[  OK  ] Reached target Timers.
         Starting System Logging Service...
         Starting getty on tty2-tty6 if dbus and logind are not available...
[  OK  ] Started Regular background program processing daemon.
[  OK  ] Started Permit User Sessions.
[ TIME ] Timed out waiting for device dev-ttyS0.device.
[DEPEND] Dependency failed for Serial Getty on ttyS0.
[  OK  ] Started System Logging Service.
[  OK  ] Started getty on tty2-tty6 if dbus and logind are not available.
[  OK  ] Started OpenBSD Secure Shell server.
[  OK  ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch.
[  OK  ] Started Getty on tty6.
[  OK  ] Started Getty on tty5.
[  OK  ] Started Getty on tty4.
[  OK  ] Started Getty on tty3.
[  OK  ] Started Getty on tty2.
[  OK  ] Started Getty on tty1.
[  OK  ] Reached target Login Prompts.
[  OK  ] Reached target Multi-User System.
[  OK  ] Reached target Graphical Interface.
         Starting Update UTMP about System Runlevel Changes...
         Starting Load/Save RF Kill Switch Status...
[  OK  ] Started Update UTMP about System Runlevel Changes.
[  OK  ] Started Load/Save RF Kill Switch Status.
Warning: Permanently added '10.128.1.152' (ECDSA) to the list of known hosts.
2021/11/09 16:07:20 fuzzer started
2021/11/09 16:07:22 dialing manager at 10.128.0.169:35253
[  172.831784][ T6324] cgroup: Unknown subsys name 'net'
[  172.866941][ T6324] cgroup: Unknown subsys name 'rlimit'
2021/11/09 16:07:23 syscalls: 3594
2021/11/09 16:07:23 code coverage: enabled
2021/11/09 16:07:23 comparison tracing: enabled
2021/11/09 16:07:23 extra coverage: enabled
2021/11/09 16:07:23 setuid sandbox: enabled
2021/11/09 16:07:23 namespace sandbox: enabled
2021/11/09 16:07:23 Android sandbox: /sys/fs/selinux/policy does not exist
2021/11/09 16:07:23 fault injection: enabled
2021/11/09 16:07:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2021/11/09 16:07:23 net packet injection: enabled
2021/11/09 16:07:23 net device setup: enabled
2021/11/09 16:07:23 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2021/11/09 16:07:23 devlink PCI setup: PCI device 0000:00:10.0 is not available
2021/11/09 16:07:23 USB emulation: enabled
2021/11/09 16:07:23 hci packet injection: enabled
2021/11/09 16:07:23 wifi device emulation: enabled
2021/11/09 16:07:23 802.15.4 emulation: enabled
2021/11/09 16:07:23 fetching corpus: 0, signal 0/2000 (executing program)
2021/11/09 16:07:23 fetching corpus: 50, signal 14490/18276 (executing program)
2021/11/09 16:07:23 fetching corpus: 100, signal 25170/30629 (executing program)
2021/11/09 16:07:23 fetching corpus: 150, signal 30986/38116 (executing program)
2021/11/09 16:07:23 fetching corpus: 200, signal 37530/46229 (executing program)
2021/11/09 16:07:23 fetching corpus: 250, signal 42222/52517 (executing program)
2021/11/09 16:07:23 fetching corpus: 300, signal 46024/57884 (executing program)
2021/11/09 16:07:23 fetching corpus: 350, signal 52511/65714 (executing program)
2021/11/09 16:07:23 fetching corpus: 400, signal 55399/70082 (executing program)
2021/11/09 16:07:24 fetching corpus: 450, signal 57984/74099 (executing program)
2021/11/09 16:07:24 fetching corpus: 500, signal 61101/78625 (executing program)
2021/11/09 16:07:24 fetching corpus: 550, signal 65462/84204 (executing program)
2021/11/09 16:07:24 fetching corpus: 600, signal 68438/88481 (executing program)
2021/11/09 16:07:24 fetching corpus: 650, signal 71569/92887 (executing program)
2021/11/09 16:07:24 fetching corpus: 700, signal 73807/96461 (executing program)
2021/11/09 16:07:24 fetching corpus: 750, signal 75948/99890 (executing program)
2021/11/09 16:07:24 fetching corpus: 800, signal 78734/103830 (executing program)
2021/11/09 16:07:24 fetching corpus: 850, signal 81830/107993 (executing program)
2021/11/09 16:07:24 fetching corpus: 900, signal 83473/110923 (executing program)
2021/11/09 16:07:24 fetching corpus: 950, signal 86286/114844 (executing program)
2021/11/09 16:07:24 fetching corpus: 1000, signal 88385/118105 (executing program)
2021/11/09 16:07:24 fetching corpus: 1050, signal 90524/121304 (executing program)
2021/11/09 16:07:24 fetching corpus: 1100, signal 92549/124412 (executing program)
2021/11/09 16:07:25 fetching corpus: 1150, signal 94499/127424 (executing program)
2021/11/09 16:07:25 fetching corpus: 1200, signal 96627/130519 (executing program)
2021/11/09 16:07:25 fetching corpus: 1250, signal 99385/134178 (executing program)
2021/11/09 16:07:25 fetching corpus: 1300, signal 100540/136406 (executing program)
2021/11/09 16:07:25 fetching corpus: 1350, signal 101398/138447 (executing program)
2021/11/09 16:07:25 fetching corpus: 1400, signal 102763/140928 (executing program)
2021/11/09 16:07:25 fetching corpus: 1450, signal 104822/143894 (executing program)
2021/11/09 16:07:25 fetching corpus: 1500, signal 106753/146731 (executing program)
2021/11/09 16:07:25 fetching corpus: 1550, signal 108521/149380 (executing program)
2021/11/09 16:07:25 fetching corpus: 1600, signal 109834/151678 (executing program)
2021/11/09 16:07:25 fetching corpus: 1650, signal 111149/153980 (executing program)
2021/11/09 16:07:25 fetching corpus: 1700, signal 112580/156346 (executing program)
2021/11/09 16:07:25 fetching corpus: 1750, signal 113505/158275 (executing program)
2021/11/09 16:07:25 fetching corpus: 1800, signal 114798/160506 (executing program)
2021/11/09 16:07:25 fetching corpus: 1850, signal 116176/162746 (executing program)
2021/11/09 16:07:26 fetching corpus: 1900, signal 117062/164584 (executing program)
2021/11/09 16:07:26 fetching corpus: 1950, signal 118551/166875 (executing program)
2021/11/09 16:07:26 fetching corpus: 2000, signal 119575/168865 (executing program)
2021/11/09 16:07:26 fetching corpus: 2050, signal 120922/171039 (executing program)
2021/11/09 16:07:26 fetching corpus: 2100, signal 122103/173111 (executing program)
2021/11/09 16:07:26 fetching corpus: 2150, signal 123628/175381 (executing program)
2021/11/09 16:07:26 fetching corpus: 2200, signal 124949/177464 (executing program)
2021/11/09 16:07:26 fetching corpus: 2250, signal 126586/179779 (executing program)
2021/11/09 16:07:26 fetching corpus: 2300, signal 127974/181883 (executing program)
2021/11/09 16:07:26 fetching corpus: 2350, signal 128948/183685 (executing program)
2021/11/09 16:07:26 fetching corpus: 2400, signal 130001/185520 (executing program)
2021/11/09 16:07:26 fetching corpus: 2450, signal 130789/187162 (executing program)
2021/11/09 16:07:26 fetching corpus: 2500, signal 132104/189202 (executing program)
2021/11/09 16:07:26 fetching corpus: 2550, signal 133246/191082 (executing program)
2021/11/09 16:07:26 fetching corpus: 2600, signal 134332/192964 (executing program)
2021/11/09 16:07:26 fetching corpus: 2650, signal 135126/194600 (executing program)
2021/11/09 16:07:26 fetching corpus: 2700, signal 135906/196133 (executing program)
2021/11/09 16:07:27 fetching corpus: 2750, signal 136858/197835 (executing program)
2021/11/09 16:07:27 fetching corpus: 2800, signal 138403/199911 (executing program)
2021/11/09 16:07:27 fetching corpus: 2850, signal 139170/201476 (executing program)
2021/11/09 16:07:27 fetching corpus: 2900, signal 140907/203626 (executing program)
2021/11/09 16:07:27 fetching corpus: 2950, signal 141784/205251 (executing program)
2021/11/09 16:07:27 fetching corpus: 3000, signal 142547/206744 (executing program)
2021/11/09 16:07:27 fetching corpus: 3050, signal 143579/208408 (executing program)
2021/11/09 16:07:27 fetching corpus: 3100, signal 144215/209817 (executing program)
2021/11/09 16:07:27 fetching corpus: 3150, signal 144846/211194 (executing program)
2021/11/09 16:07:27 fetching corpus: 3200, signal 145822/212831 (executing program)
2021/11/09 16:07:27 fetching corpus: 3250, signal 146514/214253 (executing program)
2021/11/09 16:07:27 fetching corpus: 3300, signal 147343/215721 (executing program)
2021/11/09 16:07:27 fetching corpus: 3350, signal 148400/217301 (executing program)
2021/11/09 16:07:27 fetching corpus: 3400, signal 149174/218696 (executing program)
2021/11/09 16:07:28 fetching corpus: 3450, signal 150180/220277 (executing program)
2021/11/09 16:07:28 fetching corpus: 3500, signal 150835/221650 (executing program)
2021/11/09 16:07:28 fetching corpus: 3550, signal 151459/222946 (executing program)
2021/11/09 16:07:28 fetching corpus: 3600, signal 152441/224447 (executing program)
2021/11/09 16:07:28 fetching corpus: 3650, signal 153530/225935 (executing program)
2021/11/09 16:07:28 fetching corpus: 3700, signal 154146/227270 (executing program)
2021/11/09 16:07:28 fetching corpus: 3750, signal 154903/228618 (executing program)
2021/11/09 16:07:28 fetching corpus: 3800, signal 155648/229980 (executing program)
2021/11/09 16:07:28 fetching corpus: 3850, signal 156500/231389 (executing program)
2021/11/09 16:07:28 fetching corpus: 3900, signal 157559/232826 (executing program)
2021/11/09 16:07:28 fetching corpus: 3950, signal 158405/234185 (executing program)
2021/11/09 16:07:28 fetching corpus: 4000, signal 159115/235457 (executing program)
2021/11/09 16:07:28 fetching corpus: 4050, signal 159776/236672 (executing program)
2021/11/09 16:07:28 fetching corpus: 4100, signal 160432/237929 (executing program)
2021/11/09 16:07:29 fetching corpus: 4150, signal 161311/239253 (executing program)
2021/11/09 16:07:29 fetching corpus: 4200, signal 162117/240557 (executing program)
2021/11/09 16:07:29 fetching corpus: 4250, signal 163247/241937 (executing program)
2021/11/09 16:07:29 fetching corpus: 4300, signal 164013/243198 (executing program)
2021/11/09 16:07:29 fetching corpus: 4350, signal 164404/244292 (executing program)
2021/11/09 16:07:29 fetching corpus: 4400, signal 165359/245609 (executing program)
2021/11/09 16:07:29 fetching corpus: 4450, signal 165916/246755 (executing program)
2021/11/09 16:07:29 fetching corpus: 4500, signal 167101/248096 (executing program)
2021/11/09 16:07:29 fetching corpus: 4550, signal 168001/249323 (executing program)
2021/11/09 16:07:29 fetching corpus: 4600, signal 168640/250445 (executing program)
2021/11/09 16:07:29 fetching corpus: 4650, signal 169193/251518 (executing program)
2021/11/09 16:07:29 fetching corpus: 4700, signal 169688/252576 (executing program)
2021/11/09 16:07:29 fetching corpus: 4750, signal 170294/253665 (executing program)
2021/11/09 16:07:29 fetching corpus: 4800, signal 170894/254755 (executing program)
2021/11/09 16:07:29 fetching corpus: 4850, signal 172227/256071 (executing program)
2021/11/09 16:07:29 fetching corpus: 4900, signal 172924/257156 (executing program)
2021/11/09 16:07:29 fetching corpus: 4950, signal 173545/258253 (executing program)
2021/11/09 16:07:30 fetching corpus: 5000, signal 173981/259253 (executing program)
2021/11/09 16:07:30 fetching corpus: 5050, signal 174426/260226 (executing program)
2021/11/09 16:07:30 fetching corpus: 5100, signal 175500/261615 (executing program)
2021/11/09 16:07:30 fetching corpus: 5150, signal 175921/262587 (executing program)
2021/11/09 16:07:30 fetching corpus: 5200, signal 176843/263683 (executing program)
2021/11/09 16:07:30 fetching corpus: 5250, signal 177741/264783 (executing program)
2021/11/09 16:07:30 fetching corpus: 5300, signal 178233/265768 (executing program)
2021/11/09 16:07:30 fetching corpus: 5350, signal 178843/266757 (executing program)
2021/11/09 16:07:30 fetching corpus: 5400, signal 179249/267671 (executing program)
2021/11/09 16:07:30 fetching corpus: 5450, signal 179862/268619 (executing program)
2021/11/09 16:07:30 fetching corpus: 5500, signal 180537/269607 (executing program)
2021/11/09 16:07:30 fetching corpus: 5550, signal 180942/270523 (executing program)
2021/11/09 16:07:30 fetching corpus: 5599, signal 181462/271460 (executing program)
2021/11/09 16:07:30 fetching corpus: 5649, signal 181915/272376 (executing program)
2021/11/09 16:07:30 fetching corpus: 5699, signal 182515/273309 (executing program)
2021/11/09 16:07:30 fetching corpus: 5749, signal 182954/274221 (executing program)
2021/11/09 16:07:30 fetching corpus: 5799, signal 183588/275189 (executing program)
2021/11/09 16:07:30 fetching corpus: 5849, signal 184008/276092 (executing program)
2021/11/09 16:07:30 fetching corpus: 5899, signal 184648/277004 (executing program)
2021/11/09 16:07:30 fetching corpus: 5949, signal 185111/277849 (executing program)
2021/11/09 16:07:31 fetching corpus: 5999, signal 185640/278689 (executing program)
2021/11/09 16:07:31 fetching corpus: 6049, signal 186348/279621 (executing program)
2021/11/09 16:07:31 fetching corpus: 6099, signal 187160/280536 (executing program)
2021/11/09 16:07:31 fetching corpus: 6149, signal 187618/281414 (executing program)
2021/11/09 16:07:31 fetching corpus: 6199, signal 188130/282277 (executing program)
2021/11/09 16:07:31 fetching corpus: 6249, signal 188551/283070 (executing program)
2021/11/09 16:07:31 fetching corpus: 6299, signal 189108/283902 (executing program)
2021/11/09 16:07:31 fetching corpus: 6349, signal 189785/284722 (executing program)
2021/11/09 16:07:31 fetching corpus: 6399, signal 190433/285570 (executing program)
2021/11/09 16:07:31 fetching corpus: 6449, signal 191267/286426 (executing program)
2021/11/09 16:07:31 fetching corpus: 6499, signal 191872/287236 (executing program)
2021/11/09 16:07:31 fetching corpus: 6549, signal 192665/288021 (executing program)
2021/11/09 16:07:31 fetching corpus: 6599, signal 193103/288816 (executing program)
2021/11/09 16:07:31 fetching corpus: 6649, signal 193555/289609 (executing program)
2021/11/09 16:07:31 fetching corpus: 6699, signal 194134/290387 (executing program)
2021/11/09 16:07:31 fetching corpus: 6749, signal 194639/291156 (executing program)
2021/11/09 16:07:31 fetching corpus: 6799, signal 195309/291931 (executing program)
2021/11/09 16:07:32 fetching corpus: 6849, signal 197120/292771 (executing program)
2021/11/09 16:07:32 fetching corpus: 6899, signal 197814/293515 (executing program)
2021/11/09 16:07:32 fetching corpus: 6949, signal 198361/294239 (executing program)
2021/11/09 16:07:32 fetching corpus: 6999, signal 199361/294998 (executing program)
2021/11/09 16:07:32 fetching corpus: 7049, signal 200025/295703 (executing program)
2021/11/09 16:07:32 fetching corpus: 7099, signal 200699/296418 (executing program)
2021/11/09 16:07:32 fetching corpus: 7148, signal 201079/297150 (executing program)
2021/11/09 16:07:32 fetching corpus: 7198, signal 201466/297876 (executing program)
2021/11/09 16:07:32 fetching corpus: 7248, signal 202060/298568 (executing program)
2021/11/09 16:07:32 fetching corpus: 7298, signal 202603/299252 (executing program)
2021/11/09 16:07:32 fetching corpus: 7348, signal 203321/299967 (executing program)
2021/11/09 16:07:32 fetching corpus: 7398, signal 203865/300633 (executing program)
2021/11/09 16:07:32 fetching corpus: 7448, signal 204424/301314 (executing program)
2021/11/09 16:07:32 fetching corpus: 7498, signal 204780/301501 (executing program)
2021/11/09 16:07:32 fetching corpus: 7548, signal 205232/301503 (executing program)
2021/11/09 16:07:32 fetching corpus: 7598, signal 205825/301503 (executing program)
2021/11/09 16:07:32 fetching corpus: 7648, signal 206334/301503 (executing program)
2021/11/09 16:07:32 fetching corpus: 7698, signal 206652/301503 (executing program)
2021/11/09 16:07:33 fetching corpus: 7748, signal 207054/301505 (executing program)
2021/11/09 16:07:33 fetching corpus: 7798, signal 207422/301505 (executing program)
2021/11/09 16:07:33 fetching corpus: 7848, signal 207909/301505 (executing program)
2021/11/09 16:07:33 fetching corpus: 7898, signal 208539/301505 (executing program)
2021/11/09 16:07:33 fetching corpus: 7948, signal 208899/301505 (executing program)
2021/11/09 16:07:33 fetching corpus: 7998, signal 209502/301505 (executing program)
2021/11/09 16:07:33 fetching corpus: 8048, signal 209885/301507 (executing program)
2021/11/09 16:07:33 fetching corpus: 8098, signal 210622/301507 (executing program)
2021/11/09 16:07:33 fetching corpus: 8148, signal 211013/301507 (executing program)
2021/11/09 16:07:33 fetching corpus: 8198, signal 212038/301507 (executing program)
2021/11/09 16:07:33 fetching corpus: 8248, signal 212444/301507 (executing program)
2021/11/09 16:07:33 fetching corpus: 8298, signal 212976/301507 (executing program)
2021/11/09 16:07:33 fetching corpus: 8348, signal 213495/301511 (executing program)
2021/11/09 16:07:33 fetching corpus: 8398, signal 213783/301516 (executing program)
2021/11/09 16:07:33 fetching corpus: 8448, signal 214203/301521 (executing program)
2021/11/09 16:07:33 fetching corpus: 8498, signal 214761/301521 (executing program)
2021/11/09 16:07:33 fetching corpus: 8548, signal 215129/301536 (executing program)
2021/11/09 16:07:33 fetching corpus: 8598, signal 215541/301536 (executing program)
2021/11/09 16:07:34 fetching corpus: 8648, signal 215910/301536 (executing program)
2021/11/09 16:07:34 fetching corpus: 8698, signal 216526/301536 (executing program)
2021/11/09 16:07:34 fetching corpus: 8748, signal 217092/301544 (executing program)
2021/11/09 16:07:34 fetching corpus: 8798, signal 217412/301544 (executing program)
2021/11/09 16:07:34 fetching corpus: 8848, signal 218102/301662 (executing program)
2021/11/09 16:07:34 fetching corpus: 8898, signal 218463/301662 (executing program)
2021/11/09 16:07:34 fetching corpus: 8948, signal 219070/301664 (executing program)
2021/11/09 16:07:34 fetching corpus: 8998, signal 219376/301676 (executing program)
2021/11/09 16:07:34 fetching corpus: 9048, signal 219893/301676 (executing program)
2021/11/09 16:07:34 fetching corpus: 9098, signal 220126/301676 (executing program)
2021/11/09 16:07:34 fetching corpus: 9148, signal 220403/301679 (executing program)
2021/11/09 16:07:34 fetching corpus: 9198, signal 220690/301682 (executing program)
2021/11/09 16:07:34 fetching corpus: 9248, signal 221147/301682 (executing program)
2021/11/09 16:07:34 fetching corpus: 9298, signal 221592/301682 (executing program)
2021/11/09 16:07:34 fetching corpus: 9348, signal 222349/301684 (executing program)
2021/11/09 16:07:34 fetching corpus: 9398, signal 222802/301693 (executing program)
2021/11/09 16:07:35 fetching corpus: 9448, signal 223086/301693 (executing program)
2021/11/09 16:07:35 fetching corpus: 9498, signal 223414/301698 (executing program)
2021/11/09 16:07:35 fetching corpus: 9548, signal 223912/301698 (executing program)
2021/11/09 16:07:35 fetching corpus: 9598, signal 224432/301706 (executing program)
2021/11/09 16:07:35 fetching corpus: 9648, signal 224821/301709 (executing program)
2021/11/09 16:07:35 fetching corpus: 9698, signal 225129/301709 (executing program)
2021/11/09 16:07:35 fetching corpus: 9748, signal 225550/301709 (executing program)
2021/11/09 16:07:35 fetching corpus: 9798, signal 225876/301709 (executing program)
2021/11/09 16:07:35 fetching corpus: 9848, signal 226510/301709 (executing program)
2021/11/09 16:07:35 fetching corpus: 9898, signal 226999/301720 (executing program)
2021/11/09 16:07:35 fetching corpus: 9948, signal 227318/301720 (executing program)
2021/11/09 16:07:36 fetching corpus: 9998, signal 227667/301720 (executing program)
2021/11/09 16:07:36 fetching corpus: 10048, signal 228156/301720 (executing program)
2021/11/09 16:07:36 fetching corpus: 10098, signal 228642/301727 (executing program)
2021/11/09 16:07:36 fetching corpus: 10148, signal 229018/301727 (executing program)
2021/11/09 16:07:36 fetching corpus: 10198, signal 229470/301727 (executing program)
2021/11/09 16:07:36 fetching corpus: 10248, signal 229920/301727 (executing program)
2021/11/09 16:07:36 fetching corpus: 10298, signal 230425/301727 (executing program)
2021/11/09 16:07:36 fetching corpus: 10348, signal 230748/301727 (executing program)
2021/11/09 16:07:36 fetching corpus: 10398, signal 231561/301727 (executing program)
2021/11/09 16:07:36 fetching corpus: 10448, signal 231923/301727 (executing program)
2021/11/09 16:07:36 fetching corpus: 10498, signal 232343/301812 (executing program)
2021/11/09 16:07:36 fetching corpus: 10548, signal 232863/301812 (executing program)
2021/11/09 16:07:36 fetching corpus: 10598, signal 233397/301812 (executing program)
2021/11/09 16:07:36 fetching corpus: 10648, signal 233720/301812 (executing program)
2021/11/09 16:07:36 fetching corpus: 10698, signal 234033/301812 (executing program)
2021/11/09 16:07:36 fetching corpus: 10748, signal 234334/301812 (executing program)
2021/11/09 16:07:37 fetching corpus: 10798, signal 234765/301813 (executing program)
2021/11/09 16:07:37 fetching corpus: 10848, signal 235182/301813 (executing program)
2021/11/09 16:07:37 fetching corpus: 10898, signal 235538/301813 (executing program)
2021/11/09 16:07:37 fetching corpus: 10948, signal 235945/301816 (executing program)
2021/11/09 16:07:37 fetching corpus: 10998, signal 236434/301816 (executing program)
2021/11/09 16:07:37 fetching corpus: 11048, signal 236737/301817 (executing program)
2021/11/09 16:07:37 fetching corpus: 11098, signal 237051/301817 (executing program)
2021/11/09 16:07:37 fetching corpus: 11148, signal 237709/301818 (executing program)
2021/11/09 16:07:37 fetching corpus: 11198, signal 238166/301818 (executing program)
2021/11/09 16:07:37 fetching corpus: 11248, signal 238500/301819 (executing program)
2021/11/09 16:07:37 fetching corpus: 11298, signal 238837/301819 (executing program)
2021/11/09 16:07:37 fetching corpus: 11348, signal 239202/301819 (executing program)
2021/11/09 16:07:37 fetching corpus: 11398, signal 239489/301819 (executing program)
2021/11/09 16:07:37 fetching corpus: 11448, signal 239766/301819 (executing program)
2021/11/09 16:07:37 fetching corpus: 11498, signal 240255/301821 (executing program)
2021/11/09 16:07:37 fetching corpus: 11548, signal 240858/301821 (executing program)
2021/11/09 16:07:37 fetching corpus: 11598, signal 241321/301821 (executing program)
2021/11/09 16:07:37 fetching corpus: 11648, signal 241871/301823 (executing program)
2021/11/09 16:07:38 fetching corpus: 11698, signal 242304/301823 (executing program)
2021/11/09 16:07:38 fetching corpus: 11748, signal 242681/301823 (executing program)
2021/11/09 16:07:38 fetching corpus: 11798, signal 243162/301823 (executing program)
2021/11/09 16:07:38 fetching corpus: 11848, signal 243508/301826 (executing program)
2021/11/09 16:07:38 fetching corpus: 11898, signal 243970/301826 (executing program)
2021/11/09 16:07:38 fetching corpus: 11948, signal 244404/301826 (executing program)
2021/11/09 16:07:38 fetching corpus: 11998, signal 244834/301828 (executing program)
2021/11/09 16:07:38 fetching corpus: 12048, signal 245305/301829 (executing program)
2021/11/09 16:07:38 fetching corpus: 12098, signal 245691/301832 (executing program)
2021/11/09 16:07:38 fetching corpus: 12148, signal 246212/301832 (executing program)
2021/11/09 16:07:38 fetching corpus: 12198, signal 246437/301835 (executing program)
2021/11/09 16:07:38 fetching corpus: 12248, signal 246787/301835 (executing program)
2021/11/09 16:07:38 fetching corpus: 12298, signal 247074/301844 (executing program)
2021/11/09 16:07:38 fetching corpus: 12348, signal 247209/301846 (executing program)
2021/11/09 16:07:38 fetching corpus: 12398, signal 247562/301846 (executing program)
2021/11/09 16:07:38 fetching corpus: 12448, signal 247826/301846 (executing program)
2021/11/09 16:07:38 fetching corpus: 12498, signal 248127/301846 (executing program)
2021/11/09 16:07:38 fetching corpus: 12548, signal 248454/301848 (executing program)
2021/11/09 16:07:38 fetching corpus: 12598, signal 248846/301853 (executing program)
2021/11/09 16:07:38 fetching corpus: 12648, signal 249149/301853 (executing program)
2021/11/09 16:07:39 fetching corpus: 12698, signal 249488/301853 (executing program)
2021/11/09 16:07:39 fetching corpus: 12748, signal 249838/301853 (executing program)
2021/11/09 16:07:39 fetching corpus: 12798, signal 250090/301853 (executing program)
2021/11/09 16:07:39 fetching corpus: 12848, signal 250901/301853 (executing program)
2021/11/09 16:07:39 fetching corpus: 12898, signal 251216/301862 (executing program)
2021/11/09 16:07:39 fetching corpus: 12948, signal 251590/301864 (executing program)
2021/11/09 16:07:39 fetching corpus: 12998, signal 252414/301864 (executing program)
2021/11/09 16:07:39 fetching corpus: 13048, signal 253002/301864 (executing program)
2021/11/09 16:07:39 fetching corpus: 13098, signal 253302/301864 (executing program)
2021/11/09 16:07:39 fetching corpus: 13148, signal 253526/301864 (executing program)
2021/11/09 16:07:39 fetching corpus: 13198, signal 253805/301864 (executing program)
2021/11/09 16:07:39 fetching corpus: 13248, signal 254148/301864 (executing program)
2021/11/09 16:07:39 fetching corpus: 13298, signal 254372/301864 (executing program)
2021/11/09 16:07:39 fetching corpus: 13348, signal 254757/301864 (executing program)
2021/11/09 16:07:39 fetching corpus: 13398, signal 255018/301866 (executing program)
2021/11/09 16:07:39 fetching corpus: 13448, signal 255295/301866 (executing program)
2021/11/09 16:07:39 fetching corpus: 13498, signal 255703/301866 (executing program)
2021/11/09 16:07:39 fetching corpus: 13548, signal 255909/301866 (executing program)
2021/11/09 16:07:40 fetching corpus: 13598, signal 256246/301885 (executing program)
2021/11/09 16:07:40 fetching corpus: 13648, signal 256508/301885 (executing program)
2021/11/09 16:07:40 fetching corpus: 13698, signal 256785/301885 (executing program)
2021/11/09 16:07:40 fetching corpus: 13748, signal 257022/301885 (executing program)
2021/11/09 16:07:40 fetching corpus: 13798, signal 257415/301886 (executing program)
2021/11/09 16:07:40 fetching corpus: 13848, signal 257726/301886 (executing program)
2021/11/09 16:07:40 fetching corpus: 13898, signal 258019/301886 (executing program)
2021/11/09 16:07:40 fetching corpus: 13948, signal 258531/301890 (executing program)
2021/11/09 16:07:40 fetching corpus: 13998, signal 258822/301890 (executing program)
2021/11/09 16:07:40 fetching corpus: 14048, signal 259080/301890 (executing program)
2021/11/09 16:07:40 fetching corpus: 14098, signal 259361/301890 (executing program)
2021/11/09 16:07:40 fetching corpus: 14148, signal 259604/301890 (executing program)
2021/11/09 16:07:40 fetching corpus: 14198, signal 260033/301890 (executing program)
2021/11/09 16:07:40 fetching corpus: 14248, signal 260326/301890 (executing program)
2021/11/09 16:07:40 fetching corpus: 14298, signal 260696/301890 (executing program)
2021/11/09 16:07:40 fetching corpus: 14348, signal 260973/301892 (executing program)
2021/11/09 16:07:40 fetching corpus: 14398, signal 261319/301892 (executing program)
2021/11/09 16:07:41 fetching corpus: 14448, signal 261929/301892 (executing program)
2021/11/09 16:07:41 fetching corpus: 14498, signal 262252/301892 (executing program)
2021/11/09 16:07:41 fetching corpus: 14548, signal 262590/301892 (executing program)
2021/11/09 16:07:41 fetching corpus: 14598, signal 262856/301892 (executing program)
2021/11/09 16:07:41 fetching corpus: 14648, signal 263108/301919 (executing program)
2021/11/09 16:07:41 fetching corpus: 14698, signal 263412/301919 (executing program)
2021/11/09 16:07:41 fetching corpus: 14748, signal 264028/301919 (executing program)
2021/11/09 16:07:41 fetching corpus: 14798, signal 264332/301919 (executing program)
2021/11/09 16:07:41 fetching corpus: 14848, signal 264611/301919 (executing program)
2021/11/09 16:07:41 fetching corpus: 14898, signal 264857/301919 (executing program)
2021/11/09 16:07:41 fetching corpus: 14948, signal 265310/301919 (executing program)
2021/11/09 16:07:41 fetching corpus: 14998, signal 265626/301921 (executing program)
2021/11/09 16:07:41 fetching corpus: 15048, signal 265925/301921 (executing program)
2021/11/09 16:07:41 fetching corpus: 15098, signal 266384/301924 (executing program)
2021/11/09 16:07:41 fetching corpus: 15148, signal 266655/301926 (executing program)
2021/11/09 16:07:41 fetching corpus: 15198, signal 266912/301936 (executing program)
2021/11/09 16:07:41 fetching corpus: 15248, signal 267282/301936 (executing program)
2021/11/09 16:07:42 fetching corpus: 15298, signal 267580/301936 (executing program)
2021/11/09 16:07:42 fetching corpus: 15348, signal 267902/301936 (executing program)
2021/11/09 16:07:42 fetching corpus: 15398, signal 268177/301940 (executing program)
2021/11/09 16:07:42 fetching corpus: 15448, signal 268441/301940 (executing program)
2021/11/09 16:07:42 fetching corpus: 15498, signal 268818/301952 (executing program)
2021/11/09 16:07:42 fetching corpus: 15548, signal 269217/301956 (executing program)
2021/11/09 16:07:42 fetching corpus: 15598, signal 269462/301956 (executing program)
2021/11/09 16:07:42 fetching corpus: 15647, signal 269769/301958 (executing program)
2021/11/09 16:07:42 fetching corpus: 15697, signal 270039/301958 (executing program)
2021/11/09 16:07:42 fetching corpus: 15747, signal 270327/301962 (executing program)
2021/11/09 16:07:42 fetching corpus: 15797, signal 270595/301964 (executing program)
2021/11/09 16:07:42 fetching corpus: 15847, signal 271040/301964 (executing program)
2021/11/09 16:07:42 fetching corpus: 15897, signal 271246/301964 (executing program)
2021/11/09 16:07:42 fetching corpus: 15947, signal 271649/301964 (executing program)
2021/11/09 16:07:42 fetching corpus: 15997, signal 272066/301969 (executing program)
2021/11/09 16:07:42 fetching corpus: 16047, signal 272261/301969 (executing program)
2021/11/09 16:07:42 fetching corpus: 16097, signal 272562/301969 (executing program)
2021/11/09 16:07:42 fetching corpus: 16147, signal 272807/301969 (executing program)
2021/11/09 16:07:42 fetching corpus: 16197, signal 273218/301969 (executing program)
2021/11/09 16:07:42 fetching corpus: 16247, signal 273556/301969 (executing program)
2021/11/09 16:07:43 fetching corpus: 16297, signal 277865/301971 (executing program)
2021/11/09 16:07:43 fetching corpus: 16347, signal 278123/301971 (executing program)
2021/11/09 16:07:43 fetching corpus: 16397, signal 278381/301972 (executing program)
2021/11/09 16:07:43 fetching corpus: 16447, signal 278592/301974 (executing program)
2021/11/09 16:07:43 fetching corpus: 16497, signal 278822/301982 (executing program)
2021/11/09 16:07:43 fetching corpus: 16547, signal 279161/301985 (executing program)
2021/11/09 16:07:43 fetching corpus: 16597, signal 279441/301986 (executing program)
2021/11/09 16:07:43 fetching corpus: 16647, signal 279730/301986 (executing program)
2021/11/09 16:07:43 fetching corpus: 16697, signal 280023/301986 (executing program)
2021/11/09 16:07:43 fetching corpus: 16747, signal 280984/301986 (executing program)
2021/11/09 16:07:43 fetching corpus: 16797, signal 281170/301986 (executing program)
2021/11/09 16:07:43 fetching corpus: 16847, signal 281391/301996 (executing program)
2021/11/09 16:07:43 fetching corpus: 16897, signal 281625/301996 (executing program)
2021/11/09 16:07:43 fetching corpus: 16947, signal 281954/301998 (executing program)
2021/11/09 16:07:43 fetching corpus: 16997, signal 282342/302006 (executing program)
2021/11/09 16:07:43 fetching corpus: 17047, signal 282580/302006 (executing program)
2021/11/09 16:07:43 fetching corpus: 17097, signal 282867/302006 (executing program)
2021/11/09 16:07:43 fetching corpus: 17147, signal 283164/302006 (executing program)
2021/11/09 16:07:44 fetching corpus: 17197, signal 283462/302006 (executing program)
2021/11/09 16:07:44 fetching corpus: 17247, signal 283727/302006 (executing program)
2021/11/09 16:07:44 fetching corpus: 17297, signal 284165/302009 (executing program)
2021/11/09 16:07:44 fetching corpus: 17347, signal 284349/302009 (executing program)
2021/11/09 16:07:44 fetching corpus: 17397, signal 284736/302010 (executing program)
2021/11/09 16:07:44 fetching corpus: 17447, signal 285176/302010 (executing program)
2021/11/09 16:07:44 fetching corpus: 17497, signal 285369/302010 (executing program)
2021/11/09 16:07:44 fetching corpus: 17547, signal 285679/302010 (executing program)
2021/11/09 16:07:44 fetching corpus: 17597, signal 286002/302010 (executing program)
2021/11/09 16:07:44 fetching corpus: 17647, signal 286374/302013 (executing program)
2021/11/09 16:07:44 fetching corpus: 17697, signal 286607/302013 (executing program)
2021/11/09 16:07:44 fetching corpus: 17747, signal 286801/302013 (executing program)
2021/11/09 16:07:44 fetching corpus: 17797, signal 287047/302018 (executing program)
2021/11/09 16:07:44 fetching corpus: 17847, signal 287305/302018 (executing program)
2021/11/09 16:07:44 fetching corpus: 17897, signal 287581/302018 (executing program)
2021/11/09 16:07:44 fetching corpus: 17947, signal 287801/302018 (executing program)
2021/11/09 16:07:45 fetching corpus: 17997, signal 288084/302018 (executing program)
2021/11/09 16:07:45 fetching corpus: 18047, signal 288292/302018 (executing program)
2021/11/09 16:07:45 fetching corpus: 18096, signal 288506/302018 (executing program)
2021/11/09 16:07:45 fetching corpus: 18146, signal 288780/302020 (executing program)
2021/11/09 16:07:45 fetching corpus: 18196, signal 288970/302033 (executing program)
2021/11/09 16:07:45 fetching corpus: 18246, signal 289174/302033 (executing program)
2021/11/09 16:07:45 fetching corpus: 18296, signal 289405/302034 (executing program)
2021/11/09 16:07:45 fetching corpus: 18346, signal 289674/302036 (executing program)
2021/11/09 16:07:45 fetching corpus: 18396, signal 289880/302037 (executing program)
2021/11/09 16:07:45 fetching corpus: 18446, signal 290173/302037 (executing program)
2021/11/09 16:07:45 fetching corpus: 18496, signal 290451/302040 (executing program)
2021/11/09 16:07:45 fetching corpus: 18546, signal 290729/302040 (executing program)
2021/11/09 16:07:45 fetching corpus: 18596, signal 290965/302040 (executing program)
2021/11/09 16:07:45 fetching corpus: 18623, signal 291093/302070 (executing program)
2021/11/09 16:07:45 fetching corpus: 18623, signal 291093/302070 (executing program)
2021/11/09 16:07:47 starting 6 fuzzer processes
16:07:54 executing program 0:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x200007)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0x9b, &(0x7f0000000100), &(0x7f0000000000)=0x4)

