089:1026): avc:  denied  { read } for  pid=12953 comm="syz.6.4193" name="/" dev="configfs" ino=1199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  284.023414][   T36] audit: type=1400 audit(2000000315.089:1027): avc:  denied  { open } for  pid=12953 comm="syz.6.4193" path="/" dev="configfs" ino=1199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  284.144708][   T36] audit: type=1400 audit(2000000315.229:1028): avc:  denied  { execheap } for  pid=12972 comm="syz.6.4199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  284.402277][  T401] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0
[  284.410710][  T401] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0
[  284.421003][  T401] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0
[  284.428473][  T401] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0
[  284.440071][  T401] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0
[  284.447745][  T401] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0
[  284.454295][T12979] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  284.455318][  T401] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0
[  284.470760][  T401] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0
[  284.478559][  T401] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving
[  284.504008][  T401] plantronics 0003:047F:FFFF.001B: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  284.519586][  T401] usb 5-1: USB disconnect, device number 22
[  284.547396][T12980] fido_id[12980]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[  284.606770][T12979] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:400
[  284.784815][T12993] rust_binder: Error while translating object.
[  284.794222][T12993] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  284.800439][T12993] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:404
[  285.172574][   T66] usb 6-1: USB disconnect, device number 15
[  285.190702][   T45] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  285.340625][   T45] usb 5-1: Using ep0 maxpacket: 32
[  285.346909][   T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  285.358067][   T45] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[  285.367336][   T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.376330][   T45] usb 5-1: config 0 descriptor??
[  285.633402][   T36] audit: type=1400 audit(2000000576.716:1029): avc:  denied  { accept } for  pid=13015 comm="syz.6.4212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  285.679326][T13023] overlayfs: missing 'lowerdir'
[  285.700090][T13025] 9pnet: p9_errstr2errno: server reported unknown error 184467440
[  285.784275][   T45] elo 0003:04E7:0009.001C: ignoring exceeding usage max
[  285.793323][   T45] elo 0003:04E7:0009.001C: hidraw0: USB HID v0.00 Device [HID 04e7:0009] on usb-dummy_hcd.4-1/input0
[  285.985330][T13010] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true
[  286.096980][   T36] audit: type=1400 audit(2000000577.176:1030): avc:  denied  { watch } for  pid=13027 comm="syz.5.4216" path="pipe:[62832]" dev="pipefs" ino=62832 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  286.139254][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.139287][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.153039][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.153071][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.153082][T13032] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true
[  286.166270][T13032] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  286.174130][T13032] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:359
[  286.174575][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.194208][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.199547][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.206508][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.212695][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.219843][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.226131][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.232892][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.239738][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.248799][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.253107][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.259744][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.266294][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.272986][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.279337][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.286264][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.293074][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.299290][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.305770][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.312228][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.320658][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.325222][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.333280][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.346397][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.346422][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.346440][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.346465][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.346483][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.361225][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.373635][T13041] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4220'.
[  286.386020][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.394450][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.401119][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.409883][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.418031][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.421387][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.428130][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.434514][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.441210][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.447630][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.454440][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.461859][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.467933][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.474882][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.481652][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.488053][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.494611][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.501674][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.507934][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.515022][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.521678][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.528363][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.534959][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.541743][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.548026][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.563500][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.563525][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.570007][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.592976][T13049] x_tables: unsorted underflow at hook 3
[  286.608288][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.608320][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.615432][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.626247][T13031] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.661247][T13063] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  286.668630][T13063] rust_binder: Read failure Err(EFAULT) in pid:363
[  286.796234][T13088] incfs: Error accessing: ./file0.
[  286.808082][T13088] incfs: mount failed -20
[  286.949437][T13096] SELinux: failed to load policy
[  287.049920][T13105] binder: Unknown parameter '00000000000000000004'
[  287.290600][T13123] overlayfs: failed to clone upperpath
[  287.320390][    T9] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  287.385028][T13129] netlink: 'syz.6.4252': attribute type 13 has an invalid length.
[  287.491228][    T9] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  287.500846][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.510070][    T9] usb 6-1: config 0 descriptor??
[  287.717630][    T9] usb 6-1: Cannot read MAC address
[  287.722955][    T9] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  287.735484][    T9] usb 6-1: USB disconnect, device number 16
[  287.922976][    T9] usb 5-1: USB disconnect, device number 23
[  287.944226][T13137] 9pnet_fd: Insufficient options for proto=fd
[  288.034434][T13155] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  288.034467][T13155] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  288.039152][T13158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4264'.
[  288.042021][T13155] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  288.074775][T13165] rust_binder: Failed copying remainder into alloc: EFAULT
[  288.081884][T13165] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  288.089424][T13165] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  288.098053][T13165] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:431
[  288.157381][T13177] rust_binder: 439: no such ref 2
[  288.288740][T13188] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  288.295743][   T45] rust_binder: 13186: removing orphan mapping 0:112
[  288.314015][T13190] tipc: Started in network mode
[  288.319996][T13190] tipc: Node identity 4a26440ff526, cluster identity 4711
[  288.328289][T13190] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  288.346990][T13190] syzkaller0: entered promiscuous mode
[  288.352629][T13190] syzkaller0: entered allmulticast mode
[  288.358418][T13190] tipc: Resetting bearer <eth:syzkaller0>
[  288.364960][T13190] tipc: Resetting bearer <eth:syzkaller0>
[  288.376558][T13190] tipc: Disabling bearer <eth:syzkaller0>
[  288.475556][T13201] tc_dump_action: action bad kind
[  288.481085][T13201] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  288.481419][T13201] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:400
[  289.177045][T13243] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  289.207991][T13244] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  289.415034][T13256] netlink: 'syz.5.4299': attribute type 4 has an invalid length.
[  289.434398][T13256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=13256 comm=syz.5.4299
[  289.459694][   T45] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  289.490169][T13261] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  289.599926][   T45] usb 5-1: device descriptor read/64, error -71
[  289.709615][    T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  289.839584][   T45] usb 5-1: device descriptor read/64, error -71
[  289.869552][    T9] usb 6-1: Using ep0 maxpacket: 16
[  289.877587][    T9] usb 6-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb
[  289.887009][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.895126][    T9] usb 6-1: Product: syz
[  289.899401][    T9] usb 6-1: Manufacturer: syz
[  289.904060][    T9] usb 6-1: SerialNumber: syz
[  290.079552][   T45] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  290.209471][   T45] usb 5-1: device descriptor read/64, error -71
[  290.298479][T13277] 9pnet_fd: Insufficient options for proto=fd
[  290.314240][T13260] rust_binder: Write failure EFAULT in pid:410
[  290.335927][    T9] snd-usb-audio 6-1:222.0: probe with driver snd-usb-audio failed with error -71
[  290.354060][    T9] usb 6-1: USB disconnect, device number 17
[  290.363817][T12239] udevd[12239]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:222.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  290.384623][   T36] audit: type=1326 audit(2000000581.467:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13285 comm="syz.1.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91da58eec9 code=0x7ffc0000
[  290.408751][   T36] audit: type=1326 audit(2000000581.467:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13285 comm="syz.1.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91da58eec9 code=0x7ffc0000
[  290.432779][   T36] audit: type=1326 audit(2000000581.467:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13285 comm="syz.1.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f91da58eec9 code=0x7ffc0000
[  290.456848][   T36] audit: type=1326 audit(2000000581.467:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13285 comm="syz.1.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91da58eec9 code=0x7ffc0000
[  290.480650][   T36] audit: type=1326 audit(2000000581.467:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13285 comm="syz.1.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f91da590de7 code=0x7ffc0000
[  290.489386][   T45] usb 5-1: device descriptor read/64, error -71
[  290.504456][   T36] audit: type=1326 audit(2000000581.467:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13285 comm="syz.1.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f91da590d5c code=0x7ffc0000
[  290.534631][   T36] audit: type=1326 audit(2000000581.467:1037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13285 comm="syz.1.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f91da590c94 code=0x7ffc0000
[  290.558260][   T36] audit: type=1326 audit(2000000581.467:1038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13285 comm="syz.1.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f91da590c94 code=0x7ffc0000
[  290.582043][   T36] audit: type=1326 audit(2000000581.467:1039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13285 comm="syz.1.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f91da58db2a code=0x7ffc0000
[  290.605732][   T36] audit: type=1326 audit(2000000581.467:1040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13285 comm="syz.1.4310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91da58eec9 code=0x7ffc0000
[  290.629576][   T45] usb usb5-port1: attempt power cycle
[  290.903577][T13302] tmpfs: Unsupported parameter 'mpol'
[  290.969297][   T45] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  290.974706][T13319] rust_binder: Write failure EFAULT in pid:441
[  290.991503][   T45] usb 5-1: device descriptor read/8, error -71
[  291.040178][T13331] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[  291.130381][   T45] usb 5-1: device descriptor read/8, error -71
[  291.273302][T13346] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  291.273374][T13346] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[  291.287241][T13346] rust_binder: 459: no such ref 3
[  291.292654][T13346] rust_binder: 459: no such ref 1
[  291.369184][   T45] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  291.390547][   T45] usb 5-1: device descriptor read/8, error -71
[  291.520373][   T45] usb 5-1: device descriptor read/8, error -71
[  291.629283][   T45] usb usb5-port1: unable to enumerate USB device
[  291.835215][T13356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4332'.
[  291.844580][T13356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4332'.
[  292.164040][T13361] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  292.242883][T13365] fuse: Bad value for 'fd'
[  292.274830][T13361] binder: Bad value for 'max'
[  292.548931][    T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  292.623823][T13380] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  292.631986][  T400] usb 5-1: new full-speed USB device number 28 using dummy_hcd
[  292.632667][T13380] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.4340'.
[  292.700650][    T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  292.711219][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  292.720393][    T9] usb 6-1: config 1 has no interface number 0
[  292.726746][    T9] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  292.742298][    T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  292.751830][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  292.760281][    T9] usb 6-1: Product: syz
[  292.764789][    T9] usb 6-1: Manufacturer: syz
[  292.769812][    T9] usb 6-1: SerialNumber: syz
[  292.779601][    T9] usb 6-1: selecting invalid altsetting 1
[  292.789925][  T400] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  292.801171][  T400] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  292.811286][  T400] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  292.822023][  T400] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  292.834424][  T400] usb 5-1: config 0 descriptor??
[  293.053188][T13402] overlayfs: failed to clone upperpath
[  293.059713][T13402] overlayfs: failed to clone upperpath
[  293.110686][T13407] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.4349'.
[  293.243784][  T400] isku 0003:1E7D:319C.001D: unknown main item tag 0x0
[  293.251476][  T400] isku 0003:1E7D:319C.001D: unknown main item tag 0x0
[  293.258519][  T400] isku 0003:1E7D:319C.001D: unknown main item tag 0x0
[  293.265759][  T400] isku 0003:1E7D:319C.001D: unknown main item tag 0x0
[  293.273163][  T400] isku 0003:1E7D:319C.001D: unknown main item tag 0x0
[  293.291435][  T400] isku 0003:1E7D:319C.001D: unknown main item tag 0x0
[  293.301841][  T400] isku 0003:1E7D:319C.001D: unknown main item tag 0x0
[  293.314164][  T400] isku 0003:1E7D:319C.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.4-1/input0
[  293.424423][T13430] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.4357'.
[  293.435345][T13430] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  295.246251][  T330] usb 5-1: USB disconnect, device number 28
[  295.328983][    T9] cdc_ncm 6-1:1.1: bind() failure
[  295.347782][    T9] usb 6-1: USB disconnect, device number 18
[  295.389673][T13488] tmpfs: Bad value for 'nr_blocks'
[  295.411047][T13490] netlink: 'syz.1.4377': attribute type 4 has an invalid length.
[  295.435152][T13490] netlink: 'syz.1.4377': attribute type 4 has an invalid length.
[  295.477198][T13498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4380'.