[  206.539497][ T6335] chnl_net:caif_netlink_parms(): no params data found
[  206.900853][ T6335] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.908362][ T6335] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.918245][ T6335] device bridge_slave_0 entered promiscuous mode
[  206.937405][ T6335] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.946061][ T6335] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.955872][ T6335] device bridge_slave_1 entered promiscuous mode
[  207.045389][ T6335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  207.072138][ T6335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  207.152115][ T6335] team0: Port device team_slave_0 added
[  207.170930][ T6335] team0: Port device team_slave_1 added
[  207.246020][ T6335] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.254159][ T6335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.280414][ T6335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  207.302118][ T6335] batman_adv: batadv0: Adding interface: batadv_slave_1
[  207.309374][ T6335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  207.335669][ T6335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  207.442721][ T6335] device hsr_slave_0 entered promiscuous mode
[  207.456161][ T6335] device hsr_slave_1 entered promiscuous mode
[  207.647782][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  207.654901][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
[  207.800920][    T7] Bluetooth: hci0: command 0x0409 tx timeout
[  207.925505][ T6335] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  207.964315][ T6335] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  208.011825][ T6335] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  208.044321][ T6335] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  208.345119][ T6335] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.387792][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  208.397668][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  208.423042][ T6335] 8021q: adding VLAN 0 to HW filter on device team0
[  208.448330][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  208.459639][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  208.469689][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.477176][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.519808][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  208.530157][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  208.540906][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  208.550846][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.558296][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.567834][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  208.654323][ T6335] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  208.664971][ T6335] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  208.680877][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  208.692817][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  208.704515][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  208.715672][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  208.726965][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  208.738086][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  208.748376][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  208.759750][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  208.770262][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  208.783242][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  208.794401][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  208.866854][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  208.876162][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  208.917770][ T6335] 8021q: adding VLAN 0 to HW filter on device batadv0
[  208.994831][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  209.005493][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  209.077249][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  209.088166][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  209.113454][ T6335] device veth0_vlan entered promiscuous mode
[  209.122642][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  209.132386][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  209.169307][ T6335] device veth1_vlan entered promiscuous mode
[  209.267673][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  209.278201][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  209.288381][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  209.299352][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  209.323266][ T6335] device veth0_macvtap entered promiscuous mode
[  209.345709][ T6335] device veth1_macvtap entered promiscuous mode
[  209.370283][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  209.380914][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  209.439874][ T6335] batman_adv: batadv0: Interface activated: batadv_slave_0
[  209.447762][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  209.459090][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  209.488135][ T6335] batman_adv: batadv0: Interface activated: batadv_slave_1
[  209.498640][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  209.509538][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  209.538144][ T6335] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.547909][ T6335] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.557085][ T6335] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  209.566305][ T6335] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  209.880966][    T7] Bluetooth: hci0: command 0x041b tx timeout
[  210.212768][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.220954][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.233503][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  210.328300][  T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.337221][  T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.345436][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
16:08:00 executing program 0:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x200007)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0x9b, &(0x7f0000000100), &(0x7f0000000000)=0x4)

16:08:01 executing program 0:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x200007)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0x9b, &(0x7f0000000100), &(0x7f0000000000)=0x4)

16:08:01 executing program 0:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x200007)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0x9b, &(0x7f0000000100), &(0x7f0000000000)=0x4)

16:08:01 executing program 0:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x200007)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0x9b, &(0x7f0000000100), &(0x7f0000000000)=0x4)

16:08:02 executing program 0:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x200007)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0x9b, &(0x7f0000000100), &(0x7f0000000000)=0x4)

[  211.963194][    T7] Bluetooth: hci0: command 0x040f tx timeout
16:08:02 executing program 0:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x200007)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0x9b, &(0x7f0000000100), &(0x7f0000000000)=0x4)

16:08:02 executing program 0:
pipe2$9p(&(0x7f0000000240), 0x0)
pipe2$9p(&(0x7f0000000240), 0x0)
pipe(&(0x7f0000000100))
pipe2$9p(&(0x7f0000000240), 0x0)
socket(0x1e, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0x10, 0x2, 0x10)
r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3\x00\x00\x00\x00^\xc1\x0f', 0x0)
write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x58)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3}})

16:08:02 executing program 0:
pipe2$9p(&(0x7f0000000240), 0x0)
pipe2$9p(&(0x7f0000000240), 0x0)
pipe(&(0x7f0000000100))
pipe2$9p(&(0x7f0000000240), 0x0)
socket(0x1e, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0x10, 0x2, 0x10)
r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3\x00\x00\x00\x00^\xc1\x0f', 0x0)
write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x58)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3}})

16:08:03 executing program 0:
pipe2$9p(&(0x7f0000000240), 0x0)
pipe2$9p(&(0x7f0000000240), 0x0)
pipe(&(0x7f0000000100))
pipe2$9p(&(0x7f0000000240), 0x0)
socket(0x1e, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0x10, 0x2, 0x10)
r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3\x00\x00\x00\x00^\xc1\x0f', 0x0)
write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x58)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3}})

16:08:03 executing program 0:
pipe2$9p(&(0x7f0000000240), 0x0)
pipe2$9p(&(0x7f0000000240), 0x0)
pipe(&(0x7f0000000100))
pipe2$9p(&(0x7f0000000240), 0x0)
socket(0x1e, 0x1, 0x0)
socket$kcm(0x10, 0x2, 0x10)
socket$kcm(0x10, 0x2, 0x10)
r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3\x00\x00\x00\x00^\xc1\x0f', 0x0)
write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x58)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x3}})

16:08:04 executing program 0:
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r0 = syz_io_uring_setup(0x5d0, &(0x7f0000000340), &(0x7f0000ee8000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307c, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0)
io_uring_enter(r0, 0x450e, 0x0, 0x0, 0x0, 0x0)

[  214.040141][    T7] Bluetooth: hci0: command 0x0419 tx timeout
[  214.093242][    C1] hrtimer: interrupt took 64939 ns
16:08:05 executing program 0:
mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
fork()
fork()
fork()
mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)

16:08:05 executing program 0:
mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
fork()
fork()
fork()
mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)

16:08:06 executing program 0:
mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
fork()
fork()
fork()
mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)

16:08:06 executing program 0:
mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1)
fork()
fork()
fork()
mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)

16:08:07 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000040)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'})

16:08:07 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000040)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'})

16:08:07 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000040)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'})

16:08:08 executing program 0:
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f0000000040)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'})

16:08:08 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0003}]})
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0)

[  218.281792][   T23] audit: type=1326 audit(1636474088.478:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6793 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6eca549 code=0x7ffc0000
[  218.304730][   T23] audit: type=1326 audit(1636474088.478:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6793 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=429 compat=1 ip=0xf6eca549 code=0x7ffc0000
[  218.327942][   T23] audit: type=1326 audit(1636474088.478:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6793 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6eca549 code=0x7ffc0000
[  218.352488][   T23] audit: type=1326 audit(1636474088.478:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6793 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf6eca549 code=0x7ffc0000
16:08:08 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0003}]})
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0)

[  218.375517][   T23] audit: type=1326 audit(1636474088.518:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6793 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6eca549 code=0x7ffc0000
16:08:08 executing program 1:
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000000))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81e8943c, &(0x7f0000000040))
ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, &(0x7f0000000240))
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f0000000280))
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0xc1)
ioctl$VT_GETSTATE(0xffffffffffffffff, 0x5603, &(0x7f0000000300)={0x759, 0x4, 0x1162})
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340))
readv(0xffffffffffffffff, &(0x7f0000001800)=[{&(0x7f0000000380)=""/132, 0x84}, {&(0x7f0000000440)=""/140, 0x8c}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/126, 0x7e}, {&(0x7f0000001580)=""/160, 0xa0}, {&(0x7f0000001640)=""/143, 0x8f}, {&(0x7f0000001700)=""/228, 0xe4}], 0x7)
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000001840)=0x2000, 0x4)
fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000001880), &(0x7f00000018c0), 0x2, 0x1)
sendmmsg(r0, &(0x7f00000054c0)=[{{&(0x7f0000001900)=@ieee802154={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x80, &(0x7f0000002d40)=[{&(0x7f0000001980)="a9bb51722368d57549489a92cbe18e11858d0147c6ef2a266eb144cb0c1e54628da5362bcdd20b19205879282bebfc7f6874e4fefb5b6a0488", 0x39}, {&(0x7f00000019c0)="64371e6d36ff40fc9b5d458334753a98efa48e5ee8e3f2f5d5da471bea4b4df02f6a1934222ea2b3a382cd2fa2d7bac2cca7a9de2438c390eafbba304fd532f3297d3f2746b0a86ba3fe686770309c3c0386b0f369e9686dfd6209e732b10cd998e8c982811a3326a3d1599c59ba2d94a500486dd00953ee608428877d0e80aaf3e97cda17b16a2e679dff14612ac9c6c2cdd7158ec98e", 0x97}, {&(0x7f0000001a80)="b60a6a061fcea4e42450d0f4658e1b49ff888c880ec1c157399d1b52d2c772f18d59f4593cb69972048f42a4df7c4f2d53d205d536ed52bb3c0a09a4ff1aad83a030235c68ab30670f9325de20e17afe0a5597ea3dca3bb6344255b1d1b3167bcbded4ebe983a3e28c5f55fca1c8ac18462bf715237158b73018db7b3cb258be00d5d473180380b1e968f57e267cf6cc639f7806edf4ef3a911e9a6d5b14ecfa20c3d0e78de6b8e4ebc2ae", 0xab}, {&(0x7f0000001b40)="258f18c53f83f6d2c2a64df255559ac804475d27bdcb9ce2c8faf123c3570ceddbf969f4962b5f030419", 0x2a}, {&(0x7f0000001b80)="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", 0x1000}, {&(0x7f0000002b80)="5b65d2aa62931ce40cef28114ad4ae96e29b90f27779984573fe405cf797c2825eb14b8484128568f50409fd44fedc48f661f164eb1fa2bb0e82e58b3879", 0x3e}, {&(0x7f0000002bc0)="8c9e080f62e388ea765934b0c78608d362054d0821374255b21a651322add12f91783c7586c79fed9ebaaef6d146ab9a5e752061d2165d62302524fbc77993bc3dc466ed4edadbfbd0b5d3c98c", 0x4d}, {&(0x7f0000002c40)="aec1c9d768db7c282ba1ccfd6023cb21772269d7e2e796e740ef67973c84fff973876cc83e20d68b4377b77dd22a11661ca7cf5a8d1c8ff7691dcdef37e181ff9c7da86509bff57d978cd392e5b0a9624782b938f48a24934f4ce2c6c6a2f3b24f358ced04de3db2792806f411c5f5f3a7c39d0b17b8245bc0af39f7ad33999820c60ec56f0d7ad146c7198184af52cc97b950e064ad8427555ca3dc27aae3a65e787a40d115e56c95b280ceb99e448acb92d2ce2dc7e80067c8bf5613e90988be9fce7c5383305b8ce98bd9b05231bc627ca9e2d009034ec82bbee8ca89539fa4a1c4611762e90bfb1c2f", 0xeb}], 0x8, &(0x7f0000002d80)=[{0x100, 0x102, 0x81, "77cc0df45d189723d9712fcb59168b80cffa0c5aba0be5a7a9513b0323192f188375d971eb74312b4e11eb172bf30b6bebe707a971058035eb497477a834c30027b5b8c4074e1ea7842ec25f6e83d614dc35e8dcf49bcb9f76c3891eb71d2878c54b5f1a895a8d660737553cd98a33f2e0082abcb67380857090cd88d7fb865987ffd37c04104030ae2639b456d23dc5746381d42de4609b45220faa785cc0caa296bd27f6cdc7a035b444370fc806dd5a8b4f19db00e1e14db630595201ce0b4fcf54e862a54c22e99cef5b63754a9e45da6d52456e5b6901619938901f839e3360874635cd4d54f3237b157c028e242255ab"}, {0x100c, 0x38d7c0e7e35d165c, 0x1, "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"}, {0x40, 0x105, 0xffffffff, "ab6eb917c459c7b76dd275e1fc29bdfabaab29674006d659a55c6c0694970e5052dda2bcf588fc6ca8db06fedbc618c77ac5e4"}, {0x48, 0x113, 0x2, "49fae2198599c6cbdd21dc08538c33a33b6fa35243de9ebaa58a4a812f48f40e70daed10043d1dc759b423510ed5c9b7b017856ae0afa50cd0"}, {0x4c, 0x114, 0x7841, "26ad130dbe7fae8d3a9ab4727a71b8adf9218443fb96d9dea214d57e0dbb6de5cadf58ddd37aa3202b1f8bb764b9167ca0bf387bb66a8aace08fcae43406"}, {0xd4, 0x10c, 0x1, "fdc746fd39836b125691ddef13cea2d2870fd6fc82f1923dda80b27b357fd29e937387a53982c017dba519bf390b674f74eb56e58657be0cd616171f806bcff58ad3850a19950e6f25fafd0915fa00c9d01b2b5c93ffab37a3a2d41ef8dffd2f122de5844489a13884fc060621f3b5a5af38418f6769f883e4fb7104f13e756017c920a6747fc6518433ec5981439cf0495c7c858cc560c3f353243885c34fcf0f39350a5a46321d0a96a229f46cf413ccebe18b8e43bd095620ecc2b099c42147ba122756666240"}, {0xa0, 0x104, 0xfffffffc, "851f6c49cacd854273b6d15cfce67fec028bce18643c3c33ca00f5f25354bcc0fb94c68d3256ce5436dea72de0d61c03047fae6a1288dd041cf6f2b7aa8b201fae6d481a7cf73a7826da0ab5dbeaba527a382e11ad765247c4a0764f310e56abdb3502cc9baab19d340f86d0ba2a20555bbbaa3b9a23b48636751aa81f5e76b49cdddb960d07bc396efcf935f883662916df"}, {0xb4, 0x0, 0x7fff, "7a56777cff49414e2819ecd739c001a4966a0c561952cfc07222c2fa5f8e5bea87fccb142e978baa4bea592bf725981906563731b62ca0cac9acca95f2c9e3671e8988e8fd0327a606024a04fb6bd0dae4b35b5173866c6b5d996dd2ec93fe6b429c2cacef2c2d1eae3cdfe904b538963db7e4c9fd0a046f57d0c4a3fec56b6dc16cfc06c9ece0bef16085d8d6beaa036b422bdc436b9a03070d69614bb27f280625341bba"}], 0x1408}}, {{&(0x7f00000041c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @private=0xa010100}, 0x3, 0x1, 0x0, 0x3}}, 0x80, &(0x7f0000005340)=[{&(0x7f0000004240)="33b049f4058a62bebaf663b21bba47b8e2a6e6a474ed1f48eeec9fe5ac4d3c9fccbd085a62ac08713eb94048c1f0ef565210db2d1f90f93d1624e767e852f83e8834edfa7bf163142629e6d791a32dca55192f6f921661239dbc85a75500542bc0f5b44562e936dcedcf439ee8a5aa9321db114da2ce118a358724ac0c233eb9a01b091b741ac549f66b68dc618bac484dabc78be811ab7340b1", 0x9a}, {&(0x7f0000004300)="bd2385f4fe9512", 0x7}, {&(0x7f0000004340)="2ac1fe5794905687f3ced5a4a2ccc74239e7f676601a55f2cde98b95e4f6d06f994dc1baefcabd03256cf93a3b2e7b9b7dfb79f19631624431004d06d7c5b20669f0c39ae0ef344419b0cfd7dcc1c52f4e0b5018c099300f3198eb381196a2d6227fd63cb0190bfacb7a0acd4df98438cdd142d367cf12adfe626dc60653e2363ac4e527170b8758f27ab6775ad49bdb191eb40b880d62663e87616687085493c6d9c1d6849bf7d9c8f9b2554356379b9faf49de6d0e06bdd6e9b390e30c6ff2f730a579bf1652fa8a24445bdd5c42ea159d8316fd0e6b5926fac75568c41ecd5acc83b03d98e35dffbb44b17327ca331818b6de8a9f5ceb3ba43733c357fc4042feebfc4b6433b5481e0e04eb49f3fad6ca8bc7035e264850d635f32e2bb5c445618dfd78ab1f505d9dc37048404744f606b91f545d9daa9723d73cd667db6ac8aa1a282e751a66f96a968abdbb8eb0116d601b6aa492320a841d9144d8c88e1b2ec94278467206cedc9b567a3c72e642bc82dd491a7a57ad4ba311f281143f255e91debe296bb72df0a6ad5aa074082d4e6360a48bc93b414a6a76b1ba0a42eff5ab833ba24ca6febad8fc75979da1123434a403d839910c7842a75acdb8f6569512fcfa2856be9f7cd05804d02cb7e0e4d08a250d52f1c6472c9ebe8a64b328cfdeccd7eefec1ac37d6f474f8be5be47fb3eb988f9022e634a93f2d648bdf5942ff8e6f2dcc274055d3a7c5dab820ddff8493514bb95f753dd25467d580d0e8a60e2aafa908b9692ce88295fc3c3ff9cd853a099ce9d9f079a7dfe46305903b616e9581df0ae5f742ea6324e8124eab790a2530eb98a05af7ffa84d0165b8710fc5f4acc02c8500df29c05e0b1b027612a5295dcd3840ef5a71804d4aac0c33047772a8061ea0c3a785de3f6d1d923b9f50270f216d9db77bf67e730da7def8f0e9444fd8d0e3ec1122463876ea584d400e6b1d6bb27e3ee9f2e992186dbf20e870e5be0fd2050c164590a1df0685c7996979cb0cd654210d43d7ace607667cc50be796ad66446b7dbe877359657ed2ddda66da3a543d490d9d5dfdc98c8434a55538869069581b9989ec9564002a8ea3206d9d76eba211f4e5b6b435ccb051837844a9a3464383ba99b0b0a9bf966d6cbc0b391b022fb430825046b3c9970b7d7ec3d3edfae894352a1a07af971ea9f23ff935ddca45892f75aeba2128554c9676568963a1e1be69fcebf241fb3b83fcd7c853d2097d5c36d357eb13cf6063030f1dd47c1d96deb3cabac1958fa212ec24cbd046b1b5c39ae35c461ad8e53c55c77e9d2a8767084d06b43901bdb84c580c54e9e20bda680aa3661f00050587178386b29071815ada406c2605feb07ba2c6b9ff39668050b0273811b61e2be4587727a237c40345c8bb9d7720ef34b5e026b07260e9a78fd6f370427d9c55737e61150826e053f7210a13f49a6a9eb9694a5910c02275d15e41e3ba4d5a56c0a0a01b95f4358b1fe24cea87e0ecac95210e9e51fc940d8aaf59573a145de7654b3894f937ddaf668a25f649040fad17bf6817536310e11d3e74587f928ef160a980af2601040b9a5cd73b8873410654d029c8a142c2171e90bd64c07211e3e2912787725b8b72a944b868542853c92ee83d19babe560e0f8593af1ec725ca038082a5abda2ba9f8aefe07445968835f477af76a36cae25f08f653b59fba2ec8114db81515670cba91ca01713a037b182c41e054ead061dbcc5b8db7d21132b5f2146fc01dd92927d58f67a52e4859ca347f874810d47b7e3b462eab1ffee7259e2475884243d5b9b11c2be62cd6ea9681ea7e81bba51f3ce90b9d2c62598a87294e0869e3c52e8c17eee3c2c0d322ef291a6b286b49569863b9f9d18e466972a008a54bb840008a4937ccb1a09230c540b213ce4e7427bd04e722c0d58944536df7eea7bcbc2b7aa62b09bd7fbd1d9581161e2611a416ff80138b705424928acd14d36be88646d1b8406d0d7f087e4f9e9d60a3748b3fa32b95ff1c1ebf5e46adac1107b5a7eb443a9f9a5eb6e5cfbc4379b782751fb5d96e5cb8286daeb51ad59d045b0b17884b5cf3e994b1db3e2ba0daa08a1e92c4428de9b615419b667f284a165d7281ae15a5861c224674241fd9bee4b571d39dc40a31d5817e1485ae92b21cb1d078dcc984ef7f2f68d74b4031f30d58941dabe05c183c2cec325d0119089c0ff23cfffa7d5531a22a13d52d4ee34e42cf6316dfb44f0099e1ecb77a6751bca3ec6f8e1f53003119c0c2fc4998517b05355fd0d67eb9794a4df506ae2655bb3aafa16b49c718dcbd2b7442ad9dc607afc9318e89bc8ae65717d67ebe359cac125c9cc3f84c6a9a6b5d01b9b4986b66cf00f511f62a107a816b676eca883297988124f2c9c822df042bccd61eafc4ff741796c429b8931f2deda745783df3a0b98781ba11b0a9e42b69740386449d3f471e22361808c0b35ba595bdcf53284cfc16903c09fbf63dde680bc94fbd4204d4b3819133a854a5e3481078a5a17e69bfe01acb4cc212762eea0273cd298a1c537bb2d7e5bfd8a51fea97a05c8eea0822c0a0d73caa5d8a762f674a8a43f95d87df5417cb550b0c04b45dc9c842bda36c1cf98beb6e1bf52fe23bb7ebfaee9acd7767edca6582ac5018a7e79b6e0ed9bd480a1882f3aaa0a521388b8898a5d776dfcede555464443f16b6fc6cfca62feb75f8bea6789f4da72a39c6a7d8a1c5175bb33526b1453b28b2c7735abc3db71e10017f5a2df7c11a149b2dae7d9c01e60ca8e1f6b1ebe3b58d701f44159e6bbb3143106b54c2509fea0b3cc78e5b19b25d9d813a253c1a394ffcfed09b170927cd65f4ee5975cd336424e55b6db3cbc1885533679efa125c9dc75276fbce4ab97c9ec5ccd342b35bc917ccbc1f5901dfde96f339a87b3ae4dd9f1d496b2de6286a04fd33d8a86c57fa28c340362e7426b584e365266072cc1195e773d45957d0088d6abd52712d5379d87ca2862672143fb9be961d449d744368ea499e16a06a45543072b9e5b2142763e8198e7b666edbf4eb749a2fd68cd87e39a49135b4c9b2dfc85baa86076f53ece34a4f4ae8ff4e8bd872f578392e93e1b42df99544b187ead28927e25ffbebae100bab3843ec7ee0d8fe14a7420f101a49530438d6b08878f1a80e8ea80e2ad01dbd0b1d4d35ecc0cccdf53b19687568c972643b6e754f2195cda5bfa8773a09b0963b01e70a1cde5b1ffed3f7399bd3ef6e8e044b4de57a1ffc8a7dfe3e2874e5013bfa43624f40c87e5ff26fa0020e9009afbf13896099a8a4e28da6a458e02561e6aa74044aa01d06f48c0412ecb7f81669822b8ab7f18dde5b643fdbd7dbe5a4b6d82e0a519ac11211f7557663f27d1e21f0e5532f0a0681a894728776b73513d4bb6a1c1d1d39f04a5f049cacc8c07603969e270fb23195d224a606f422097c9eeebc941ec9aa1e66b78abbcc1cb42507f3b604f8da77468eeba71b694bcdae1c9363bc1974b4370bd33277a3d2497f1a85f68cf79762cca8b44d63479ba3e2f9dbaeb67e66ce460d52cebfc4263d19633b08c22eab66446c42e244a23c10a2132953ca2885484713e0e85b3ead636dd4f220f70b9c398917c0ee0cd4c9816c0a8fea58f5c670d0e86d338cae47b8fb9fa6b575a560ac1d40af915aab3fd61f65c8727127e1d4cde1fdc6f6a157b1c079efd242693f8f767cc2c06937d21365ca3544b4e0eb592cd86ec0dca22952e0720092aaa917669455c4531e8e2fae9c7823cfc4ea2343aefce3784f279300a141bae3d4201a511298b7b6fec46f09f6a577bc54abf21857f645f0b79cdb96ddd6f5bec5218886fd90940a049449bf3b4c7a08f5beb770948a2b5feb8453956cc5bcfea91049e76e1cbde85adb8bebd8fa80f3d180e20cfcfb7f4125e281403417aea5619547c279cd14c121aba8708d644c3a574e061d5cbda57175265669093858dadab4fa0e702972dcd30a4fb90ea517df9fd7e39a4d3059d0fe271e1d86a5e03f72d1e76f7f5f907c5d5dcc05c418eddca235722da1585a1707c375b23a5ad33ec292bcaf798c8974000051eeedc260f9ef21c55e8e4a74fb5c3c2640a2691582292effe8e4a9d7ace851882b8ddbb662e2eb7295c587c565562d1e395d5c8bac305e92c8263ca388d1304cf5e64cb6bf2e743d21459e9dcaa3b6bc857279d102744539d073bb3520c893817f4cb60400105fe39b98f4e50a6ef61168e02b32ce37ffc4381929fdb3d6a2ba6769272fd81bc64a3931cd205a94229b02ef6e99a70284b178de21a2853547ebfede22d442c32a3f66283057d08e3d60cd78801a513331c54cac4864c1dac1f405859d9b14f34f68321a445cea7fa654ced3939ca3d6363aaf43027dbd179aca0016615397bed99f2e7dd22d4f41839ae568ff21b00a4d9cb69ae43a9eba43d417c563ad9d6747db04c25a75e5b3ae63bfc2e0e358058c5a4e754e3880cf25be934a31546e78f09fd0d052dc645b300a83ca34912b0743978fd675181f1195033d9e26cffcd312325fa923029a2928e20d6fd61ef8296d04b49d085f070175ca2250a7bd85e35f9f65a8e27b12c2f1e662f24c48afaa27c677f05d4804999ea4aee004fbf6b85b437334fca14dda6aa35ba8230a03f836185cd2e9841f1f032c92a7672bed53f49c086e2312592210dec9d4d4e19a644cb13cf6bd3b5c64d8fc9b1af2881010eaa15ad7d7a750452e5660ca419c45253d36d64ed82cb6c60b922cc954876d24b84237abc243a2a099dbfe18c406b42c069b18fb91944ffbe9f3284ab53978fe106bf8743f55b0c410adde501e3e875162554b2d353648ef02677265dabf8230e927a87ece1e37a7ed4244382b71c73f605f1e2f60ce39c12735ce9cb7103360797139e7308d20e386473d987265918f90c2acec3398039a7b16cfd0cfd00e1aeecb92fe1203bb4328b56c8c652ae7b3e247840f808e64644b1c733da9af2b9b1cbd8cfeb5c39e31b7d7020b6cb02c554a2369b0d884727d275f8aa75ee3397836575efb70b328d6dc899e0c78699f338cc510c4a443daeda3902a7fd9d5f2f947e74a31dcc8a9527640ddc74cc1c00fd522ba83d48b7ef20095bf87f91ab70c6f7768a46f32c0d9610d819a62fc8af1d53021594d4879ea8b97ba21ed07cadf6b6cc4495362228c5bb76ba864076ca9c45d1740d9012f71b815327bec3231d6ba94708f8a20b6ef43d13a06017e95b86a996aabfb8c36d271ee59a68cc230a1de8edcf15db00fbd5c0d9ecdbd681b81fd300b1d21cf4763b79e0da14610ccd86a94850661184bb1fd3ad9afb328d59a753c40e03792d2e102bc009ee1d4a2d753b217d6ece4ea946ecfe7a8cfd4b66e32ab940117d5d43335f57628da69843e88a9cc8db272ae9b5f35ce60c6570ca67ceaf5665a77b49da1fed945c9fd4cffd2f26df240b706ccd3068377c7887f19bfbed7a879e06148f72421e1c343791b534957b7252166e8955b3de392fd12ee24cc4a51298f51c405f4b4e8c64f4f7e8ede9f446ba76a89c8546c8e02876b1691a8628184afc6fb89f6d15e317417574b1e34efe829475ec719e0741731586f0d91e348bb41e6c1816f9a8e8d6ea24dfba1442def9e2ccfad6f071eac41ee363cf78a6e85acabf8b08457530735662bedf5a44b72d294581095ee2bdfcd622e2eb6c2ba3daa074d186f9fb36e3558bfc11ebb0fff6e3ac02446f52b10a914023772e278a426a611c93d6b9fb9033530e06c93c58f38b85a7b738e", 0x1000}], 0x3, &(0x7f0000005380)=[{0x38, 0x3a, 0x6, "b22f059e30d472fa720fe8076915bbdd530e8a3f70b1b12f475601ee81a41b52e847442c26f3239bd7"}, {0xd4, 0xea, 0x2, "ba0551662d4ea4002d526582dc439fa2438845950d1af3d44563f481b2fddbda3e492e023c3b67be1d1ff184ec7a06a2097a671b47f387a0da8ecf3dc7e67535527a7c1b48cf030afc8a1760787d1cfa92756888b7676891f52577205aa20040ddd1a83906af1c2dbb5b74df2b8804367d4ca2434d6e4311da5e11a41cc39e454cdaf3994a1e5376a13203eec2582bc9b79b3541acaf7ded81ee404af39114634028b4e3021e670b2807d4843260eb89b594d69b6ff88914d4f85a4464aa863bf71770670a648b"}], 0x10c}}], 0x2, 0x44000)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc01cf509, &(0x7f0000005500)={<r2=>r1, 0x85b, 0x8001, 0x4})
r3 = openat$nvme_fabrics(0xffffff9c, &(0x7f0000005640), 0x408400, 0x0)
r4 = openat$vfio(0xffffff9c, &(0x7f00000068c0), 0x301002, 0x0)
r5 = openat$zero(0xffffff9c, &(0x7f0000006980), 0x410000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f0000006a80)={{0x1, 0x1, 0x18, <r6=>r1}, './file0\x00'})
r7 = dup2(r1, r1)
io_submit(0x0, 0x7, &(0x7f0000006bc0)=[&(0x7f0000005680)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000005540)="072b28eaca2a9f6555ceb192e3fa8f1268149d6a9bcde30e4170d583541faa76f9615d498161990dd836d1bdc72ae14fb1a3316a33d7a1bd619430c75ee2cb41203c83ebd04cda96ef561d61663adff2510cd3f6937c908db2030582c58c97a3c3fd817b5e3072cb2a4abcf41fa793000a664eb8280bb780b2ada6e6018dc1b41bbab9e20310d451e9649d58b855c705ee1cb79b99c2dd7786ea1b83e8ecd3ac948775bb125e6eff72280536fc87292fac05e7b5f3a25b89721a6c4078a21fbe807a043f4cee1ec52f05f1c2ef8ed5fd1b048e7fbd142815c176c4d7d113797d02c78c6fa816360d41c2da30dc0d", 0xee, 0x7ff, 0x0, 0x6, r3}, &(0x7f00000066c0)={0x0, 0x0, 0x0, 0x5, 0x3468, r1, &(0x7f00000056c0)="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", 0x1000, 0x7fffffff, 0x0, 0x2}, &(0x7f0000006800)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f0000006700)="9e6934d7516a278fd0eb37c4ddbe20a37aedfc6f209b5d924faefd8fdbf0417e0d35516ff023f6f34b2468ee5b63472d376d447805b9234821a8a3a09c2e7d05650bb91d148cae2ec85dbaace22ef457263591091f6c2cb34e3ced3b62a1a07b290229f26ccec3bca3052a6acb3828312d5b4319310fa06247fe378ec5eba9fbf4f3a128378ed646b32ce50f43138b03a2aa68a20e461ccba03cd4307f0245fa07f21847ceed97ff7bc216299c92345e4450b2cc4d991c9fdb23bee6a7f1f2142197", 0xc2, 0xffffffffffffb416, 0x0, 0x0, r2}, &(0x7f0000006880)={0x0, 0x0, 0x0, 0x5, 0x40, r1, &(0x7f0000006840)="2dee9a0fd219f63bb36e4a24e9e10bc80806a1bc9db76bbe0d52fa333a84cf3dd2f8ec749df3a5", 0x27, 0x4, 0x0, 0x2, r2}, &(0x7f00000069c0)={0x0, 0x0, 0x0, 0x5, 0x4, r4, &(0x7f0000006900)="14bcc8e67928c94470d1ec5b116243572a217d1788310f53a48607302f9a076c979d7cd8155acabbbeae4b949be975a4c7fde37c85b2981926765dc5280bacb1d2db5d3ef611bee62de002c590a8b32060f901a0edb7f031496c5ef1a9c8729aab5a905af99ac344adc66f3bbd94046df80399c82c020a7c0a26", 0x7a, 0x8, 0x0, 0x1, r5}, &(0x7f0000006ac0)={0x0, 0x0, 0x0, 0x7, 0x1ff, r0, &(0x7f0000006a00)="109d33f4d894e8678770663a4f25f5d94bc19e88d6890b95f3ea9efa3455bbebc27adb579a4777fbacfe6fa7a82115a75790a79d9d36e5397cd306605a1fc4c5c51041c1a7d8697b92c3095dc307739940a8da61b2db47ecf640b6", 0x5b, 0x101, 0x0, 0x0, r6}, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x7, 0x487, r2, &(0x7f0000006b00)="2c555473788bbcfc77c99f4bf48f74bf7111da0cdb2f9545de26c2528ccb1e5c17ae87e7bd32fa74c3c56d9f323dff7a38099863cfd2f05e3065bf23586141de9be2ae3bd5e17eee49ec8ac1550e9aa0ba5dda91c96f3773309967699e12404d60233e640c69d72d497f4f672d5639f4aa", 0x71, 0xfffffffffffffffb, 0x0, 0x0, r7}])

[  218.820940][   T23] audit: type=1326 audit(1636474089.018:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6796 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6eca549 code=0x7ffc0000
[  218.844624][   T23] audit: type=1326 audit(1636474089.018:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6796 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=429 compat=1 ip=0xf6eca549 code=0x7ffc0000
16:08:09 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0003}]})
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0)

[  218.867629][   T23] audit: type=1326 audit(1636474089.018:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6796 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6eca549 code=0x7ffc0000
[  219.073180][   T23] audit: type=1326 audit(1636474089.218:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6800 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6eca549 code=0x7ffc0000
[  219.096496][   T23] audit: type=1326 audit(1636474089.218:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=6800 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6eca549 code=0x7ffc0000
16:08:09 executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0003}]})
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0)

16:08:09 executing program 0:
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0xa7, 0x57, 0xbd, 0x40, 0x2c42, 0x1608, 0x28df, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x18, 0x26, 0x10}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000007c0)={0x18, &(0x7f0000000380)={0x20, 0x23, 0x14, {0x14, 0x24, "73b05f74957b33fb17ad8f446a2fc68eb065"}}, &(0x7f00000003c0)={0x0, 0x3, 0x3a, @string={0x3a, 0x3, "808fead0b7792a94d0a76c4d72a3dd2dbed78bdd6647c43a4d0b3ad708d3d60f251380e1483724b5546fb2327bc8aeff7aa3b144f15d4aa6"}}, &(0x7f0000000680)={0x0, 0xf, 0x108, {0x5, 0xf, 0x108, 0x3, [@generic={0xf1, 0x10, 0xa, "9864edd613aff3decb181f1b686e94b20d22b67423b420568585276245d55d69dc6cefea6e31fa42f915a8dd02feea8ffdec9a6cc8799ea576f7adec75c86062ae7e8ce145f28c98a0a2f610da223aa0568fddf7a961c91c79e59175a7560f1a516079bb023dd308eadd2d912c148d566e2de03f057a6a2771e7edfcc4b783fd1537f59b8657820f4f9e90465c0cbd6bd0dfb92068357dc130b0705dfa55b62526035bd39829814d5b4c40e43dd231105e49f3200addf5d1db899f40c8c9521e71eff17c16588b5c2f354fe07997fc78a32f33c261754fa2f71b32a3265f3cd904bf67f23b8d5b0815cfab62b737"}, @wireless={0xb, 0x10, 0x1, 0xc, 0xa, 0xcf, 0x40, 0x6, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x8, 0x6, 0xfffa}]}}, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0xff, 0x10, 0x80, 0x4, "c074cf8d", "1c2b06b1"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x1, 0x4, 0x80, 0x8, 0x3ff}}}, &(0x7f0000000c80)={0x44, &(0x7f0000000800)={0x20, 0x13, 0xa7, "6e86a640a75d0a55dc2f18c5f28233282809ae6a3ddacb52755cefdf8dab4afb9e80c6b40d52ae1cc5ad87405cf4145030192b481505b7c6fa3cf166108bcd5a1de4efb0e749c9ae9bb9f1e596d6add0c29c0fbcfdb4097d4ee9f60dfc107c3ed15a947f355d21984bd72bc82ed0bce5f5e06a5a4b74715df802f16141414d75c21227ec2062830adbfad326c6556bb4679662913d1f2925e37f4113f94c1e7601ae6af5ad6adc"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0xe1}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x140, 0x4}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0x3}, &(0x7f0000000a00)={0x40, 0x9, 0x1}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "24fb"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000b00)={0x40, 0x17, 0x6}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "5cd9"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0x40}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x20}, &(0x7f0000000c40)={0x40, 0x21, 0x1, 0x2}})
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x40, 0x4, 0x73, {0x73, 0xe, "0ff8a30f50bddad5b6b5f83e3e28640aa8b67473629f37c639424896ee6264dc0844b6d28ddc820e5796543aaa91f2c9144a594844ae6a38539ebcaa261b51d863abac01c66e47f4fd4a5e3c5654e93ecc44a1a1e3874d63345c76b270d28c024c6d6554a7769ac549ee012ef4de85fa42"}}, &(0x7f0000000080)={0x0, 0x3, 0x7a, @string={0x7a, 0x3, "e9577694f5609ee0904cf8a804aa304443eace81691e0672a591e2c4f7a0d1fde03d75dd41c93e26f347e5495fcd84463e21f61d8bc86805c444931988aa1e130666dc9bf85ed4b567e579b8aec95e8ebafc8ca42f515e4b3410936e65fe283495b0a33cc989d5a96a77f73af386d8941c03fa8009475f55"}}, &(0x7f0000000100)={0x0, 0x22, 0x10, {[@main=@item_4={0x3, 0x0, 0x8, "ebb06deb"}, @local=@item_4={0x3, 0x2, 0xa, "c6eaf77f"}, @main=@item_4={0x3, 0x0, 0xc, "2f64a65d"}, @main=@item_012={0x0, 0x0, 0x9}]}}, &(0x7f0000000140)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xff, 0x1, {0x22, 0x296}}}}, &(0x7f0000000440)={0x18, &(0x7f0000000280)={0x20, 0x17, 0xdb, "c88b68a6e34d0b1e87e8fd4e0e7ee98acb02171f52e706a4104bfe1f65188180dec9ac739f21dccdb9277afb3bda5d1f0bf51042ec9187bd2d5846f808ef677a59952b30532c49a9f71fb099b70921dc73dd526386f52d2d25dc61efe8ea1041d457d5385da6738d81c34c545c062fedd3ad991fbbd7aef2308c12495110b8ee4b94662c345bc2fec0ccb6af4a75c110c5dcaef446e8dc03f66398718bc52438223dec8207c523a0383d5cbed713228f5454adfc3006858ba3ad4d8bd2af34984f88cec149106bda8134fe5c541fb8a11cd5a99a3526d2cd67855d"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f0000000200)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000400)={0x20, 0x3, 0x1, 0x4}})

[  220.000398][   T35] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  220.360830][   T35] usb 1-1: New USB device found, idVendor=2c42, idProduct=1608, bcdDevice=28.df
[  220.370329][   T35] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.412011][   T35] usb 1-1: config 0 descriptor??
[  220.453303][   T35] f81232 1-1:0.0: f81534a converter detected
[  220.663663][   T35] usb 1-1: f81534a converter now attached to ttyUSB0
[  221.471784][ T6804] chnl_net:caif_netlink_parms(): no params data found
[  221.747079][ T6804] bridge0: port 1(bridge_slave_0) entered blocking state
[  221.756078][ T6804] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.765961][ T6804] device bridge_slave_0 entered promiscuous mode
[  221.784310][ T6804] bridge0: port 2(bridge_slave_1) entered blocking state
[  221.792644][ T6804] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.802486][ T6804] device bridge_slave_1 entered promiscuous mode
[  221.901113][ T6804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  221.921792][ T6804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  222.017446][ T6804] team0: Port device team_slave_0 added
[  222.037037][ T6804] team0: Port device team_slave_1 added
[  222.120313][ T6804] batman_adv: batadv0: Adding interface: batadv_slave_0
[  222.127384][ T6804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.154853][ T6804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  222.175442][ T6804] batman_adv: batadv0: Adding interface: batadv_slave_1
[  222.183614][ T6804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.210052][ T6804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  222.308278][ T6804] device hsr_slave_0 entered promiscuous mode
[  222.325426][ T6804] device hsr_slave_1 entered promiscuous mode
[  222.335905][ T6804] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  222.345970][ T6804] Cannot create hsr debugfs directory
[  222.600024][   T35] Bluetooth: hci1: command 0x0409 tx timeout
[  222.748739][   T35] usb 1-1: USB disconnect, device number 2
16:08:13 executing program 0:
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x10)
r0 = dup(0xffffffffffffffff)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={0xffffffffffffffff, r0}, 0x10)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
write$P9_RFLUSH(r0, &(0x7f0000001040)={0x7, 0x6d, 0x2}, 0x7)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x0)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f00000022c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002280)={&(0x7f00000010c0)={0x1194, 0x1, 0x3, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFQA_PAYLOAD={0x1004, 0xa, "3f3a6bb3b847514d37dd9c5de68adc0f79cf76efb6a5993e1023e660697d85891878414de4bb70db67a6ab860257f966d2e7a0967d98bb162d94cd23b2859807a07a4854f2410124fab71c63f4a346cbb39e38c024ace775a0be4c7d0c70fe1f7ab5cc3c532a250929697b0c9d846676a13cc7b71f974e4a818535b2f746fedffb0756a95d2ecda6d221234ecd72ac34a6db720d312306133a8cbe27481ca5f05382333d7a4f725b3c2b8c4d390729a9d5e664ff2b20168a82505172e8c000815e45cd7e455ec162542224c04ce1316c5f56bef20810b2c6f2174cd949ce2cdf3f52c6263283b15eccfa79da92309550416033855e127dbbc70f4cc1e362af2330420469628e8371a3094c47dced3f61fd34648aea00dfb85100d623fa99534d57b1e222461f3a226fb0dc84ab81bec4aac25eeff309ca2bae67ce01af787fb405df1a8f728d668a70cbcaa22017b288ec4394eab4e5e7f5046b9826b7a41a016002b00dd3017419f1a91d545bedce67025911cff3417d16c5675ab0925e4a6ad57ae4d794c5604feda83fe1c6a84260778da418c6e9a13bc75b6278b36011d2fdab34a6b568a30ca8f2a92d2624e800d51b2303302c98570304d0336781b5055dfe5a039be4aa8cab8f77ccd03144ee39474342a88e5a24d825152198ca0eff8d8c50a9c67f58fd9fecf221469413904e4bf1a6c2989435e6420be45f0d7643112622084e7687757951d7e31663d8ec6a946e4e33cc08c0bb6d2818beb55bfa58d80853b339f8dd7973ef6ff0eaa76256508e9451540686b879173aa0253bdda31027821950143156814bb97791d2fc10db6bda6b6b482f29f3e723ea005af1c358f64d3205321ed3a0c87eb093b393d0d6f166b36d3f843dd70987d1e077e7df44a7f58b631de5bc70ed5c078cc51d517611617050db8ee4bacbf1675eb0e2dabfe29759c80d9bf3e4bf561cfa2cc571366b58529cdd44cbf570b59e244463b5a158762e5536c2c07e106eb8cdf7564124b57a9bea2f2c12e0426f13ce113ff690f1a17175352d45fb74e39445feb4da009981cdcd9293895d143b3eec84661282896cf635f3d060739045eb88b64c2a75264d2965010ac6cac4bfa316e537313813b3adf52f5de3df2e74f9f021bb5117cb10646500ebf5c54c383d1cc9e7b51d77c11802b2d3813254aa6a36757c3ed6968595970bdb41a3432e1c26b4023f1445cd69efdcec39763ac4102962572628e3e04d11bd841ea9c4c31703e10a45b3f93786ed90ae34195bb50990a421aa3e349bff558fcc4c8b719cd48640cbfc6c0583efd6da4c59ae5cec0919e79c256eaa967d40bd11078b0a77fa37fb8cc721433e59c6b6ceede849cba36c8c47bdc6714bb8ab6bfb291b2fa3cd0238ccd126fc4940fb391cd451c20818552e89cc9aa8b78a12b1fd89a7742743a618fb5f0ea64fe970da3b85338b3b5f26ec59823685b9988e8cf6d531a6f7c6a08d144a8579c232d4f1ac9a3e9694f1e7041e7f747bbb4208190783f901c73e07efaf47a1c1928fbc639fd7e7e792cc51ad1833a7c4395aac3899158c16b3b7e17a87a360dfe5fc1d0c852d18865991f5121e97ad63789a72b0985a618ef97a6c24ba302e7b961a46ef37f70e18b4adbf66385bd4484a8b8c7449284c53fcdb446d4832d1c04deb1387e64d9745e92da78350a6684770ef3805033f41d146ec640baaf51cbcdd9bb05f90b2d009ba0baecacc62b888f6ac994bf3a6f7701bac1a546b8b64bcfcafd691286b1677362f93208a43e2886c9a1c891dd7a0432966c8380949af32028097ada4e148fe90226f6b8932ca67f9ebc7b5a530f6e9295fa48aa1fbdaadb30fcf514d75e59f5ec5bef7cf38000014ac6101048ddcadaa630227faaf7016ec3177355f02f7dc960c3dbbc9afe1238e5f224fecfdec22257f51b7bf9abd13ba6f4d7d980ca6d2023b6e2ea4fcc9ad084afd27d24ff1d82a6f762c4356aa61106dc9d0937788d588e99b2775d2fc3fdffc1b31e4fc434656d177a71c56d396614d3e5ff57c7cf6be3350c1ab1ec85656e4f7efc88990c6610fe2aac365eb36b160cb253f797a06e2704fbc31d2d8fd09ef59347e3a769320beedb910805cef0ee43d477f0d02ac79ab503cfeaabfffbc523fa2ddb4ddb34cbd705e1cf6486677437468e3cb348c4d434d655e78f345b0433ea9b52febc0f9c71efc32ab7509c0bfa296a28e79c18c96eceb47686c26665f7bcb7a68a4896c61fd8bc9f5354a4010e57dd5564fe4c600918bf4955727a0fee275be07761f1f3c25391bd856310dff3a5dd5208827824c6baa3af51f76ac49fb4452cab29d98a3c9827829768bdfdd3caac110e685c9127495abb8d165a31987d0538c794f148fd84a6f17938ece9c60bb09cce4d613a77e8fdac31a0df00d85d77582922faea0add8650bfdad5273f17c1ce110e9575621004170c964d02310647fa00873804e950aec604e6f184fde902b8c522a41e0242515e4c8a77b9a598670cc61fe87be19986ecf6b0debd0d926f075f9c6e1f440c005853eb955af4878a7249d7b79b24ef85a7a34d1e160a2ce5b8539a6cba792ea5eeb336cb6590a963c9afe956da7ea5777ab2468d63cf0a33791e0dbb9008187ceab7da2e45c990355759a784b8f389bd4a3c859a838ac8756070607418fa7ae6be63f4f1cd4b4e08dcb09b18727d60da515a3d3857c9a49ba38691163569b98bb79298a3840de40379ebe90e8cc396e441bcebe961a4ee6d34a680f5c524ba2fa513a21eef1eb4cb8f5ef0956645f3d2997d7d57c3e8b1ee31b54946b1cce51d42eb906f8509bc3cc0eb93b59ce836557ebd1dad199f3a4dc0776905c1b760adce89f2d6b3380c38d6fd3a9fbb887417ce87a29f4b9f94f02ecc31f32d880c5b73725c1f2e3bfa2af803b5bd6c39e0326f0bbef1921d488f2222a7fecc86e80ca32773dc03a942109d1185a64b960a26bbbda4151f3a18aa33e477840bee4e90237abe0ba16dece5815452d98295e9e7e1611f5e559c47dcf8902e8bc99f59613c8e8789ce6e161b742c7ffcf608bda59e1ef000fbf6a576e078d964873131e75123c0933014714b25fc1d67361e1648ef0c36a9a1ebeb397878384907a582e049c436fbc79900cee4a6a884c818b677b50824721284fc16d411d7256c10e9933490e831e7782dde896b9ec38359e477b4bba98e434fb5cd4b394824dcd642e1e295174f35969463055578b203566e6216f776ec9cbee898f7146e6507a48620597f56a377a906ed1951c71c0dfb0e5d0b5e57834e360dc83c06a93b2f8c4df74ef548b122a855428fb95aace81d25be118a1908d9fcac0ad5cfc5a3a89df7687346256dcaa7a1257043dcf375a5752b86d4497b0943cce4351dc2621d9ea6324bccf66a52ed16ca16c047b9a0a914f11489ac9d83fb53ce6f1e893a7624beac58d4ea55a1a55a6f26d9cfb3e32cb8aca997a134523a47ea6923a7ad6f5e8af0f0c93a7c63421132931ffce14c9162dd1cdf6eba76801e713f451ac18f430f74dbaa09f1cd609dd8c76f2a4992cceb4afd61c94ffb9c13d1552a81c43d3cd5ac0a4d5f3d9c27432fb92447d4e873ca949ede7e88f413f3d919965b3dd6cd861375b91655fb518a77f7f7b9c4ab0b771fadc6c71a8c399748a262a888e8e3185148abcddc8cfa62dea3cfbc362355e1ccb46c9262505cf615b9f8bf2c6448bae4480460dc30d6257308005f813c2ca5b5e015d570fd5f97cff1a246fa8b71f0e8ade2e377b6f36ec4f7facb2eabfdd1054dfabe9877ab6c48fccecf043088b5b8289865a046d60be0eff4b4d4c0805b6a5a0ce9f99fca4f8e539e6ddba221bcdc27579352924f2fd93ebc0d3a3359467c6210278018bb1f19c2b19bb68095f29f5ba4592d189cab929dbf4210ca4ce8ad83cbbaf5e862d77e41a0d3a18ac4a44c6ebdf509546ce739cd7291b7d25375c4b840f701197760bb97e17d4f7a6b540468d5ca462204e2e87fb22b13469d353b2baa3b38eaf7685e89cf1d15e594aebbb085f8be92ba0820a431362bd2dd5acd0cf23a011c32c7be07ebf4990c6637c461cbbbc7f8f4cffb7b22aac272c2aac1ebbee10d9b297f2c9776656725b24cff2536c95d2a044cb121c8ce44e589df0c46f56621adb4bb9acba125faaaf9f5100a96bbe130dcedfbf2476bb7115636c74241913face2e0e1a0a5a86d62b7e8cea08f6aa4a130efbfd22081d371175d43a070d2ac966f3364e6f11e1ac8d99b8239587a7a7d2f8535ea1a7b3c6f959717290841ed286c6b0aa126f9b84578e941727e215c9b42d20e581164b6de33714dd41fe25733ac57405d751ff1166d54668de2bd5a432aba03db94d2c9e0dd3870d3c78040d64076223d9a73aa56560200e5259bf89978c03fcdb418bfd2d0df9c1d89c5f44aa69b6d5b25f56358b879551a6c2fc6286f6270e24fb0dd1cd70ad6a2e054bfebfccde991c660718008e6208b0214ec5f25916714414b1062acd1eab5fc515586c14cff23ca41a7380deb17a804c1f32c10836f6a87d749408cb6a98c9cf90c4e36e2a7e4b163cfffcc4a7ecba32dd215c265e8f20026d48a187dc8e485f068044900d162291b0d55720ffb2683e889a005243b5fb22fca18a9eee98cf7e0f225d97871f4a91eabc5155dcfaf8eb888b3245d4b0f55fbba3890d3435e6c67b126ead1259cc5fd06e89b1f98a5776284966375960c6aaf535a5cd9b676b572c61562448cc5675b535fe37c94153cf4a8ed71d303d17fbb4de74ef395dc901b846b70f711e091659374871d4e5a12831a6131d058dfecedd7c6ce7d2196016d394d992b0a526f9f3b4870db63ac7d2686b4ced54dabbce9b71eb53401cac63affd3c7842b36315720a501589270beaae40f9ee1f12059f6147482caf809d205de35e3ce8b4b5f10e3bf885128753864f2010e225dca9f73e692aa9e363dbca0c8fb84fefd5f57675c96d707a30fade32a7c50fa229a207e0097247e46e09cb5864e6bafffdc85bccab40dc9e97038d921cf03d57ac9505030020bdc901130ce557b9415fdf0a7c36e72116f73c2b91108f2069aa3462e997e2e35deb009882408e3d9c86c972a75783ce5ef130ef12feff59a982e9730a3cae8f6fa95ac571a1d15488c743acb27f0b6d0906603fdfca6c73d7f5f23455833d6e5d4f15e3c69c6c6c8823dcdffde04351b350b04536bb063f79cf6af2529701880e1bf3b3cbdfcc72ae102d82f67300d20c6192766bec478940741df4ee13a0174ad761c36b2f59aab0c3d1725cd5edcfde7e56429a83e3d9864a0db0c3c2dbaca6ef408c9e850eecef7c4242b1103ef78db293842a90fee9cfc134e9a77d9f968b1cd9f50f369ebb9501dfcebc7a60e823c265bb29fe196c1cb0a77a3cefd577aa7468679451758b1abba2c3d20500c5c7aa8434f02d427d18d080e278c4d76ffea4409c3212541f2e80cdc512bfee02e310543e201c41e1805181eb6e49e121bdf6c1afff345b97e1c8cd7b5ec68d046b69a2454efdd4162938bda368550818a13eed27bbf138198531c15204c30cee67e8a78c0c1002a3c5e8ea87d4338611ec1bbc077297112a884626e0a888963852506ec2fe59b6e9a3ec282836d4e8ef0b692b932fb1a456fb5e7e334e265c11eb2f7889f5114277af3ec1a04fd842d5a1f8de6c162e5d758a2c7006a37849e963e1b612f40ad2fc40ca3710de22fb9237aa5ef63327cd772b8325495cb1ceb420b328c3a450308ddaa7077e3004c28d97a460"}, @NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_VLAN={0x44, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x200}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1ff}, @NFQA_VLAN_TCI={0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xffc0}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xff}, @NFQA_VLAN_PROTO={0x6}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x81}, @NFQA_EXP={0x11c, 0xf, 0x0, 0x1, [@CTA_EXPECT_NAT={0xb8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}]}]}, @CTA_EXPECT_MASTER={0x60, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}]}]}]}, 0x1194}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000044)
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0xff00, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000001c0)="f4001100002b2c25e994efd18498d66205baa68754a3f5ffffff020f00000000000000100000000021000000000000009d", 0x5dc}], 0x1}, 0x900)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "afc5aba04013fa47c8960ce67a2ce379fbad4dc94bfd8e5208c2e848730793523fd97db00c4829fe8443b17056cfc464b99f4b8a42bf4e99fd607d48a5ee92a623b0d2f0320e7ff2968c2eb78cd331349cc6aa5779cb94f0364af349f2d43672afccf385e13ebdbfb0ae601db926047266070810d716f76f25be92527d39a818ab9ed627d4c96cfb9b63a87de65954a408a6cc7a06fd83d2e97d7001178a1650ef2cc988b8786fd41a19e13f2740f241e6f9d2b96f4bc811410f45ad1c490e71c2a13e0cab699357f087ff5bd043dad895a91abeb03d98b8512b00a23e317c7080a2c74f58457a7ba7206103c1c3dfb3226661992f69197313bc4ea69793da5ec323918605ca0774f5864075dd5e5dd87000170a6275bb7da3e8b518ff60f515fb64305598406d335f62e53bd66fc4214c828fddfadfa9ee167ecead0966bc69492e32d19b0f9e4b4a09d9044bb468899c78b50476c8d614f7504cd6c71d39b4ec6152576d9cbfca708fd5a731faaa867c2c6033812fbba2325dea5d6f65c6ab111ccae93d2dd6873d17892428d60c0bd101ad43b5629ff888b028064dfd971b189e0426461b08036ac3ecd2ff3e3e3a8644756a56c40e94aa72fca2f786ff25f150cea88fb0a8bf506969d41d317af7f1ce19d286cf2b1d4b3b0cf3c33229913da13a38d00b274d7e086982f7ad49bc6147ca9268fc0dd6eed51bf7a3c10aca9a17fa3dacb99dd994b4c06b2eab507cda5a95928f533c3ac615957f09f5dc9c489d29bbc1e384eede7ac0a13c04728c64f092af3161e04ee382b2c53a46fdf430ab66650f7edd3383620b330d993161e73dd94ce0abe6486e6ac4eca5cf0d184f4819f517710f9fab0437c702aa973462392a9e54fbefc78d59d748afc54cea60f9dd6c7bab2d40e6e4ce412c33c97f4a5ca60ca88cc7d3e8ba602f13bb7c30bba4f1e05135543684b768b5d97e3233e2c2f67ef1db0b3e4e5e0ddea636b0ee0779ca56a91484bf430a90b5c8fcf9652dfa61a5bf8720ce7de2bbe70dc5492596c7f5ed9bf3cac781f4b8f34d18d732370a1c403653de10cbee0a800c0efe39e82ad0830bd7d127f0cf1443379602f1c36cd06a8975cbdee9d962ddb53d1c131e196640fb22aa2cc1c57165c2e3cd7246625cdaf8599bd519df1cffd2b874f22f2b40eaf4acdc876f458574891af9205a924496ce29f2f0f0d208a2c7e7f7f48579c3de16e81fdcceaedfa24a02a77e1867527b6bd3eeb388611d3627f8c09299928fc3dfc12f4e2a7394aeb873e6986cefd7d74c259944beb491d7a7e99d12ae7d2e421c46d711ddc2beace37b4419a971a968a828494c86d08d2fd312321e95351a631ab1a67cce23063fd850bd2d1a67ad4c8664b7b71c2d68ff1a8fa70a81f7e39fd3950e5de60707e4bd1ad11b27440aaa4f3beb5277a9fa06f0e534f0d13c30635b3f5648d4b7c00abf4b48847d5e9526481a6c7b9aec720bc937bbf4429215601a31341b4753ae800e2f350de137ebed0f2740f667cdb93498ec750b13809b2ce520a71ade836114ac1c75d63af9bea8e70283ca5d8a3d293694e4943755d0f14f6c0387a4b03e374d1764d24f1a0b52315223e5f2632ee997279ff01c4122135fefc1cd2d4802593a9a8524822b41c124bf1012d0dc39cff4b5681743d355e75629591da6cae79f70d84a845087c90fed038e457ca2ae647cf0939461c267c1d9b8c8f450be9890da6a479557bfd36e5f097934d5a66bb504253b1d27f8d329f7b4a49d9bea6e9433e40ef26727048b2b9a68f71747361aa03a4a8cbf19245cdfa4716f09df5fd484221817b3c7ba223f677ea4a7e2966740703950fe48b43e3bccd9af862aa23a08c39ce8efa438d4e73bffb1fe033abb455855cbd5d62487e0d9efc1ea20c0064c701fad1530c1d27fc3317309e8046d22ab555e000a7cca80b92a739a72cd75bf3985a80108bf59661b4aec61078ef3746a2a82ecb65b0775dc7ee4ab63c9f1cc6599e553781c1a6dfbc4dbac4a48d512ae8cb450c316366d014780585651c2e9eed5c2a988692310491949f0af6dae8768cdd0fe1466e0f70cdf5df35b44f967236facfbb43ed294c86b50566ef4c0889afce027e683b2308e58a3a76a542429eabda70dfecf1f4e91f963512dc2167dd1f7bd70956a20d203ac45b9d6f31a95e553f3fe6982cd8529f0f740970f32e6b740ae4ccd2bd5d3e5e34cc7ad216fb8fd9d54b7ab943ba3f283f6ddef2abccaafcd1de0d3440b69f598e5b905e8f8d516737d0fe08173c2cb2c666be426b1eb8060f1e946931c11d60c062bcaf2c3b86b2fd3bc9630c4e4ec35c4600c7e97ac7a2dc83a1668da8b9a37923f0f879d23a9780cb9d7a36a2fb6d2e6b2649761dd4270ad65efa5013b1515a35e0d5ff4f18884c6ae0e6bfd39f0cca40a957f8756cd820d187a79b99013d0bdfa2ee6bac6eb3b1dea096798331bf2d1c12145db2006148bed1dc79dc15696999958c72f5a0dbe7e0c69a7a77241a12880e13949da9101017a62e52648a8aea02d39cc33efc85547443aa45724604828e7683b6f0b2979b5b6652a5c854d1e41b6d827e99c2e4c976e203c8bdf4c1ab9f333622694f31bc44c8bd48cf0488f1ee14b835da1d8a23545e55e70a6d2ecb02df020883320a33397343c6018333b3646cab8aad3049714b9a368d283907ab3e8c1313333f2bb2d1b71d56b91bd9cbcef0247865a48631d6c73ea4f158a4c36967acacdf578754de3dd5f84441e77bc06736be4d1fdef86dd26c124c56c891e8c637b819f46e685d02bd8ecb663646716d80a3fc0dc768316d7d3dfd4daff32c488215a25f16d27d34511dd74b2ff9d348a121241baeb670409383598863143e3e12ddadee6c20f4222a015a9b9c1f97fd1a32337b054ab89e486f66f61f19e4f9ae8549bbd99545bab1a9c6403be3c842c61a2937ad57569f437bf25f09e74afaa98b083980f747ef1d36d1a37efc22347578b10529a28c21caa231de9ace14ba362012e989512cab00530735217a686210ab66e8714a19c1901c28a082b7bce55fc9f6214b2e4e2e4793bb867dd42600a31e931d04673d9b0ac785e14b379ab19bf1136286644f0b07f5445ad70063c7f72a0e469f5852d645121507185e2a12c24576432efd8cc7143d3fbd272b4e87f2634edcf1aa21c01f0bdd8eb28c4749470b6baeea5b09a7fb25e7a0c6d3e414c2544049dfd27ff77b040934698b201ccecf054b1685156a90b734aad29905143d61f6262ad701dad20d905755dcc8eff58faf1babd6c25039d1609401febcc3555ae40d6da845dc2434eb856d57f5ec90882a8a705c3923191f815bc8a37cd77daf2be42171bdd269945aebb6070a35d91321d1253158aa842f3cbcc89da1a18d651ca84dfda4d6f082991bb7aff0ec19116dfe73cca06c7768610a84ae154f53e98ceafac21041f705888d220d076c330c5dc4c9593fead3d9cc1ed3394c52f7660ead85dac294f202526325e9ef65c07a6c1879c8cb96ac569558ca8ccad5ad7f75bfc46a87c3544c76375855b7619b25a27a9fd3613f16d817a74a717c7bb1acbff1e0b112484cfc7e9c74203b80c191abd79ebe1055efcf55f0b039f256db0bdee4338467818ced1e0d3ccb5f4cdc4766649e87e9cf69ad73c6adc74a5993e19d6673ed443f9e372f10972e474ee907ba0aefdaeca6f9fb800b7f40a0a71db493d940f09cdcb662a7f47ff6e19fa51b8d98051593d7d3b42fe70b5df414680c9e271beddfa109eb255bd6ad974026d710e63d83b86680c6c2d4ff8ff2c70642490b55ca5be3e879b77ae1cf98ceca5c230dd232a12d88c8a9078954418ce4f4117777458afa8d15a866dce7f382731a5f980eb285c2f8094773ed9e4bf0112762dd52939a6bb2d4f7281077621a9fa390b0ee0298df571fc2e41b8e666a703e32b6d1cd6e6c06acb962eee533187cd50f36662fbc2a3d915755acd7f822badfd84b3ff194556804d66e5eea4cb49c415f0dd1c05b7bbebc9a35288b4341b01b24580eb04808cb472c3642e50091550f8077b18d853f5585d7f5e48b430993395199ed5fc257ab033ff9969f6d6f6622ffba5e566b3d83eb1d8a8d851b1ef1ab41a87f16f075d5741b85c3c44de9a4172849fdde3e09727a8f375a9370fcab1ad48e9e736fecab6c4c302cf56c834f20dcc9678efd650379c5701e6e97166df630447f80051ab1d3b46f0e838a2aa006c536b8dfe00f29c9d261047e9980e79fb29d95b389864581150f23de7a65017f25d699f30011c423df8bc635c6b6041c8e8b72fe548fd4ef9cf4f112eaa976ddf30c0011a84245d2bb9c9c3b382a8e8b82951128b4ae3c8ff47d3f8c4db8ad26e842140b9830bc0d6d90eb29bfea34120113785983afb824f3f28aefecee775285b42b6fff5ee0e2fe76b7cf60c23e04f16128d3c5d23bd4125c26201c04ab4f10f047fda5b226f103e02388f6387b4507334eb5e7e81aa1f85a45ecc1e766580fd03068d66a13493ab95d0e1dd1db318d9c37421ddc40a18b1655a1d26a046515b4697b1a59e82b67cb70cd9c8a37d2fa1dca045ba3d7bb6e4576fffe4c31eb9e456a1367e8cee1cabfbcf297f2273e2dd1249870f9fa4f15a91e9bcec0580885f0214e1a0a4d1866148f16a570a75a8a7ba0f5e6e88b7b9ec15b6ef49112272a50ce242bed487de7165932afdf9d98457a418b0c3557fe3988748fbdab34de13815796fbacb773f3e20b8b7c5ee00ff43ae5ae674b15a3357e184d344f8dd4c2ef260138eabf8b190f70f14a6d1cba09677199dc05fb9a45dd6bead7dda74d4b6790e50df3738329cf341e42c6d4739a40e1ec431db6fd6f52ca604d8279ca42e8f39a3196a4b4d710e5893e82028ab01e908861a1a14f8f8dae6d9f72e15ba93f19bc81635228976f91a8bb759355fef3143bd2c55d18150e6ade3d02ad379d58742531ef9ef535fbda821eeff773940d6c5a894d6cea779e840aec3c094f782baf52a1e3747976703c8f8869db2c971473813ac57699489309fb99e4a17413e20a9e6aea6250fbbd3ff2756287527ba9e0d33eedb10cdce599d35d4fd652df0e4a319a25ff2a5f4e071e00953af77ba944e11d413dcc7327c085f07dde15e69e3de5c03b6ee52f0bb3df03486c1c6045ed8a810dda5c801a226b9ac13b0fb6197919dc21d8b726e2089405565929e25c9055934a7377f0694b71d6ffedccc5ae5c8a1cff2b248e4a7c7a5a71947aedbb428749f9cb98a76200c267b5d4984eeb8e8fe742949fc6375d0f3fdd87e2ccd212df9ebd477474bd9fadad56c4b44646e0b9ee09c6510848875116a847b46adc1e5c1d5c91874f8bd8ac7975480753d47642b4ac96a7a3c4ac91ecb77d86ebaf6dbd3"})