[  295.506807][T13503] overlayfs: failed to clone upperpath
[  295.512952][T13503] overlayfs: failed to clone upperpath
[  295.519575][T13503] overlayfs: failed to clone upperpath
[  295.526905][T13503] overlayfs: failed to clone upperpath
[  295.535462][T13503] overlayfs: failed to clone upperpath
[  295.542106][T13503] overlayfs: failed to clone upperpath
[  295.548004][T13503] overlayfs: failed to clone upperpath
[  295.554164][T13503] overlayfs: failed to clone upperpath
[  295.560201][T13503] overlayfs: failed to clone upperpath
[  295.566770][T13503] overlayfs: failed to clone upperpath
[  295.573038][T13503] overlayfs: failed to clone upperpath
[  295.579129][T13503] overlayfs: failed to clone upperpath
[  295.585045][T13503] overlayfs: failed to clone upperpath
[  295.591394][T13503] overlayfs: failed to clone upperpath
[  295.597612][T13503] overlayfs: failed to clone upperpath
[  295.603879][T13503] overlayfs: failed to clone upperpath
[  295.609969][T13503] overlayfs: failed to clone upperpath
[  295.616278][T13503] overlayfs: failed to clone upperpath
[  295.622415][T13503] overlayfs: failed to clone upperpath
[  295.628589][T13503] overlayfs: failed to clone upperpath
[  295.634508][T13503] overlayfs: failed to clone upperpath
[  295.640694][T13503] overlayfs: failed to clone upperpath
[  295.646597][T13503] overlayfs: failed to clone upperpath
[  295.652801][T13503] overlayfs: failed to clone upperpath
[  295.658872][T13503] overlayfs: failed to clone upperpath
[  295.664965][T13503] overlayfs: failed to clone upperpath
[  295.671135][T13503] overlayfs: failed to clone upperpath
[  295.677308][T13503] overlayfs: failed to clone upperpath
[  295.683536][T13503] overlayfs: failed to clone upperpath
[  295.770125][T13482] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[  295.785933][T13513] rust_binder: 475: no such ref 1
[  296.144911][T13529] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  296.153012][T13529] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  296.161666][T13529] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  296.169735][T13529] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  296.194186][T13531] rust_binder: Error while translating object.
[  296.194222][T13531] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  296.201093][T13531] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:466
[  296.303777][T13543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:473
[  296.315993][T13545] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  296.319041][T13538] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  296.334185][T13538] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:473
[  296.576007][T13569] rust_binder: Write failure EINVAL in pid:488
[  296.586172][T13569] binder: Unknown parameter 'context����[7�'
[  296.661180][T13581] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  296.661215][T13581] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:494
[  296.716508][T13592] SELinux: security_context_str_to_sid (syste_u�Gй�:��) failed with errno=-22
[  296.842444][T13600] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false
[  296.903549][T13607] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  296.934780][T13612] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  296.934817][T13612] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:512
[  296.967154][   T36] kauditd_printk_skb: 18 callbacks suppressed
[  296.967176][   T36] audit: type=1401 audit(2000000588.048:1059): op=setxattr invalid_context=""
[  297.134251][   T36] audit: type=1326 audit(2000000588.219:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13633 comm="syz.4.4429" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f915358eec9 code=0x0
[  297.235831][T13638] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false
[  297.262590][T13640] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  297.312029][   T36] audit: type=1400 audit(2000000588.399:1061): avc:  denied  { remount } for  pid=13641 comm="syz.5.4432" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  297.363708][T13648] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  297.364187][T13648] rust_binder: Error in use_page_slow: ESRCH
[  297.370761][T13648] rust_binder: use_range failure ESRCH
[  297.376785][T13648] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[  297.382478][T13648] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  297.390729][T13648] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:502
[  297.413870][T13650] exFAT-fs (rnullb0): invalid boot record signature
[  297.429661][T13650] exFAT-fs (rnullb0): failed to read boot sector
[  297.436021][T13650] exFAT-fs (rnullb0): failed to recognize exfat type
[  297.459686][T13652] netlink: 'syz.5.4436': attribute type 4 has an invalid length.
[  297.469550][T13652] netlink: 'syz.5.4436': attribute type 4 has an invalid length.
[  297.493449][   T36] audit: type=1107 audit(2000000588.579:1062): pid=13656 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=''
[  297.795447][T13676] bridge0: port 1(bridge_slave_0) entered blocking state
[  297.802860][   T66] usb 6-1: new low-speed USB device number 19 using dummy_hcd
[  297.802993][T13676] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.817984][T13676] bridge_slave_0: entered allmulticast mode
[  297.824355][T13676] bridge_slave_0: entered promiscuous mode
[  297.831325][T13676] bridge0: port 2(bridge_slave_1) entered blocking state
[  297.838400][T13676] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.845660][T13676] bridge_slave_1: entered allmulticast mode
[  297.852079][T13676] bridge_slave_1: entered promiscuous mode
[  297.859183][T12244] tipc: Resetting bearer <eth:xfrm0>
[  297.865187][T12244] tipc: Resetting bearer <eth:syzkaller0>
[  297.885004][T12244] tipc: Disabling bearer <eth:xfrm0>
[  297.895134][T12244] tipc: Disabling bearer <eth:syzkaller0>
[  297.969299][   T66] usb 6-1: Invalid ep0 maxpacket: 32
[  297.986715][T13681] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:524
[  297.991387][T13681] rust_binder: Write failure EFAULT in pid:524
[  298.005878][T12244] tipc: Left network mode
[  298.019307][T12244] veth1_macvtap: left promiscuous mode
[  298.025294][T12244] veth0_vlan: left promiscuous mode
[  298.092601][T13676] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.099693][T13676] bridge0: port 2(bridge_slave_1) entered forwarding state
[  298.106977][T13676] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.114047][T13676] bridge0: port 1(bridge_slave_0) entered forwarding state
[  298.121811][   T66] usb 6-1: new low-speed USB device number 20 using dummy_hcd
[  298.147754][T12255] bridge0: port 1(bridge_slave_0) entered disabled state
[  298.155302][T12255] bridge0: port 2(bridge_slave_1) entered disabled state
[  298.165699][T12260] bridge0: port 1(bridge_slave_0) entered blocking state
[  298.172891][T12260] bridge0: port 1(bridge_slave_0) entered forwarding state
[  298.182104][T12255] bridge0: port 2(bridge_slave_1) entered blocking state
[  298.189298][T12255] bridge0: port 2(bridge_slave_1) entered forwarding state
[  298.216756][T13676] veth0_vlan: entered promiscuous mode
[  298.227913][T13676] veth1_macvtap: entered promiscuous mode
[  298.267505][   T45] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  298.287508][   T66] usb 6-1: Invalid ep0 maxpacket: 32
[  298.293188][   T66] usb usb6-port1: attempt power cycle
[  298.427468][   T45] usb 5-1: Using ep0 maxpacket: 32
[  298.433950][   T45] usb 5-1: config 0 has an invalid interface number: 196 but max is 0
[  298.442779][   T45] usb 5-1: config 0 has no interface number 0
[  298.449159][   T45] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  298.460765][   T45] usb 5-1: config 0 interface 196 has no altsetting 0
[  298.471189][   T45] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  298.480787][   T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.489008][   T45] usb 5-1: Product: syz
[  298.493375][   T45] usb 5-1: Manufacturer: syz
[  298.498332][   T45] usb 5-1: SerialNumber: syz
[  298.507884][   T45] usb 5-1: config 0 descriptor??
[  298.513673][T13681] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  298.550173][T13695] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[  298.615798][T13702] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  298.637459][   T66] usb 6-1: new low-speed USB device number 21 using dummy_hcd
[  298.644703][T13702] 9pnet_fd: Insufficient options for proto=fd
[  298.659013][   T66] usb 6-1: Invalid ep0 maxpacket: 32
[  298.787575][   T66] usb 6-1: new low-speed USB device number 22 using dummy_hcd
[  298.807730][   T66] usb 6-1: Invalid ep0 maxpacket: 32
[  298.813266][   T66] usb usb6-port1: unable to enumerate USB device
[  298.947308][   T31] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  299.108273][   T31] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  299.118607][   T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  299.128007][   T31] usb 2-1: config 1 has no interface number 0
[  299.134434][   T31] usb 2-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  299.150340][   T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  299.161565][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.170552][   T31] usb 2-1: Product: syz
[  299.174769][   T31] usb 2-1: Manufacturer: syz
[  299.179881][   T31] usb 2-1: SerialNumber: syz
[  299.188701][   T31] usb 2-1: selecting invalid altsetting 1
[  299.196131][   T45] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: -71
[  299.206371][   T45] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached
[  299.216865][   T45] usb 5-1: USB disconnect, device number 29
[  299.269716][T13725] rust_binder: Error while translating object.
[  299.269766][T13725] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  299.275992][T13725] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:529
[  299.317098][T13729] rust_binder: Error while translating object.
[  299.326730][T13729] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  299.333033][T13729] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:531
[  299.364099][T13732] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:533
[  299.414988][   T36] audit: type=1400 audit(2000000590.499:1063): avc:  denied  { append } for  pid=13736 comm="syz.4.4459" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  299.536361][T13743] 9pnet_fd: Insufficient options for proto=fd
[  299.543344][   T36] audit: type=1400 audit(2000000590.619:1064): avc:  denied  { mounton } for  pid=13742 comm="syz.4.4462" path="/" dev="configfs" ino=1199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  299.589098][T13745] bridge0: entered allmulticast mode
[  299.656058][   T31] cdc_ncm 2-1:1.1: bind() failure
[  299.661957][   T45] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected
[  299.670829][   T31] usb 2-1: USB disconnect, device number 46
[  299.711511][T13749] netlink: 'syz.4.4464': attribute type 29 has an invalid length.
[  299.720187][T13749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4464'.
[  299.730767][T13749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4464'.
[  299.765191][T13751] kvm: kvm [13750]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0
[  299.852078][T13755] veth1_macvtap: left promiscuous mode
[  299.857661][T13755] macsec0: entered promiscuous mode
[  299.865265][T13755] rust_binder: Got transaction with invalid offset.
[  299.865296][T13755] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  299.872083][T13755] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:553
[  299.915496][   T36] audit: type=1400 audit(2000000590.999:1065): avc:  denied  { mounton } for  pid=13758 comm="syz.1.4468" path="/6/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  299.916105][T13759] tmpfs: Unknown parameter 'grpquota_inode_hardlimit'
[  300.002944][T13761] Bluetooth: hci0: Frame reassembly failed (-84)
[  300.010983][T12260] Bluetooth: hci0: Frame reassembly failed (-84)
[  300.053369][T13763] binder: Unknown parameter ''
[  300.198051][   T36] audit: type=1400 audit(2000000591.289:1066): avc:  denied  { accept } for  pid=13775 comm="syz.6.4475" path="socket:[66772]" dev="sockfs" ino=66772 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  300.231575][T13774] rust_binder: pid 13774 performed invalid decrement on ref
[  300.263793][T13780] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13780 comm=syz.1.4476
[  300.657236][  T401] usb 2-1: new full-speed USB device number 47 using dummy_hcd
[  300.818088][  T401] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  300.829120][  T401] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  300.842037][  T401] usb 2-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00
[  300.851180][  T401] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.865487][  T401] usb 2-1: config 0 descriptor??