[  222.813751][   T35] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0
[  222.823292][   T35] f81232 1-1:0.0: device disconnected
[  222.825781][ T6804] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  222.924529][ T6804] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  222.993167][ T6804] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  223.043061][ T6804] netdevsim netdevsim1 netdevsim3: renamed from eth3
16:08:13 executing program 0:
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x10)
r0 = dup(0xffffffffffffffff)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={0xffffffffffffffff, r0}, 0x10)
r1 = socket$kcm(0xa, 0x922000000003, 0x11)
write$P9_RFLUSH(r0, &(0x7f0000001040)={0x7, 0x6d, 0x2}, 0x7)
setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x0)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f00000022c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002280)={&(0x7f00000010c0)={0x1194, 0x1, 0x3, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFQA_PAYLOAD={0x1004, 0xa, "3f3a6bb3b847514d37dd9c5de68adc0f79cf76efb6a5993e1023e660697d85891878414de4bb70db67a6ab860257f966d2e7a0967d98bb162d94cd23b2859807a07a4854f2410124fab71c63f4a346cbb39e38c024ace775a0be4c7d0c70fe1f7ab5cc3c532a250929697b0c9d846676a13cc7b71f974e4a818535b2f746fedffb0756a95d2ecda6d221234ecd72ac34a6db720d312306133a8cbe27481ca5f05382333d7a4f725b3c2b8c4d390729a9d5e664ff2b20168a82505172e8c000815e45cd7e455ec162542224c04ce1316c5f56bef20810b2c6f2174cd949ce2cdf3f52c6263283b15eccfa79da92309550416033855e127dbbc70f4cc1e362af2330420469628e8371a3094c47dced3f61fd34648aea00dfb85100d623fa99534d57b1e222461f3a226fb0dc84ab81bec4aac25eeff309ca2bae67ce01af787fb405df1a8f728d668a70cbcaa22017b288ec4394eab4e5e7f5046b9826b7a41a016002b00dd3017419f1a91d545bedce67025911cff3417d16c5675ab0925e4a6ad57ae4d794c5604feda83fe1c6a84260778da418c6e9a13bc75b6278b36011d2fdab34a6b568a30ca8f2a92d2624e800d51b2303302c98570304d0336781b5055dfe5a039be4aa8cab8f77ccd03144ee39474342a88e5a24d825152198ca0eff8d8c50a9c67f58fd9fecf221469413904e4bf1a6c2989435e6420be45f0d7643112622084e7687757951d7e31663d8ec6a946e4e33cc08c0bb6d2818beb55bfa58d80853b339f8dd7973ef6ff0eaa76256508e9451540686b879173aa0253bdda31027821950143156814bb97791d2fc10db6bda6b6b482f29f3e723ea005af1c358f64d3205321ed3a0c87eb093b393d0d6f166b36d3f843dd70987d1e077e7df44a7f58b631de5bc70ed5c078cc51d517611617050db8ee4bacbf1675eb0e2dabfe29759c80d9bf3e4bf561cfa2cc571366b58529cdd44cbf570b59e244463b5a158762e5536c2c07e106eb8cdf7564124b57a9bea2f2c12e0426f13ce113ff690f1a17175352d45fb74e39445feb4da009981cdcd9293895d143b3eec84661282896cf635f3d060739045eb88b64c2a75264d2965010ac6cac4bfa316e537313813b3adf52f5de3df2e74f9f021bb5117cb10646500ebf5c54c383d1cc9e7b51d77c11802b2d3813254aa6a36757c3ed6968595970bdb41a3432e1c26b4023f1445cd69efdcec39763ac4102962572628e3e04d11bd841ea9c4c31703e10a45b3f93786ed90ae34195bb50990a421aa3e349bff558fcc4c8b719cd48640cbfc6c0583efd6da4c59ae5cec0919e79c256eaa967d40bd11078b0a77fa37fb8cc721433e59c6b6ceede849cba36c8c47bdc6714bb8ab6bfb291b2fa3cd0238ccd126fc4940fb391cd451c20818552e89cc9aa8b78a12b1fd89a7742743a618fb5f0ea64fe970da3b85338b3b5f26ec59823685b9988e8cf6d531a6f7c6a08d144a8579c232d4f1ac9a3e9694f1e7041e7f747bbb4208190783f901c73e07efaf47a1c1928fbc639fd7e7e792cc51ad1833a7c4395aac3899158c16b3b7e17a87a360dfe5fc1d0c852d18865991f5121e97ad63789a72b0985a618ef97a6c24ba302e7b961a46ef37f70e18b4adbf66385bd4484a8b8c7449284c53fcdb446d4832d1c04deb1387e64d9745e92da78350a6684770ef3805033f41d146ec640baaf51cbcdd9bb05f90b2d009ba0baecacc62b888f6ac994bf3a6f7701bac1a546b8b64bcfcafd691286b1677362f93208a43e2886c9a1c891dd7a0432966c8380949af32028097ada4e148fe90226f6b8932ca67f9ebc7b5a530f6e9295fa48aa1fbdaadb30fcf514d75e59f5ec5bef7cf38000014ac6101048ddcadaa630227faaf7016ec3177355f02f7dc960c3dbbc9afe1238e5f224fecfdec22257f51b7bf9abd13ba6f4d7d980ca6d2023b6e2ea4fcc9ad084afd27d24ff1d82a6f762c4356aa61106dc9d0937788d588e99b2775d2fc3fdffc1b31e4fc434656d177a71c56d396614d3e5ff57c7cf6be3350c1ab1ec85656e4f7efc88990c6610fe2aac365eb36b160cb253f797a06e2704fbc31d2d8fd09ef59347e3a769320beedb910805cef0ee43d477f0d02ac79ab503cfeaabfffbc523fa2ddb4ddb34cbd705e1cf6486677437468e3cb348c4d434d655e78f345b0433ea9b52febc0f9c71efc32ab7509c0bfa296a28e79c18c96eceb47686c26665f7bcb7a68a4896c61fd8bc9f5354a4010e57dd5564fe4c600918bf4955727a0fee275be07761f1f3c25391bd856310dff3a5dd5208827824c6baa3af51f76ac49fb4452cab29d98a3c9827829768bdfdd3caac110e685c9127495abb8d165a31987d0538c794f148fd84a6f17938ece9c60bb09cce4d613a77e8fdac31a0df00d85d77582922faea0add8650bfdad5273f17c1ce110e9575621004170c964d02310647fa00873804e950aec604e6f184fde902b8c522a41e0242515e4c8a77b9a598670cc61fe87be19986ecf6b0debd0d926f075f9c6e1f440c005853eb955af4878a7249d7b79b24ef85a7a34d1e160a2ce5b8539a6cba792ea5eeb336cb6590a963c9afe956da7ea5777ab2468d63cf0a33791e0dbb9008187ceab7da2e45c990355759a784b8f389bd4a3c859a838ac8756070607418fa7ae6be63f4f1cd4b4e08dcb09b18727d60da515a3d3857c9a49ba38691163569b98bb79298a3840de40379ebe90e8cc396e441bcebe961a4ee6d34a680f5c524ba2fa513a21eef1eb4cb8f5ef0956645f3d2997d7d57c3e8b1ee31b54946b1cce51d42eb906f8509bc3cc0eb93b59ce836557ebd1dad199f3a4dc0776905c1b760adce89f2d6b3380c38d6fd3a9fbb887417ce87a29f4b9f94f02ecc31f32d880c5b73725c1f2e3bfa2af803b5bd6c39e0326f0bbef1921d488f2222a7fecc86e80ca32773dc03a942109d1185a64b960a26bbbda4151f3a18aa33e477840bee4e90237abe0ba16dece5815452d98295e9e7e1611f5e559c47dcf8902e8bc99f59613c8e8789ce6e161b742c7ffcf608bda59e1ef000fbf6a576e078d964873131e75123c0933014714b25fc1d67361e1648ef0c36a9a1ebeb397878384907a582e049c436fbc79900cee4a6a884c818b677b50824721284fc16d411d7256c10e9933490e831e7782dde896b9ec38359e477b4bba98e434fb5cd4b394824dcd642e1e295174f35969463055578b203566e6216f776ec9cbee898f7146e6507a48620597f56a377a906ed1951c71c0dfb0e5d0b5e57834e360dc83c06a93b2f8c4df74ef548b122a855428fb95aace81d25be118a1908d9fcac0ad5cfc5a3a89df7687346256dcaa7a1257043dcf375a5752b86d4497b0943cce4351dc2621d9ea6324bccf66a52ed16ca16c047b9a0a914f11489ac9d83fb53ce6f1e893a7624beac58d4ea55a1a55a6f26d9cfb3e32cb8aca997a134523a47ea6923a7ad6f5e8af0f0c93a7c63421132931ffce14c9162dd1cdf6eba76801e713f451ac18f430f74dbaa09f1cd609dd8c76f2a4992cceb4afd61c94ffb9c13d1552a81c43d3cd5ac0a4d5f3d9c27432fb92447d4e873ca949ede7e88f413f3d919965b3dd6cd861375b91655fb518a77f7f7b9c4ab0b771fadc6c71a8c399748a262a888e8e3185148abcddc8cfa62dea3cfbc362355e1ccb46c9262505cf615b9f8bf2c6448bae4480460dc30d6257308005f813c2ca5b5e015d570fd5f97cff1a246fa8b71f0e8ade2e377b6f36ec4f7facb2eabfdd1054dfabe9877ab6c48fccecf043088b5b8289865a046d60be0eff4b4d4c0805b6a5a0ce9f99fca4f8e539e6ddba221bcdc27579352924f2fd93ebc0d3a3359467c6210278018bb1f19c2b19bb68095f29f5ba4592d189cab929dbf4210ca4ce8ad83cbbaf5e862d77e41a0d3a18ac4a44c6ebdf509546ce739cd7291b7d25375c4b840f701197760bb97e17d4f7a6b540468d5ca462204e2e87fb22b13469d353b2baa3b38eaf7685e89cf1d15e594aebbb085f8be92ba0820a431362bd2dd5acd0cf23a011c32c7be07ebf4990c6637c461cbbbc7f8f4cffb7b22aac272c2aac1ebbee10d9b297f2c9776656725b24cff2536c95d2a044cb121c8ce44e589df0c46f56621adb4bb9acba125faaaf9f5100a96bbe130dcedfbf2476bb7115636c74241913face2e0e1a0a5a86d62b7e8cea08f6aa4a130efbfd22081d371175d43a070d2ac966f3364e6f11e1ac8d99b8239587a7a7d2f8535ea1a7b3c6f959717290841ed286c6b0aa126f9b84578e941727e215c9b42d20e581164b6de33714dd41fe25733ac57405d751ff1166d54668de2bd5a432aba03db94d2c9e0dd3870d3c78040d64076223d9a73aa56560200e5259bf89978c03fcdb418bfd2d0df9c1d89c5f44aa69b6d5b25f56358b879551a6c2fc6286f6270e24fb0dd1cd70ad6a2e054bfebfccde991c660718008e6208b0214ec5f25916714414b1062acd1eab5fc515586c14cff23ca41a7380deb17a804c1f32c10836f6a87d749408cb6a98c9cf90c4e36e2a7e4b163cfffcc4a7ecba32dd215c265e8f20026d48a187dc8e485f068044900d162291b0d55720ffb2683e889a005243b5fb22fca18a9eee98cf7e0f225d97871f4a91eabc5155dcfaf8eb888b3245d4b0f55fbba3890d3435e6c67b126ead1259cc5fd06e89b1f98a5776284966375960c6aaf535a5cd9b676b572c61562448cc5675b535fe37c94153cf4a8ed71d303d17fbb4de74ef395dc901b846b70f711e091659374871d4e5a12831a6131d058dfecedd7c6ce7d2196016d394d992b0a526f9f3b4870db63ac7d2686b4ced54dabbce9b71eb53401cac63affd3c7842b36315720a501589270beaae40f9ee1f12059f6147482caf809d205de35e3ce8b4b5f10e3bf885128753864f2010e225dca9f73e692aa9e363dbca0c8fb84fefd5f57675c96d707a30fade32a7c50fa229a207e0097247e46e09cb5864e6bafffdc85bccab40dc9e97038d921cf03d57ac9505030020bdc901130ce557b9415fdf0a7c36e72116f73c2b91108f2069aa3462e997e2e35deb009882408e3d9c86c972a75783ce5ef130ef12feff59a982e9730a3cae8f6fa95ac571a1d15488c743acb27f0b6d0906603fdfca6c73d7f5f23455833d6e5d4f15e3c69c6c6c8823dcdffde04351b350b04536bb063f79cf6af2529701880e1bf3b3cbdfcc72ae102d82f67300d20c6192766bec478940741df4ee13a0174ad761c36b2f59aab0c3d1725cd5edcfde7e56429a83e3d9864a0db0c3c2dbaca6ef408c9e850eecef7c4242b1103ef78db293842a90fee9cfc134e9a77d9f968b1cd9f50f369ebb9501dfcebc7a60e823c265bb29fe196c1cb0a77a3cefd577aa7468679451758b1abba2c3d20500c5c7aa8434f02d427d18d080e278c4d76ffea4409c3212541f2e80cdc512bfee02e310543e201c41e1805181eb6e49e121bdf6c1afff345b97e1c8cd7b5ec68d046b69a2454efdd4162938bda368550818a13eed27bbf138198531c15204c30cee67e8a78c0c1002a3c5e8ea87d4338611ec1bbc077297112a884626e0a888963852506ec2fe59b6e9a3ec282836d4e8ef0b692b932fb1a456fb5e7e334e265c11eb2f7889f5114277af3ec1a04fd842d5a1f8de6c162e5d758a2c7006a37849e963e1b612f40ad2fc40ca3710de22fb9237aa5ef63327cd772b8325495cb1ceb420b328c3a450308ddaa7077e3004c28d97a460"}, @NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_VLAN={0x44, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x200}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1ff}, @NFQA_VLAN_TCI={0x6}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xffc0}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xff}, @NFQA_VLAN_PROTO={0x6}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x1}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x81}, @NFQA_EXP={0x11c, 0xf, 0x0, 0x1, [@CTA_EXPECT_NAT={0xb8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010100}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_NAT_TUPLE={0x58, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x34, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}]}]}, @CTA_EXPECT_MASTER={0x60, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}]}]}]}, 0x1194}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000044)
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000040)=@nl=@unspec={0x0, 0x0, 0xff00, 0x80fe}, 0x80, &(0x7f0000003800)=[{&(0x7f00000001c0)="f4001100002b2c25e994efd18498d66205baa68754a3f5ffffff020f00000000000000100000000021000000000000009d", 0x5dc}], 0x1}, 0x900)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"})

[  223.555268][ T6804] 8021q: adding VLAN 0 to HW filter on device bond0
[  223.636799][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  223.646708][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  223.682813][ T6804] 8021q: adding VLAN 0 to HW filter on device team0
[  223.740870][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  223.751282][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  223.761293][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.768672][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
16:08:14 executing program 0:
r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000dc0)={0x14, &(0x7f0000000bc0)={0x20, 0x0, 0x45, {0x45, 0x3, "647bf184c352c1e4bbed91dedaa5eca640e6196285f10dbd685ee438dc385a1f174819391f07f81a2cc7436eb1085e70936c8b9ba480c619b6890d7882e9e27a01599a"}}, &(0x7f0000000c40)={0x0, 0x3, 0xdd, @string={0xdd, 0x3, "3c352536bb293e04ff8b8a7c0985be5a2e42b525f2b61133e592dbbe9da33ed05a94053f6bef6e2d839f445cb1d239abb78ec3d134b04831f785238f686bb0d07e9ee8279a5881dbaf950e2a74a932cf6a68326bcc450468e6e211e42077ea1ece01852222526795479433d3b2a4b3dce60da2d983beb7cadc8ff78f3b4616fb6fe1ea783da4458f12105ae03cb65fd26affb6c9c3449e7d406357d49d1c1d2a266fd79e032321b0e55860fe74784e464b616e62866e23e6f3ca3bfb5e428f685fc368310ed89977c66f40f40c70760ec02e0f9ee8562ff95eb5f8"}}, &(0x7f0000000d40)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "d9a4fa07"}]}}, &(0x7f0000000d80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x27, 0x81, 0x1, {0x22, 0x8e8}}}}, &(0x7f0000001080)={0x18, &(0x7f0000000e00)={0x20, 0x0, 0xd8, "57bcf53c7be60d9ecc256c8d428412ad0cfb5cb385b8d84baba5ad890f396cdea26ddda91344209fbc613f913df316ab371c64b9501a7a5cc8c1f33c1de80ad307ba2f5da91e59344cc588e0313c0972df2e7a3c369def164ebbb7fa8652282e8a583a334794fd019e435ac3b955e8c040f0f6373a13670da31ced93b4052dbeb8e9854a7b052ceaf996b065ffe66c7f57ef8e95bad39eba5503e2cbaf6b510f5e1e3d6a61837338436664f51de4be6c7d3b1ddcb009e9a52e0a32a1fed51b51cced9fc6327b2f4c9714631c9f9c321a8f9ad5ba52190ed1"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000f40)={0x0, 0x8, 0x1}, &(0x7f0000000f80)={0x20, 0x1, 0x80, "232e8aa50a9ddb66a1a1157c4223986ae8df6f686091e6f1b577a6cb21b2dbc513b04ec25fe7e3538395011b0eb62137d39f7ca7cb5833836b2c0f92ec6971ee17bc8388de07a926828617c274d5c43f0b630d6d699e01d060a247db9c2ad207a488d44aabd6b71f42a41107092585e6537f6b08eec6e530c794efe9b4389765"}, &(0x7f0000001040)={0x20, 0x3, 0x1, 0xff}})
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a504bd40eb030200c0ba0000000109021b0001000000000904000001b504b100090581"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001980)={0x18, &(0x7f0000000c40)={0x0, 0x0, 0x1d, "e343190c1cd373f97e0de06496b67817a7e40c738f99c1add77d099329"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, &(0x7f0000001240)={0x14, &(0x7f00000010c0)={0x20, 0x23, 0x96, {0x96, 0x5, "0795acdd3a38c95e90dfe788b6c8ebabe15915f26cae8730d4d4f16b3883a06568bb23af608d149f001b4c28056acab2d6994aecf82d0d39553596befc505017b18ac5e3820358366ccfbd7ed8317b0a14606a6e59bfcf33baeda8b0dbf93ec2a267751c56111311e4719fb88c39f33f28a9aacd641299a56a9693785b82638eafd2d37e48c80cc1ef12442884eda8159810635e"}}, &(0x7f0000001180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, &(0x7f00000011c0)={0x0, 0x22, 0x22, {[@local=@item_012={0x1, 0x2, 0x5, "f7"}, @main=@item_012={0x2, 0x0, 0x8, "48ab"}, @main=@item_4={0x3, 0x0, 0x9, "78ac2a32"}, @local=@item_012={0x1, 0x2, 0xa, 'D'}, @global=@item_4={0x3, 0x1, 0x5, "22072c89"}, @local=@item_012={0x2, 0x2, 0x2, "12e0"}, @main=@item_012={0x2, 0x0, 0x8, "e4f2"}, @local=@item_4={0x3, 0x2, 0x9, "1654c1ff"}, @main=@item_012={0x0, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x2, "c7030b5a"}]}}, &(0x7f0000001200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0xa57}}}}, &(0x7f0000001400)={0x18, &(0x7f0000001280)={0x20, 0x17, 0x54, "52702df1c554dcd12bbe1c8810339b250196d49e5cb9e26ab3956589d8fcdb0da72a6b312f09c5a0e78aa1b785f5213024af2a4967a075b6820b05db8a43f39b1082f0ae8b91bd3153f065201ec11244368633ea"}, &(0x7f0000001300)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001380)={0x20, 0x1, 0x3, "fff075"}, &(0x7f00000013c0)={0x20, 0x3, 0x1}})
syz_usb_control_io$printer(r1, &(0x7f0000001500)={0xc, &(0x7f0000001440)={0x20, 0x21, 0x69, {0x69, 0x23, "a5c6ef83681321c55d2bb7d8646018202d7076b7f155089e14dcc13b77a462d8a9339c5ca5f16fa6ae6868ad6e409bef554b45b862eb654b04e43e2186df2bd076f0840997dbb68f8ec4387766c5ba2716703bee4b8153d0a00144607347da0184f992b81de55b"}}, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}}, &(0x7f0000001800)={0x1c, &(0x7f0000001540)={0x20, 0x6, 0xf8, "5d42227254be739722200f0f4885fd25e3f574a63c4b6021853323dcab31f87b33975d0989644ff5986d40f88bb8ee9cafc0180e6a418ffe7769883f3bbd0cdc05083f3bd44efde757e0f646c2c69300783e145deb1ed1d0530bb148242cdcf70d207dd7bbfbf74f9db616f7f0d173a47d94c4d4f8d509a856a851b62f0de692ad6fa26cb80a194664c95ba1ce4166834cd8d12d0a14b5b6ab612220a05ab99d54608331c52bb9d3db0c4a6ab18b02a28b930ff5ec2be56a22afa1ce765c4ec3007910cce0309911de44859bbb8d57f1c16ca3afd823f898459bd4be73bd85d76fb41014126fd46df639b02b31cc7dca34c2c8a2989a2cb9"}, &(0x7f0000001640)={0x0, 0xa, 0x1}, &(0x7f0000001680)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000016c0)={0x20, 0x0, 0x98, {0x96, "9b0255e67369bcddcc70220857c00c09cf362a03f43ac1d2daea997e0e301d76754632910654ddca111e32dfa9ca7f0bcfeef14bae52bbf9f6c77142a6da20e33eae3a9b8cdb3c27fb525f92501a4bedacba01380baf19032e6904683abc4990eddb1ce4e4492e73cbac7d37b925af8db4268f12d2fe799e0fafc4ce9a98bc93490d2d46d7603295bcf7d642e26f8c254b3f549e946a"}}, &(0x7f0000001780)={0x20, 0x1, 0x1, 0x1}, &(0x7f00000017c0)={0x20, 0x0, 0x1, 0xb1}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x14, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0xa, "0a5dcaac"}, @global=@item_012={0x2, 0x1, 0x0, "72f2"}, @main=@item_012={0x1, 0x0, 0x0, "c2"}, @main=@item_4={0x3, 0x0, 0x0, "bd44669b"}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000a80)={0x14, 0x0, &(0x7f00000009c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x10, 0xcf, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x7f, {0x9, 0x21, 0x7, 0x5, 0x1, {0x22, 0xbc9}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xec, 0x95, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x81, 0x9}}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x8, 0x28, 0x7, 0x10, 0x3f}, 0x31, &(0x7f0000000080)={0x5, 0xf, 0x31, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0xff, 0x3, 0x10001, 0xe100, 0x6b8, [0xfe40a0, 0x30, 0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "4e5ce0bba96453a7ce6ac29963ccb00e"}]}, 0x1, [{0x47, &(0x7f0000000240)=@string={0x47, 0x3, "7e3f2e546423325aba9ec72ed10d17f34af4eca8331bb060239df5f367d69bf11d6339c0ffbe537d618ae85c0707103ec5445dc46d1b2abbeca0031d9aff3e3352ce736fb6"}}]})
syz_usb_control_io(r2, &(0x7f00000005c0)={0x18, &(0x7f00000002c0)={0x0, 0x3, 0x90, {0x90, 0x31, "831a973eb7652fd408c8a2fe53df0483cf74edc8cf4f683a87f62daec6358885165e89baa2ddb18c4830e75b3779e72079c5fa664b1c2ed17374b7b2a08ae153dc223560a6aa6f3b7fe6f44333e424618e38e355e44c71d0d492a0c68509882b80205778523295186139d5ee5e6cc711c3b80bd757ccbe24b52dc7f1081cebd76eee1866b6e6446054bf7398b163"}}, &(0x7f0000000380)={0x0, 0x3, 0xd3, @string={0xd3, 0x3, "685088b11325ea9b8beb7a915a0f892c633453cc77a815131d91ba3e35f4581a4f5c0ce6e6230268caa9830ac57769376db7d94bd5f2b4c4b3c76cff25b4c22d707a6d54ee919c78e7a945f12331b648625fcc920940ee1f288ca901812752a24cb02bdb97d6f7ccca1578437b9459d365b3964c2fc5d5a17b9cfb2288acbe618d5b223af6203ca6f5a7c7f89660781f0d3604e6ec3df4c42e20e692d8009e2f36260d5a77c6013e9ca33c8554c4af3ba5855e6a970d08662c4c8be5df7c4394a670b81494dc25357db234c0d7d1d5fac5"}}, &(0x7f0000000480)={0x0, 0xf, 0xd9, {0x5, 0xf, 0xd9, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xa4, "2dd7ecb2cb1dc937a4e5ce5feaf28f11"}, @generic={0xc0, 0x10, 0x1, "c7c263eb61ee1126eaf46055c808c52f09a88efeab7c43a6b7d427a00ab303802d136864661b7348d188bd20e0410f74d90fbcc1f42988ab5e4946e7a2720ca9bf1138a83dd348ebbf7394b9c1627db85633fec79c800d4bddbe25d05cbac0656e92a1d795780d2cc505a4431b76f65ce8bd89ea260ccd32368c1cb1f1e405151626212e39aa9e3533210137c0ad3f79bac149afb7ac83ab4ab355f531bd2c14847666f4661b76f8eb607b153d1524b18151899b3c104ec4a1a24dd125"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x3, 0x5, 0x6, "947ff423", "13814b0c"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0x1, 0x0, 0x26, 0x200, 0xda0}}}, &(0x7f0000000b40)={0x44, &(0x7f0000000600)={0x0, 0x15, 0xcd, "955e88bf7a62eeccb5ca335c4a9b0bc50388ac244ddb72220d0a7b890cb87411db879621f49872ed919c94a04adbf0b5f8a2494ac86d288805ed41b735a113a5c6273a70b01a54931542360426297bfd22b73c2cefe56197ff35d119460eae8170dfaa00fa7d1c69f08896592839f810921e0b6f054f44285c00264d85e92897d707077de1cfa539fe22076da0d8db82969ff43e6d89b6aedd6046d9ba2dc249204fc88d6b1face5894c2d404ec048a7475513d0a9de329dbd38a166ed5378acbd2285965f8a26967a1410f54d"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x1008, 0x20}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0xbc}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000000880)={0x40, 0xb, 0x2, "b235"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000900)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000940)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000980)={0x40, 0x19, 0x2, "ba53"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0xc9}})
r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCGSTRING(r3, 0x81044804, &(0x7f0000000100)={0x1, "8e"})

[  223.850702][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  223.860494][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  223.871383][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  223.881157][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.888508][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.898064][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  223.909879][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  223.921448][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  223.932288][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  224.000298][ T6804] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  224.011488][ T6804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  224.087903][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  224.098420][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  224.109987][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  224.120880][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  224.130914][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  224.141902][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  224.152024][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  224.280632][ T6804] 8021q: adding VLAN 0 to HW filter on device batadv0
[  224.295965][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  224.305652][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  224.313772][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  224.456455][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  224.466985][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  224.564609][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  224.574736][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  224.607267][ T6804] device veth0_vlan entered promiscuous mode
[  224.617876][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  224.627905][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  224.670779][   T35] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  224.676581][ T6804] device veth1_vlan entered promiscuous mode
[  224.688310][ T6661] Bluetooth: hci1: command 0x041b tx timeout
[  224.790198][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  224.800248][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  224.810301][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  224.820754][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  224.846924][ T6804] device veth0_macvtap entered promiscuous mode
[  224.870941][ T6804] device veth1_macvtap entered promiscuous mode
[  224.948134][ T6804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  224.959715][ T6804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.973841][ T6804] batman_adv: batadv0: Interface activated: batadv_slave_0
[  224.984935][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  224.995185][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  225.005293][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  225.015893][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  225.049062][ T6804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  225.060016][ T6804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  225.073973][ T6804] batman_adv: batadv0: Interface activated: batadv_slave_1
[  225.085240][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  225.096238][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  225.120685][   T35] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  225.130960][   T35] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  225.140504][   T35] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.164918][ T6804] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  225.174103][ T6804] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  225.183285][ T6804] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  225.192364][ T6804] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  225.211979][   T35] usb 1-1: config 0 descriptor??
[  225.409285][   T35] rc_core: IR keymap rc-hauppauge not found
[  225.415390][   T35] Registered IR keymap rc-empty
[  225.422136][   T35] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  225.434829][   T35] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5
[  225.799122][    C1] igorplugusb 1-1:0.0: receive overflow, at least 25 lost
[  226.239115][    C1] igorplugusb 1-1:0.0: receive overflow, at least 34 lost
[  226.452087][ T7161] udc-core: couldn't find an available UDC or it's busy
[  226.459436][ T7161] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  226.493803][   T35] usb 1-1: USB disconnect, device number 3
[  226.588015][  T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.596327][  T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.611117][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  226.760831][ T6661] Bluetooth: hci1: command 0x040f tx timeout
[  226.796456][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.804796][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.815315][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  227.280317][   T35] usb 1-1: new high-speed USB device number 4 using dummy_hcd
16:08:17 executing program 1:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
write$uinput_user_dev(r3, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r4)
write$uinput_user_dev(r3, &(0x7f0000000fc0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
write$uinput_user_dev(r3, &(0x7f0000000a40)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8]}, 0x45c)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfef0)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{0x101, 0x5, 0x9, 0x2}, 'syz1\x00', 0x3b})
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