[  300.871368][T13812] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  300.881490][  T401] usbhid 2-1:0.0: can't add hid device: -22
[  300.887552][  T401] usbhid 2-1:0.0: probe with driver usbhid failed with error -22
[  301.133355][    T9] usb 2-1: USB disconnect, device number 47
[  301.508636][T13833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=13833 comm=syz.5.4491
[  301.555900][T13840] random: crng reseeded on system resumption
[  301.579472][T13841] input: syz1 as /devices/virtual/input/input41
[  301.652189][   T36] audit: type=1400 audit(2000000592.740:1067): avc:  denied  { shutdown } for  pid=13851 comm="syz.1.4496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  301.660891][T13853] /dev/sr0: Can't lookup blockdev
[  301.876623][   T31] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  301.896637][    T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  302.016628][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  302.016726][  T642] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  302.026829][   T31] usb 6-1: Using ep0 maxpacket: 16
[  302.028993][    T9] usb 2-1: device descriptor read/64, error -71
[  302.039902][   T31] usb 6-1: unable to get BOS descriptor or descriptor too short
[  302.049952][   T31] usb 6-1: config 1 interface 0 has no altsetting 0
[  302.059381][   T31] usb 6-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[  302.073155][   T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  302.081592][   T31] usb 6-1: Product: syz
[  302.085952][   T31] usb 6-1: Manufacturer: syz
[  302.088846][   T36] audit: type=1400 audit(2000000593.170:1068): avc:  denied  { setattr } for  pid=13857 comm="syz.4.4498" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  302.091010][   T31] usb 6-1: SerialNumber: syz
[  302.155219][   T36] audit: type=1400 audit(2000000593.240:1069): avc:  denied  { ioctl } for  pid=13861 comm="syz.4.4500" path="socket:[66853]" dev="sockfs" ino=66853 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  302.196443][T13868] syz.6.4502: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz6,mems_allowed=0
[  302.213191][T13868] CPU: 1 UID: 0 PID: 13868 Comm: syz.6.4502 Not tainted syzkaller #0 b3dd942fcdd3f4bfa23db685604bb140fbbb27fa
[  302.213232][T13868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  302.213250][T13868] Call Trace:
[  302.213264][T13868]  <TASK>
[  302.213275][T13868]  __dump_stack+0x21/0x30
[  302.213317][T13868]  dump_stack_lvl+0x10c/0x190
[  302.213349][T13868]  ? __cfi_dump_stack_lvl+0x10/0x10
[  302.213381][T13868]  dump_stack+0x19/0x20
[  302.213404][T13868]  warn_alloc+0x1bc/0x2a0
[  302.213428][T13868]  ? stack_depot_save_flags+0x38/0x800
[  302.213448][T13868]  ? __cfi_warn_alloc+0x10/0x10
[  302.213477][T13868]  ? kasan_save_track+0x4f/0x80
[  302.213505][T13868]  ? __kmalloc_cache_noprof+0x1a5/0x3c0
[  302.213532][T13868]  ? xskq_create+0x68/0x2a0
[  302.213557][T13868]  ? xsk_init_queue+0xb6/0x120
[  302.213579][T13868]  ? xsk_setsockopt+0x43f/0x6f0
[  302.213601][T13868]  ? do_sock_setsockopt+0x26d/0x400
[  302.213626][T13868]  ? __x64_sys_setsockopt+0x1b8/0x250
[  302.213650][T13868]  ? x64_sys_call+0x2adc/0x2ee0
[  302.213678][T13868]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  302.213707][T13868]  __vmalloc_node_range_noprof+0x135/0x1420
[  302.213738][T13868]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  302.213764][T13868]  ? avc_has_perm+0x144/0x220
[  302.213789][T13868]  ? kasan_save_alloc_info+0x40/0x50
[  302.213814][T13868]  ? __kasan_kmalloc+0x96/0xb0
[  302.213834][T13868]  vmalloc_user_noprof+0x77/0x90
[  302.213859][T13868]  ? xskq_create+0xdb/0x2a0
[  302.213882][T13868]  xskq_create+0xdb/0x2a0
[  302.213905][T13868]  xsk_init_queue+0xb6/0x120
[  302.213929][T13868]  xsk_setsockopt+0x43f/0x6f0
[  302.213951][T13868]  ? __cfi_xsk_setsockopt+0x10/0x10
[  302.213974][T13868]  ? do_futex+0x309/0x500
[  302.213993][T13868]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[  302.214025][T13868]  ? security_socket_setsockopt+0x33/0xd0
[  302.214043][T13868]  ? __cfi_xsk_setsockopt+0x10/0x10
[  302.214066][T13868]  do_sock_setsockopt+0x26d/0x400
[  302.214090][T13868]  ? __cfi_do_sock_setsockopt+0x10/0x10
[  302.214117][T13868]  __x64_sys_setsockopt+0x1b8/0x250
[  302.214143][T13868]  x64_sys_call+0x2adc/0x2ee0
[  302.214170][T13868]  do_syscall_64+0x58/0xf0
[  302.214192][T13868]  ? clear_bhb_loop+0x50/0xa0
[  302.214209][T13868]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  302.214238][T13868] RIP: 0033:0x7f6d3f58eec9
[  302.214257][T13868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  302.214273][T13868] RSP: 002b:00007f6d4034b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  302.214293][T13868] RAX: ffffffffffffffda RBX: 00007f6d3f7e5fa0 RCX: 00007f6d3f58eec9
[  302.214307][T13868] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  302.214319][T13868] RBP: 00007f6d3f611f91 R08: 0000000000000004 R09: 0000000000000000
[  302.214330][T13868] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  302.214342][T13868] R13: 00007f6d3f7e6038 R14: 00007f6d3f7e5fa0 R15: 00007ffe23ac8648
[  302.214358][T13868]  </TASK>
[  302.214387][T13868] Mem-Info:
[  302.286896][    T9] usb 2-1: device descriptor read/64, error -71
[  302.287304][T13868] active_anon:21654 inactive_anon:195 isolated_anon:0
[  302.287304][T13868]  active_file:12538 inactive_file:12670 isolated_file:0
[  302.287304][T13868]  unevictable:16392 dirty:184 writeback:0
[  302.287304][T13868]  slab_reclaimable:6574 slab_unreclaimable:73174
[  302.287304][T13868]  mapped:24764 shmem:15647 pagetables:943
[  302.287304][T13868]  sec_pagetables:0 bounce:0
[  302.287304][T13868]  kernel_misc_reclaimable:0
[  302.287304][T13868]  free:1484563 free_pcp:2114 free_cma:0
[  302.375780][T13850] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  302.389579][T13868] Node 0 active_anon:86616kB inactive_anon:780kB active_file:50152kB inactive_file:50680kB unevictable:65568kB isolated(anon):0kB isolated(file):0kB mapped:99056kB dirty:736kB writeback:0kB shmem:62588kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6592kB pagetables:3772kB sec_pagetables:0kB all_unreclaimable? no
[  302.389674][T13868] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:0kB free_cma:0kB
[  302.416496][  T401] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  302.417099][T13868] lowmem_reserve[]:
[  302.576577][    T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  302.609190][   T31] usblp0: Disabling reads from problematic bidirectional printer
[  302.638935][T13868]  0
[  302.646676][   T31] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 32 proto 2 vid 0x03F0 pid 0x0004
[  302.650020][T13868]  3921
[  302.663855][   T31] usb 6-1: USB disconnect, device number 23
[  302.665871][  T401] usb 5-1: Using ep0 maxpacket: 8
[  302.676768][T13868]  3921
[  302.680029][  T401] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 252, changing to 11
[  302.685584][T13868] 
[  302.687310][  T401] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  302.692675][T13868] Normal free:2979236kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:86616kB inactive_anon:780kB active_file:50152kB inactive_file:50680kB unevictable:65568kB writepending:736kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:1324kB local_pcp:380kB free_cma:0kB
[  302.695469][  T401] usb 5-1: config 0 interface 0 has no altsetting 0
[  302.708040][   T31] usblp0: removed
[  302.716417][  T401] usb 5-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00
[  302.721814][T13868] lowmem_reserve[]:
[  302.762826][  T401] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.765865][T13868]  0
[  302.780261][  T401] usb 5-1: config 0 descriptor??
[  302.785246][T13868]  0 0
[  302.795586][T13868] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[  302.811213][T13868] Normal: 723*4kB (UME) 589*8kB (UME) 925*16kB (UME) 1299*32kB (UME) 957*64kB (UM) 202*128kB (UM) 107*256kB (UME) 56*512kB (UME) 50*1024kB (UME) 21*2048kB (UM) 654*4096kB (UM) = 2980132kB
[  302.830178][T13868] 57440 total pagecache pages
[  302.835079][T13868] 196 pages in swap cache
[  302.836458][    T9] usb 2-1: device descriptor read/64, error -71
[  302.840910][T13868] Free swap  = 123940kB
[  302.850068][T13868] Total swap = 124996kB
[  302.854363][T13868] 2097051 pages RAM
[  302.858240][T13868] 0 pages HighMem/MovableOnly
[  302.863204][T13868] 351537 pages reserved
[  302.867641][T13868] 0 pages cma reserved
[  302.874767][T13868] Memory allocations:
[  302.879197][T13868]          0 B        0 init/main.c:1370 func:do_initcalls
[  302.886578][T13868]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  302.895040][T13868]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  302.902768][T13868]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  302.910892][T13868]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  302.919035][T13868]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  302.927956][T13868]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  302.935910][T13868]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  302.943884][T13868]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  302.952470][T13868]          0 B        0 init/initramfs.c:101 func:find_link
[  302.986082][T13871] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4504'.
[  302.996129][T13873] random: crng reseeded on system resumption
[  303.080838][T13879] SELinux: security_context_str_to_sid (sytem_u�Gй) failed with errno=-22
[  303.086374][    T9] usb 2-1: device descriptor read/64, error -71
[  303.194816][  T401] wacom 0003:056A:00B3.001E: Unknown device_type for 'HID 056a:00b3'. Assuming pen.
[  303.205788][    T9] usb usb2-port1: attempt power cycle
[  303.212033][  T401] wacom 0003:056A:00B3.001E: hidraw0: USB HID v0.00 Device [HID 056a:00b3] on usb-dummy_hcd.4-1/input0
[  303.226070][  T401] input: Wacom Intuos3 12x12 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00B3.001E/input/input43
[  303.246170][T13876] Unrecognized hibernate image header format!
[  303.253112][T13876] PM: hibernation: Image mismatch: architecture specific data
[  303.261103][T13873] Unrecognized hibernate image header format!
[  303.267981][T13873] PM: hibernation: Image mismatch: architecture specific data
[  303.290687][   T31] hid (null): invalid report_size 16468
[  303.296435][   T31] hid (null): invalid report_count 1806783757
[  303.304116][   T31] hid-generic 0006:0FFF:FFFFFF98.001F: unexpected long global item
[  303.312529][   T31] hid-generic 0006:0FFF:FFFFFF98.001F: probe with driver hid-generic failed with error -22
[  303.396667][T13890] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  303.401848][T13866] exFAT-fs (rnullb0): invalid boot record signature
[  303.415103][T13866] exFAT-fs (rnullb0): failed to read boot sector
[  303.421510][T13866] exFAT-fs (rnullb0): failed to recognize exfat type
[  303.429369][  T401] usb 5-1: USB disconnect, device number 30
[  303.508930][T13892] binder: Unknown parameter 'defcontext01777777777777777777777'
[  303.556310][    T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  303.578291][    T9] usb 2-1: device descriptor read/8, error -71
[  303.707799][    T9] usb 2-1: device descriptor read/8, error -71
[  303.766153][  T400] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  303.916119][  T400] usb 6-1: Using ep0 maxpacket: 8
[  303.922509][  T400] usb 6-1: config 0 has an invalid descriptor of length 254, skipping remainder of the config
[  303.933286][  T400] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  303.946780][    T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  303.956268][  T400] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  303.967257][  T400] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  303.975690][   T36] audit: type=1400 audit(2000000595.060:1070): avc:  denied  { ioctl } for  pid=13929 comm="syz.4.4525" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  304.002131][  T400] usb 6-1: Product: syz
[  304.006422][  T400] usb 6-1: Manufacturer: syz
[  304.011061][  T400] usb 6-1: SerialNumber: syz
[  304.015742][    T9] usb 2-1: device descriptor read/8, error -71
[  304.024988][  T400] usb 6-1: config 0 descriptor??
[  304.147199][    T9] usb 2-1: device descriptor read/8, error -71
[  304.257555][    T9] usb usb2-port1: unable to enumerate USB device
[  304.279765][T13952] incfs: Options parsing error. -22
[  304.290060][T13952] incfs: mount failed -22
[  304.307379][T13944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13944 comm=syz.6.4529
[  304.334780][T13957] rust_binder: Write failure EFAULT in pid:563
[  304.393056][T13966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4536'.
[  304.408846][T13966] netlink: 31 bytes leftover after parsing attributes in process `syz.4.4536'.
[  304.418419][T13966] netlink: 'syz.4.4536': attribute type 3 has an invalid length.
[  304.426632][T13966] netlink: 'syz.4.4536': attribute type 2 has an invalid length.
[  304.434693][T13966] netlink: 31 bytes leftover after parsing attributes in process `syz.4.4536'.
[  304.437449][T13967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  304.453577][T13967] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  304.689263][T13982] overlayfs: missing 'workdir'
[  304.739886][  T400] usb 6-1: USB disconnect, device number 24
[  304.748701][T13983] rust_binder: 13982 RLIMIT_NICE not set
[  304.761590][   T45] rust_binder: 13981: removing orphan mapping 0:4240
[  304.869545][   T36] audit: type=1400 audit(2000000595.960:1071): avc:  denied  { mounton } for  pid=13990 comm="syz.6.4547" path="/file0" dev="rootfs" ino=20533 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[  304.891741][   T36] audit: type=1326 audit(2000000595.960:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13990 comm="syz.6.4547" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d3f58eec9 code=0x0
[  305.736427][T14008] SELinux:  Context system_u:object_r:lib_t:s0 is not valid (left unmapped).
[  305.746737][   T36] audit: type=1400 audit(2000000596.841:1073): avc:  denied  { relabelto } for  pid=14007 comm="syz.6.4553" name="file0" dev="tmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:lib_t:s0"
[  305.773514][T14008] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  305.786354][  T400] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  305.794478][   T36] audit: type=1400 audit(2000000596.841:1074): avc:  denied  { associate } for  pid=14007 comm="syz.6.4553" name="file0" dev="tmpfs" ino=1293 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:lib_t:s0"
[  305.821823][   T36] audit: type=1400 audit(2000000596.861:1075): avc:  denied  { mounton } for  pid=14007 comm="syz.6.4553" path="/241/file0" dev="tmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:lib_t:s0"
[  305.964126][   T36] audit: type=1326 audit(2000000597.051:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14011 comm="syz.4.4554" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f915358eec9 code=0x0
[  305.978255][  T400] usb 2-1: unable to get BOS descriptor or descriptor too short
[  305.994938][  T400] usb 2-1: no configurations
[  305.999701][  T400] usb 2-1: can't read configurations, error -22
[  306.574974][   T36] audit: type=1400 audit(2000000597.661:1077): avc:  denied  { rmdir } for  pid=11202 comm="syz-executor" name="file0" dev="tmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:lib_t:s0"
[  306.649826][T14023] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  306.895406][T14050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4567'.
[  307.404056][T14061] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4571'.
[  307.477167][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  307.477191][   T36] audit: type=1400 audit(2000000598.571:1079): avc:  denied  { shutdown } for  pid=14060 comm="syz.5.4571" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  307.597963][T14076] rust_binder: Write failure EINVAL in pid:92
[  307.669088][   T36] audit: type=1400 audit(2000000598.761:1080): avc:  denied  { setattr } for  pid=14089 comm="syz.5.4580" name="vsock" dev="devtmpfs" ino=208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  307.714322][T14092] overlayfs: overlapping lowerdir path
[  307.720612][T14092] __vm_enough_memory: pid: 14092, comm: syz.5.4581, bytes: 18014402804453376 not enough memory for the allocation
[  307.747578][T14094] netlink: 'syz.5.4582': attribute type 64 has an invalid length.
[  307.830036][   T36] audit: type=1400 audit(2000000598.921:1081): avc:  denied  { setopt } for  pid=14099 comm="syz.5.4583" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  307.865169][ T2380] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  308.015266][ T2380] usb 2-1: Using ep0 maxpacket: 8
[  308.021639][ T2380] usb 2-1: config index 0 descriptor too short (expected 5924, got 36)
[  308.030182][ T2380] usb 2-1: config 250 has an invalid interface number: 0 but max is -1
[  308.038584][ T2380] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  308.049099][ T2380] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0
[  308.059422][ T2380] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  308.068558][ T2380] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  308.076938][ T2380] usb 2-1: Product: syz
[  308.081244][ T2380] usb 2-1: SerialNumber: syz
[  308.088550][ T2380] hub 2-1:250.0: bad descriptor, ignoring hub
[  308.094677][ T2380] hub 2-1:250.0: probe with driver hub failed with error -5
[  308.195093][   T45] usb 6-1: new full-speed USB device number 25 using dummy_hcd
[  308.346211][   T45] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  308.356773][   T45] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  308.367179][   T45] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  308.376528][   T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.384626][   T45] usb 6-1: Product: syz
[  308.388850][   T45] usb 6-1: Manufacturer: syz
[  308.393469][   T45] usb 6-1: SerialNumber: syz
[  308.545200][   T66] usb 2-1: reset high-speed USB device number 54 using dummy_hcd
[  308.801364][   T45] usb 6-1: 0:2 : does not exist
[  309.004964][ T2380] usb 2-1: USB disconnect, device number 54
[  309.664731][ T2380] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  309.817507][ T2380] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  309.826884][ T2380] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.835301][ T2380] usb 2-1: Product: syz
[  309.839835][ T2380] usb 2-1: Manufacturer: syz
[  309.844817][ T2380] usb 2-1: SerialNumber: syz
[  309.860744][ T2380] r8152-cfgselector 2-1: Unknown version 0x0000
[  309.867264][ T2380] r8152-cfgselector 2-1: config 0 descriptor??
[  310.523157][T14129] netlink: 'syz.6.4595': attribute type 4 has an invalid length.
[  310.531566][T14129] netlink: 17 bytes leftover after parsing attributes in process `syz.6.4595'.
[  310.966286][ T2380] usb 6-1: USB disconnect, device number 25
[  311.002448][T14167] rust_binder: Error in use_page_slow: ESRCH
[  311.002474][T14167] rust_binder: use_range failure ESRCH
[  311.008834][T14167] rust_binder: Failed to allocate buffer. len:4160, is_oneway:false
[  311.014514][T14167] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  311.022569][T14167] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:607
[  311.032014][T14167] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  311.041201][T14167] rust_binder: Read failure Err(EFAULT) in pid:607
[  311.050542][T14168] rust_binder: Write failure EINVAL in pid:607
[  311.141769][T14179] rust_binder: Write failure EFAULT in pid:618
[  311.939780][T14212] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  311.966421][T14212] syzkaller0: entered promiscuous mode
[  311.971973][T14212] syzkaller0: entered allmulticast mode
[  311.978023][T14212] tipc: Resetting bearer <eth:syzkaller0>
[  311.990813][T14212] tipc: Resetting bearer <eth:syzkaller0>
[  312.006031][T14212] tipc: Disabling bearer <eth:syzkaller0>
[  312.170713][T14230] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:628
[  312.170885][T14230] rust_binder: Error in use_page_slow: ESRCH
[  312.180297][T14230] rust_binder: use_range failure ESRCH
[  312.186372][T14230] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false
[  312.191880][T14230] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  312.199959][T14230] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:628
[  312.332104][T14234] input: syz1 as /devices/virtual/input/input46
[  312.432985][   T31] r8152-cfgselector 2-1: USB disconnect, device number 55
[  312.499753][T14245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4635'.
[  312.853959][   T31] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  312.980247][T14264] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  312.985012][T14264] rust_binder: Error in use_page_slow: ESRCH
[  312.991583][T14264] rust_binder: use_range failure ESRCH
[  312.997652][T14264] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[  313.003156][T14264] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  313.011245][T14264] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:637
[  313.013917][   T31] usb 2-1: Using ep0 maxpacket: 8
[  313.035980][   T31] usb 2-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config
[  313.046447][   T31] usb 2-1: New USB device found, idVendor=0403, idProduct=7150, bcdDevice=eb.e0
[  313.055645][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.066373][   T31] ftdi_sio 2-1:254.0: Ignoring interface reserved for JTAG
[  313.269368][T14245] veth1: entered allmulticast mode
[  313.285456][T14271] fuse: Unknown parameter 'fdI;��7�'
[  313.291007][T14272] fuse: Unknown parameter 'fdI;��7�'
[  313.326583][T14277] veth1: left allmulticast mode
[  313.353860][   T31] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  313.372972][T14279] tmpfs: Unknown parameter ''
[  313.407803][   T45] usb 2-1: USB disconnect, device number 56
[  313.515530][   T31] usb 6-1: Using ep0 maxpacket: 32
[  313.532289][   T31] usb 6-1: unable to read config index 0 descriptor/start: -61
[  313.543755][   T31] usb 6-1: can't read configurations, error -61
[  313.683748][   T31] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[  313.833706][   T31] usb 6-1: Using ep0 maxpacket: 32
[  313.840475][   T31] usb 6-1: unable to read config index 0 descriptor/start: -61
[  313.848285][   T31] usb 6-1: can't read configurations, error -61
[  313.854742][   T31] usb usb6-port1: attempt power cycle
[  314.075259][T14320] rust_binder: 124: no such ref 0
[  314.080896][T14320] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  314.088332][T14320] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  314.169749][T14325] rust_binder: Error in use_page_slow: ESRCH
[  314.169776][T14325] rust_binder: use_range failure ESRCH
[  314.176137][T14325] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  314.181765][T14325] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  314.189897][T14325] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:129
[  314.199341][   T31] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[  314.244165][   T31] usb 6-1: Using ep0 maxpacket: 32
[  314.257356][   T31] usb 6-1: unable to read config index 0 descriptor/start: -61
[  314.262727][T14327] rust_binder: Write failure EFAULT in pid:131
[  314.265039][   T31] usb 6-1: can't read configurations, error -61
[  314.403694][   T31] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[  314.424042][   T31] usb 6-1: Using ep0 maxpacket: 32
[  314.430735][   T31] usb 6-1: unable to read config index 0 descriptor/start: -61
[  314.438785][   T31] usb 6-1: can't read configurations, error -61
[  314.445479][   T31] usb usb6-port1: unable to enumerate USB device
[  314.566530][T14338] overlayfs: failed to clone lowerpath
[  314.572568][T14338] overlayfs: missing 'lowerdir'
[  315.119380][T14367] overlayfs: failed to clone lowerpath
[  315.141458][   T36] audit: type=1326 audit(2000000606.223:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14368 comm="syz.4.4679" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f915358eec9 code=0x0
[  315.183918][T14377] netlink: 57 bytes leftover after parsing attributes in process `syz.1.4680'.
[  315.195371][T14377] mmap: syz.1.4680 (14377): VmData 29077504 exceed data ulimit 68. Update limits or use boot option ignore_rlimit_data.
[  315.228302][   T36] audit: type=1400 audit(2000000606.313:1083): avc:  denied  { nlmsg_read } for  pid=14385 comm="syz.4.4686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  315.365940][   T36] audit: type=1400 audit(2000000606.453:1084): avc:  denied  { map } for  pid=14409 comm="syz.4.4695" path="socket:[69121]" dev="sockfs" ino=69121 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  315.368320][T14411] can0: slcan on ptm1.
[  315.403798][   T36] audit: type=1400 audit(2000000606.493:1085): avc:  denied  { create } for  pid=14406 comm="syz.6.4693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  315.504584][T14407] can0 (unregistered): slcan off ptm1.
[  315.550398][T14445] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37
[  315.550431][T14445] rust_binder: Error while translating object.
[  315.563799][T14445] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  315.592429][T14445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:148
[  315.649665][T14463] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false
[  315.775024][T14478] cgroup: Invalid name
[  315.824225][T14487] overlayfs: failed to resolve 'dont_appraise': -2
[  315.893218][   T31] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  316.043203][   T31] usb 2-1: Using ep0 maxpacket: 16
[  316.050098][   T31] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  316.058931][   T31] usb 2-1: config 0 has no interface number 0
[  316.065127][   T31] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  316.076179][   T31] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  316.086015][   T31] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  316.095260][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.106525][   T31] usb 2-1: config 0 descriptor??
[  316.145457][T14511] fuse: Bad value for 'group_id'
[  316.150488][T14511] fuse: Bad value for 'group_id'
[  316.382417][T14541] fuse: Bad value for 'group_id'
[  316.387789][T14541] fuse: Bad value for 'group_id'
[  316.404844][T14543] /dev/loop0: Can't lookup blockdev
[  316.606373][T14562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4738'.
[  316.649636][T14566] fuse: Bad value for 'group_id'
[  316.654741][T14566] fuse: Bad value for 'group_id'
[  316.714331][   T31] usbhid 2-1:0.1: can't add hid device: -71
[  316.720356][   T31] usbhid 2-1:0.1: probe with driver usbhid failed with error -71
[  316.731837][   T31] usb 2-1: USB disconnect, device number 57
[  316.791592][T14582] 9pnet_fd: Insufficient options for proto=fd
[  317.003886][T14591] netlink: 100 bytes leftover after parsing attributes in process `syz.5.4747'.
[  317.312073][T14602] overlay: ./file0 is not a directory
[  317.482855][ T2380] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  317.634162][ T2380] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  317.645155][ T2380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  317.656272][ T2380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  317.666075][ T2380] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  317.679841][ T2380] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  317.688981][ T2380] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  317.697377][ T2380] usb 2-1: Manufacturer: syz
[  317.702858][ T2380] usb 2-1: config 0 descriptor??
[  317.884388][T14616] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  317.922923][ T2380] usbhid 2-1:0.0: can't add hid device: -71
[  317.942562][ T2380] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  317.955822][ T2380] usb 2-1: USB disconnect, device number 58
[  317.984172][T14637] fuse: Unknown parameter 'group_i��00000000000000000000'
[  318.061205][T14655] incfs: Backing dir is not set, filesystem can't be mounted.