[  227.640929][   T35] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  227.651013][   T35] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  227.660532][   T35] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.725417][ T7232] input: syz1 as /devices/virtual/input/input6
[  227.752932][   T35] usb 1-1: config 0 descriptor??
[  227.932481][   T35] rc_core: IR keymap rc-hauppauge not found
[  227.938507][   T35] Registered IR keymap rc-empty
[  227.990905][   T35] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
16:08:18 executing program 0:
r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000dc0)={0x14, &(0x7f0000000bc0)={0x20, 0x0, 0x45, {0x45, 0x3, "647bf184c352c1e4bbed91dedaa5eca640e6196285f10dbd685ee438dc385a1f174819391f07f81a2cc7436eb1085e70936c8b9ba480c619b6890d7882e9e27a01599a"}}, &(0x7f0000000c40)={0x0, 0x3, 0xdd, @string={0xdd, 0x3, "3c352536bb293e04ff8b8a7c0985be5a2e42b525f2b61133e592dbbe9da33ed05a94053f6bef6e2d839f445cb1d239abb78ec3d134b04831f785238f686bb0d07e9ee8279a5881dbaf950e2a74a932cf6a68326bcc450468e6e211e42077ea1ece01852222526795479433d3b2a4b3dce60da2d983beb7cadc8ff78f3b4616fb6fe1ea783da4458f12105ae03cb65fd26affb6c9c3449e7d406357d49d1c1d2a266fd79e032321b0e55860fe74784e464b616e62866e23e6f3ca3bfb5e428f685fc368310ed89977c66f40f40c70760ec02e0f9ee8562ff95eb5f8"}}, &(0x7f0000000d40)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "d9a4fa07"}]}}, &(0x7f0000000d80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x27, 0x81, 0x1, {0x22, 0x8e8}}}}, &(0x7f0000001080)={0x18, &(0x7f0000000e00)={0x20, 0x0, 0xd8, "57bcf53c7be60d9ecc256c8d428412ad0cfb5cb385b8d84baba5ad890f396cdea26ddda91344209fbc613f913df316ab371c64b9501a7a5cc8c1f33c1de80ad307ba2f5da91e59344cc588e0313c0972df2e7a3c369def164ebbb7fa8652282e8a583a334794fd019e435ac3b955e8c040f0f6373a13670da31ced93b4052dbeb8e9854a7b052ceaf996b065ffe66c7f57ef8e95bad39eba5503e2cbaf6b510f5e1e3d6a61837338436664f51de4be6c7d3b1ddcb009e9a52e0a32a1fed51b51cced9fc6327b2f4c9714631c9f9c321a8f9ad5ba52190ed1"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000f40)={0x0, 0x8, 0x1}, &(0x7f0000000f80)={0x20, 0x1, 0x80, "232e8aa50a9ddb66a1a1157c4223986ae8df6f686091e6f1b577a6cb21b2dbc513b04ec25fe7e3538395011b0eb62137d39f7ca7cb5833836b2c0f92ec6971ee17bc8388de07a926828617c274d5c43f0b630d6d699e01d060a247db9c2ad207a488d44aabd6b71f42a41107092585e6537f6b08eec6e530c794efe9b4389765"}, &(0x7f0000001040)={0x20, 0x3, 0x1, 0xff}})
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a504bd40eb030200c0ba0000000109021b0001000000000904000001b504b100090581"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001980)={0x18, &(0x7f0000000c40)={0x0, 0x0, 0x1d, "e343190c1cd373f97e0de06496b67817a7e40c738f99c1add77d099329"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, &(0x7f0000001240)={0x14, &(0x7f00000010c0)={0x20, 0x23, 0x96, {0x96, 0x5, "0795acdd3a38c95e90dfe788b6c8ebabe15915f26cae8730d4d4f16b3883a06568bb23af608d149f001b4c28056acab2d6994aecf82d0d39553596befc505017b18ac5e3820358366ccfbd7ed8317b0a14606a6e59bfcf33baeda8b0dbf93ec2a267751c56111311e4719fb88c39f33f28a9aacd641299a56a9693785b82638eafd2d37e48c80cc1ef12442884eda8159810635e"}}, &(0x7f0000001180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, &(0x7f00000011c0)={0x0, 0x22, 0x22, {[@local=@item_012={0x1, 0x2, 0x5, "f7"}, @main=@item_012={0x2, 0x0, 0x8, "48ab"}, @main=@item_4={0x3, 0x0, 0x9, "78ac2a32"}, @local=@item_012={0x1, 0x2, 0xa, 'D'}, @global=@item_4={0x3, 0x1, 0x5, "22072c89"}, @local=@item_012={0x2, 0x2, 0x2, "12e0"}, @main=@item_012={0x2, 0x0, 0x8, "e4f2"}, @local=@item_4={0x3, 0x2, 0x9, "1654c1ff"}, @main=@item_012={0x0, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x2, "c7030b5a"}]}}, &(0x7f0000001200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0xa57}}}}, &(0x7f0000001400)={0x18, &(0x7f0000001280)={0x20, 0x17, 0x54, "52702df1c554dcd12bbe1c8810339b250196d49e5cb9e26ab3956589d8fcdb0da72a6b312f09c5a0e78aa1b785f5213024af2a4967a075b6820b05db8a43f39b1082f0ae8b91bd3153f065201ec11244368633ea"}, &(0x7f0000001300)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001380)={0x20, 0x1, 0x3, "fff075"}, &(0x7f00000013c0)={0x20, 0x3, 0x1}})
syz_usb_control_io$printer(r1, &(0x7f0000001500)={0xc, &(0x7f0000001440)={0x20, 0x21, 0x69, {0x69, 0x23, "a5c6ef83681321c55d2bb7d8646018202d7076b7f155089e14dcc13b77a462d8a9339c5ca5f16fa6ae6868ad6e409bef554b45b862eb654b04e43e2186df2bd076f0840997dbb68f8ec4387766c5ba2716703bee4b8153d0a00144607347da0184f992b81de55b"}}, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}}, &(0x7f0000001800)={0x1c, &(0x7f0000001540)={0x20, 0x6, 0xf8, "5d42227254be739722200f0f4885fd25e3f574a63c4b6021853323dcab31f87b33975d0989644ff5986d40f88bb8ee9cafc0180e6a418ffe7769883f3bbd0cdc05083f3bd44efde757e0f646c2c69300783e145deb1ed1d0530bb148242cdcf70d207dd7bbfbf74f9db616f7f0d173a47d94c4d4f8d509a856a851b62f0de692ad6fa26cb80a194664c95ba1ce4166834cd8d12d0a14b5b6ab612220a05ab99d54608331c52bb9d3db0c4a6ab18b02a28b930ff5ec2be56a22afa1ce765c4ec3007910cce0309911de44859bbb8d57f1c16ca3afd823f898459bd4be73bd85d76fb41014126fd46df639b02b31cc7dca34c2c8a2989a2cb9"}, &(0x7f0000001640)={0x0, 0xa, 0x1}, &(0x7f0000001680)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000016c0)={0x20, 0x0, 0x98, {0x96, "9b0255e67369bcddcc70220857c00c09cf362a03f43ac1d2daea997e0e301d76754632910654ddca111e32dfa9ca7f0bcfeef14bae52bbf9f6c77142a6da20e33eae3a9b8cdb3c27fb525f92501a4bedacba01380baf19032e6904683abc4990eddb1ce4e4492e73cbac7d37b925af8db4268f12d2fe799e0fafc4ce9a98bc93490d2d46d7603295bcf7d642e26f8c254b3f549e946a"}}, &(0x7f0000001780)={0x20, 0x1, 0x1, 0x1}, &(0x7f00000017c0)={0x20, 0x0, 0x1, 0xb1}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x14, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0xa, "0a5dcaac"}, @global=@item_012={0x2, 0x1, 0x0, "72f2"}, @main=@item_012={0x1, 0x0, 0x0, "c2"}, @main=@item_4={0x3, 0x0, 0x0, "bd44669b"}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000a80)={0x14, 0x0, &(0x7f00000009c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x10, 0xcf, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x7f, {0x9, 0x21, 0x7, 0x5, 0x1, {0x22, 0xbc9}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xec, 0x95, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x81, 0x9}}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x8, 0x28, 0x7, 0x10, 0x3f}, 0x31, &(0x7f0000000080)={0x5, 0xf, 0x31, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0xff, 0x3, 0x10001, 0xe100, 0x6b8, [0xfe40a0, 0x30, 0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "4e5ce0bba96453a7ce6ac29963ccb00e"}]}, 0x1, [{0x47, &(0x7f0000000240)=@string={0x47, 0x3, "7e3f2e546423325aba9ec72ed10d17f34af4eca8331bb060239df5f367d69bf11d6339c0ffbe537d618ae85c0707103ec5445dc46d1b2abbeca0031d9aff3e3352ce736fb6"}}]})
syz_usb_control_io(r2, &(0x7f00000005c0)={0x18, &(0x7f00000002c0)={0x0, 0x3, 0x90, {0x90, 0x31, "831a973eb7652fd408c8a2fe53df0483cf74edc8cf4f683a87f62daec6358885165e89baa2ddb18c4830e75b3779e72079c5fa664b1c2ed17374b7b2a08ae153dc223560a6aa6f3b7fe6f44333e424618e38e355e44c71d0d492a0c68509882b80205778523295186139d5ee5e6cc711c3b80bd757ccbe24b52dc7f1081cebd76eee1866b6e6446054bf7398b163"}}, &(0x7f0000000380)={0x0, 0x3, 0xd3, @string={0xd3, 0x3, "685088b11325ea9b8beb7a915a0f892c633453cc77a815131d91ba3e35f4581a4f5c0ce6e6230268caa9830ac57769376db7d94bd5f2b4c4b3c76cff25b4c22d707a6d54ee919c78e7a945f12331b648625fcc920940ee1f288ca901812752a24cb02bdb97d6f7ccca1578437b9459d365b3964c2fc5d5a17b9cfb2288acbe618d5b223af6203ca6f5a7c7f89660781f0d3604e6ec3df4c42e20e692d8009e2f36260d5a77c6013e9ca33c8554c4af3ba5855e6a970d08662c4c8be5df7c4394a670b81494dc25357db234c0d7d1d5fac5"}}, &(0x7f0000000480)={0x0, 0xf, 0xd9, {0x5, 0xf, 0xd9, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xa4, "2dd7ecb2cb1dc937a4e5ce5feaf28f11"}, @generic={0xc0, 0x10, 0x1, "c7c263eb61ee1126eaf46055c808c52f09a88efeab7c43a6b7d427a00ab303802d136864661b7348d188bd20e0410f74d90fbcc1f42988ab5e4946e7a2720ca9bf1138a83dd348ebbf7394b9c1627db85633fec79c800d4bddbe25d05cbac0656e92a1d795780d2cc505a4431b76f65ce8bd89ea260ccd32368c1cb1f1e405151626212e39aa9e3533210137c0ad3f79bac149afb7ac83ab4ab355f531bd2c14847666f4661b76f8eb607b153d1524b18151899b3c104ec4a1a24dd125"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x3, 0x5, 0x6, "947ff423", "13814b0c"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0x1, 0x0, 0x26, 0x200, 0xda0}}}, &(0x7f0000000b40)={0x44, &(0x7f0000000600)={0x0, 0x15, 0xcd, "955e88bf7a62eeccb5ca335c4a9b0bc50388ac244ddb72220d0a7b890cb87411db879621f49872ed919c94a04adbf0b5f8a2494ac86d288805ed41b735a113a5c6273a70b01a54931542360426297bfd22b73c2cefe56197ff35d119460eae8170dfaa00fa7d1c69f08896592839f810921e0b6f054f44285c00264d85e92897d707077de1cfa539fe22076da0d8db82969ff43e6d89b6aedd6046d9ba2dc249204fc88d6b1face5894c2d404ec048a7475513d0a9de329dbd38a166ed5378acbd2285965f8a26967a1410f54d"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x1008, 0x20}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0xbc}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000000880)={0x40, 0xb, 0x2, "b235"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000900)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000940)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000980)={0x40, 0x19, 0x2, "ba53"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0xc9}})
r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCGSTRING(r3, 0x81044804, &(0x7f0000000100)={0x1, "8e"})

[  228.072265][   T35] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7
[  228.165969][   T35] usb 1-1: USB disconnect, device number 4
16:08:18 executing program 1:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
write$uinput_user_dev(r3, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r4)
write$uinput_user_dev(r3, &(0x7f0000000fc0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
write$uinput_user_dev(r3, &(0x7f0000000a40)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8]}, 0x45c)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfef0)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{0x101, 0x5, 0x9, 0x2}, 'syz1\x00', 0x3b})
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

[  228.770194][ T2793] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  228.839138][ T6661] Bluetooth: hci1: command 0x0419 tx timeout
[  229.015559][ T7264] input: syz1 as /devices/virtual/input/input8
[  229.160254][ T2793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  229.170450][ T2793] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  229.179866][ T2793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.292085][ T2793] usb 1-1: config 0 descriptor??
[  229.440116][ T2793] rc_core: IR keymap rc-hauppauge not found
[  229.446213][ T2793] Registered IR keymap rc-empty
[  229.452796][ T2793] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  229.465316][ T2793] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9
[  229.838953][    C0] igorplugusb 1-1:0.0: receive overflow, at least 25 lost
16:08:20 executing program 1:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
write$uinput_user_dev(r3, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r4)
write$uinput_user_dev(r3, &(0x7f0000000fc0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
write$uinput_user_dev(r3, &(0x7f0000000a40)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8]}, 0x45c)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfef0)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{0x101, 0x5, 0x9, 0x2}, 'syz1\x00', 0x3b})
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

[  230.205887][ T7283] input: syz1 as /devices/virtual/input/input10
[  230.278998][    C0] igorplugusb 1-1:0.0: receive overflow, at least 34 lost
[  230.496278][ T7257] udc-core: couldn't find an available UDC or it's busy
[  230.503669][ T7257] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  230.570012][ T2793] usb 1-1: USB disconnect, device number 5
16:08:21 executing program 1:
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3)
write$uinput_user_dev(r3, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r4)
write$uinput_user_dev(r3, &(0x7f0000000fc0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c)
ioctl$UI_DEV_CREATE(r3, 0x5501)
write$uinput_user_dev(r3, &(0x7f0000000a40)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8]}, 0x45c)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$binfmt_misc(r5, &(0x7f0000000140)=ANY=[], 0xfef0)
ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000100)={{0x101, 0x5, 0x9, 0x2}, 'syz1\x00', 0x3b})
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

16:08:21 executing program 0:
r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000dc0)={0x14, &(0x7f0000000bc0)={0x20, 0x0, 0x45, {0x45, 0x3, "647bf184c352c1e4bbed91dedaa5eca640e6196285f10dbd685ee438dc385a1f174819391f07f81a2cc7436eb1085e70936c8b9ba480c619b6890d7882e9e27a01599a"}}, &(0x7f0000000c40)={0x0, 0x3, 0xdd, @string={0xdd, 0x3, "3c352536bb293e04ff8b8a7c0985be5a2e42b525f2b61133e592dbbe9da33ed05a94053f6bef6e2d839f445cb1d239abb78ec3d134b04831f785238f686bb0d07e9ee8279a5881dbaf950e2a74a932cf6a68326bcc450468e6e211e42077ea1ece01852222526795479433d3b2a4b3dce60da2d983beb7cadc8ff78f3b4616fb6fe1ea783da4458f12105ae03cb65fd26affb6c9c3449e7d406357d49d1c1d2a266fd79e032321b0e55860fe74784e464b616e62866e23e6f3ca3bfb5e428f685fc368310ed89977c66f40f40c70760ec02e0f9ee8562ff95eb5f8"}}, &(0x7f0000000d40)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "d9a4fa07"}]}}, &(0x7f0000000d80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x27, 0x81, 0x1, {0x22, 0x8e8}}}}, &(0x7f0000001080)={0x18, &(0x7f0000000e00)={0x20, 0x0, 0xd8, "57bcf53c7be60d9ecc256c8d428412ad0cfb5cb385b8d84baba5ad890f396cdea26ddda91344209fbc613f913df316ab371c64b9501a7a5cc8c1f33c1de80ad307ba2f5da91e59344cc588e0313c0972df2e7a3c369def164ebbb7fa8652282e8a583a334794fd019e435ac3b955e8c040f0f6373a13670da31ced93b4052dbeb8e9854a7b052ceaf996b065ffe66c7f57ef8e95bad39eba5503e2cbaf6b510f5e1e3d6a61837338436664f51de4be6c7d3b1ddcb009e9a52e0a32a1fed51b51cced9fc6327b2f4c9714631c9f9c321a8f9ad5ba52190ed1"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000f40)={0x0, 0x8, 0x1}, &(0x7f0000000f80)={0x20, 0x1, 0x80, "232e8aa50a9ddb66a1a1157c4223986ae8df6f686091e6f1b577a6cb21b2dbc513b04ec25fe7e3538395011b0eb62137d39f7ca7cb5833836b2c0f92ec6971ee17bc8388de07a926828617c274d5c43f0b630d6d699e01d060a247db9c2ad207a488d44aabd6b71f42a41107092585e6537f6b08eec6e530c794efe9b4389765"}, &(0x7f0000001040)={0x20, 0x3, 0x1, 0xff}})
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a504bd40eb030200c0ba0000000109021b0001000000000904000001b504b100090581"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001980)={0x18, &(0x7f0000000c40)={0x0, 0x0, 0x1d, "e343190c1cd373f97e0de06496b67817a7e40c738f99c1add77d099329"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, &(0x7f0000001240)={0x14, &(0x7f00000010c0)={0x20, 0x23, 0x96, {0x96, 0x5, "0795acdd3a38c95e90dfe788b6c8ebabe15915f26cae8730d4d4f16b3883a06568bb23af608d149f001b4c28056acab2d6994aecf82d0d39553596befc505017b18ac5e3820358366ccfbd7ed8317b0a14606a6e59bfcf33baeda8b0dbf93ec2a267751c56111311e4719fb88c39f33f28a9aacd641299a56a9693785b82638eafd2d37e48c80cc1ef12442884eda8159810635e"}}, &(0x7f0000001180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, &(0x7f00000011c0)={0x0, 0x22, 0x22, {[@local=@item_012={0x1, 0x2, 0x5, "f7"}, @main=@item_012={0x2, 0x0, 0x8, "48ab"}, @main=@item_4={0x3, 0x0, 0x9, "78ac2a32"}, @local=@item_012={0x1, 0x2, 0xa, 'D'}, @global=@item_4={0x3, 0x1, 0x5, "22072c89"}, @local=@item_012={0x2, 0x2, 0x2, "12e0"}, @main=@item_012={0x2, 0x0, 0x8, "e4f2"}, @local=@item_4={0x3, 0x2, 0x9, "1654c1ff"}, @main=@item_012={0x0, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x2, "c7030b5a"}]}}, &(0x7f0000001200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0xa57}}}}, &(0x7f0000001400)={0x18, &(0x7f0000001280)={0x20, 0x17, 0x54, "52702df1c554dcd12bbe1c8810339b250196d49e5cb9e26ab3956589d8fcdb0da72a6b312f09c5a0e78aa1b785f5213024af2a4967a075b6820b05db8a43f39b1082f0ae8b91bd3153f065201ec11244368633ea"}, &(0x7f0000001300)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001380)={0x20, 0x1, 0x3, "fff075"}, &(0x7f00000013c0)={0x20, 0x3, 0x1}})
syz_usb_control_io$printer(r1, &(0x7f0000001500)={0xc, &(0x7f0000001440)={0x20, 0x21, 0x69, {0x69, 0x23, "a5c6ef83681321c55d2bb7d8646018202d7076b7f155089e14dcc13b77a462d8a9339c5ca5f16fa6ae6868ad6e409bef554b45b862eb654b04e43e2186df2bd076f0840997dbb68f8ec4387766c5ba2716703bee4b8153d0a00144607347da0184f992b81de55b"}}, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}}, &(0x7f0000001800)={0x1c, &(0x7f0000001540)={0x20, 0x6, 0xf8, "5d42227254be739722200f0f4885fd25e3f574a63c4b6021853323dcab31f87b33975d0989644ff5986d40f88bb8ee9cafc0180e6a418ffe7769883f3bbd0cdc05083f3bd44efde757e0f646c2c69300783e145deb1ed1d0530bb148242cdcf70d207dd7bbfbf74f9db616f7f0d173a47d94c4d4f8d509a856a851b62f0de692ad6fa26cb80a194664c95ba1ce4166834cd8d12d0a14b5b6ab612220a05ab99d54608331c52bb9d3db0c4a6ab18b02a28b930ff5ec2be56a22afa1ce765c4ec3007910cce0309911de44859bbb8d57f1c16ca3afd823f898459bd4be73bd85d76fb41014126fd46df639b02b31cc7dca34c2c8a2989a2cb9"}, &(0x7f0000001640)={0x0, 0xa, 0x1}, &(0x7f0000001680)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000016c0)={0x20, 0x0, 0x98, {0x96, "9b0255e67369bcddcc70220857c00c09cf362a03f43ac1d2daea997e0e301d76754632910654ddca111e32dfa9ca7f0bcfeef14bae52bbf9f6c77142a6da20e33eae3a9b8cdb3c27fb525f92501a4bedacba01380baf19032e6904683abc4990eddb1ce4e4492e73cbac7d37b925af8db4268f12d2fe799e0fafc4ce9a98bc93490d2d46d7603295bcf7d642e26f8c254b3f549e946a"}}, &(0x7f0000001780)={0x20, 0x1, 0x1, 0x1}, &(0x7f00000017c0)={0x20, 0x0, 0x1, 0xb1}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x14, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0xa, "0a5dcaac"}, @global=@item_012={0x2, 0x1, 0x0, "72f2"}, @main=@item_012={0x1, 0x0, 0x0, "c2"}, @main=@item_4={0x3, 0x0, 0x0, "bd44669b"}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000a80)={0x14, 0x0, &(0x7f00000009c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x10, 0xcf, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x7f, {0x9, 0x21, 0x7, 0x5, 0x1, {0x22, 0xbc9}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xec, 0x95, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x81, 0x9}}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x8, 0x28, 0x7, 0x10, 0x3f}, 0x31, &(0x7f0000000080)={0x5, 0xf, 0x31, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0xff, 0x3, 0x10001, 0xe100, 0x6b8, [0xfe40a0, 0x30, 0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "4e5ce0bba96453a7ce6ac29963ccb00e"}]}, 0x1, [{0x47, &(0x7f0000000240)=@string={0x47, 0x3, "7e3f2e546423325aba9ec72ed10d17f34af4eca8331bb060239df5f367d69bf11d6339c0ffbe537d618ae85c0707103ec5445dc46d1b2abbeca0031d9aff3e3352ce736fb6"}}]})
syz_usb_control_io(r2, &(0x7f00000005c0)={0x18, &(0x7f00000002c0)={0x0, 0x3, 0x90, {0x90, 0x31, "831a973eb7652fd408c8a2fe53df0483cf74edc8cf4f683a87f62daec6358885165e89baa2ddb18c4830e75b3779e72079c5fa664b1c2ed17374b7b2a08ae153dc223560a6aa6f3b7fe6f44333e424618e38e355e44c71d0d492a0c68509882b80205778523295186139d5ee5e6cc711c3b80bd757ccbe24b52dc7f1081cebd76eee1866b6e6446054bf7398b163"}}, &(0x7f0000000380)={0x0, 0x3, 0xd3, @string={0xd3, 0x3, "685088b11325ea9b8beb7a915a0f892c633453cc77a815131d91ba3e35f4581a4f5c0ce6e6230268caa9830ac57769376db7d94bd5f2b4c4b3c76cff25b4c22d707a6d54ee919c78e7a945f12331b648625fcc920940ee1f288ca901812752a24cb02bdb97d6f7ccca1578437b9459d365b3964c2fc5d5a17b9cfb2288acbe618d5b223af6203ca6f5a7c7f89660781f0d3604e6ec3df4c42e20e692d8009e2f36260d5a77c6013e9ca33c8554c4af3ba5855e6a970d08662c4c8be5df7c4394a670b81494dc25357db234c0d7d1d5fac5"}}, &(0x7f0000000480)={0x0, 0xf, 0xd9, {0x5, 0xf, 0xd9, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xa4, "2dd7ecb2cb1dc937a4e5ce5feaf28f11"}, @generic={0xc0, 0x10, 0x1, "c7c263eb61ee1126eaf46055c808c52f09a88efeab7c43a6b7d427a00ab303802d136864661b7348d188bd20e0410f74d90fbcc1f42988ab5e4946e7a2720ca9bf1138a83dd348ebbf7394b9c1627db85633fec79c800d4bddbe25d05cbac0656e92a1d795780d2cc505a4431b76f65ce8bd89ea260ccd32368c1cb1f1e405151626212e39aa9e3533210137c0ad3f79bac149afb7ac83ab4ab355f531bd2c14847666f4661b76f8eb607b153d1524b18151899b3c104ec4a1a24dd125"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x3, 0x5, 0x6, "947ff423", "13814b0c"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0x1, 0x0, 0x26, 0x200, 0xda0}}}, &(0x7f0000000b40)={0x44, &(0x7f0000000600)={0x0, 0x15, 0xcd, "955e88bf7a62eeccb5ca335c4a9b0bc50388ac244ddb72220d0a7b890cb87411db879621f49872ed919c94a04adbf0b5f8a2494ac86d288805ed41b735a113a5c6273a70b01a54931542360426297bfd22b73c2cefe56197ff35d119460eae8170dfaa00fa7d1c69f08896592839f810921e0b6f054f44285c00264d85e92897d707077de1cfa539fe22076da0d8db82969ff43e6d89b6aedd6046d9ba2dc249204fc88d6b1face5894c2d404ec048a7475513d0a9de329dbd38a166ed5378acbd2285965f8a26967a1410f54d"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x1008, 0x20}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0xbc}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000000880)={0x40, 0xb, 0x2, "b235"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000900)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000940)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000980)={0x40, 0x19, 0x2, "ba53"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0xc9}})
r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCGSTRING(r3, 0x81044804, &(0x7f0000000100)={0x1, "8e"})

[  231.372326][ T7307] input: syz1 as /devices/virtual/input/input11
[  231.649349][ T6661] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  232.013942][ T6661] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  232.024330][ T6661] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  232.033828][ T6661] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.068388][ T6661] usb 1-1: config 0 descriptor??
[  232.229125][ T6661] rc_core: IR keymap rc-hauppauge not found
[  232.235140][ T6661] Registered IR keymap rc-empty
[  232.242179][ T6661] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  232.254594][ T6661] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input12
16:08:22 executing program 1:
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
close(r1)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3)
write$uinput_user_dev(r2, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r3)
write$uinput_user_dev(r2, &(0x7f0000000fc0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c)
ioctl$UI_DEV_CREATE(r2, 0x5501)
write$uinput_user_dev(r2, &(0x7f0000000a40)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8]}, 0x45c)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0xfef0)
ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000100)={{0x101, 0x5, 0x9, 0x2}, 'syz1\x00', 0x3b})
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc)

[  232.628957][    C1] igorplugusb 1-1:0.0: receive overflow, at least 25 lost
[  232.723667][ T7338] input: syz1 as /devices/virtual/input/input13
[  233.068959][    C1] igorplugusb 1-1:0.0: receive overflow, at least 34 lost
[  233.273917][ T7309] udc-core: couldn't find an available UDC or it's busy
[  233.281167][ T7309] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  233.362901][ T2793] usb 1-1: USB disconnect, device number 6
16:08:23 executing program 1:
pipe(&(0x7f00000001c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
write$uinput_user_dev(r1, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2)
write$uinput_user_dev(r1, &(0x7f0000000fc0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$uinput_user_dev(r1, &(0x7f0000000a40)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8]}, 0x45c)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x101, 0x5, 0x9, 0x2}, 'syz1\x00', 0x3b})

[  233.755910][ T7357] input: syz1 as /devices/virtual/input/input14
16:08:24 executing program 1:
pipe(&(0x7f00000001c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
write$uinput_user_dev(r1, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2)
write$uinput_user_dev(r1, &(0x7f0000000fc0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$uinput_user_dev(r1, &(0x7f0000000a40)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8]}, 0x45c)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_misc(r3, &(0x7f0000000140)=ANY=[], 0xfef0)

16:08:24 executing program 0:
r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000dc0)={0x14, &(0x7f0000000bc0)={0x20, 0x0, 0x45, {0x45, 0x3, "647bf184c352c1e4bbed91dedaa5eca640e6196285f10dbd685ee438dc385a1f174819391f07f81a2cc7436eb1085e70936c8b9ba480c619b6890d7882e9e27a01599a"}}, &(0x7f0000000c40)={0x0, 0x3, 0xdd, @string={0xdd, 0x3, "3c352536bb293e04ff8b8a7c0985be5a2e42b525f2b61133e592dbbe9da33ed05a94053f6bef6e2d839f445cb1d239abb78ec3d134b04831f785238f686bb0d07e9ee8279a5881dbaf950e2a74a932cf6a68326bcc450468e6e211e42077ea1ece01852222526795479433d3b2a4b3dce60da2d983beb7cadc8ff78f3b4616fb6fe1ea783da4458f12105ae03cb65fd26affb6c9c3449e7d406357d49d1c1d2a266fd79e032321b0e55860fe74784e464b616e62866e23e6f3ca3bfb5e428f685fc368310ed89977c66f40f40c70760ec02e0f9ee8562ff95eb5f8"}}, &(0x7f0000000d40)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "d9a4fa07"}]}}, &(0x7f0000000d80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x27, 0x81, 0x1, {0x22, 0x8e8}}}}, &(0x7f0000001080)={0x18, &(0x7f0000000e00)={0x20, 0x0, 0xd8, "57bcf53c7be60d9ecc256c8d428412ad0cfb5cb385b8d84baba5ad890f396cdea26ddda91344209fbc613f913df316ab371c64b9501a7a5cc8c1f33c1de80ad307ba2f5da91e59344cc588e0313c0972df2e7a3c369def164ebbb7fa8652282e8a583a334794fd019e435ac3b955e8c040f0f6373a13670da31ced93b4052dbeb8e9854a7b052ceaf996b065ffe66c7f57ef8e95bad39eba5503e2cbaf6b510f5e1e3d6a61837338436664f51de4be6c7d3b1ddcb009e9a52e0a32a1fed51b51cced9fc6327b2f4c9714631c9f9c321a8f9ad5ba52190ed1"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000f40)={0x0, 0x8, 0x1}, &(0x7f0000000f80)={0x20, 0x1, 0x80, "232e8aa50a9ddb66a1a1157c4223986ae8df6f686091e6f1b577a6cb21b2dbc513b04ec25fe7e3538395011b0eb62137d39f7ca7cb5833836b2c0f92ec6971ee17bc8388de07a926828617c274d5c43f0b630d6d699e01d060a247db9c2ad207a488d44aabd6b71f42a41107092585e6537f6b08eec6e530c794efe9b4389765"}, &(0x7f0000001040)={0x20, 0x3, 0x1, 0xff}})
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a504bd40eb030200c0ba0000000109021b0001000000000904000001b504b100090581"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001980)={0x18, &(0x7f0000000c40)={0x0, 0x0, 0x1d, "e343190c1cd373f97e0de06496b67817a7e40c738f99c1add77d099329"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, &(0x7f0000001240)={0x14, &(0x7f00000010c0)={0x20, 0x23, 0x96, {0x96, 0x5, "0795acdd3a38c95e90dfe788b6c8ebabe15915f26cae8730d4d4f16b3883a06568bb23af608d149f001b4c28056acab2d6994aecf82d0d39553596befc505017b18ac5e3820358366ccfbd7ed8317b0a14606a6e59bfcf33baeda8b0dbf93ec2a267751c56111311e4719fb88c39f33f28a9aacd641299a56a9693785b82638eafd2d37e48c80cc1ef12442884eda8159810635e"}}, &(0x7f0000001180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, &(0x7f00000011c0)={0x0, 0x22, 0x22, {[@local=@item_012={0x1, 0x2, 0x5, "f7"}, @main=@item_012={0x2, 0x0, 0x8, "48ab"}, @main=@item_4={0x3, 0x0, 0x9, "78ac2a32"}, @local=@item_012={0x1, 0x2, 0xa, 'D'}, @global=@item_4={0x3, 0x1, 0x5, "22072c89"}, @local=@item_012={0x2, 0x2, 0x2, "12e0"}, @main=@item_012={0x2, 0x0, 0x8, "e4f2"}, @local=@item_4={0x3, 0x2, 0x9, "1654c1ff"}, @main=@item_012={0x0, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x2, "c7030b5a"}]}}, &(0x7f0000001200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0xa57}}}}, &(0x7f0000001400)={0x18, &(0x7f0000001280)={0x20, 0x17, 0x54, "52702df1c554dcd12bbe1c8810339b250196d49e5cb9e26ab3956589d8fcdb0da72a6b312f09c5a0e78aa1b785f5213024af2a4967a075b6820b05db8a43f39b1082f0ae8b91bd3153f065201ec11244368633ea"}, &(0x7f0000001300)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001380)={0x20, 0x1, 0x3, "fff075"}, &(0x7f00000013c0)={0x20, 0x3, 0x1}})
syz_usb_control_io$printer(r1, &(0x7f0000001500)={0xc, &(0x7f0000001440)={0x20, 0x21, 0x69, {0x69, 0x23, "a5c6ef83681321c55d2bb7d8646018202d7076b7f155089e14dcc13b77a462d8a9339c5ca5f16fa6ae6868ad6e409bef554b45b862eb654b04e43e2186df2bd076f0840997dbb68f8ec4387766c5ba2716703bee4b8153d0a00144607347da0184f992b81de55b"}}, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}}, &(0x7f0000001800)={0x1c, &(0x7f0000001540)={0x20, 0x6, 0xf8, "5d42227254be739722200f0f4885fd25e3f574a63c4b6021853323dcab31f87b33975d0989644ff5986d40f88bb8ee9cafc0180e6a418ffe7769883f3bbd0cdc05083f3bd44efde757e0f646c2c69300783e145deb1ed1d0530bb148242cdcf70d207dd7bbfbf74f9db616f7f0d173a47d94c4d4f8d509a856a851b62f0de692ad6fa26cb80a194664c95ba1ce4166834cd8d12d0a14b5b6ab612220a05ab99d54608331c52bb9d3db0c4a6ab18b02a28b930ff5ec2be56a22afa1ce765c4ec3007910cce0309911de44859bbb8d57f1c16ca3afd823f898459bd4be73bd85d76fb41014126fd46df639b02b31cc7dca34c2c8a2989a2cb9"}, &(0x7f0000001640)={0x0, 0xa, 0x1}, &(0x7f0000001680)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000016c0)={0x20, 0x0, 0x98, {0x96, "9b0255e67369bcddcc70220857c00c09cf362a03f43ac1d2daea997e0e301d76754632910654ddca111e32dfa9ca7f0bcfeef14bae52bbf9f6c77142a6da20e33eae3a9b8cdb3c27fb525f92501a4bedacba01380baf19032e6904683abc4990eddb1ce4e4492e73cbac7d37b925af8db4268f12d2fe799e0fafc4ce9a98bc93490d2d46d7603295bcf7d642e26f8c254b3f549e946a"}}, &(0x7f0000001780)={0x20, 0x1, 0x1, 0x1}, &(0x7f00000017c0)={0x20, 0x0, 0x1, 0xb1}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x14, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0xa, "0a5dcaac"}, @global=@item_012={0x2, 0x1, 0x0, "72f2"}, @main=@item_012={0x1, 0x0, 0x0, "c2"}, @main=@item_4={0x3, 0x0, 0x0, "bd44669b"}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000a80)={0x14, 0x0, &(0x7f00000009c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x10, 0xcf, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x7f, {0x9, 0x21, 0x7, 0x5, 0x1, {0x22, 0xbc9}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xec, 0x95, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x81, 0x9}}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x8, 0x28, 0x7, 0x10, 0x3f}, 0x31, &(0x7f0000000080)={0x5, 0xf, 0x31, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0xff, 0x3, 0x10001, 0xe100, 0x6b8, [0xfe40a0, 0x30, 0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "4e5ce0bba96453a7ce6ac29963ccb00e"}]}, 0x1, [{0x47, &(0x7f0000000240)=@string={0x47, 0x3, "7e3f2e546423325aba9ec72ed10d17f34af4eca8331bb060239df5f367d69bf11d6339c0ffbe537d618ae85c0707103ec5445dc46d1b2abbeca0031d9aff3e3352ce736fb6"}}]})
syz_usb_control_io(r2, &(0x7f00000005c0)={0x18, &(0x7f00000002c0)={0x0, 0x3, 0x90, {0x90, 0x31, "831a973eb7652fd408c8a2fe53df0483cf74edc8cf4f683a87f62daec6358885165e89baa2ddb18c4830e75b3779e72079c5fa664b1c2ed17374b7b2a08ae153dc223560a6aa6f3b7fe6f44333e424618e38e355e44c71d0d492a0c68509882b80205778523295186139d5ee5e6cc711c3b80bd757ccbe24b52dc7f1081cebd76eee1866b6e6446054bf7398b163"}}, &(0x7f0000000380)={0x0, 0x3, 0xd3, @string={0xd3, 0x3, "685088b11325ea9b8beb7a915a0f892c633453cc77a815131d91ba3e35f4581a4f5c0ce6e6230268caa9830ac57769376db7d94bd5f2b4c4b3c76cff25b4c22d707a6d54ee919c78e7a945f12331b648625fcc920940ee1f288ca901812752a24cb02bdb97d6f7ccca1578437b9459d365b3964c2fc5d5a17b9cfb2288acbe618d5b223af6203ca6f5a7c7f89660781f0d3604e6ec3df4c42e20e692d8009e2f36260d5a77c6013e9ca33c8554c4af3ba5855e6a970d08662c4c8be5df7c4394a670b81494dc25357db234c0d7d1d5fac5"}}, &(0x7f0000000480)={0x0, 0xf, 0xd9, {0x5, 0xf, 0xd9, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xa4, "2dd7ecb2cb1dc937a4e5ce5feaf28f11"}, @generic={0xc0, 0x10, 0x1, "c7c263eb61ee1126eaf46055c808c52f09a88efeab7c43a6b7d427a00ab303802d136864661b7348d188bd20e0410f74d90fbcc1f42988ab5e4946e7a2720ca9bf1138a83dd348ebbf7394b9c1627db85633fec79c800d4bddbe25d05cbac0656e92a1d795780d2cc505a4431b76f65ce8bd89ea260ccd32368c1cb1f1e405151626212e39aa9e3533210137c0ad3f79bac149afb7ac83ab4ab355f531bd2c14847666f4661b76f8eb607b153d1524b18151899b3c104ec4a1a24dd125"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x3, 0x5, 0x6, "947ff423", "13814b0c"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0x1, 0x0, 0x26, 0x200, 0xda0}}}, &(0x7f0000000b40)={0x44, &(0x7f0000000600)={0x0, 0x15, 0xcd, "955e88bf7a62eeccb5ca335c4a9b0bc50388ac244ddb72220d0a7b890cb87411db879621f49872ed919c94a04adbf0b5f8a2494ac86d288805ed41b735a113a5c6273a70b01a54931542360426297bfd22b73c2cefe56197ff35d119460eae8170dfaa00fa7d1c69f08896592839f810921e0b6f054f44285c00264d85e92897d707077de1cfa539fe22076da0d8db82969ff43e6d89b6aedd6046d9ba2dc249204fc88d6b1face5894c2d404ec048a7475513d0a9de329dbd38a166ed5378acbd2285965f8a26967a1410f54d"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x1008, 0x20}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0xbc}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000000880)={0x40, 0xb, 0x2, "b235"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000900)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000940)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000980)={0x40, 0x19, 0x2, "ba53"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0xc9}})
r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCGSTRING(r3, 0x81044804, &(0x7f0000000100)={0x1, "8e"})