[  318.069049][T14655] incfs: mount failed -2
[  318.070753][T14657] overlayfs: failed to resolve 'metacopy=on': -2
[  318.183016][T14673] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  318.183049][T14673] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:183
[  318.502587][   T31] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  318.644910][T14680] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  318.662681][   T31] usb 2-1: Using ep0 maxpacket: 16
[  318.669113][   T31] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  318.677196][   T31] usb 2-1: config 0 has no interface number 0
[  318.683428][   T31] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  318.694475][   T31] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  318.704299][   T31] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  318.713384][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.722400][   T31] usb 2-1: config 0 descriptor??
[  318.824988][T14695] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  318.825228][T14695] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:663
[  319.352440][   T31] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0020/input/input47
[  319.403210][   T31] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0020/input/input48
[  319.437321][   T31] uclogic 0003:28BD:0071.0020: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1
[  319.550192][   T31] usb 2-1: USB disconnect, device number 59
[  319.701169][T14719] fuse: Invalid gid '00000000000037777777777'
[  319.932276][  T401] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[  320.082233][  T401] usb 6-1: Using ep0 maxpacket: 16
[  320.088553][  T401] usb 6-1: unable to get BOS descriptor or descriptor too short
[  320.097230][  T401] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 8
[  320.105944][  T401] usb 6-1: can't read configurations, error -22
[  320.186582][T14750] FAT-fs (rnullb0): bogus number of reserved sectors
[  320.193443][T14750] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  320.242221][  T401] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[  320.392148][  T401] usb 6-1: Using ep0 maxpacket: 16
[  320.402875][  T401] usb 6-1: unable to get BOS descriptor or descriptor too short
[  320.411409][  T401] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 8
[  320.430917][  T401] usb 6-1: can't read configurations, error -22
[  320.439958][  T401] usb usb6-port1: attempt power cycle
[  320.526059][T14779] +$<�: renamed from bridge0 (while UP)
[  320.599943][T14792] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  320.782070][  T401] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[  320.799254][T14801] fuse: Bad value for 'fd'
[  320.804300][  T401] usb 6-1: Using ep0 maxpacket: 16
[  320.811131][  T401] usb 6-1: unable to get BOS descriptor or descriptor too short
[  320.821743][  T401] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 8
[  320.830731][  T401] usb 6-1: can't read configurations, error -22
[  320.854537][T14768] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[  320.939621][T14808] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.972040][  T401] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[  320.986439][T14811] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  320.986470][T14811] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:210
[  320.996183][  T401] usb 6-1: Using ep0 maxpacket: 16
[  321.016072][  T401] usb 6-1: unable to get BOS descriptor or descriptor too short
[  321.024724][  T401] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 8
[  321.033377][  T401] usb 6-1: can't read configurations, error -22
[  321.039988][  T401] usb usb6-port1: unable to enumerate USB device
[  321.179017][T14816] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14816 comm=syz.1.4821
[  321.477326][T14823] rust_binder: Write failure EFAULT in pid:222
[  321.563359][T14835] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4830'.
[  321.751852][  T401] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  321.901801][  T401] usb 2-1: Using ep0 maxpacket: 8
[  321.908000][  T401] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  321.918956][  T401] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  321.928760][  T401] usb 2-1: config 0 interface 0 has no altsetting 0
[  321.936297][  T401] usb 2-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00
[  321.945694][  T401] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.954452][  T401] usb 2-1: config 0 descriptor??
[  322.328802][T14870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4842'.
[  322.350906][T14874] fuse: Unknown parameter 'group_i00000000000000000000'
[  322.362997][  T401] ntrig 0003:1B96:0004.0021: unknown main item tag 0x0
[  322.370311][  T401] ntrig 0003:1B96:0004.0021: unknown main item tag 0x0
[  322.377435][  T401] ntrig 0003:1B96:0004.0021: item fetching failed at offset 2/5
[  322.385391][  T401] ntrig 0003:1B96:0004.0021: parse failed
[  322.391291][  T401] ntrig 0003:1B96:0004.0021: probe with driver ntrig failed with error -22
[  322.411185][T14879] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4845'.
[  322.566414][   T31] usb 2-1: USB disconnect, device number 60
[  322.941270][T14893] netlink: 'syz.6.4850': attribute type 7 has an invalid length.
[  323.085909][T14898] fuse: Unknown parameter 'group_i00000000000000000000'
[  323.093003][   T66] usb 6-1: new full-speed USB device number 34 using dummy_hcd
[  323.243175][   T66] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  323.254029][   T66] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping
[  323.265057][   T66] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  323.279511][   T66] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  323.288620][   T66] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  323.297163][   T66] usb 6-1: Product: syz
[  323.301328][   T66] usb 6-1: Manufacturer: syz
[  323.305996][   T66] usb 6-1: SerialNumber: syz
[  323.314318][   T66] usb 6-1: config 0 descriptor??
[  323.404514][T14908] /dev/sg0: Can't lookup blockdev
[  323.421983][T14911] rust_binder: Write failure EINVAL in pid:242
[  323.433245][T14914] SELinux: security_context_str_to_sid () failed with errno=-22
[  323.534277][  T401] usb 6-1: USB disconnect, device number 34
[  323.839134][T14935] fuse: Unknown parameter 'group_id00000000000000000000'
[  324.200749][T14953] fuseblk: Bad value for 'fd'
[  324.206814][T14953] __vm_enough_memory: pid: 14953, comm: syz.5.4870, bytes: 18014402804453376 not enough memory for the allocation
[  324.344189][T14957] fuse: Unknown parameter 'pid'
[  324.393174][T14959] fuse: Unknown parameter 'group_id00000000000000000000'
[  324.452360][T14968] batadv_slave_0: entered promiscuous mode
[  324.461227][T14965] batadv_slave_0: left promiscuous mode
[  324.582056][   T36] audit: type=1326 audit(2000000615.664:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14983 comm="syz.5.4881" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb87958eec9 code=0x0
[  324.646663][T14992] fuse: Bad value for 'user_id'
[  324.651641][T14992] fuse: Bad value for 'user_id'
[  324.794328][T15016] fuse: Bad value for 'user_id'
[  324.803173][T15016] fuse: Bad value for 'user_id'
[  324.824619][   T36] audit: type=1400 audit(2000000615.914:1087): avc:  denied  { setattr } for  pid=15018 comm="syz.4.4894" name="CAN_BCM" dev="sockfs" ino=71861 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  324.991499][T15045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14 sclass=netlink_route_socket pid=15045 comm=syz.6.4905
[  324.991499][T15046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14 sclass=netlink_route_socket pid=15046 comm=syz.6.4905
[  325.202092][   T66] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  325.332111][   T66] usb 2-1: device descriptor read/64, error -71
[  325.423726][T15082] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  325.423835][T15082] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:698
[  325.432489][T15083] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  325.572179][   T66] usb 2-1: device descriptor read/64, error -71
[  325.586382][T15095] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  325.600200][T15095] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  325.608401][T15095] kvm: requested 13409 ns i8254 timer period limited to 200000 ns
[  325.616796][T15095] kvm: requested 53638 ns i8254 timer period limited to 200000 ns
[  325.624711][T15095] kvm: requested 41904 ns i8254 timer period limited to 200000 ns
[  325.632775][T15095] kvm: requested 838 ns i8254 timer period limited to 200000 ns
[  325.641335][T15095] kvm: requested 53638 ns i8254 timer period limited to 200000 ns
[  325.649310][T15095] kvm: requested 170133 ns i8254 timer period limited to 200000 ns
[  325.822279][   T66] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  325.952333][   T66] usb 2-1: device descriptor read/64, error -71
[  326.003103][T15102] 9pnet_fd: Insufficient options for proto=fd
[  326.192411][   T66] usb 2-1: device descriptor read/64, error -71
[  326.302783][   T66] usb usb2-port1: attempt power cycle
[  326.472945][T15130] binder: Unknown parameter 'dirsy�
'
[  326.642468][   T66] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  326.663919][   T66] usb 2-1: device descriptor read/8, error -71
[  326.732597][   T31] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[  326.793765][   T66] usb 2-1: device descriptor read/8, error -71
[  326.870094][T15143] fuse: Bad value for 'fd'
[  326.882518][   T31] usb 6-1: Using ep0 maxpacket: 32
[  326.891182][   T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  326.902247][   T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  326.912379][   T31] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  326.921491][   T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  326.930542][   T31] usb 6-1: config 0 descriptor??
[  326.936581][   T31] hub 6-1:0.0: USB hub found
[  327.052825][   T66] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  327.073693][   T66] usb 2-1: device descriptor read/8, error -71
[  327.136772][   T31] hub 6-1:0.0: 1 port detected
[  327.162623][T15163] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  327.198607][T15167] fuse: Bad value for 'fd'
[  327.204660][   T66] usb 2-1: device descriptor read/8, error -71
[  327.322731][   T66] usb usb2-port1: unable to enumerate USB device
[  327.341032][T15181] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4951'.
[  327.379444][T15192] fuse: Bad value for 'fd'
[  327.398525][T15195] tipc: MTU too low for tipc bearer
[  327.543673][T15134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  327.552493][T15134] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  327.560938][T15134] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  327.608681][   T31] usb 6-1: USB disconnect, device number 35
[  327.986829][T15217] fuse: Bad value for 'fd'
[  328.009208][T15219] binder: Unknown parameter 'context����[7�'
[  328.183772][T15233] rust_binder: Write failure EFAULT in pid:727
[  328.196910][T15237] __vm_enough_memory: pid: 15237, comm: syz.5.4970, bytes: 18014402804453376 not enough memory for the allocation
[  328.362904][  T400] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  328.392512][T15243] fuse: Bad value for 'fd'
[  328.506786][T15268] SELinux:  Context system_u:object_r:apt_var_lib_t:s0 is not valid (left unmapped).
[  328.517022][   T36] audit: type=1400 audit(2000000619.603:1088): avc:  denied  { relabelto } for  pid=15267 comm="syz.5.4975" name="file0" dev="tmpfs" ino=1352 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0"
[  328.546719][   T36] audit: type=1400 audit(2000000619.633:1089): avc:  denied  { associate } for  pid=15267 comm="syz.5.4975" name="file0" dev="tmpfs" ino=1352 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_lib_t:s0"
[  328.574698][  T400] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  328.581060][T15272] fuse: Bad value for 'fd'
[  328.585158][  T400] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  328.599363][  T400] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.609532][  T400] usb 2-1: config 0 descriptor??
[  329.026146][  T400] lenovo 0003:17EF:6047.0022: item fetching failed at offset 3/5
[  329.027323][T15302] overlayfs: failed to clone lowerpath
[  329.034491][  T400] lenovo 0003:17EF:6047.0022: hid_parse failed
[  329.045884][  T400] lenovo 0003:17EF:6047.0022: probe with driver lenovo failed with error -22
[  329.223497][   T31] usb 2-1: USB disconnect, device number 65
[  329.843924][T15356] rust_binder: Got transaction with invalid offset.
[  329.843988][T15356] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  329.850728][T15356] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:283
[  329.932847][T15360] fuse: Bad value for 'group_id'
[  329.933112][T15361] fuse: Bad value for 'group_id'
[  329.942161][T15360] fuse: Bad value for 'group_id'
[  329.947277][T15361] fuse: Bad value for 'group_id'
[  330.052051][   T36] audit: type=1400 audit(2000000621.133:1090): avc:  denied  { setattr } for  pid=15364 comm="syz.1.5015" name="" dev="pipefs" ino=72468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[  330.871847][T15399] fuse: Bad value for 'fd'
[  330.876616][T15399] fuse: Bad value for 'fd'
[  331.036811][T15423] kvm: kvm [15414]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000
[  331.046414][T15423] kvm: kvm [15414]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010015) = 0x8000
[  331.056428][T15423] kvm: kvm [15414]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000
[  331.066748][T15423] kvm: kvm [15414]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000
[  331.072404][T15434] fuse: Bad value for 'rootmode'
[  331.076271][T15423] kvm: kvm [15414]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010005) = 0x8000
[  331.099136][T15423] kvm: kvm [15414]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000
[  331.113779][T15423] kvm: kvm [15414]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010015) = 0x8000
[  331.123787][T15423] kvm: kvm [15414]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000
[  331.134637][T15423] kvm: kvm [15414]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010002) = 0x8000
[  331.144239][T15423] kvm: kvm [15414]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010005) = 0x8000
[  331.315907][T15464] fuse: Bad value for 'rootmode'
[  331.512270][   T36] audit: type=1400 audit(2000000622.593:1091): avc:  denied  { unlink } for  pid=10915 comm="syz-executor" name="file0" dev="tmpfs" ino=1352 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:apt_var_lib_t:s0"
[  331.925705][T15482] fuse: Bad value for 'rootmode'
[  331.969536][T15490] fuse: Unknown parameter '9p'
[  331.974490][T15491] fuse: Unknown parameter '9p'
[  332.143753][   T31] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  332.168185][T15497] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5060'.
[  332.191195][T15497] netlink: 56 bytes leftover after parsing attributes in process `syz.5.5060'.
[  332.267388][T15501] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5062'.
[  332.277851][T15501] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5062'.
[  332.303803][   T31] usb 2-1: Using ep0 maxpacket: 8
[  332.310199][   T31] usb 2-1: config index 0 descriptor too short (expected 5924, got 36)
[  332.323921][   T31] usb 2-1: config 250 has an invalid interface number: 0 but max is -1
[  332.332308][   T31] usb 2-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  332.344091][   T31] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0
[  332.354706][   T31] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  332.372665][T15509] fuse: Unknown parameter 'use00000000000000000000'
[  332.373797][   T31] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  332.392357][   T31] usb 2-1: Product: syz
[  332.396788][   T31] usb 2-1: SerialNumber: syz
[  332.406196][   T31] hub 2-1:250.0: bad descriptor, ignoring hub
[  332.412351][   T31] hub 2-1:250.0: probe with driver hub failed with error -5
[  332.510012][T15517] tmpfs: Unknown parameter '0x0000000000000000'
[  332.551537][T15519] netlink: 'syz.4.5069': attribute type 33 has an invalid length.
[  332.567114][T15519] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5069'.
[  332.631445][T15525] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5072'.
[  332.680857][T15531] netlink: 'syz.1.5075': attribute type 1 has an invalid length.
[  332.714044][   T66] usb 2-1: USB disconnect, device number 66
[  332.931611][T15543] rust_binder: Error in use_page_slow: ESRCH
[  332.931611][T15542] rust_binder: Error in use_page_slow: ESRCH
[  332.931630][T15543] rust_binder: use_range failure ESRCH
[  332.931647][T15543] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true
[  332.937774][T15542] rust_binder: use_range failure ESRCH
[  332.944189][T15543] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  332.949345][T15542] rust_binder: Failed to allocate buffer. len:1168, is_oneway:true
[  332.957429][T15543] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:310
[  332.962753][T15542] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  332.989043][T15542] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:310
[  333.652377][T15560] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5085'.
[  333.652904][T15561] 9pnet_fd: Insufficient options for proto=fd
[  333.779233][T15580] syzkaller0: entered promiscuous mode
[  333.784779][T15580] syzkaller0: entered allmulticast mode
[  333.876071][T15592] binder: Unknown parameter 'max''
[  333.879684][T15596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=15596 comm=syz.4.5096
[  333.900249][T15598] netlink: 'syz.1.5097': attribute type 27 has an invalid length.
[  333.908261][T15599] netlink: 'syz.1.5097': attribute type 27 has an invalid length.
[  333.916490][T15598] rust_binder: 327: no such ref 3
[  333.921640][T15598] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:327
[  333.931815][T15599] rust_binder: Error in use_page_slow: ESRCH
[  333.931845][T15599] rust_binder: use_range failure ESRCH
[  333.938281][T15598] rust_binder: Error in use_page_slow: ESRCH
[  333.944066][T15598] rust_binder: use_range failure ESRCH
[  333.954196][T15599] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[  333.959725][T15599] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  333.977257][T15598] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[  333.988690][T15599] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:327
[  334.001439][T15598] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  334.008618][T15599] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  334.013288][T15598] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:327
[  334.031414][   T36] audit: type=1400 audit(2000000625.112:1092): avc:  denied  { lock } for  pid=15607 comm="syz.4.5101" path="socket:[73910]" dev="sockfs" ino=73910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_socket permissive=1
[  334.090122][T15619] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=15619 comm=syz.4.5105
[  334.150387][T15633] fuse: Unknown parameter 'user_i00000000000000000000'
[  334.638757][T15646] overlayfs: failed to clone lowerpath
[  334.839327][T15651] rust_binder: 15650 RLIMIT_NICE not set
[  334.856575][T15653] fuse: Unknown parameter 'user_i00000000000000000000'
[  335.224200][T15672] fuse: Unknown parameter 'user_i00000000000000000000'
[  335.775316][T15704] fuse: Unknown parameter 'user_id00000000000000000000'
[  336.279738][   T36] audit: type=1326 audit(2000000627.371:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15732 comm="syz.5.5147" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb87958eec9 code=0x0
[  336.476295][T15740] fuse: Unknown parameter 'user_id00000000000000000000'
[  336.550583][   T36] audit: type=1400 audit(2000000627.641:1094): avc:  denied  { listen } for  pid=15741 comm="syz.1.5151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  337.124633][T15752] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5155'.
[  337.231641][T15766] tmpfs: Bad value for 'size'
[  337.780761][T15817] 8021q: VLANs not supported on lo
[  337.905455][   T36] audit: type=1400 audit(2000000629.001:1095): avc:  denied  { remount } for  pid=15830 comm="syz.4.5182" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[  337.926088][T15831] overlayfs: missing 'workdir'
[  337.963202][T15836] netlink: 'syz.6.5184': attribute type 13 has an invalid length.
[  337.991815][T15838] 9p: Unknown Cache mode or invalid value fs��ՓQU�cache
[  338.280342][   T36] audit: type=1400 audit(2000000629.371:1096): avc:  denied  { associate } for  pid=15834 comm="syz.4.5182" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[  338.406528][T15884] 9pnet_fd: Insufficient options for proto=fd
[  338.459673][   T36] audit: type=1400 audit(2000000629.551:1097): avc:  denied  { getopt } for  pid=15892 comm="syz.6.5205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  338.480403][T15893] tmpfs: Invalid uid '0x00000000ffffffff'
[  338.500762][T15894] tmpfs: Invalid uid '0x00000000ffffffff'
[  338.516557][T15893] overlayfs: failed to clone upperpath
[  338.522371][T15894] overlayfs: failed to clone upperpath
[  338.533076][T15893] netlink: 'syz.6.5205': attribute type 4 has an invalid length.
[  338.545427][T15893] netlink: 'syz.6.5205': attribute type 2 has an invalid length.
[  338.621033][T15909] fuse: Unknown parameter '0x0000000000000003'
[  338.697117][   T36] audit: type=1400 audit(2000000629.791:1098): avc:  denied  { mount } for  pid=15925 comm="syz.6.5214" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[  338.728703][T15926] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  338.826437][T15937] overlayfs: failed to clone upperpath
[  339.579894][T15968] fuse: Unknown parameter '0x0000000000000003'
[  339.604906][T15972] fuse: Unknown parameter '&d'
[  339.610350][T15972] 9pnet_fd: Insufficient options for proto=fd
[  340.047263][T15998] fuse: Unknown parameter '0x0000000000000003'
[  340.119805][T16004] fuse: Unknown parameter '0x0000000000000006'
[  340.226057][T16006] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5247'.
[  340.276139][T16016] fuse: Unknown parameter '0x0000000000000003'
[  340.660938][T16043] fuse: Unknown parameter 'fd0x0000000000000003'
[  340.691363][T16047] netlink: 'syz.6.5265': attribute type 46 has an invalid length.
[  340.763449][   T36] audit: type=1400 audit(2000000631.850:1099): avc:  denied  { setopt } for  pid=16051 comm="syz.6.5266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  340.957048][T16066] 9pnet_fd: Insufficient options for proto=fd
[  340.981041][T16071] fuse: Unknown parameter 'fd0x0000000000000003'
[  341.332632][T16080] netlink: 'syz.5.5276': attribute type 27 has an invalid length.
[  341.518917][T16082] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5277'.
[  341.588794][T16092] fuse: Unknown parameter 'fd0x0000000000000003'
[  341.982566][T16114] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5289'.
[  342.015149][T16118] fuse: Bad value for 'fd'
[  342.109145][T16126] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  342.270141][T16150] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock
[  342.783845][T16175] No source specified
[  343.028972][T16198] overlayfs: failed to clone upperpath
[  343.456913][T16217] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  343.464185][T16217] IPv6: NLM_F_CREATE should be set when creating new route
[  343.471487][T16217] IPv6: NLM_F_CREATE should be set when creating new route
[  343.521420][T16230] futex_wake_op: syz.4.5333 tries to shift op by -1; fix this program
[  343.579345][T16248] 9pnet_fd: Insufficient options for proto=fd
[  343.662836][T16255] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  344.252643][T16309] SELinux:  Context system_u:object_r:adjtime_t:s0 is not valid (left unmapped).
[  344.262029][   T36] audit: type=1400 audit(8000002569.324:1100): avc:  denied  { relabelfrom } for  pid=16308 comm="syz.1.5363" name="PPPOL2TP" dev="sockfs" ino=75663 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  344.280547][T16315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5365'.
[  344.286487][   T36] audit: type=1400 audit(8000002569.334:1101): avc:  denied  { relabelto } for  pid=16308 comm="syz.1.5363" name="PPPOL2TP" dev="sockfs" ino=75663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=pppox_socket permissive=1 trawcon="system_u:object_r:adjtime_t:s0"
[  344.319148][T16319] virtiofs: Bad value for 'dax'
[  344.483271][T16321] fuse: Unknown parameter 'grotp_id'
[  344.489415][   T36] audit: type=1400 audit(8000002569.564:1102): avc:  denied  { create } for  pid=16320 comm="syz.5.5367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  344.548707][T16330] 9pnet_fd: Insufficient options for proto=fd
[  344.783537][T16360] netlink: 'syz.6.5381': attribute type 4 has an invalid length.
[  345.212541][T16395] overlayfs: failed to clone upperpath
[  345.442390][T16403] 9p filesystem being mounted at /464/file0 supports timestamps until 2106-02-07 (0xffffffff)
[  345.476253][T16409] 9pnet_fd: Insufficient options for proto=fd
[  345.596790][T16438] bridge0: port 3(syz_tun) entered blocking state
[  345.603355][T16438] bridge0: port 3(syz_tun) entered disabled state
[  345.610282][T16438] syz_tun: entered allmulticast mode
[  345.616002][T16438] syz_tun: entered promiscuous mode
[  345.621836][T16438] bridge0: port 3(syz_tun) entered blocking state
[  345.628333][T16438] bridge0: port 3(syz_tun) entered forwarding state
[  345.661446][T16445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16445 comm=syz.6.5413
[  346.436741][T16472] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  346.448434][T16472] overlayfs: missing 'lowerdir'
[  346.480419][T16473] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  346.492173][T16473] overlayfs: missing 'lowerdir'
[  346.610978][T16493] overlayfs: failed to clone lowerpath
[  346.823909][T16503] syz.6.5432(16503): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  346.871852][T16507] tipc: Started in network mode
[  346.876834][T16507] tipc: Node identity , cluster identity 4711
[  346.882999][T16507] tipc: Failed to obtain node identity
[  346.888617][T16507] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[  347.683170][T16561] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=94 sclass=netlink_tcpdiag_socket pid=16561 comm=syz.5.5454
[  347.696058][T16561] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=33 sclass=netlink_tcpdiag_socket pid=16561 comm=syz.5.5454
[  347.708898][T16561] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=66 sclass=netlink_tcpdiag_socket pid=16561 comm=syz.5.5454
[  347.721657][T16561] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=16561 comm=syz.5.5454
[  347.734433][T16563] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16563 comm=syz.5.5454
[  347.747547][T16561] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=59 sclass=netlink_tcpdiag_socket pid=16561 comm=syz.5.5454
[  347.968956][T16583] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  347.977868][T16583] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  347.987156][T16583] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  347.999319][T16583] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  348.143093][T16604] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  348.151524][T16604] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22
[  348.533092][T16617] tipc: Trying to set illegal importance in message
[  348.564558][T16622] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5478'.
[  348.607166][T16625] tmpfs: Unknown parameter '01777777777777777777777'
[  349.208129][T16678] netlink: 'syz.4.5495': attribute type 1 has an invalid length.