[  234.140292][ T7367] input: syz1 as /devices/virtual/input/input15
16:08:24 executing program 1:
pipe(&(0x7f00000001c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
write$uinput_user_dev(r1, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2)
write$uinput_user_dev(r1, &(0x7f0000000fc0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$uinput_user_dev(r1, &(0x7f0000000a40)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8]}, 0x45c)
pipe(&(0x7f0000000140))

[  234.484763][ T7379] input: syz1 as /devices/virtual/input/input16
16:08:24 executing program 1:
pipe(&(0x7f00000001c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
write$uinput_user_dev(r1, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2)
write$uinput_user_dev(r1, &(0x7f0000000fc0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$uinput_user_dev(r1, &(0x7f0000000a40)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8]}, 0x45c)

[  234.639026][ T6661] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  234.886948][ T7389] input: syz1 as /devices/virtual/input/input17
16:08:25 executing program 1:
pipe(&(0x7f00000001c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
write$uinput_user_dev(r1, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2)
write$uinput_user_dev(r1, &(0x7f0000000fc0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)

[  235.000067][ T6661] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  235.010187][ T6661] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  235.019847][ T6661] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.038821][ T6661] usb 1-1: config 0 descriptor??
[  235.220037][ T6661] rc_core: IR keymap rc-hauppauge not found
[  235.226067][ T6661] Registered IR keymap rc-empty
[  235.232703][ T6661] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  235.245401][ T6661] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input18
[  235.436640][ T7410] input: syz1 as /devices/virtual/input/input19
[  235.579061][    C1] igorplugusb 1-1:0.0: receive overflow, at least 25 lost
16:08:25 executing program 1:
pipe(&(0x7f00000001c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
write$uinput_user_dev(r1, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2)
write$uinput_user_dev(r1, &(0x7f0000000fc0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}, 0x45c)

[  236.019030][    C1] igorplugusb 1-1:0.0: receive overflow, at least 34 lost
[  236.224071][ T7375] udc-core: couldn't find an available UDC or it's busy
[  236.231503][ T7375] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
16:08:26 executing program 1:
pipe(&(0x7f00000001c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
write$uinput_user_dev(r1, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2)

[  236.356690][ T2793] usb 1-1: USB disconnect, device number 7
16:08:27 executing program 1:
pipe(&(0x7f00000001c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
write$uinput_user_dev(r1, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0)

16:08:27 executing program 0:
r0 = syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000dc0)={0x14, &(0x7f0000000bc0)={0x20, 0x0, 0x45, {0x45, 0x3, "647bf184c352c1e4bbed91dedaa5eca640e6196285f10dbd685ee438dc385a1f174819391f07f81a2cc7436eb1085e70936c8b9ba480c619b6890d7882e9e27a01599a"}}, &(0x7f0000000c40)={0x0, 0x3, 0xdd, @string={0xdd, 0x3, "3c352536bb293e04ff8b8a7c0985be5a2e42b525f2b61133e592dbbe9da33ed05a94053f6bef6e2d839f445cb1d239abb78ec3d134b04831f785238f686bb0d07e9ee8279a5881dbaf950e2a74a932cf6a68326bcc450468e6e211e42077ea1ece01852222526795479433d3b2a4b3dce60da2d983beb7cadc8ff78f3b4616fb6fe1ea783da4458f12105ae03cb65fd26affb6c9c3449e7d406357d49d1c1d2a266fd79e032321b0e55860fe74784e464b616e62866e23e6f3ca3bfb5e428f685fc368310ed89977c66f40f40c70760ec02e0f9ee8562ff95eb5f8"}}, &(0x7f0000000d40)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "d9a4fa07"}]}}, &(0x7f0000000d80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x27, 0x81, 0x1, {0x22, 0x8e8}}}}, &(0x7f0000001080)={0x18, &(0x7f0000000e00)={0x20, 0x0, 0xd8, "57bcf53c7be60d9ecc256c8d428412ad0cfb5cb385b8d84baba5ad890f396cdea26ddda91344209fbc613f913df316ab371c64b9501a7a5cc8c1f33c1de80ad307ba2f5da91e59344cc588e0313c0972df2e7a3c369def164ebbb7fa8652282e8a583a334794fd019e435ac3b955e8c040f0f6373a13670da31ced93b4052dbeb8e9854a7b052ceaf996b065ffe66c7f57ef8e95bad39eba5503e2cbaf6b510f5e1e3d6a61837338436664f51de4be6c7d3b1ddcb009e9a52e0a32a1fed51b51cced9fc6327b2f4c9714631c9f9c321a8f9ad5ba52190ed1"}, &(0x7f0000000f00)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000f40)={0x0, 0x8, 0x1}, &(0x7f0000000f80)={0x20, 0x1, 0x80, "232e8aa50a9ddb66a1a1157c4223986ae8df6f686091e6f1b577a6cb21b2dbc513b04ec25fe7e3538395011b0eb62137d39f7ca7cb5833836b2c0f92ec6971ee17bc8388de07a926828617c274d5c43f0b630d6d699e01d060a247db9c2ad207a488d44aabd6b71f42a41107092585e6537f6b08eec6e530c794efe9b4389765"}, &(0x7f0000001040)={0x20, 0x3, 0x1, 0xff}})
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a504bd40eb030200c0ba0000000109021b0001000000000904000001b504b100090581"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, 0x0, &(0x7f0000001980)={0x18, &(0x7f0000000c40)={0x0, 0x0, 0x1d, "e343190c1cd373f97e0de06496b67817a7e40c738f99c1add77d099329"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, &(0x7f0000001240)={0x14, &(0x7f00000010c0)={0x20, 0x23, 0x96, {0x96, 0x5, "0795acdd3a38c95e90dfe788b6c8ebabe15915f26cae8730d4d4f16b3883a06568bb23af608d149f001b4c28056acab2d6994aecf82d0d39553596befc505017b18ac5e3820358366ccfbd7ed8317b0a14606a6e59bfcf33baeda8b0dbf93ec2a267751c56111311e4719fb88c39f33f28a9aacd641299a56a9693785b82638eafd2d37e48c80cc1ef12442884eda8159810635e"}}, &(0x7f0000001180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42a}}, &(0x7f00000011c0)={0x0, 0x22, 0x22, {[@local=@item_012={0x1, 0x2, 0x5, "f7"}, @main=@item_012={0x2, 0x0, 0x8, "48ab"}, @main=@item_4={0x3, 0x0, 0x9, "78ac2a32"}, @local=@item_012={0x1, 0x2, 0xa, 'D'}, @global=@item_4={0x3, 0x1, 0x5, "22072c89"}, @local=@item_012={0x2, 0x2, 0x2, "12e0"}, @main=@item_012={0x2, 0x0, 0x8, "e4f2"}, @local=@item_4={0x3, 0x2, 0x9, "1654c1ff"}, @main=@item_012={0x0, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x2, "c7030b5a"}]}}, &(0x7f0000001200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x4, 0x1, {0x22, 0xa57}}}}, &(0x7f0000001400)={0x18, &(0x7f0000001280)={0x20, 0x17, 0x54, "52702df1c554dcd12bbe1c8810339b250196d49e5cb9e26ab3956589d8fcdb0da72a6b312f09c5a0e78aa1b785f5213024af2a4967a075b6820b05db8a43f39b1082f0ae8b91bd3153f065201ec11244368633ea"}, &(0x7f0000001300)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001340)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000001380)={0x20, 0x1, 0x3, "fff075"}, &(0x7f00000013c0)={0x20, 0x3, 0x1}})
syz_usb_control_io$printer(r1, &(0x7f0000001500)={0xc, &(0x7f0000001440)={0x20, 0x21, 0x69, {0x69, 0x23, "a5c6ef83681321c55d2bb7d8646018202d7076b7f155089e14dcc13b77a462d8a9339c5ca5f16fa6ae6868ad6e409bef554b45b862eb654b04e43e2186df2bd076f0840997dbb68f8ec4387766c5ba2716703bee4b8153d0a00144607347da0184f992b81de55b"}}, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140c}}}, &(0x7f0000001800)={0x1c, &(0x7f0000001540)={0x20, 0x6, 0xf8, "5d42227254be739722200f0f4885fd25e3f574a63c4b6021853323dcab31f87b33975d0989644ff5986d40f88bb8ee9cafc0180e6a418ffe7769883f3bbd0cdc05083f3bd44efde757e0f646c2c69300783e145deb1ed1d0530bb148242cdcf70d207dd7bbfbf74f9db616f7f0d173a47d94c4d4f8d509a856a851b62f0de692ad6fa26cb80a194664c95ba1ce4166834cd8d12d0a14b5b6ab612220a05ab99d54608331c52bb9d3db0c4a6ab18b02a28b930ff5ec2be56a22afa1ce765c4ec3007910cce0309911de44859bbb8d57f1c16ca3afd823f898459bd4be73bd85d76fb41014126fd46df639b02b31cc7dca34c2c8a2989a2cb9"}, &(0x7f0000001640)={0x0, 0xa, 0x1}, &(0x7f0000001680)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000016c0)={0x20, 0x0, 0x98, {0x96, "9b0255e67369bcddcc70220857c00c09cf362a03f43ac1d2daea997e0e301d76754632910654ddca111e32dfa9ca7f0bcfeef14bae52bbf9f6c77142a6da20e33eae3a9b8cdb3c27fb525f92501a4bedacba01380baf19032e6904683abc4990eddb1ce4e4492e73cbac7d37b925af8db4268f12d2fe799e0fafc4ce9a98bc93490d2d46d7603295bcf7d642e26f8c254b3f549e946a"}}, &(0x7f0000001780)={0x20, 0x1, 0x1, 0x1}, &(0x7f00000017c0)={0x20, 0x0, 0x1, 0xb1}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x14, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0xa, "0a5dcaac"}, @global=@item_012={0x2, 0x1, 0x0, "72f2"}, @main=@item_012={0x1, 0x0, 0x0, "c2"}, @main=@item_4={0x3, 0x0, 0x0, "bd44669b"}]}}, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000a80)={0x14, 0x0, &(0x7f00000009c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}, 0x0, 0x0}, 0x0)
r2 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x12c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x10, 0xcf, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x7f, {0x9, 0x21, 0x7, 0x5, 0x1, {0x22, 0xbc9}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xec, 0x95, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x81, 0x9}}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x8, 0x28, 0x7, 0x10, 0x3f}, 0x31, &(0x7f0000000080)={0x5, 0xf, 0x31, 0x2, [@ssp_cap={0x18, 0x10, 0xa, 0xff, 0x3, 0x10001, 0xe100, 0x6b8, [0xfe40a0, 0x30, 0xc000]}, @ss_container_id={0x14, 0x10, 0x4, 0x1f, "4e5ce0bba96453a7ce6ac29963ccb00e"}]}, 0x1, [{0x47, &(0x7f0000000240)=@string={0x47, 0x3, "7e3f2e546423325aba9ec72ed10d17f34af4eca8331bb060239df5f367d69bf11d6339c0ffbe537d618ae85c0707103ec5445dc46d1b2abbeca0031d9aff3e3352ce736fb6"}}]})
syz_usb_control_io(r2, &(0x7f00000005c0)={0x18, &(0x7f00000002c0)={0x0, 0x3, 0x90, {0x90, 0x31, "831a973eb7652fd408c8a2fe53df0483cf74edc8cf4f683a87f62daec6358885165e89baa2ddb18c4830e75b3779e72079c5fa664b1c2ed17374b7b2a08ae153dc223560a6aa6f3b7fe6f44333e424618e38e355e44c71d0d492a0c68509882b80205778523295186139d5ee5e6cc711c3b80bd757ccbe24b52dc7f1081cebd76eee1866b6e6446054bf7398b163"}}, &(0x7f0000000380)={0x0, 0x3, 0xd3, @string={0xd3, 0x3, "685088b11325ea9b8beb7a915a0f892c633453cc77a815131d91ba3e35f4581a4f5c0ce6e6230268caa9830ac57769376db7d94bd5f2b4c4b3c76cff25b4c22d707a6d54ee919c78e7a945f12331b648625fcc920940ee1f288ca901812752a24cb02bdb97d6f7ccca1578437b9459d365b3964c2fc5d5a17b9cfb2288acbe618d5b223af6203ca6f5a7c7f89660781f0d3604e6ec3df4c42e20e692d8009e2f36260d5a77c6013e9ca33c8554c4af3ba5855e6a970d08662c4c8be5df7c4394a670b81494dc25357db234c0d7d1d5fac5"}}, &(0x7f0000000480)={0x0, 0xf, 0xd9, {0x5, 0xf, 0xd9, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0xa4, "2dd7ecb2cb1dc937a4e5ce5feaf28f11"}, @generic={0xc0, 0x10, 0x1, "c7c263eb61ee1126eaf46055c808c52f09a88efeab7c43a6b7d427a00ab303802d136864661b7348d188bd20e0410f74d90fbcc1f42988ab5e4946e7a2720ca9bf1138a83dd348ebbf7394b9c1627db85633fec79c800d4bddbe25d05cbac0656e92a1d795780d2cc505a4431b76f65ce8bd89ea260ccd32368c1cb1f1e405151626212e39aa9e3533210137c0ad3f79bac149afb7ac83ab4ab355f531bd2c14847666f4661b76f8eb607b153d1524b18151899b3c104ec4a1a24dd125"}]}}, &(0x7f00000001c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x3, 0x5, 0x6, "947ff423", "13814b0c"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x0, 0x1, 0x0, 0x26, 0x200, 0xda0}}}, &(0x7f0000000b40)={0x44, &(0x7f0000000600)={0x0, 0x15, 0xcd, "955e88bf7a62eeccb5ca335c4a9b0bc50388ac244ddb72220d0a7b890cb87411db879621f49872ed919c94a04adbf0b5f8a2494ac86d288805ed41b735a113a5c6273a70b01a54931542360426297bfd22b73c2cefe56197ff35d119460eae8170dfaa00fa7d1c69f08896592839f810921e0b6f054f44285c00264d85e92897d707077de1cfa539fe22076da0d8db82969ff43e6d89b6aedd6046d9ba2dc249204fc88d6b1face5894c2d404ec048a7475513d0a9de329dbd38a166ed5378acbd2285965f8a26967a1410f54d"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x1008, 0x20}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0xbc}, &(0x7f0000000840)={0x40, 0x9, 0x1, 0x80}, &(0x7f0000000880)={0x40, 0xb, 0x2, "b235"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000900)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000940)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000980)={0x40, 0x19, 0x2, "ba53"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000000a40)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000ac0)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000b00)={0x40, 0x21, 0x1, 0xc9}})
r3 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCGSTRING(r3, 0x81044804, &(0x7f0000000100)={0x1, "8e"})

16:08:27 executing program 1:
pipe(&(0x7f00000001c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
write$uinput_user_dev(r1, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)
pipe(&(0x7f00000000c0))

[  237.441281][ T6661] usb 1-1: new high-speed USB device number 8 using dummy_hcd
16:08:27 executing program 1:
pipe(&(0x7f00000001c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
write$uinput_user_dev(r1, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

[  237.810200][ T6661] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  237.820826][ T6661] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  237.830347][ T6661] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.925392][ T6661] usb 1-1: config 0 descriptor??
16:08:28 executing program 1:
pipe(&(0x7f00000001c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

[  238.091627][ T6661] rc_core: IR keymap rc-hauppauge not found
[  238.097788][ T6661] Registered IR keymap rc-empty
[  238.104339][ T6661] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  238.170542][ T6661] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input25
[  238.478906][    C1] igorplugusb 1-1:0.0: receive overflow, at least 25 lost
16:08:28 executing program 1:
pipe(&(0x7f00000001c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

[  238.919038][    C1] igorplugusb 1-1:0.0: receive overflow, at least 34 lost
16:08:29 executing program 1:
pipe(&(0x7f00000001c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

[  239.134156][ T7437] udc-core: couldn't find an available UDC or it's busy
[  239.141490][ T7437] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  239.186078][ T6661] usb 1-1: USB disconnect, device number 8
16:08:29 executing program 1:
pipe(&(0x7f00000001c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
write$uinput_user_dev(r1, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:08:29 executing program 1:
pipe(&(0x7f00000001c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
write$uinput_user_dev(r1, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:08:30 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, 0x0, 0x0)
exit_group(0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=ANY=[@ANYBLOB='/mev/loop0\x00'], &(0x7f0000000340)='./file0\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@index_off}]})

16:08:30 executing program 1:
pipe(&(0x7f00000001c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
write$uinput_user_dev(r1, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

[  240.159753][ T7482] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  240.168845][ T7482] overlayfs: missing 'lowerdir'
16:08:30 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, 0x0, 0x0)
exit_group(0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=ANY=[@ANYBLOB='/mev/loop0\x00'], &(0x7f0000000340)='./file0\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@index_off}]})

16:08:30 executing program 2:
read(0xffffffffffffffff, &(0x7f0000000000)=""/221, 0xdd)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f0000000100)=0x5)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80002, 0xa)
r1 = socket$inet6(0xa, 0x2, 0x3f)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r2=>r1, {0x400}}, './file0/file0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f00000005c0)={0x6, 0x1, 0x0, {0x8, 0xcc}, 0x1ff, 0x80000001})
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
recvfrom$l2tp6(r3, &(0x7f0000000680)=""/228, 0xe4, 0x40012241, &(0x7f0000000780)={0xa, 0x0, 0x0, @remote}, 0x20)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f00000007c0))
r4 = openat$sysfs(0xffffff9c, &(0x7f0000000800)='/sys/module/msr', 0x282100, 0x1f0)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f0000000840)={0xb0000010})
syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@textreal={0x8, &(0x7f0000000880)="0f01c266b8b64300000f23c00f21f86635000000000f23f8baf80c66b8d060798266efbafc0c66ed0f019a94000f070fae47e566b9fa0300000f3266b9800000c00f326635004000000f3066b8bc66ffff0f23c00f21f86635030002000f23f83e0f2318", 0x64}], 0x1, 0x25, &(0x7f0000000940)=[@flags={0x3, 0x10008}], 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=@deltfilter={0x74, 0x2d, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0x8, 0xf}, {0x1, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x9}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x36}}, @TCA_RATE={0x6, 0x5, {0x80, 0x20}}, @TCA_CHAIN={0x8, 0xb, 0x6f55f42e}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0xfc}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20046011}, 0x90)
r5 = fsmount(r2, 0x0, 0xf1)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000b40)={0x60002011})
ioctl$FIONCLEX(r3, 0x5450)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000b80))

16:08:30 executing program 1:
pipe(&(0x7f00000001c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

[  240.664865][ T7491] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  240.674313][ T7491] overlayfs: missing 'lowerdir'
16:08:31 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, 0x0, 0x0)
exit_group(0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=ANY=[@ANYBLOB='/mev/loop0\x00'], &(0x7f0000000340)='./file0\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@index_off}]})

16:08:31 executing program 1:
pipe(&(0x7f00000001c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

[  241.348267][ T7497] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  241.357488][ T7497] overlayfs: missing 'lowerdir'
16:08:31 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, 0x0, 0x0)
exit_group(0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount(&(0x7f0000000240)=ANY=[@ANYBLOB='/mev/loop0\x00'], &(0x7f0000000340)='./file0\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@index_off}]})

16:08:31 executing program 1:
pipe(&(0x7f00000001c0))
r0 = socket$inet_udp(0x2, 0x2, 0x0)
close(r0)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:08:32 executing program 1:
pipe(&(0x7f00000001c0))
socket$inet_udp(0x2, 0x2, 0x0)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

[  242.183035][ T7508] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  242.192019][ T7508] overlayfs: missing 'lowerdir'
16:08:32 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, 0x0, 0x0)
exit_group(0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f0000000280)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@index_off}]})

16:08:32 executing program 1:
pipe(&(0x7f00000001c0))
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

[  242.806076][ T7515] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  242.815108][ T7515] overlayfs: missing 'lowerdir'
16:08:33 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, 0x0, 0x0)
exit_group(0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@index_off}]})

16:08:33 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

[  243.433314][ T7528] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  243.442279][ T7528] overlayfs: missing 'lowerdir'
16:08:33 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

[  244.338006][ T7507] chnl_net:caif_netlink_parms(): no params data found
[  244.795902][ T7507] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.804216][ T7507] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.814208][ T7507] device bridge_slave_0 entered promiscuous mode
[  244.862969][ T7507] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.870737][ T7507] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.881132][ T7507] device bridge_slave_1 entered promiscuous mode
[  245.020537][ T7507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  245.042138][ T7507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  245.151143][ T7507] team0: Port device team_slave_0 added
[  245.173537][ T7507] team0: Port device team_slave_1 added
[  245.240233][   T35] Bluetooth: hci2: command 0x0409 tx timeout
[  245.268119][ T7507] batman_adv: batadv0: Adding interface: batadv_slave_0
[  245.276163][ T7507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  245.303555][ T7507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  245.329808][ T7507] batman_adv: batadv0: Adding interface: batadv_slave_1
[  245.336865][ T7507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  245.363302][ T7507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  245.478203][ T7507] device hsr_slave_0 entered promiscuous mode
[  245.493319][ T7507] device hsr_slave_1 entered promiscuous mode
[  245.505822][ T7507] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  245.514357][ T7507] Cannot create hsr debugfs directory
[  245.921940][ T7507] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  245.948998][ T7507] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  245.973115][ T7507] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  246.015040][ T7507] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  246.367438][ T7507] 8021q: adding VLAN 0 to HW filter on device bond0
[  246.416816][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  246.427047][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  246.455543][ T7507] 8021q: adding VLAN 0 to HW filter on device team0
[  246.481032][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  246.491564][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  246.501558][ T2793] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.509017][ T2793] bridge0: port 1(bridge_slave_0) entered forwarding state
[  246.561021][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  246.571191][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  246.581517][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  246.591295][ T2793] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.598761][ T2793] bridge0: port 2(bridge_slave_1) entered forwarding state
[  246.608130][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  246.695646][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  246.707468][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  246.721118][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  246.732102][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  246.743307][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  246.754543][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  246.765221][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  246.775375][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  246.785609][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  246.806371][ T7507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  246.894832][ T7507] 8021q: adding VLAN 0 to HW filter on device batadv0
[  246.905628][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  246.916482][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  246.924542][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  247.029085][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  247.040465][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  247.115359][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  247.128156][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  247.154773][ T7507] device veth0_vlan entered promiscuous mode
[  247.165195][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  247.174910][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  247.221791][ T7507] device veth1_vlan entered promiscuous mode
[  247.319137][ T2793] Bluetooth: hci2: command 0x041b tx timeout
[  247.340779][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  247.351248][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  247.375792][ T7507] device veth0_macvtap entered promiscuous mode
[  247.402947][ T7507] device veth1_macvtap entered promiscuous mode
[  247.472218][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  247.483052][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.493217][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  247.503954][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.520372][ T7507] batman_adv: batadv0: Interface activated: batadv_slave_0
[  247.530353][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  247.542335][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  247.552290][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  247.562876][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  247.596068][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  247.606874][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.617078][ T7507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  247.627877][ T7507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  247.644412][ T7507] batman_adv: batadv0: Interface activated: batadv_slave_1
[  247.654179][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  247.664856][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  247.700276][ T7507] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  247.709830][ T7507] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  247.718969][ T7507] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  247.727887][ T7507] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  248.457934][    T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  248.466441][    T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  248.480744][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  248.621246][    T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  248.629638][    T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  248.665171][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
16:08:39 executing program 2:
read(0xffffffffffffffff, &(0x7f0000000000)=""/221, 0xdd)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f0000000100)=0x5)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80002, 0xa)
r1 = socket$inet6(0xa, 0x2, 0x3f)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r2=>r1, {0x400}}, './file0/file0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f00000005c0)={0x6, 0x1, 0x0, {0x8, 0xcc}, 0x1ff, 0x80000001})
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
recvfrom$l2tp6(r3, &(0x7f0000000680)=""/228, 0xe4, 0x40012241, &(0x7f0000000780)={0xa, 0x0, 0x0, @remote}, 0x20)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f00000007c0))
r4 = openat$sysfs(0xffffff9c, &(0x7f0000000800)='/sys/module/msr', 0x282100, 0x1f0)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f0000000840)={0xb0000010})
syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@textreal={0x8, &(0x7f0000000880)="0f01c266b8b64300000f23c00f21f86635000000000f23f8baf80c66b8d060798266efbafc0c66ed0f019a94000f070fae47e566b9fa0300000f3266b9800000c00f326635004000000f3066b8bc66ffff0f23c00f21f86635030002000f23f83e0f2318", 0x64}], 0x1, 0x25, &(0x7f0000000940)=[@flags={0x3, 0x10008}], 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=@deltfilter={0x74, 0x2d, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0x8, 0xf}, {0x1, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x9}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x36}}, @TCA_RATE={0x6, 0x5, {0x80, 0x20}}, @TCA_CHAIN={0x8, 0xb, 0x6f55f42e}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0xfc}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20046011}, 0x90)
r5 = fsmount(r2, 0x0, 0xf1)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000b40)={0x60002011})
ioctl$FIONCLEX(r3, 0x5450)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000b80))

16:08:39 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, 0x0, 0x0)
exit_group(0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@index_off}]})

16:08:39 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

[  249.400807][ T2793] Bluetooth: hci2: command 0x040f tx timeout
16:08:39 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:08:39 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, 0x0, 0x0)
exit_group(0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@index_off}]})

16:08:40 executing program 2:
read(0xffffffffffffffff, &(0x7f0000000000)=""/221, 0xdd)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f0000000100)=0x5)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80002, 0xa)
r1 = socket$inet6(0xa, 0x2, 0x3f)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r2=>r1, {0x400}}, './file0/file0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f00000005c0)={0x6, 0x1, 0x0, {0x8, 0xcc}, 0x1ff, 0x80000001})
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
recvfrom$l2tp6(r3, &(0x7f0000000680)=""/228, 0xe4, 0x40012241, &(0x7f0000000780)={0xa, 0x0, 0x0, @remote}, 0x20)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f00000007c0))
r4 = openat$sysfs(0xffffff9c, &(0x7f0000000800)='/sys/module/msr', 0x282100, 0x1f0)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f0000000840)={0xb0000010})
syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@textreal={0x8, &(0x7f0000000880)="0f01c266b8b64300000f23c00f21f86635000000000f23f8baf80c66b8d060798266efbafc0c66ed0f019a94000f070fae47e566b9fa0300000f3266b9800000c00f326635004000000f3066b8bc66ffff0f23c00f21f86635030002000f23f83e0f2318", 0x64}], 0x1, 0x25, &(0x7f0000000940)=[@flags={0x3, 0x10008}], 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=@deltfilter={0x74, 0x2d, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0x8, 0xf}, {0x1, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x9}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x36}}, @TCA_RATE={0x6, 0x5, {0x80, 0x20}}, @TCA_CHAIN={0x8, 0xb, 0x6f55f42e}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0xfc}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20046011}, 0x90)
r5 = fsmount(r2, 0x0, 0xf1)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000b40)={0x60002011})
ioctl$FIONCLEX(r3, 0x5450)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000b80))

16:08:40 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:08:40 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, 0x0, 0x0)
exit_group(0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@index_off}]})

16:08:40 executing program 2:
read(0xffffffffffffffff, &(0x7f0000000000)=""/221, 0xdd)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f0000000100)=0x5)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80002, 0xa)
r1 = socket$inet6(0xa, 0x2, 0x3f)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r2=>r1, {0x400}}, './file0/file0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f00000005c0)={0x6, 0x1, 0x0, {0x8, 0xcc}, 0x1ff, 0x80000001})
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
recvfrom$l2tp6(r3, &(0x7f0000000680)=""/228, 0xe4, 0x40012241, &(0x7f0000000780)={0xa, 0x0, 0x0, @remote}, 0x20)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f00000007c0))
r4 = openat$sysfs(0xffffff9c, &(0x7f0000000800)='/sys/module/msr', 0x282100, 0x1f0)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f0000000840)={0xb0000010})
syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@textreal={0x8, &(0x7f0000000880)="0f01c266b8b64300000f23c00f21f86635000000000f23f8baf80c66b8d060798266efbafc0c66ed0f019a94000f070fae47e566b9fa0300000f3266b9800000c00f326635004000000f3066b8bc66ffff0f23c00f21f86635030002000f23f83e0f2318", 0x64}], 0x1, 0x25, &(0x7f0000000940)=[@flags={0x3, 0x10008}], 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=@deltfilter={0x74, 0x2d, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0x8, 0xf}, {0x1, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x9}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x36}}, @TCA_RATE={0x6, 0x5, {0x80, 0x20}}, @TCA_CHAIN={0x8, 0xb, 0x6f55f42e}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0xfc}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20046011}, 0x90)
r5 = fsmount(r2, 0x0, 0xf1)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000b40)={0x60002011})
ioctl$FIONCLEX(r3, 0x5450)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000b80))

16:08:40 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:08:41 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, 0x0, 0x0)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@index_off}]})

16:08:41 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

[  251.226539][ T7935] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  251.235511][ T7935] overlayfs: missing 'lowerdir'
16:08:41 executing program 2:
read(0xffffffffffffffff, &(0x7f0000000000)=""/221, 0xdd)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f0000000100)=0x5)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80002, 0xa)
r1 = socket$inet6(0xa, 0x2, 0x3f)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r2=>r1, {0x400}}, './file0/file0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f00000005c0)={0x6, 0x1, 0x0, {0x8, 0xcc}, 0x1ff, 0x80000001})
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
recvfrom$l2tp6(r3, &(0x7f0000000680)=""/228, 0xe4, 0x40012241, &(0x7f0000000780)={0xa, 0x0, 0x0, @remote}, 0x20)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f00000007c0))
r4 = openat$sysfs(0xffffff9c, &(0x7f0000000800)='/sys/module/msr', 0x282100, 0x1f0)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f0000000840)={0xb0000010})
syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@textreal={0x8, &(0x7f0000000880)="0f01c266b8b64300000f23c00f21f86635000000000f23f8baf80c66b8d060798266efbafc0c66ed0f019a94000f070fae47e566b9fa0300000f3266b9800000c00f326635004000000f3066b8bc66ffff0f23c00f21f86635030002000f23f83e0f2318", 0x64}], 0x1, 0x25, &(0x7f0000000940)=[@flags={0x3, 0x10008}], 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=@deltfilter={0x74, 0x2d, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0x8, 0xf}, {0x1, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x9}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x36}}, @TCA_RATE={0x6, 0x5, {0x80, 0x20}}, @TCA_CHAIN={0x8, 0xb, 0x6f55f42e}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0xfc}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20046011}, 0x90)
r5 = fsmount(r2, 0x0, 0xf1)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000b40)={0x60002011})
ioctl$FIONCLEX(r3, 0x5450)

16:08:41 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, 0x0, 0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@index_off}]})

[  251.489175][ T2793] Bluetooth: hci2: command 0x0419 tx timeout
16:08:41 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

[  251.825301][ T7946] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  251.836690][ T7946] overlayfs: missing 'lowerdir'
16:08:42 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, 0x0, 0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@index_off}]})