[  349.222514][T16678] 9pnet_fd: Insufficient options for proto=fd
[  349.229012][T16680] overlayfs: missing 'lowerdir'
[  349.300918][T16700] netlink: 'syz.1.5505': attribute type 4 has an invalid length.
[  349.311533][T16700] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.5505'.
[  349.442607][T16735] netlink: 'syz.4.5518': attribute type 27 has an invalid length.
[  349.476058][T16735] +$<�: port 2(bridge_slave_1) entered disabled state
[  349.483369][T16735] +$<�: port 1(bridge_slave_0) entered disabled state
[  349.542892][T16752] overlayfs: missing 'workdir'
[  349.561495][T16735] macsec0: left promiscuous mode
[  349.577870][T16746] netlink: 'syz.5.5517': attribute type 27 has an invalid length.
[  349.643823][T16754] netlink: 'syz.5.5519': attribute type 4 has an invalid length.
[  349.655713][T16754] netlink: 17 bytes leftover after parsing attributes in process `syz.5.5519'.
[  349.701017][T16762] cgroup: none used incorrectly
[  349.740784][T16770] 9p filesystem being mounted at /354/file0 supports timestamps until 2106-02-07 (0xffffffff)
[  349.840442][T16774] netlink: 'syz.5.5525': attribute type 39 has an invalid length.
[  350.188319][T16783] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5529'.
[  350.530875][T16805] overlay: ./bus is not a directory
[  350.536696][T16805] 9pnet_fd: Insufficient options for proto=fd
[  350.963245][T16810] netlink: 'syz.6.5540': attribute type 12 has an invalid length.
[  350.971627][T16810] netlink: 'syz.6.5540': attribute type 46 has an invalid length.
[  350.980311][T16810] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5540'.
[  350.992211][T16811] netlink: 'syz.6.5540': attribute type 46 has an invalid length.
[  351.000169][T16811] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5540'.
[  351.174719][T16837] IPv6: NLM_F_CREATE should be specified when creating new route
[  351.318140][T16874] tmpfs: Bad value for 'huge'
[  352.063030][T16941] overlayfs: failed to clone lowerpath
[  352.289250][T16946] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5589'.
[  352.340715][T16955] 9pnet_fd: Insufficient options for proto=fd
[  352.371715][T16960] tmpfs: Bad value for 'nr_blocks'
[  352.499633][T16978] 9pnet_fd: Insufficient options for proto=fd
[  352.677698][   T36] audit: type=1400 audit(8000002577.754:1103): avc:  denied  { map } for  pid=16992 comm="syz.5.5606" path="socket:[77884]" dev="sockfs" ino=77884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  352.796490][T17012] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5615'.
[  352.985175][T17037] netlink: 124 bytes leftover after parsing attributes in process `syz.4.5623'.
[  353.037803][T17022] 9pnet_fd: Insufficient options for proto=fd
[  353.080079][T17039] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5624'.
[  353.907659][T17090] overlayfs: conflicting options: metacopy=on,redirect_dir=follow
[  354.092083][T17104] 9p filesystem being mounted at /592/file0 supports timestamps until 2106-02-07 (0xffffffff)
[  354.196262][T17115] Invalid ELF header magic: != ELF
[  354.214013][   T36] audit: type=1326 audit(8000002579.284:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17111 comm="syz.4.5652" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f915358eec9 code=0x0
[  354.395994][T17126] 9pnet_fd: Insufficient options for proto=fd
[  354.438189][T17132] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5659'.
[  354.449836][T17138] netlink: 'syz.6.5661': attribute type 32 has an invalid length.
[  354.457944][T17138] netlink: 'syz.6.5661': attribute type 32 has an invalid length.
[  354.542717][T17163] overlayfs: failed to clone upperpath
[  354.595303][T17170] overlayfs: failed to clone upperpath
[  354.912513][T17178] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.919744][T17178] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.927132][T17178] bridge_slave_0: entered allmulticast mode
[  354.933557][T17178] bridge_slave_0: entered promiscuous mode
[  354.940114][T17178] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.947208][T17178] bridge0: port 2(bridge_slave_1) entered disabled state
[  354.954280][T17178] bridge_slave_1: entered allmulticast mode
[  354.960653][T17178] bridge_slave_1: entered promiscuous mode
[  355.008817][T12255] bridge_slave_1: left allmulticast mode
[  355.014584][T12255] bridge_slave_1: left promiscuous mode
[  355.020328][T12255] +$<�: port 2(bridge_slave_1) entered disabled state
[  355.027908][T12255] bridge_slave_0: left allmulticast mode
[  355.033943][T12255] bridge_slave_0: left promiscuous mode
[  355.039844][T12255] +$<�: port 1(bridge_slave_0) entered disabled state
[  355.061066][T12255] +$<� (unregistering): left allmulticast mode
[  355.154481][T17178] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.161617][T17178] bridge0: port 2(bridge_slave_1) entered forwarding state
[  355.168988][T17178] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.176161][T17178] bridge0: port 1(bridge_slave_0) entered forwarding state
[  355.202786][T12255] tipc: Left network mode
[  355.203187][T17197] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  355.273887][T12244] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.281373][T12244] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.291592][T12260] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.298714][T12260] bridge0: port 1(bridge_slave_0) entered forwarding state
[  355.314845][T12260] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.321945][T12260] bridge0: port 2(bridge_slave_1) entered forwarding state
[  355.355019][T17178] veth0_vlan: entered promiscuous mode
[  355.369418][T17178] veth1_macvtap: entered promiscuous mode
[  355.601123][T17227] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  355.613105][T17227] rust_binder: Error while translating object.
[  355.613143][T17227] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  355.619435][T17227] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:12
[  355.720190][T17234] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  355.729551][T17234] rust_binder: Read failure Err(EFAULT) in pid:19
[  355.752035][T17236] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  355.759185][T17236] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  355.765679][T17236] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21
[  355.803709][T17238] syzkaller0: entered promiscuous mode
[  355.818468][T17238] syzkaller0: entered allmulticast mode
[  355.873358][T17241] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[  356.466752][   T66] usb 5-1: new full-speed USB device number 31 using dummy_hcd
[  356.617100][   T66] usb 5-1: no configurations
[  356.621888][   T66] usb 5-1: can't read configurations, error -22
[  356.756702][   T66] usb 5-1: new full-speed USB device number 32 using dummy_hcd
[  356.907665][   T66] usb 5-1: no configurations
[  356.912325][   T66] usb 5-1: can't read configurations, error -22
[  356.918820][   T66] usb usb5-port1: attempt power cycle
[  357.256793][   T66] usb 5-1: new full-speed USB device number 33 using dummy_hcd
[  357.277602][   T66] usb 5-1: no configurations
[  357.282230][   T66] usb 5-1: can't read configurations, error -22
[  357.416711][   T66] usb 5-1: new full-speed USB device number 34 using dummy_hcd
[  357.437409][   T66] usb 5-1: no configurations
[  357.442066][   T66] usb 5-1: can't read configurations, error -22
[  357.448773][   T66] usb usb5-port1: unable to enumerate USB device
[  357.641805][T17287] tmpfs: Unknown parameter '00000000000000000000000'
[  357.888397][T17324] fuse: Bad value for 'fd'
[  357.894241][T17324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17324 comm=syz.5.5720
[  358.268566][T17329] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5722'.
[  359.066912][T17384] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  359.169501][   T36] audit: type=1400 audit(8000002585.240:1105): avc:  denied  { create } for  pid=17393 comm="syz.6.5746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  359.328291][T17409] overlayfs: failed to clone upperpath
[  359.786557][   T36] audit: type=1400 audit(8000002585.850:1106): avc:  denied  { create } for  pid=17440 comm="syz.1.5762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1
[  359.858089][T17443] overlayfs: failed to clone lowerpath
[  360.125773][T17474] binder: Bad value for 'defcontext'
[  360.201230][   T31] rust_binder: 17475: removing orphan mapping 0:112
[  360.296968][T17484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=17484 comm=syz.4.5776
[  360.335602][   T36] audit: type=1326 audit(8000002586.400:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.1.5779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0df8eec9 code=0x7ffc0000
[  360.342037][T17489] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226)
[  360.359332][T17489] rust_binder: Error while translating object.
[  360.368752][   T36] audit: type=1326 audit(8000002586.400:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.1.5779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0df8eec9 code=0x7ffc0000
[  360.371085][T17489] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  360.377119][   T36] audit: type=1326 audit(8000002586.430:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.1.5779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0df8eec9 code=0x7ffc0000
[  360.399980][T17489] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:69
[  360.409659][   T36] audit: type=1326 audit(8000002586.430:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.1.5779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f0df8d710 code=0x7ffc0000
[  360.466264][   T36] audit: type=1326 audit(8000002586.430:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.1.5779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0df8eec9 code=0x7ffc0000
[  360.490110][   T36] audit: type=1326 audit(8000002586.430:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.1.5779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0df8eec9 code=0x7ffc0000
[  360.514234][   T36] audit: type=1326 audit(8000002586.430:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.1.5779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0df8eec9 code=0x7ffc0000
[  360.538033][   T36] audit: type=1326 audit(8000002586.430:1114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.1.5779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f0df8eec9 code=0x7ffc0000
[  360.700196][T17504] rust_binder: 17504 RLIMIT_NICE not set
[  360.705995][T16744] rust_binder: 17503: removing orphan mapping 0:1048
[  360.956726][T16744] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  361.116107][T16744] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  361.128506][T16744] usb 5-1: config 1 interface 0 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  361.142012][T16744] usb 5-1: config 1 interface 0 has no altsetting 0
[  361.151223][T16744] usb 5-1: language id specifier not provided by device, defaulting to English
[  361.161528][T16744] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  361.171112][T16744] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.179434][T16744] usb 5-1: Product: syz
[  361.183751][T16744] usb 5-1: Manufacturer: syz
[  361.188849][T16744] usb 5-1: SerialNumber: syz
[  361.396599][T16744] cdc_ether 5-1:1.0: skipping garbage
[  361.402156][T16744] usb 5-1: bad CDC descriptors
[  361.408177][T16744] usb 5-1: USB disconnect, device number 35
[  361.659362][T17528] bridge0: port 3(syz_tun) entered disabled state
[  361.667469][T17528] syz_tun (unregistering): left allmulticast mode
[  361.674069][T17528] syz_tun (unregistering): left promiscuous mode
[  361.680769][T17528] bridge0: port 3(syz_tun) entered disabled state
[  361.891104][T17546] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5799'.
[  361.931480][T17552] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5801'.
[  361.957780][T17557] binder: Bad value for 'max'
[  362.116184][T17578] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[  362.123375][T17578] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  362.468242][T17614] overlayfs: failed to clone lowerpath
[  362.475116][T17616] overlayfs: failed to clone lowerpath
[  362.519261][T17623] overlayfs: failed to clone lowerpath
[  362.862452][T17636] No source specified
[  362.870406][T17636] 9p filesystem being mounted at /431/file0 supports timestamps until 2106-02-07 (0xffffffff)
[  362.962775][T17639] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5831'.
[  363.015430][T17649] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5834'.
[  363.570840][T17701] 9pnet_fd: Insufficient options for proto=fd
[  363.598178][T17706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  363.608005][T17706] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  363.617845][T17706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  363.626378][T17706] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  363.634957][T17706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  363.643504][T17707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  363.644622][T17706] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  363.652402][T17707] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  363.836723][   T45] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  363.986774][   T45] usb 5-1: Using ep0 maxpacket: 8
[  363.993159][   T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  364.004424][   T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  364.015323][   T45] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  364.024500][   T45] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  364.032985][   T45] usb 5-1: Product: syz
[  364.037199][   T45] usb 5-1: SerialNumber: syz
[  364.046231][   T45] usb 5-1: config 0 descriptor??
[  364.054349][   T45] hub 5-1:0.0: USB hub found
[  364.102041][T17718] 9pnet_fd: Insufficient options for proto=fd
[  364.176155][T17735] x_tables: unsorted underflow at hook 4
[  364.254459][   T45] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[  364.266289][   T45] usbhid 5-1:0.0: can't add hid device: -71
[  364.272366][   T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  364.297629][   T45] usb 5-1: USB disconnect, device number 36
[  364.733078][T17751] overlayfs: failed to clone upperpath
[  364.925084][T17781] netlink: 'syz.5.5883': attribute type 4 has an invalid length.
[  364.953570][T17784] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  364.971007][T17784] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  364.997130][T17784] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  365.006075][T17784] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock
[  365.068310][T17791] rust_binder: Write failure EFAULT in pid:117
[  365.111302][T17793] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  365.381033][T17802] 9p filesystem being mounted at /454/file0 supports timestamps until 2106-02-07 (0xffffffff)
[  365.426696][   T66] usb 5-1: new full-speed USB device number 37 using dummy_hcd
[  365.527078][T17805] netlink: 5 bytes leftover after parsing attributes in process `syz.6.5894'.
[  365.536317][T17805] gretap0: entered allmulticast mode
[  365.578859][   T66] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  365.590848][   T66] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  365.604485][T17810] sit0: entered promiscuous mode
[  365.611926][T17810] netlink: 'syz.5.5896': attribute type 1 has an invalid length.
[  365.620297][   T66] usb 5-1: New USB device found, idVendor=091c, idProduct=8866, bcdDevice= 0.00
[  365.630035][T17810] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5896'.
[  365.639264][   T66] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.648496][   T66] usb 5-1: config 0 descriptor??
[  365.653917][T17797] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  365.668373][   T66] usbhid 5-1:0.0: can't add hid device: -22
[  365.674733][   T66] usbhid 5-1:0.0: probe with driver usbhid failed with error -22
[  365.712619][T17818] netlink: 'syz.5.5898': attribute type 11 has an invalid length.
[  365.721146][T17818] netlink: 'syz.5.5898': attribute type 1 has an invalid length.
[  365.734787][T17818] netlink: 3593 bytes leftover after parsing attributes in process `syz.5.5898'.
[  365.776888][T17821] 9pnet_fd: Insufficient options for proto=fd
[  365.870608][   T66] usb 5-1: USB disconnect, device number 37
[  365.902586][   T36] kauditd_printk_skb: 140 callbacks suppressed
[  365.902608][   T36] audit: type=1400 audit(8000002598.973:1255): avc:  denied  { map } for  pid=17830 comm="syz.5.5903" path="socket:[80197]" dev="sockfs" ino=80197 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  366.536952][   T36] audit: type=1326 audit(8000002599.613:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17815 comm="syz.6.5897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d3f58eec9 code=0x7fc00000
[  366.667883][   T36] audit: type=1326 audit(2000000000.060:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17866 comm="syz.6.5916" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6d3f58eec9 code=0x0
[  367.190065][T17876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5919'.
[  367.566708][T16744] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  367.736692][T16744] usb 5-1: Using ep0 maxpacket: 16
[  367.743179][T16744] usb 5-1: config 0 has an invalid interface number: 126 but max is 0
[  367.756666][T16744] usb 5-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config
[  367.776691][T16744] usb 5-1: config 0 has no interface number 0
[  367.782890][T16744] usb 5-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  367.790811][T17944] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock
[  367.794628][T16744] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024
[  367.815691][T16744] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  367.826931][T16744] usb 5-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 26159, setting to 1024
[  367.838575][T16744] usb 5-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  367.848911][T16744] usb 5-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  367.863117][T16744] usb 5-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[  367.872519][T16744] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.884119][T16744] usb 5-1: config 0 descriptor??
[  367.896992][T17895] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  367.904596][T17895] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  368.153791][T17950] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.171035][T17950] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.203226][T17950] bridge_slave_0: entered allmulticast mode
[  368.221392][T17950] bridge_slave_0: entered promiscuous mode
[  368.233360][T17956] netlink: 'syz.5.5947': attribute type 4 has an invalid length.
[  368.247100][T17956] netlink: 'syz.5.5947': attribute type 5 has an invalid length.
[  368.270397][T17956] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.5947'.
[  368.308666][T17950] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.328526][T17950] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.335697][T17950] bridge_slave_1: entered allmulticast mode
[  368.367205][T17950] bridge_slave_1: entered promiscuous mode
[  368.526457][T17950] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.533618][T17950] bridge0: port 2(bridge_slave_1) entered forwarding state
[  368.540971][T17950] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.548057][T17950] bridge0: port 1(bridge_slave_0) entered forwarding state
[  368.556737][ T2380] usb 5-1: USB disconnect, device number 38
[  368.586097][T12244] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.594006][T12244] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.610591][T12260] bridge0: port 1(bridge_slave_0) entered blocking state
[  368.617708][T12260] bridge0: port 1(bridge_slave_0) entered forwarding state
[  368.637346][T12260] bridge0: port 2(bridge_slave_1) entered blocking state
[  368.644509][T12260] bridge0: port 2(bridge_slave_1) entered forwarding state
[  368.676380][T17950] veth0_vlan: entered promiscuous mode
[  368.690478][T17950] veth1_macvtap: entered promiscuous mode
[  369.313140][T18043] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=7 sclass=netlink_xfrm_socket pid=18043 comm=syz.1.5973
[  369.518705][T18063] __vm_enough_memory: pid: 18063, comm: syz.4.5982, bytes: 18014402804453376 not enough memory for the allocation
[  369.593231][T18072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5985'.
[  369.624161][T18075] rust_binder: Write failure EFAULT in pid:151
[  369.768106][T18090] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5992'.
[  369.832010][T18096] rust_binder: Error while translating object.
[  369.832076][T18096] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  369.838793][T18096] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:11
[  369.985703][T18106] netlink: 288 bytes leftover after parsing attributes in process `syz.6.5998'.
[  370.006179][T18106] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  370.013396][T18106] rust_binder: Write failure EINVAL in pid:21
[  370.013660][T18106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=18106 comm=syz.6.5998
[  370.114963][T18111] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 160, size: 238)
[  370.114987][T18111] rust_binder: Error while translating object.
[  370.125635][T18111] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  370.132084][T18111] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:25
[  370.148504][T18113] bridge0: entered allmulticast mode
[  370.330991][T18130] netlink: 72 bytes leftover after parsing attributes in process `syz.5.6006'.
[  370.914652][T18144] rust_binder: 28: no such ref 0
[  370.933382][T18146] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  370.965782][T18146] rust_binder: Error in use_page_slow: ESRCH
[  370.972766][T18147] rust_binder: Error in use_page_slow: ESRCH
[  370.980212][T18146] rust_binder: use_range failure ESRCH
[  370.986359][T18147] rust_binder: use_range failure ESRCH
[  370.992211][T18146] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  370.994921][T18147] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  370.998355][T18146] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  371.010410][T18147] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  371.015657][T18146] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:30
[  371.026188][T18147] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:30
[  371.097842][T18158] rust_binder: Error while translating object.
[  371.107153][T18158] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  371.113466][T18158] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37
[  371.356737][   T45] usb 7-1: new low-speed USB device number 12 using dummy_hcd
[  371.517105][   T45] usb 7-1: Invalid ep0 maxpacket: 32
[  371.518165][T18182] 9pnet_fd: Insufficient options for proto=fd
[  371.617847][T18191] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6028'.
[  371.651193][   T45] usb 7-1: new low-speed USB device number 13 using dummy_hcd
[  371.676962][T18199] netlink: 'syz.5.6031': attribute type 5 has an invalid length.
[  371.685945][T18199] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6031'.
[  371.785305][T18214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6037'.
[  371.806696][   T45] usb 7-1: Invalid ep0 maxpacket: 32
[  371.813052][   T45] usb usb7-port1: attempt power cycle
[  372.156721][   T45] usb 7-1: new low-speed USB device number 14 using dummy_hcd
[  372.177064][   T45] usb 7-1: Invalid ep0 maxpacket: 32
[  372.306715][   T45] usb 7-1: new low-speed USB device number 15 using dummy_hcd
[  372.327124][   T45] usb 7-1: Invalid ep0 maxpacket: 32
[  372.332636][   T45] usb usb7-port1: unable to enumerate USB device
[  372.585928][T18224] fuse: Unknown parameter '0x00000000000000000xffffffffffffffff0000000000000000000000000000000000000000000'
[  372.605953][T18224] ------------[ cut here ]------------
[  372.611525][T18224] WARNING: CPU: 1 PID: 18224 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0
[  372.621130][T18224] Modules linked in:
[  372.625056][T18224] CPU: 1 UID: 0 PID: 18224 Comm: syz.4.6040 Not tainted syzkaller #0 b3dd942fcdd3f4bfa23db685604bb140fbbb27fa
[  372.636753][T18224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  372.647009][T18224] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0
[  372.652961][T18224] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 32 24 ee 05 00 0f 85 be 00 00 00 c6 05 25 24 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24
[  372.657411][   T36] audit: type=1400 audit(2000000006.040:1258): avc:  denied  { setattr } for  pid=18223 comm="syz.4.6040" name="/" dev="incremental-fs" ino=284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  372.672737][T18224] RSP: 0018:ffffc900030879a0 EFLAGS: 00010246
[  372.701960][T18224] RAX: 0000000000000000 RBX: 0000000000000034 RCX: 0000000000000000
[  372.710542][T18224] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003087a58
[  372.718679][T18224] RBP: ffffc90003087ac8 R08: ffffc90003087a57 R09: 0000000000000000
[  372.726952][T18224] R10: ffffc90003087a40 R11: fffff52000610f4b R12: ffffc900030879e0
[  372.734955][T18224] R13: dffffc0000000000 R14: 1ffff92000610f38 R15: 0000000000000000
[  372.743841][T18224] FS:  00007f269135c6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  372.752993][T18224] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  372.759642][T18224] CR2: 0000000000000000 CR3: 000000013fc5e000 CR4: 00000000003526b0
[  372.767677][T18224] Call Trace:
[  372.770969][T18224]  <TASK>
[  372.773936][T18224]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  372.779810][T18224]  ? futex_wait_setup+0x1bc/0x260
[  372.784902][T18224]  ? __futex_wait+0x218/0x2a0
[  372.789663][T18224]  ? pending_reads_dispatch_ioctl+0xc70/0x1fa0
[  372.795929][T18224]  ___kmalloc_large_node+0x81/0x220
[  372.801189][T18224]  ? pending_reads_dispatch_ioctl+0xc70/0x1fa0
[  372.807513][T18224]  __kmalloc_large_node_noprof+0x1e/0xe0
[  372.813167][T18224]  ? pending_reads_dispatch_ioctl+0xc70/0x1fa0
[  372.819393][T18224]  __kmalloc_noprof+0x26d/0x450
[  372.824268][T18224]  ? __kasan_check_write+0x18/0x20
[  372.829446][T18224]  pending_reads_dispatch_ioctl+0xc70/0x1fa0
[  372.835473][T18224]  ? futex_setup_timer+0xb4/0xd0
[  372.840461][T18224]  ? futex_wait+0x29a/0x7a0
[  372.845109][T18224]  ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10
[  372.851582][T18224]  ? selinux_file_ioctl+0x6e0/0x1360
[  372.856938][T18224]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  372.862769][T18224]  ? do_futex+0x309/0x500
[  372.867144][T18224]  ? __cfi_do_futex+0x10/0x10
[  372.871893][T18224]  ? __fget_files+0x2c5/0x340
[  372.876795][T18224]  ? bpf_lsm_file_ioctl+0xd/0x20
[  372.881842][T18224]  ? security_file_ioctl+0x34/0xd0
[  372.887006][T18224]  ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10
[  372.893549][T18224]  __se_sys_ioctl+0x132/0x1b0
[  372.898562][T18224]  __x64_sys_ioctl+0x7f/0xa0
[  372.903187][T18224]  x64_sys_call+0x1878/0x2ee0
[  372.907974][T18224]  do_syscall_64+0x58/0xf0
[  372.912443][T18224]  ? clear_bhb_loop+0x50/0xa0
[  372.917175][T18224]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  372.923309][T18224] RIP: 0033:0x7f269058eec9
[  372.927774][T18224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  372.947445][T18224] RSP: 002b:00007f269135c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  372.955889][T18224] RAX: ffffffffffffffda RBX: 00007f26907e5fa0 RCX: 00007f269058eec9
[  372.964070][T18224] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 000000000000000b
[  372.972568][T18224] RBP: 00007f2690611f91 R08: 0000000000000000 R09: 0000000000000000
[  372.980691][T18224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  372.988739][T18224] R13: 00007f26907e6038 R14: 00007f26907e5fa0 R15: 00007ffd1d77c598
[  372.996795][T18224]  </TASK>
[  372.999858][T18224] ---[ end trace 0000000000000000 ]---