16:08:42 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:08:42 executing program 2:
read(0xffffffffffffffff, &(0x7f0000000000)=""/221, 0xdd)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f0000000100)=0x5)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80002, 0xa)
r1 = socket$inet6(0xa, 0x2, 0x3f)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r2=>r1, {0x400}}, './file0/file0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f00000005c0)={0x6, 0x1, 0x0, {0x8, 0xcc}, 0x1ff, 0x80000001})
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
recvfrom$l2tp6(r3, &(0x7f0000000680)=""/228, 0xe4, 0x40012241, &(0x7f0000000780)={0xa, 0x0, 0x0, @remote}, 0x20)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f00000007c0))
r4 = openat$sysfs(0xffffff9c, &(0x7f0000000800)='/sys/module/msr', 0x282100, 0x1f0)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f0000000840)={0xb0000010})
syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@textreal={0x8, &(0x7f0000000880)="0f01c266b8b64300000f23c00f21f86635000000000f23f8baf80c66b8d060798266efbafc0c66ed0f019a94000f070fae47e566b9fa0300000f3266b9800000c00f326635004000000f3066b8bc66ffff0f23c00f21f86635030002000f23f83e0f2318", 0x64}], 0x1, 0x25, &(0x7f0000000940)=[@flags={0x3, 0x10008}], 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=@deltfilter={0x74, 0x2d, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0x8, 0xf}, {0x1, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x9}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x36}}, @TCA_RATE={0x6, 0x5, {0x80, 0x20}}, @TCA_CHAIN={0x8, 0xb, 0x6f55f42e}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0xfc}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20046011}, 0x90)
r5 = fsmount(r2, 0x0, 0xf1)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000000b40)={0x60002011})

[  252.254297][ T7954] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  252.263448][ T7954] overlayfs: missing 'lowerdir'
16:08:42 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff7000/0x9000)=nil, 0x0, 0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@index_off}]})

16:08:42 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

[  252.746269][ T7965] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  252.757977][ T7965] overlayfs: missing 'lowerdir'
16:08:43 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@index_off}]})

16:08:43 executing program 2:
read(0xffffffffffffffff, &(0x7f0000000000)=""/221, 0xdd)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f0000000100)=0x5)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80002, 0xa)
r1 = socket$inet6(0xa, 0x2, 0x3f)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r2=>r1, {0x400}}, './file0/file0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f00000005c0)={0x6, 0x1, 0x0, {0x8, 0xcc}, 0x1ff, 0x80000001})
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
recvfrom$l2tp6(r3, &(0x7f0000000680)=""/228, 0xe4, 0x40012241, &(0x7f0000000780)={0xa, 0x0, 0x0, @remote}, 0x20)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f00000007c0))
r4 = openat$sysfs(0xffffff9c, &(0x7f0000000800)='/sys/module/msr', 0x282100, 0x1f0)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f0000000840)={0xb0000010})
syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@textreal={0x8, &(0x7f0000000880)="0f01c266b8b64300000f23c00f21f86635000000000f23f8baf80c66b8d060798266efbafc0c66ed0f019a94000f070fae47e566b9fa0300000f3266b9800000c00f326635004000000f3066b8bc66ffff0f23c00f21f86635030002000f23f83e0f2318", 0x64}], 0x1, 0x25, &(0x7f0000000940)=[@flags={0x3, 0x10008}], 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=@deltfilter={0x74, 0x2d, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0x8, 0xf}, {0x1, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x9}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x36}}, @TCA_RATE={0x6, 0x5, {0x80, 0x20}}, @TCA_CHAIN={0x8, 0xb, 0x6f55f42e}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0xfc}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20046011}, 0x90)
r5 = fsmount(r2, 0x0, 0xf1)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r5, 0x84, 0x21, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4)

[  253.207900][ T7970] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  253.217063][ T7970] overlayfs: missing 'lowerdir'
16:08:43 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:08:43 executing program 0:
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@index_off}]})

16:08:43 executing program 2:
read(0xffffffffffffffff, &(0x7f0000000000)=""/221, 0xdd)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f0000000100)=0x5)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80002, 0xa)
r1 = socket$inet6(0xa, 0x2, 0x3f)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r2=>r1, {0x400}}, './file0/file0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f00000005c0)={0x6, 0x1, 0x0, {0x8, 0xcc}, 0x1ff, 0x80000001})
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
recvfrom$l2tp6(r3, &(0x7f0000000680)=""/228, 0xe4, 0x40012241, &(0x7f0000000780)={0xa, 0x0, 0x0, @remote}, 0x20)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f00000007c0))
r4 = openat$sysfs(0xffffff9c, &(0x7f0000000800)='/sys/module/msr', 0x282100, 0x1f0)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f0000000840)={0xb0000010})
syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@textreal={0x8, &(0x7f0000000880)="0f01c266b8b64300000f23c00f21f86635000000000f23f8baf80c66b8d060798266efbafc0c66ed0f019a94000f070fae47e566b9fa0300000f3266b9800000c00f326635004000000f3066b8bc66ffff0f23c00f21f86635030002000f23f83e0f2318", 0x64}], 0x1, 0x25, &(0x7f0000000940)=[@flags={0x3, 0x10008}], 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=@deltfilter={0x74, 0x2d, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0x8, 0xf}, {0x1, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x9}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x36}}, @TCA_RATE={0x6, 0x5, {0x80, 0x20}}, @TCA_CHAIN={0x8, 0xb, 0x6f55f42e}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0xfc}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20046011}, 0x90)
fsmount(r2, 0x0, 0xf1)

16:08:44 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:08:44 executing program 0:
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@index_off}]})

16:08:44 executing program 2:
read(0xffffffffffffffff, &(0x7f0000000000)=""/221, 0xdd)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f0000000100)=0x5)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80002, 0xa)
r1 = socket$inet6(0xa, 0x2, 0x3f)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r2=>r1, {0x400}}, './file0/file0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f00000005c0)={0x6, 0x1, 0x0, {0x8, 0xcc}, 0x1ff, 0x80000001})
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
recvfrom$l2tp6(r3, &(0x7f0000000680)=""/228, 0xe4, 0x40012241, &(0x7f0000000780)={0xa, 0x0, 0x0, @remote}, 0x20)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f00000007c0))
r4 = openat$sysfs(0xffffff9c, &(0x7f0000000800)='/sys/module/msr', 0x282100, 0x1f0)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f0000000840)={0xb0000010})
syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@textreal={0x8, &(0x7f0000000880)="0f01c266b8b64300000f23c00f21f86635000000000f23f8baf80c66b8d060798266efbafc0c66ed0f019a94000f070fae47e566b9fa0300000f3266b9800000c00f326635004000000f3066b8bc66ffff0f23c00f21f86635030002000f23f83e0f2318", 0x64}], 0x1, 0x25, &(0x7f0000000940)=[@flags={0x3, 0x10008}], 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)=@deltfilter={0x74, 0x2d, 0x400, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xb, 0x6}, {0x8, 0xf}, {0x1, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0x9}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x36}}, @TCA_RATE={0x6, 0x5, {0x80, 0x20}}, @TCA_CHAIN={0x8, 0xb, 0x6f55f42e}, @TCA_RATE={0x6, 0x5, {0x6, 0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0xfc}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20046011}, 0x90)

16:08:44 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:08:44 executing program 0:
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@index_off}]})

16:08:45 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:08:45 executing program 0:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@index_off}]})

16:08:45 executing program 2:
read(0xffffffffffffffff, &(0x7f0000000000)=""/221, 0xdd)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f0000000100)=0x5)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80002, 0xa)
r1 = socket$inet6(0xa, 0x2, 0x3f)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r2=>r1, {0x400}}, './file0/file0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f00000005c0)={0x6, 0x1, 0x0, {0x8, 0xcc}, 0x1ff, 0x80000001})
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
recvfrom$l2tp6(r3, &(0x7f0000000680)=""/228, 0xe4, 0x40012241, &(0x7f0000000780)={0xa, 0x0, 0x0, @remote}, 0x20)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f00000007c0))
r4 = openat$sysfs(0xffffff9c, &(0x7f0000000800)='/sys/module/msr', 0x282100, 0x1f0)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f0000000840)={0xb0000010})
syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@textreal={0x8, &(0x7f0000000880)="0f01c266b8b64300000f23c00f21f86635000000000f23f8baf80c66b8d060798266efbafc0c66ed0f019a94000f070fae47e566b9fa0300000f3266b9800000c00f326635004000000f3066b8bc66ffff0f23c00f21f86635030002000f23f83e0f2318", 0x64}], 0x1, 0x25, &(0x7f0000000940)=[@flags={0x3, 0x10008}], 0x1)

16:08:45 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:08:45 executing program 0:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@index_off}]})

16:08:46 executing program 2:
read(0xffffffffffffffff, &(0x7f0000000000)=""/221, 0xdd)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f0000000100)=0x5)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80002, 0xa)
r1 = socket$inet6(0xa, 0x2, 0x3f)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r2=>r1, {0x400}}, './file0/file0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f00000005c0)={0x6, 0x1, 0x0, {0x8, 0xcc}, 0x1ff, 0x80000001})
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
recvfrom$l2tp6(r3, &(0x7f0000000680)=""/228, 0xe4, 0x40012241, &(0x7f0000000780)={0xa, 0x0, 0x0, @remote}, 0x20)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f00000007c0))
r4 = openat$sysfs(0xffffff9c, &(0x7f0000000800)='/sys/module/msr', 0x282100, 0x1f0)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f0000000840)={0xb0000010})

16:08:46 executing program 0:
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@index_off}]})

16:08:46 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:08:46 executing program 2:
read(0xffffffffffffffff, &(0x7f0000000000)=""/221, 0xdd)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f0000000100)=0x5)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80002, 0xa)
r1 = socket$inet6(0xa, 0x2, 0x3f)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r2=>r1, {0x400}}, './file0/file0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f00000005c0)={0x6, 0x1, 0x0, {0x8, 0xcc}, 0x1ff, 0x80000001})
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
recvfrom$l2tp6(r3, &(0x7f0000000680)=""/228, 0xe4, 0x40012241, &(0x7f0000000780)={0xa, 0x0, 0x0, @remote}, 0x20)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f00000007c0))
openat$sysfs(0xffffff9c, &(0x7f0000000800)='/sys/module/msr', 0x282100, 0x1f0)

16:08:47 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@index_off}]})

16:08:47 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:08:47 executing program 2:
read(0xffffffffffffffff, &(0x7f0000000000)=""/221, 0xdd)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f0000000100)=0x5)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80002, 0xa)
r1 = socket$inet6(0xa, 0x2, 0x3f)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r2=>r1, {0x400}}, './file0/file0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f00000005c0)={0x6, 0x1, 0x0, {0x8, 0xcc}, 0x1ff, 0x80000001})
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
recvfrom$l2tp6(r3, &(0x7f0000000680)=""/228, 0xe4, 0x40012241, &(0x7f0000000780)={0xa, 0x0, 0x0, @remote}, 0x20)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r2, 0x8008f513, &(0x7f00000007c0))

16:08:47 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@index_off}]})

16:08:47 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:08:47 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@index_off}]})

16:08:48 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000200)={'syz0\x00', {0xffcb, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:08:48 executing program 2:
read(0xffffffffffffffff, &(0x7f0000000000)=""/221, 0xdd)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f0000000100)=0x5)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80002, 0xa)
r1 = socket$inet6(0xa, 0x2, 0x3f)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r2=>r1, {0x400}}, './file0/file0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f00000005c0)={0x6, 0x1, 0x0, {0x8, 0xcc}, 0x1ff, 0x80000001})
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
r3 = openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
recvfrom$l2tp6(r3, &(0x7f0000000680)=""/228, 0xe4, 0x40012241, &(0x7f0000000780)={0xa, 0x0, 0x0, @remote}, 0x20)

16:08:48 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@index_off}]})

16:08:48 executing program 2:
read(0xffffffffffffffff, &(0x7f0000000000)=""/221, 0xdd)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f0000000100)=0x5)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80002, 0xa)
r1 = socket$inet6(0xa, 0x2, 0x3f)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r2=>r1, {0x400}}, './file0/file0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f00000005c0)={0x6, 0x1, 0x0, {0x8, 0xcc}, 0x1ff, 0x80000001})
ioctl$BTRFS_IOC_SYNC(r1, 0x9408, 0x0)
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)

16:08:48 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, 0x0, 0x0)

16:08:48 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@index_off}]})

16:08:49 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, 0x0, 0x0)

16:08:49 executing program 2:
read(0xffffffffffffffff, &(0x7f0000000000)=""/221, 0xdd)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f0000000100)=0x5)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80002, 0xa)
r1 = socket$inet6(0xa, 0x2, 0x3f)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, <r2=>r1, {0x400}}, './file0/file0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f00000005c0)={0x6, 0x1, 0x0, {0x8, 0xcc}, 0x1ff, 0x80000001})
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)

16:08:49 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@index_off}]})

16:08:49 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, 0x0, 0x0)

16:08:50 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@index_off}]})

16:08:50 executing program 2:
read(0xffffffffffffffff, &(0x7f0000000000)=""/221, 0xdd)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f0000000100)=0x5)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80002, 0xa)
r1 = socket$inet6(0xa, 0x2, 0x3f)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0x400}}, './file0/file0\x00'})
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)

16:08:50 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {0x0, 0x1000, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:08:50 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@index_off}]})

16:08:50 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {0x0, 0x0, 0x4, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:08:50 executing program 2:
read(0xffffffffffffffff, &(0x7f0000000000)=""/221, 0xdd)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f0000000100)=0x5)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80002, 0xa)
r0 = socket$inet6(0xa, 0x2, 0x3f)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)

16:08:51 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', 0x0, 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@index_off}]})

16:08:51 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {0x0, 0x0, 0x0, 0x800}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:08:51 executing program 2:
read(0xffffffffffffffff, &(0x7f0000000000)=""/221, 0xdd)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f0000000100)=0x5)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80002, 0xa)
socket$inet6(0xa, 0x2, 0x3f)
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)

16:08:52 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x21, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:08:52 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:08:52 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80, 0xc13], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:08:52 executing program 2:
read(0xffffffffffffffff, &(0x7f0000000000)=""/221, 0xdd)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f0000000100)=0x5)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x80002, 0xa)
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)

[  262.347754][ T8138] overlayfs: missing 'lowerdir'
16:08:52 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) (fail_nth: 1)

16:08:52 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8, 0x80], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:08:52 executing program 2:
read(0xffffffffffffffff, &(0x7f0000000000)=""/221, 0xdd)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40047602, &(0x7f0000000100)=0x5)
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)

[  262.915529][ T8146] FAULT_INJECTION: forcing a failure.
[  262.915529][ T8146] name failslab, interval 1, probability 0, space 0, times 1
[  262.928829][ T8146] CPU: 0 PID: 8146 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0
[  262.937321][ T8146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  262.947503][ T8146] Call Trace:
[  262.950878][ T8146]  dump_stack_lvl+0x1ff/0x28e
[  262.955832][ T8146]  dump_stack+0x25/0x28
[  262.960173][ T8146]  should_fail+0x8bc/0x9c0
[  262.964848][ T8146]  __should_failslab+0x223/0x2b0
[  262.970041][ T8146]  should_failslab+0x29/0x70
[  262.974946][ T8146]  __kmalloc_track_caller+0x1ac/0x1180
[  262.980674][ T8146]  ? kmsan_get_shadow_origin_ptr+0x97/0xd0
[  262.986681][ T8146]  ? __se_sys_mount+0x114/0xa10
[  262.991731][ T8146]  ? strnlen_user+0x51b/0x660
[  262.996676][ T8146]  strndup_user+0x170/0x400
[  263.001449][ T8146]  __se_sys_mount+0x114/0xa10
[  263.006279][ T8146]  ? kmsan_get_metadata+0x11b/0x180
[  263.011628][ T8146]  ? kmsan_get_shadow_origin_ptr+0x97/0xd0
[  263.017593][ T8146]  ? kmsan_get_metadata+0x11b/0x180
[  263.022944][ T8146]  __ia32_sys_mount+0x157/0x1b0
[  263.027958][ T8146]  __do_fast_syscall_32+0x96/0xf0
[  263.033155][ T8146]  do_fast_syscall_32+0x34/0x70
[  263.038166][ T8146]  do_SYSENTER_32+0x1b/0x20
[  263.042828][ T8146]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  263.049392][ T8146] RIP: 0023:0xf6eca549
[  263.053563][ T8146] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00
[  263.073326][ T8146] RSP: 002b:00000000f44c45fc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  263.081883][ T8146] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000040
[  263.089972][ T8146] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000
[  263.098054][ T8146] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  263.106161][ T8146] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  263.114237][ T8146] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
16:08:53 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101, 0x8], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:08:53 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) (fail_nth: 2)

16:08:53 executing program 2:
read(0xffffffffffffffff, &(0x7f0000000000)=""/221, 0xdd)
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)

16:08:54 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87, 0x101], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

[  263.817563][ T8157] FAULT_INJECTION: forcing a failure.
[  263.817563][ T8157] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  263.831032][ T8157] CPU: 0 PID: 8157 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0
[  263.839624][ T8157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  263.849805][ T8157] Call Trace:
[  263.853172][ T8157]  dump_stack_lvl+0x1ff/0x28e
[  263.858042][ T8157]  dump_stack+0x25/0x28
[  263.862374][ T8157]  should_fail+0x8bc/0x9c0
[  263.866980][ T8157]  should_fail_usercopy+0x39/0x40
[  263.872237][ T8157]  _copy_from_user+0x5f/0x310
[  263.877213][ T8157]  strndup_user+0x260/0x400
[  263.881966][ T8157]  __se_sys_mount+0x114/0xa10
[  263.886831][ T8157]  ? kmsan_get_metadata+0x11b/0x180
[  263.892201][ T8157]  ? kmsan_get_shadow_origin_ptr+0x97/0xd0
[  263.898196][ T8157]  ? kmsan_get_metadata+0x11b/0x180
[  263.903575][ T8157]  __ia32_sys_mount+0x157/0x1b0
[  263.908673][ T8157]  __do_fast_syscall_32+0x96/0xf0
[  263.913871][ T8157]  do_fast_syscall_32+0x34/0x70
[  263.918888][ T8157]  do_SYSENTER_32+0x1b/0x20
[  263.923550][ T8157]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  263.930054][ T8157] RIP: 0023:0xf6eca549
[  263.934226][ T8157] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00
[  263.954507][ T8157] RSP: 002b:00000000f44c45fc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  263.963069][ T8157] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000040
[  263.971161][ T8157] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000
[  263.979250][ T8157] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  263.987328][ T8157] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  263.995490][ T8157] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
16:08:54 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)

16:08:54 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40, 0xa87], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:08:54 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) (fail_nth: 3)

16:08:54 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff, 0x40], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

[  264.774667][ T8171] FAULT_INJECTION: forcing a failure.
[  264.774667][ T8171] name failslab, interval 1, probability 0, space 0, times 0
[  264.788068][ T8171] CPU: 1 PID: 8171 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0
[  264.796559][ T8171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  264.806738][ T8171] Call Trace:
[  264.810142][ T8171]  dump_stack_lvl+0x1ff/0x28e
[  264.815029][ T8171]  dump_stack+0x25/0x28
[  264.819382][ T8171]  should_fail+0x8bc/0x9c0
[  264.823984][ T8171]  __should_failslab+0x223/0x2b0
[  264.829102][ T8171]  should_failslab+0x29/0x70
[  264.833894][ T8171]  kmem_cache_alloc+0xe4/0xff0
[  264.838845][ T8171]  ? kmsan_get_shadow_origin_ptr+0x97/0xd0
[  264.844816][ T8171]  ? getname_flags+0x14e/0xa90
[  264.849901][ T8171]  ? kmsan_get_metadata+0x11b/0x180
[  264.855296][ T8171]  ? kmsan_get_shadow_origin_ptr+0x97/0xd0
[  264.861288][ T8171]  getname_flags+0x14e/0xa90
[  264.866091][ T8171]  ? kmsan_get_metadata+0x11b/0x180
[  264.871458][ T8171]  user_path_at_empty+0xc5/0x430
[  264.876587][ T8171]  __se_sys_mount+0x7f9/0xa10
[  264.881454][ T8171]  __ia32_sys_mount+0x157/0x1b0
[  264.886487][ T8171]  __do_fast_syscall_32+0x96/0xf0
[  264.891808][ T8171]  do_fast_syscall_32+0x34/0x70
[  264.896858][ T8171]  do_SYSENTER_32+0x1b/0x20
[  264.901544][ T8171]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  264.908060][ T8171] RIP: 0023:0xf6eca549
[  264.912246][ T8171] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00
[  264.932099][ T8171] RSP: 002b:00000000f44c45fc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  264.940666][ T8171] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000040
[  264.948749][ T8171] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000
[  264.956844][ T8171] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  264.964923][ T8171] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
16:08:55 executing program 2:
openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0)

[  264.972999][ T8171] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
16:08:55 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) (fail_nth: 4)

[  265.461429][ T8179] FAULT_INJECTION: forcing a failure.
[  265.461429][ T8179] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  265.475135][ T8179] CPU: 1 PID: 8179 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0
[  265.483646][ T8179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  265.493830][ T8179] Call Trace:
[  265.497201][ T8179]  dump_stack_lvl+0x1ff/0x28e
[  265.502075][ T8179]  dump_stack+0x25/0x28
[  265.506404][ T8179]  should_fail+0x8bc/0x9c0
[  265.511017][ T8179]  should_fail_usercopy+0x39/0x40
[  265.516241][ T8179]  strncpy_from_user+0x82/0x830
[  265.521341][ T8179]  ? kmsan_get_shadow_origin_ptr+0x97/0xd0
[  265.527342][ T8179]  getname_flags+0x204/0xa90
[  265.532178][ T8179]  user_path_at_empty+0xc5/0x430
[  265.537754][ T8179]  __se_sys_mount+0x7f9/0xa10
[  265.542636][ T8179]  __ia32_sys_mount+0x157/0x1b0
[  265.547755][ T8179]  __do_fast_syscall_32+0x96/0xf0
[  265.552999][ T8179]  do_fast_syscall_32+0x34/0x70
[  265.558063][ T8179]  do_SYSENTER_32+0x1b/0x20
[  265.562757][ T8179]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  265.569290][ T8179] RIP: 0023:0xf6eca549
[  265.573482][ T8179] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00
[  265.593271][ T8179] RSP: 002b:00000000f44c45fc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  265.601872][ T8179] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000040
16:08:55 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5, 0x7fff], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:08:55 executing program 2:
openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0)

[  265.609980][ T8179] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000
[  265.618103][ T8179] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  265.626210][ T8179] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  265.634317][ T8179] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
16:08:56 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) (fail_nth: 5)

16:08:56 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100, 0x5], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:08:56 executing program 2:
openat$binder_debug(0xffffff9c, 0x0, 0x0, 0x0)

[  266.289271][ T8187] FAULT_INJECTION: forcing a failure.
[  266.289271][ T8187] name failslab, interval 1, probability 0, space 0, times 0
[  266.302522][ T8187] CPU: 1 PID: 8187 Comm: syz-executor.0 Not tainted 5.15.0-syzkaller #0
[  266.311032][ T8187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  266.321360][ T8187] Call Trace:
[  266.324739][ T8187]  dump_stack_lvl+0x1ff/0x28e
[  266.329623][ T8187]  dump_stack+0x25/0x28
[  266.333963][ T8187]  should_fail+0x8bc/0x9c0
[  266.338584][ T8187]  __should_failslab+0x223/0x2b0
[  266.343725][ T8187]  should_failslab+0x29/0x70
[  266.348544][ T8187]  __kmalloc+0x199/0x1150
[  266.353074][ T8187]  ? tomoyo_encode2+0x629/0xa70
[  266.358244][ T8187]  ? __kernel_text_address+0x178/0x2e0
[  266.363957][ T8187]  ? kmsan_get_metadata+0x11b/0x180
[  266.369353][ T8187]  tomoyo_encode2+0x629/0xa70
[  266.374268][ T8187]  tomoyo_encode+0x90/0xd0
[  266.378880][ T8187]  tomoyo_mount_permission+0x60b/0x1700
[  266.384649][ T8187]  ? kmsan_slab_free+0xd5/0x120
[  266.389677][ T8187]  ? kmem_cache_free+0x332/0xe10
[  266.394822][ T8187]  ? kmsan_get_metadata+0x11b/0x180
[  266.400231][ T8187]  ? kmsan_internal_unpoison_memory+0x10/0x20
[  266.406541][ T8187]  ? __msan_memset+0xc1/0x110
[  266.411437][ T8187]  ? terminate_walk+0x611/0x6e0
[  266.416499][ T8187]  tomoyo_sb_mount+0xe9/0x100
[  266.421410][ T8187]  ? tomoyo_path_chroot+0x60/0x60
[  266.427004][ T8187]  security_sb_mount+0x174/0x270
[  266.432334][ T8187]  path_mount+0x278/0x2960
[  266.437004][ T8187]  __se_sys_mount+0x8eb/0xa10
[  266.441883][ T8187]  __ia32_sys_mount+0x157/0x1b0
[  266.447096][ T8187]  __do_fast_syscall_32+0x96/0xf0
[  266.452332][ T8187]  do_fast_syscall_32+0x34/0x70
[  266.457389][ T8187]  do_SYSENTER_32+0x1b/0x20
[  266.462098][ T8187]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  266.468732][ T8187] RIP: 0023:0xf6eca549
[  266.472931][ T8187] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00
[  266.492814][ T8187] RSP: 002b:00000000f44c45fc EFLAGS: 00000296 ORIG_RAX: 0000000000000015
[  266.501405][ T8187] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000020000040
[  266.509518][ T8187] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000000
[  266.517621][ T8187] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  266.525730][ T8187] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  266.533839][ T8187] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
16:08:57 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80, 0x100], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:08:57 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (fail_nth: 1)

16:08:57 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1, 0x80], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

[  267.453223][ T8200] FAULT_INJECTION: forcing a failure.
[  267.453223][ T8200] name failslab, interval 1, probability 0, space 0, times 0
[  267.466685][ T8200] CPU: 1 PID: 8200 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0
[  267.475184][ T8200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  267.485362][ T8200] Call Trace:
[  267.488736][ T8200]  dump_stack_lvl+0x1ff/0x28e
[  267.493703][ T8200]  dump_stack+0x25/0x28
[  267.498042][ T8200]  should_fail+0x8bc/0x9c0
[  267.502746][ T8200]  __should_failslab+0x223/0x2b0
[  267.507875][ T8200]  should_failslab+0x29/0x70
[  267.512702][ T8200]  kmem_cache_alloc+0xe4/0xff0
[  267.517659][ T8200]  ? kmsan_internal_unpoison_memory+0x10/0x20
[  267.523937][ T8200]  ? getname_flags+0x14e/0xa90
[  267.528896][ T8200]  ? kmsan_get_metadata+0x11b/0x180
[  267.534241][ T8200]  ? kmsan_get_shadow_origin_ptr+0x97/0xd0
[  267.540308][ T8200]  getname_flags+0x14e/0xa90
[  267.545095][ T8200]  getname+0x55/0x60
[  267.549265][ T8200]  do_sys_openat2+0x139/0x8f0
[  267.554179][ T8200]  ? kmsan_get_metadata+0x11b/0x180
[  267.559698][ T8200]  ? kmsan_internal_set_shadow_origin+0x52/0xc0
[  267.566148][ T8200]  ? kmsan_get_metadata+0x11b/0x180
[  267.571502][ T8200]  __ia32_compat_sys_openat+0x353/0x3c0
[  267.577248][ T8200]  __do_fast_syscall_32+0x96/0xf0
[  267.582455][ T8200]  do_fast_syscall_32+0x34/0x70
[  267.587488][ T8200]  do_SYSENTER_32+0x1b/0x20
[  267.592153][ T8200]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  267.598662][ T8200] RIP: 0023:0xf6eb2549
[  267.602841][ T8200] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00
[  267.622709][ T8200] RSP: 002b:00000000f44ac5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000127
[  267.631303][ T8200] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000640
[  267.639394][ T8200] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  267.647469][ T8200] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  267.655546][ T8200] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  267.663710][ T8200] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
16:08:57 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:08:58 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (fail_nth: 2)

16:08:58 executing program 3:
fcntl$getflags(0xffffffffffffffff, 0xb)
sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20010051)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000021c0)={0x1, 0x1, &(0x7f0000000100)=""/177, &(0x7f00000001c0)=""/4096, &(0x7f00000011c0)=""/4096, 0x5000})
getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x10, &(0x7f0000002200), &(0x7f0000002240)=0x4)
r0 = openat$tun(0xffffff9c, &(0x7f0000002280), 0x490340, 0x0)
splice(r0, &(0x7f00000022c0)=0x5, 0xffffffffffffffff, &(0x7f0000002300)=0x1, 0x9, 0x6)
r1 = memfd_secret(0x80000)
sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x34, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xc7}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x40480d0)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, 0x2, 0x7, 0x3, 0x0, 0x0, {0xc, 0x0, 0x5}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000815}, 0x4000)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000002540)={<r2=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f0000002580)={<r3=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000002680)={&(0x7f0000002600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002640)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x7, 0x5, <r4=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r1, 0xc02864ca, &(0x7f0000002700)={&(0x7f00000025c0)=[r2, r3, 0x0], &(0x7f00000026c0)=[0x0, 0x0, 0x0, r4], 0xff, 0x3, 0x4})
r5 = openat$vcsu(0xffffff9c, &(0x7f0000002740), 0x2003a0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000002780)={{0x1, 0x1, 0x18, <r6=>r1}, './file0\x00'})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r5, 0xc01064c2, &(0x7f00000027c0)={0x0, 0x0, r6})
r7 = openat$cachefiles(0xffffff9c, &(0x7f0000002800), 0x4000, 0x0)
ioctl$DRM_IOCTL_AGP_ALLOC(r5, 0xc0106434, &(0x7f0000002840)={0x5, <r8=>0x0, 0x10001})
ioctl$DRM_IOCTL_SG_ALLOC(r7, 0xc0086438, &(0x7f0000002880)={0x101, r8})
syz_genetlink_get_family_id$l2tp(&(0x7f00000028c0), 0xffffffffffffffff)

[  268.255003][ T8204] FAULT_INJECTION: forcing a failure.
[  268.255003][ T8204] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  268.268520][ T8204] CPU: 1 PID: 8204 Comm: syz-executor.2 Not tainted 5.15.0-syzkaller #0
[  268.277039][ T8204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  268.287209][ T8204] Call Trace:
[  268.290573][ T8204]  dump_stack_lvl+0x1ff/0x28e
[  268.295462][ T8204]  dump_stack+0x25/0x28
[  268.299775][ T8204]  should_fail+0x8bc/0x9c0
[  268.304363][ T8204]  should_fail_usercopy+0x39/0x40
[  268.309557][ T8204]  strncpy_from_user+0x82/0x830
[  268.314615][ T8204]  ? kmsan_get_shadow_origin_ptr+0x97/0xd0
[  268.320622][ T8204]  getname_flags+0x204/0xa90
[  268.325445][ T8204]  getname+0x55/0x60
[  268.329545][ T8204]  do_sys_openat2+0x139/0x8f0
[  268.334402][ T8204]  ? kmsan_get_metadata+0x11b/0x180
[  268.339773][ T8204]  ? kmsan_internal_set_shadow_origin+0x52/0xc0
[  268.346332][ T8204]  ? kmsan_get_metadata+0x11b/0x180
[  268.351694][ T8204]  __ia32_compat_sys_openat+0x353/0x3c0
[  268.357450][ T8204]  __do_fast_syscall_32+0x96/0xf0
[  268.362656][ T8204]  do_fast_syscall_32+0x34/0x70
[  268.367778][ T8204]  do_SYSENTER_32+0x1b/0x20
[  268.372447][ T8204]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  268.378964][ T8204] RIP: 0023:0xf6eb2549
[  268.383139][ T8204] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00
[  268.402994][ T8204] RSP: 002b:00000000f44ac5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000127
[  268.411571][ T8204] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000640
[  268.419684][ T8204] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  268.427782][ T8204] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  268.435875][ T8204] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  268.443975][ T8204] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  268.567681][ T8208] overlayfs: missing 'lowerdir'
16:08:58 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8, 0x1], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:08:58 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

[  269.085035][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  269.092751][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
16:08:59 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)

[  269.239016][ T8215] overlayfs: missing 'lowerdir'
16:08:59 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02, 0x8], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:08:59 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x2, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:00 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)

16:09:00 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8, 0xa02], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:00 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x3, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:00 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x0)

16:09:00 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400, 0x0, 0x8], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:00 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x4, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

[  272.550420][ T8240] chnl_net:caif_netlink_parms(): no params data found
[  272.869141][ T8240] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.876538][ T8240] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.887058][ T8240] device bridge_slave_0 entered promiscuous mode
[  272.908949][ T8240] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.916344][ T8240] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.928258][ T8240] device bridge_slave_1 entered promiscuous mode
[  273.021382][ T8240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  273.051538][ T8240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  273.150030][ T8240] team0: Port device team_slave_0 added
[  273.172232][ T8240] team0: Port device team_slave_1 added
[  273.255563][ T8240] batman_adv: batadv0: Adding interface: batadv_slave_0
[  273.262864][ T8240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.289128][ T8240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  273.308927][ T8240] batman_adv: batadv0: Adding interface: batadv_slave_1
[  273.315978][ T8240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  273.345194][ T8240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  273.457752][ T8240] device hsr_slave_0 entered promiscuous mode
[  273.469735][ T8240] device hsr_slave_1 entered promiscuous mode
[  273.483161][ T8240] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  273.490989][ T8240] Cannot create hsr debugfs directory
[  273.799649][ T2793] Bluetooth: hci3: command 0x0409 tx timeout
[  273.925586][ T8240] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  273.982759][ T8240] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  274.005598][ T8240] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  274.035864][ T8240] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  274.387740][ T8240] 8021q: adding VLAN 0 to HW filter on device bond0
[  274.431056][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  274.441529][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  274.467006][ T8240] 8021q: adding VLAN 0 to HW filter on device team0
[  274.495311][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  274.506135][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  274.516097][ T6661] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.523687][ T6661] bridge0: port 1(bridge_slave_0) entered forwarding state
[  274.570393][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  274.580261][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  274.591054][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  274.600996][ T6661] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.608454][ T6661] bridge0: port 2(bridge_slave_1) entered forwarding state
[  274.617741][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  274.704889][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  274.717148][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  274.728627][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  274.739865][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  274.751324][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  274.762309][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  274.773371][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  274.783545][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  274.793762][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  274.816280][ T8240] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  274.905141][ T8240] 8021q: adding VLAN 0 to HW filter on device batadv0
[  274.914928][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  274.925708][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  274.934661][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  275.049930][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  275.060503][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  275.136980][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  275.147880][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  275.178796][ T8240] device veth0_vlan entered promiscuous mode
[  275.198982][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  275.208826][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  275.240330][ T8240] device veth1_vlan entered promiscuous mode
[  275.352857][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  275.362992][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  275.373046][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  275.384122][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  275.409965][ T8240] device veth0_macvtap entered promiscuous mode
[  275.433795][ T8240] device veth1_macvtap entered promiscuous mode
[  275.503389][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  275.513497][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  275.540389][ T8240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  275.551646][ T8240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.561796][ T8240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  275.572522][ T8240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.582662][ T8240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  275.593394][ T8240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.607987][ T8240] batman_adv: batadv0: Interface activated: batadv_slave_0
[  275.621091][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  275.631690][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  275.663273][ T8240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  275.674334][ T8240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.685262][ T8240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  275.696651][ T8240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.706920][ T8240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  275.717653][ T8240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.732128][ T8240] batman_adv: batadv0: Interface activated: batadv_slave_1
[  275.740488][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  275.751165][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  275.790024][ T8240] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  275.799752][ T8240] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  275.808981][ T8240] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  275.817902][ T8240] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  275.882843][  T215] Bluetooth: hci3: command 0x041b tx timeout
[  276.596789][ T1029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  276.605201][ T1029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  276.619678][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  276.819699][  T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  276.827659][  T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  276.841417][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
16:09:07 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x0)

16:09:07 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4, 0x400], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:07 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x3, 0x0)

16:09:07 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x5, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:08 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x6, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:08 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3, 0x4], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:08 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x4, 0x0)

[  277.969849][  T215] Bluetooth: hci3: command 0x040f tx timeout
16:09:08 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x0)

16:09:08 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1, 0x3], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:08 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x7, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:08 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5, 0x0)

16:09:09 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x0)

16:09:09 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2, 0x1], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:09 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x8, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:09 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x6, 0x0)

16:09:09 executing program 3:
openat$binder_debug(0xffffff9c, 0x0, 0x2, 0x0)

16:09:10 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2, 0x2], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:10 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x9, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

[  280.039252][ T2793] Bluetooth: hci3: command 0x0419 tx timeout
16:09:10 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x7, 0x0)

16:09:10 executing program 3:
openat$binder_debug(0xffffff9c, 0x0, 0x2, 0x0)

16:09:10 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff, 0x2], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:10 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0xa, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:11 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x8, 0x0)

16:09:11 executing program 3:
openat$binder_debug(0xffffff9c, 0x0, 0x2, 0x0)

16:09:11 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0xb, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:11 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197, 0x7fffffff], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:11 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x9, 0x0)

16:09:11 executing program 3:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:12 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0xc, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:12 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5, 0x5197], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

[  282.286059][ T8706] overlayfs: missing 'lowerdir'
16:09:12 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0xa, 0x0)

16:09:12 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x0) (fail_nth: 1)

16:09:12 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0xd, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:13 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4, 0x5], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

[  283.052961][ T8720] FAULT_INJECTION: forcing a failure.
[  283.052961][ T8720] name failslab, interval 1, probability 0, space 0, times 0
[  283.068327][ T8720] CPU: 0 PID: 8720 Comm: syz-executor.3 Not tainted 5.15.0-syzkaller #0
[  283.076843][ T8720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  283.087030][ T8720] Call Trace:
[  283.090411][ T8720]  dump_stack_lvl+0x1ff/0x28e
[  283.095283][ T8720]  dump_stack+0x25/0x28
[  283.099608][ T8720]  should_fail+0x8bc/0x9c0
[  283.104215][ T8720]  __should_failslab+0x223/0x2b0
[  283.109342][ T8720]  should_failslab+0x29/0x70
[  283.114155][ T8720]  kmem_cache_alloc+0xe4/0xff0
[  283.119106][ T8720]  ? kmsan_internal_unpoison_memory+0x10/0x20
[  283.125402][ T8720]  ? getname_flags+0x14e/0xa90
[  283.130389][ T8720]  ? kmsan_get_metadata+0x11b/0x180
[  283.135759][ T8720]  ? kmsan_get_shadow_origin_ptr+0x97/0xd0
[  283.141749][ T8720]  getname_flags+0x14e/0xa90
[  283.146576][ T8720]  getname+0x55/0x60
[  283.150679][ T8720]  do_sys_openat2+0x139/0x8f0
[  283.155551][ T8720]  ? kmsan_get_metadata+0x11b/0x180
[  283.160927][ T8720]  ? kmsan_internal_set_shadow_origin+0x52/0xc0
[  283.167417][ T8720]  ? kmsan_get_metadata+0x11b/0x180
[  283.172814][ T8720]  __ia32_compat_sys_openat+0x353/0x3c0
[  283.178587][ T8720]  __do_fast_syscall_32+0x96/0xf0
[  283.183822][ T8720]  do_fast_syscall_32+0x34/0x70
[  283.188870][ T8720]  do_SYSENTER_32+0x1b/0x20
[  283.193570][ T8720]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  283.200110][ T8720] RIP: 0023:0xf6f44549
[  283.204305][ T8720] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00
[  283.224090][ T8720] RSP: 002b:00000000f453e5fc EFLAGS: 00000296 ORIG_RAX: 0000000000000127
[  283.232694][ T8720] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000640
[  283.240826][ T8720] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000
16:09:13 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0xb, 0x0)

[  283.248925][ T8720] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  283.257557][ T8720] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  283.265765][ T8720] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
16:09:13 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0xe, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:13 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5, 0x4], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:13 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0xc, 0x0)

16:09:14 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x10, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:14 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0xd, 0x0)

16:09:14 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077, 0x5], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:14 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x0)

16:09:15 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x11, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:15 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0xe, 0x0)

16:09:15 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x0)

16:09:15 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001, 0x6077], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:15 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x12, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:15 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x10, 0x0)

16:09:15 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1, 0x0, 0x80000001], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:15 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x2)

16:09:16 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x25, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:16 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x11, 0x0)

16:09:16 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5, 0x1], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:16 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x3)

16:09:17 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x2f, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:17 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x12, 0x0)

16:09:17 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5, 0x5], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:17 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x4)

16:09:17 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x48, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:17 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc, 0x5], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:17 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x18, 0x0)

16:09:17 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x5)

16:09:18 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x4c, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:18 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff, 0xfc], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:18 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x25, 0x0)

16:09:18 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x6)

16:09:19 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5, 0x7ff], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:19 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x5c, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:19 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2f, 0x0)

16:09:19 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x7)

16:09:19 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x60, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:19 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7, 0x5], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:19 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5c, 0x0)

16:09:20 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x8)

16:09:20 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff, 0x7], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:20 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x300, 0x0)

16:09:20 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x68, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:20 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x9)

16:09:21 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d, 0x3ff], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:21 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x500, 0x0)

16:09:21 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x6c, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:21 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0xa)

16:09:21 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000, 0x3d], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:21 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x600, 0x0)

16:09:21 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x74, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:22 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0xb)

16:09:22 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x700, 0x0)

16:09:22 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40, 0x1000], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:22 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x7a, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:22 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0xc)

16:09:22 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x900, 0x0)

16:09:22 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05, 0x40], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:23 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0xd)

16:09:23 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x1ce, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:23 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0xa00, 0x0)

16:09:23 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6, 0x0, 0xaf05], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:24 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x1cf, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:24 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0xe)

16:09:24 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0xb00, 0x0)

16:09:24 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000, 0x0, 0x6], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:24 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x1d8, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:24 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x10)

16:09:24 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7, 0x8000], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:24 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0xc00, 0x0)

16:09:25 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x11)

16:09:25 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x227, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:25 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5, 0x7], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:25 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0xd00, 0x0)

16:09:25 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x230, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:26 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x12)

16:09:26 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9, 0x0, 0x5], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:26 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0xe00, 0x0)

16:09:26 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x231, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:26 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x18)

16:09:26 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5, 0x9], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:26 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x1100, 0x0)

16:09:27 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x300, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:27 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c, 0x5], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:27 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x25)

16:09:27 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x1200, 0x0)

16:09:27 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff, 0x2c], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:28 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x2f)

16:09:28 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x500, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:28 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x1800, 0x0)

16:09:28 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2, 0xffffffff], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:28 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x5c)

16:09:28 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2500, 0x0)

16:09:28 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x600, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:29 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31, 0x2], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:29 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2f00, 0x0)

16:09:29 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x300)

16:09:29 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x700, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:29 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4, 0xdf31], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:29 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x3f00, 0x0)

16:09:30 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x500)

16:09:30 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x900, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:30 executing program 4:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x300, 0x0)

16:09:30 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3, 0x4], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:30 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x600)

16:09:30 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5c00, 0x0)

16:09:30 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x984, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:31 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000, 0x3], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:31 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x1000000, 0x0)

16:09:31 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x700)

16:09:31 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0xa00, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:31 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675, 0x8000], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:32 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2000000, 0x0)

16:09:32 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x900)

[  304.825420][ T9065] chnl_net:caif_netlink_parms(): no params data found
[  305.133310][ T9065] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.141450][ T9065] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.151350][ T9065] device bridge_slave_0 entered promiscuous mode
[  305.177997][ T9065] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.187272][ T9065] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.197390][ T9065] device bridge_slave_1 entered promiscuous mode
[  305.312698][ T9065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  305.342328][ T9065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  305.436575][ T9065] team0: Port device team_slave_0 added
[  305.461080][ T9065] team0: Port device team_slave_1 added
[  305.557168][ T9065] batman_adv: batadv0: Adding interface: batadv_slave_0
[  305.566148][ T9065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  305.592558][ T9065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  305.627270][ T9065] batman_adv: batadv0: Adding interface: batadv_slave_1
[  305.635477][ T9065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  305.661721][ T9065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  305.804479][ T9065] device hsr_slave_0 entered promiscuous mode
[  305.823291][ T9065] device hsr_slave_1 entered promiscuous mode
[  305.836617][ T9065] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  305.845503][ T9065] Cannot create hsr debugfs directory
[  306.121464][ T2793] Bluetooth: hci4: command 0x0409 tx timeout
[  306.282530][ T9065] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  306.321362][ T9065] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  306.356507][ T9065] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  306.395535][ T9065] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  306.812836][ T9065] 8021q: adding VLAN 0 to HW filter on device bond0
[  306.885235][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  306.894948][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  306.936187][ T9065] 8021q: adding VLAN 0 to HW filter on device team0
[  306.963002][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  306.973633][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  306.983686][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.991231][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  307.054605][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  307.064523][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  307.075361][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  307.085332][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.092874][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  307.102442][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  307.114394][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  307.195329][ T9065] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  307.206483][ T9065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  307.222937][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  307.234370][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  307.245579][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  307.256885][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  307.268323][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  307.278636][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  307.289941][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  307.300206][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  307.391155][ T9065] 8021q: adding VLAN 0 to HW filter on device batadv0
[  307.406949][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  307.417876][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  307.427320][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  307.435868][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  307.724849][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  307.735485][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  307.836375][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  307.847073][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  307.874115][ T9065] device veth0_vlan entered promiscuous mode
[  307.899771][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  307.909872][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  307.940081][ T9065] device veth1_vlan entered promiscuous mode
[  308.070475][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  308.081071][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  308.091171][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  308.101883][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  308.130966][ T9065] device veth0_macvtap entered promiscuous mode
[  308.156881][ T9065] device veth1_macvtap entered promiscuous mode
[  308.202924][    T7] Bluetooth: hci4: command 0x041b tx timeout
[  308.234228][ T9065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  308.245756][ T9065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.255909][ T9065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  308.266676][ T9065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.276847][ T9065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  308.287619][ T9065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.297862][ T9065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  308.308514][ T9065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.322941][ T9065] batman_adv: batadv0: Interface activated: batadv_slave_0
[  308.331440][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  308.341599][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  308.351704][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  308.362270][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  308.401861][ T9065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  308.412696][ T9065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.423759][ T9065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  308.434629][ T9065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.444879][ T9065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  308.455707][ T9065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.467955][ T9065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  308.479037][ T9065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  308.493463][ T9065] batman_adv: batadv0: Interface activated: batadv_slave_1
[  308.502481][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  308.513173][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  308.566702][ T9065] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  308.575887][ T9065] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  308.586273][ T9065] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  308.595379][ T9065] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  309.306785][  T152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  309.315246][  T152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  309.329430][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  309.483653][  T137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  309.493282][  T137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  309.506021][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
16:09:40 executing program 4:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x300, 0x0)

16:09:40 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0xb00, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:40 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x3000000, 0x0)

16:09:40 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8, 0xb675], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:40 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0xa00)

16:09:40 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x4000000, 0x0)

[  310.277826][    T7] Bluetooth: hci4: command 0x040f tx timeout
16:09:40 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0xb00)

16:09:40 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0xc00, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:40 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4, 0x8], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:40 executing program 4:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x300, 0x0)

16:09:41 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5000000, 0x0)

16:09:41 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7, 0x4], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:41 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0xc00)

16:09:41 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0xd00, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:41 executing program 4:
openat$binder_debug(0xffffff9c, 0x0, 0x300, 0x0)

16:09:42 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff, 0x7], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:42 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x6000000, 0x0)

16:09:42 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0xe00, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:42 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0xd00)

16:09:42 executing program 4:
openat$binder_debug(0xffffff9c, 0x0, 0x300, 0x0)

[  312.357891][ T2793] Bluetooth: hci4: command 0x0419 tx timeout
16:09:42 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000, 0x7fffffff], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:43 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x7000000, 0x0)

16:09:43 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0xe00)

16:09:43 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x1020, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:43 executing program 4:
openat$binder_debug(0xffffff9c, 0x0, 0x300, 0x0)

16:09:43 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d, 0x10000], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:43 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x8000000, 0x0)

16:09:43 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x1100, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:44 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x1100)

16:09:44 executing program 4:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5c00, 0x0)

16:09:44 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0x67d], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:44 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x9000000, 0x0)

16:09:44 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x1200, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:44 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x1200)

16:09:45 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2, 0xd40], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:45 executing program 4:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5c00, 0x0)

16:09:45 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0xa000000, 0x0)

16:09:45 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x2000, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:45 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x1800)

16:09:46 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8, 0x2], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:46 executing program 4:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5c00, 0x0)

16:09:46 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0xb000000, 0x0)

16:09:46 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x2010, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:46 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x2500)

16:09:46 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8, 0x8], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:47 executing program 4:
openat$binder_debug(0xffffff9c, 0x0, 0x5c00, 0x0)

16:09:47 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0xc000000, 0x0)

16:09:47 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x2500, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:47 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x2f00)

16:09:47 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4, 0x8], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:48 executing program 4:
openat$binder_debug(0xffffff9c, 0x0, 0x5c00, 0x0)

16:09:48 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0xd000000, 0x0)

16:09:48 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x2702, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:48 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x3f00)

16:09:48 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b, 0x4], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:49 executing program 4:
openat$binder_debug(0xffffff9c, 0x0, 0x5c00, 0x0)

16:09:49 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0xe000000, 0x0)

16:09:49 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x2f00, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:49 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x5c00)

16:09:49 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7, 0x9b], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:49 executing program 4:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5c00, 0x0) (fail_nth: 1)

16:09:50 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x10000000, 0x0)

16:09:50 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x3002, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:50 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2, 0x7], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:50 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x1000000)

[  320.367193][ T9615] FAULT_INJECTION: forcing a failure.
[  320.367193][ T9615] name failslab, interval 1, probability 0, space 0, times 0
[  320.380702][ T9615] CPU: 0 PID: 9615 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0
[  320.389245][ T9615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  320.399412][ T9615] Call Trace:
[  320.402776][ T9615]  dump_stack_lvl+0x1ff/0x28e
[  320.407631][ T9615]  dump_stack+0x25/0x28
[  320.411937][ T9615]  should_fail+0x8bc/0x9c0
[  320.416543][ T9615]  __should_failslab+0x223/0x2b0
[  320.421662][ T9615]  should_failslab+0x29/0x70
[  320.426456][ T9615]  kmem_cache_alloc+0xe4/0xff0
[  320.431388][ T9615]  ? kmsan_internal_unpoison_memory+0x10/0x20
[  320.437673][ T9615]  ? getname_flags+0x14e/0xa90
[  320.442636][ T9615]  ? kmsan_get_metadata+0x11b/0x180
[  320.447990][ T9615]  ? kmsan_get_shadow_origin_ptr+0x97/0xd0
[  320.453996][ T9615]  getname_flags+0x14e/0xa90
[  320.458802][ T9615]  getname+0x55/0x60
[  320.462896][ T9615]  do_sys_openat2+0x139/0x8f0
[  320.467746][ T9615]  ? kmsan_get_metadata+0x11b/0x180
[  320.473189][ T9615]  ? kmsan_internal_set_shadow_origin+0x52/0xc0
[  320.479653][ T9615]  ? kmsan_get_metadata+0x11b/0x180
[  320.485357][ T9615]  __ia32_compat_sys_openat+0x353/0x3c0
[  320.491188][ T9615]  __do_fast_syscall_32+0x96/0xf0
[  320.496412][ T9615]  do_fast_syscall_32+0x34/0x70
[  320.501428][ T9615]  do_SYSENTER_32+0x1b/0x20
[  320.506093][ T9615]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  320.512600][ T9615] RIP: 0023:0xf6efe549
[  320.516775][ T9615] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00
[  320.536626][ T9615] RSP: 002b:00000000f44f85fc EFLAGS: 00000296 ORIG_RAX: 0000000000000127
[  320.545191][ T9615] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000640
[  320.553298][ T9615] RDX: 0000000000005c00 RSI: 0000000000000000 RDI: 0000000000000000
[  320.561390][ T9615] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  320.569486][ T9615] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  320.577585][ T9615] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
16:09:50 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x11000000, 0x0)

16:09:51 executing program 4:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5c00, 0x0) (fail_nth: 2)

16:09:51 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975, 0x2], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:51 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x12000000, 0x0)

16:09:52 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x2000000)

16:09:52 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x3102, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

[  321.951133][ T9630] FAULT_INJECTION: forcing a failure.
[  321.951133][ T9630] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  321.964745][ T9630] CPU: 1 PID: 9630 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0
[  321.973247][ T9630] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  321.983419][ T9630] Call Trace:
[  321.986779][ T9630]  dump_stack_lvl+0x1ff/0x28e
[  321.991652][ T9630]  dump_stack+0x25/0x28
[  321.995961][ T9630]  should_fail+0x8bc/0x9c0
[  322.000575][ T9630]  should_fail_usercopy+0x39/0x40
[  322.005751][ T9630]  strncpy_from_user+0x82/0x830
[  322.010885][ T9630]  ? kmsan_get_shadow_origin_ptr+0x97/0xd0
[  322.016864][ T9630]  getname_flags+0x204/0xa90
[  322.021661][ T9630]  getname+0x55/0x60
[  322.025733][ T9630]  do_sys_openat2+0x139/0x8f0
[  322.030574][ T9630]  ? kmsan_get_metadata+0x11b/0x180
[  322.035922][ T9630]  ? kmsan_internal_set_shadow_origin+0x52/0xc0
[  322.042374][ T9630]  ? kmsan_get_metadata+0x11b/0x180
[  322.047747][ T9630]  __ia32_compat_sys_openat+0x353/0x3c0
[  322.053504][ T9630]  __do_fast_syscall_32+0x96/0xf0
[  322.058698][ T9630]  do_fast_syscall_32+0x34/0x70
[  322.063714][ T9630]  do_SYSENTER_32+0x1b/0x20
[  322.068377][ T9630]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  322.074876][ T9630] RIP: 0023:0xf6efe549
[  322.079068][ T9630] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00
[  322.098832][ T9630] RSP: 002b:00000000f44f85fc EFLAGS: 00000296 ORIG_RAX: 0000000000000127
[  322.107391][ T9630] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000640
[  322.115485][ T9630] RDX: 0000000000005c00 RSI: 0000000000000000 RDI: 0000000000000000
[  322.123654][ T9630] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  322.131727][ T9630] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  322.139804][ T9630] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
16:09:52 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5, 0xc975], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:52 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x18000000, 0x0)

16:09:52 executing program 4:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5c00, 0x0) (fail_nth: 3)

[  323.247155][ T9647] FAULT_INJECTION: forcing a failure.
[  323.247155][ T9647] name failslab, interval 1, probability 0, space 0, times 0
[  323.260239][ T9647] CPU: 0 PID: 9647 Comm: syz-executor.4 Not tainted 5.15.0-syzkaller #0
[  323.268734][ T9647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  323.278922][ T9647] Call Trace:
[  323.282295][ T9647]  dump_stack_lvl+0x1ff/0x28e
[  323.287175][ T9647]  dump_stack+0x25/0x28
[  323.291602][ T9647]  should_fail+0x8bc/0x9c0
[  323.296204][ T9647]  __should_failslab+0x223/0x2b0
[  323.301330][ T9647]  should_failslab+0x29/0x70
[  323.306144][ T9647]  kmem_cache_alloc+0xe4/0xff0
[  323.311107][ T9647]  ? stack_trace_save+0x1a0/0x1a0
[  323.316412][ T9647]  ? __alloc_file+0x87/0x480
[  323.321184][ T9647]  ? kmsan_get_metadata+0x11b/0x180
[  323.326556][ T9647]  ? kmsan_get_shadow_origin_ptr+0x97/0xd0
[  323.332559][ T9647]  __alloc_file+0x87/0x480
[  323.337166][ T9647]  alloc_empty_file+0x2a8/0x590
[  323.342190][ T9647]  ? kmsan_get_metadata+0x11b/0x180
[  323.347583][ T9647]  path_openat+0xfc/0x5eb0
[  323.352174][ T9647]  ? kmsan_get_metadata+0x11b/0x180
[  323.357549][ T9647]  ? kmsan_get_shadow_origin_ptr+0x97/0xd0
[  323.363549][ T9647]  ? should_fail+0x221/0x9c0
[  323.368314][ T9647]  ? memcg_slab_post_alloc_hook+0x34/0xb20
[  323.374355][ T9647]  ? kmsan_get_metadata+0x11b/0x180
[  323.379823][ T9647]  ? kmsan_get_shadow_origin_ptr+0x97/0xd0
[  323.385873][ T9647]  ? kmsan_get_metadata+0x11b/0x180
[  323.391254][ T9647]  ? kmsan_get_metadata+0x11b/0x180
[  323.396622][ T9647]  ? kmsan_get_shadow_origin_ptr+0x97/0xd0
[  323.402614][ T9647]  do_filp_open+0x306/0x760
[  323.407322][ T9647]  ? get_unused_fd_flags+0x90/0xb0
[  323.412638][ T9647]  do_sys_openat2+0x263/0x8f0
[  323.417509][ T9647]  ? kmsan_get_metadata+0x11b/0x180
[  323.422887][ T9647]  ? kmsan_internal_set_shadow_origin+0x52/0xc0
[  323.429379][ T9647]  ? kmsan_get_metadata+0x11b/0x180
[  323.434769][ T9647]  __ia32_compat_sys_openat+0x353/0x3c0
[  323.440543][ T9647]  __do_fast_syscall_32+0x96/0xf0
[  323.445769][ T9647]  do_fast_syscall_32+0x34/0x70
[  323.450807][ T9647]  do_SYSENTER_32+0x1b/0x20
[  323.455498][ T9647]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  323.462038][ T9647] RIP: 0023:0xf6efe549
[  323.466242][ T9647] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00
[  323.486026][ T9647] RSP: 002b:00000000f44f85fc EFLAGS: 00000296 ORIG_RAX: 0000000000000127
16:09:53 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x25000000, 0x0)

[  323.494628][ T9647] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000640
[  323.502837][ T9647] RDX: 0000000000005c00 RSI: 0000000000000000 RDI: 0000000000000000
[  323.510952][ T9647] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  323.519056][ T9647] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  323.527173][ T9647] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
16:09:53 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x3f00, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:53 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9, 0x5], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:53 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x3000000)

16:09:54 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2f000000, 0x0)

16:09:54 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81, 0x9], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:54 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x4000, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:54 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x4000000)

16:09:55 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3, 0xffffff81], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:55 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x3f000000, 0x0)

16:09:55 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x4800, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:55 executing program 4:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5c00, 0x0)

16:09:55 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x5000000)

16:09:56 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc, 0x3], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:56 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5c000000, 0x0)

16:09:56 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x6000000)

16:09:56 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x4c00, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:56 executing program 4:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5c02, 0x0)

16:09:56 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08, 0xfffffffc], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:57 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0xebffffff, 0x0)

16:09:57 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x7000000)

16:09:57 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x5c00, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:57 executing program 4:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5c03, 0x0)

16:09:57 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe, 0xaf08], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:57 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0xf6ffffff, 0x0)

16:09:58 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x8000000)

16:09:58 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x6000, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:58 executing program 4:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5c04, 0x0)

16:09:58 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2, 0xe], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:58 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0xfeffffff, 0x0)

16:09:59 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x9000000)

16:09:59 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x6800, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:09:59 executing program 4:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5c05, 0x0)

16:09:59 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf, 0x2], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:09:59 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0xffffffeb, 0x0)

16:10:00 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0xa000000)

16:10:00 executing program 4:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5c06, 0x0)

16:10:00 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x6c00, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:10:00 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5, 0x9bf], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:10:00 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0xfffffff6, 0x0)

[  330.527129][ T1266] ieee802154 phy0 wpan0: encryption failed: -22
[  330.533753][ T1266] ieee802154 phy1 wpan1: encryption failed: -22
16:10:00 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x7400, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:10:00 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0xb000000)

16:10:01 executing program 4:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5c07, 0x0)

16:10:01 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff, 0x5], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:10:01 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0xfffffffe, 0x0)

16:10:01 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x7a00, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:10:01 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0xc000000)

16:10:02 executing program 4:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5c08, 0x0)

16:10:02 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)

16:10:02 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6, 0xff], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:10:02 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x8409, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

[  332.602889][ T2793] Bluetooth: hci0: command 0x0406 tx timeout
16:10:02 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0xd000000)

16:10:03 executing program 4:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5c09, 0x0)

16:10:03 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f, 0x0, 0x6], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:10:03 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x2)

16:10:03 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0xe000000)

16:10:03 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0xce01, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:10:03 executing program 4:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5c0a, 0x0)

16:10:03 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3, 0x7f], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:10:03 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x3)

16:10:04 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x10000000)

16:10:04 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0xcf01, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:10:04 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20, 0x3], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:10:04 executing program 4:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5c0b, 0x0)

16:10:04 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x4)

16:10:05 executing program 5:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x300, 0x0) (fail_nth: 1)

16:10:05 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x11000000)

16:10:05 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x5)

16:10:05 executing program 4:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5c0c, 0x0)

16:10:05 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6, 0x20], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:10:05 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0xd801, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:10:06 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0xedc0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:10:06 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x12000000)

16:10:06 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x6)

16:10:06 executing program 4:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5c0d, 0x0)

16:10:06 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5, 0x6], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:10:07 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0xff03, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

[  339.419277][ T9870] chnl_net:caif_netlink_parms(): no params data found
[  339.623543][ T9870] bridge0: port 1(bridge_slave_0) entered blocking state
[  339.631523][ T9870] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.641449][ T9870] device bridge_slave_0 entered promiscuous mode
[  339.656464][ T9870] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.664913][ T9870] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.674801][ T9870] device bridge_slave_1 entered promiscuous mode
[  339.757642][ T9870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  339.776986][ T9870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  339.859081][ T9870] team0: Port device team_slave_0 added
[  339.874297][ T9870] team0: Port device team_slave_1 added
[  339.946615][ T9870] batman_adv: batadv0: Adding interface: batadv_slave_0
[  339.954181][ T9870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.980442][ T9870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  339.997975][ T9870] batman_adv: batadv0: Adding interface: batadv_slave_1
[  340.006634][ T9870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  340.034170][ T9870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  340.133236][ T9870] device hsr_slave_0 entered promiscuous mode
[  340.142083][ T9870] device hsr_slave_1 entered promiscuous mode
[  340.151792][ T9870] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  340.160463][ T9870] Cannot create hsr debugfs directory
[  340.504469][ T9870] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  340.526970][ T9870] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  340.551444][ T9870] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  340.573197][ T9870] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  340.837768][ T6661] Bluetooth: hci5: command 0x0409 tx timeout
[  340.840581][ T9870] 8021q: adding VLAN 0 to HW filter on device bond0
[  340.880287][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  340.890057][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  340.913379][ T9870] 8021q: adding VLAN 0 to HW filter on device team0
[  340.942840][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  340.953562][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  340.963389][ T2793] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.970988][ T2793] bridge0: port 1(bridge_slave_0) entered forwarding state
[  340.986347][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  341.008739][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  341.019602][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  341.029387][ T6661] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.036786][ T6661] bridge0: port 2(bridge_slave_1) entered forwarding state
[  341.060721][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  341.085131][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  341.113394][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  341.125578][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  341.156291][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  341.166629][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  341.178177][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  341.201392][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  341.212000][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  341.245379][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  341.255271][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  341.276378][ T9870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  341.342568][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  341.350626][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  341.384974][ T9870] 8021q: adding VLAN 0 to HW filter on device batadv0
[  341.555771][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  341.568458][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  341.636142][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  341.649399][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  341.662162][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  341.672392][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  341.694330][ T9870] device veth0_vlan entered promiscuous mode
[  341.728971][ T9870] device veth1_vlan entered promiscuous mode
[  341.809216][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  341.819813][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  341.829778][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  341.840418][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  341.865799][ T9870] device veth0_macvtap entered promiscuous mode
[  341.887881][ T9870] device veth1_macvtap entered promiscuous mode
[  341.947505][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  341.958767][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.968865][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  341.979581][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  341.989796][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  342.000531][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.010617][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  342.021464][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.031641][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  342.042375][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.056752][ T9870] batman_adv: batadv0: Interface activated: batadv_slave_0
[  342.069266][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  342.079522][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  342.089484][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  342.099524][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  342.135506][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  342.146688][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.156799][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  342.167487][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.177624][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  342.188422][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.198549][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  342.209266][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.219447][ T9870] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  342.230151][ T9870] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.243525][ T9870] batman_adv: batadv0: Interface activated: batadv_slave_1
[  342.261323][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  342.271935][ T2793] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  342.306308][ T9870] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  342.315570][ T9870] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  342.325348][ T9870] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  342.334521][ T9870] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  342.838046][ T6661] Bluetooth: hci1: command 0x0406 tx timeout
[  342.904713][  T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  342.913076][  T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  342.924962][ T6661] Bluetooth: hci5: command 0x041b tx timeout
[  342.948168][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  343.045775][  T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  343.054010][  T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  343.064147][ T6661] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  343.298841][T10240] FAULT_INJECTION: forcing a failure.
[  343.298841][T10240] name failslab, interval 1, probability 0, space 0, times 0
[  343.312059][T10240] CPU: 1 PID: 10240 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0
[  343.320675][T10240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  343.330859][T10240] Call Trace:
[  343.334236][T10240]  dump_stack_lvl+0x1ff/0x28e
[  343.339104][T10240]  dump_stack+0x25/0x28
[  343.343442][T10240]  should_fail+0x8bc/0x9c0
[  343.348039][T10240]  __should_failslab+0x223/0x2b0
[  343.353162][T10240]  should_failslab+0x29/0x70
[  343.357962][T10240]  kmem_cache_alloc+0xe4/0xff0
[  343.362931][T10240]  ? kmsan_internal_unpoison_memory+0x10/0x20
[  343.369250][T10240]  ? getname_flags+0x14e/0xa90
[  343.374246][T10240]  ? kmsan_get_metadata+0x11b/0x180
[  343.379629][T10240]  ? kmsan_get_shadow_origin_ptr+0x97/0xd0
[  343.385617][T10240]  getname_flags+0x14e/0xa90
[  343.390630][T10240]  getname+0x55/0x60
[  343.394737][T10240]  do_sys_openat2+0x139/0x8f0
[  343.399613][T10240]  ? kmsan_get_metadata+0x11b/0x180
[  343.404985][T10240]  ? kmsan_internal_set_shadow_origin+0x52/0xc0
[  343.411478][T10240]  ? kmsan_get_metadata+0x11b/0x180
[  343.416876][T10240]  __ia32_compat_sys_openat+0x353/0x3c0
[  343.422669][T10240]  __do_fast_syscall_32+0x96/0xf0
[  343.427901][T10240]  do_fast_syscall_32+0x34/0x70
[  343.432967][T10240]  do_SYSENTER_32+0x1b/0x20
[  343.437703][T10240]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  343.444244][T10240] RIP: 0023:0xf6f06549
[  343.448471][T10240] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00
[  343.468463][T10240] RSP: 002b:00000000f45005fc EFLAGS: 00000296 ORIG_RAX: 0000000000000127
[  343.477061][T10240] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000640
[  343.485175][T10240] RDX: 0000000000000300 RSI: 0000000000000000 RDI: 0000000000000000
[  343.493440][T10240] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  343.501547][T10240] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  343.509597][T10240] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
16:10:13 executing program 5:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x300, 0x0) (fail_nth: 2)

16:10:13 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x18000000)

16:10:13 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x7)

16:10:13 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9, 0x5], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:10:13 executing program 4:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5c0e, 0x0)

16:10:13 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:10:14 executing program 4:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5c10, 0x0)

16:10:14 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0xe0ffff, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:10:14 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x25000000)

16:10:14 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x8)

16:10:14 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200, 0x9], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

[  344.293149][T10257] FAULT_INJECTION: forcing a failure.
[  344.293149][T10257] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  344.309838][T10257] CPU: 1 PID: 10257 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0
[  344.318431][T10257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  344.328610][T10257] Call Trace:
[  344.331985][T10257]  dump_stack_lvl+0x1ff/0x28e
[  344.336863][T10257]  dump_stack+0x25/0x28
[  344.341191][T10257]  should_fail+0x8bc/0x9c0
[  344.345791][T10257]  should_fail_usercopy+0x39/0x40
[  344.350967][T10257]  strncpy_from_user+0x82/0x830
[  344.356041][T10257]  ? kmsan_get_shadow_origin_ptr+0x97/0xd0
[  344.362013][T10257]  getname_flags+0x204/0xa90
[  344.366872][T10257]  getname+0x55/0x60
[  344.371042][T10257]  do_sys_openat2+0x139/0x8f0
[  344.375881][T10257]  ? kmsan_get_metadata+0x11b/0x180
[  344.381226][T10257]  ? kmsan_internal_set_shadow_origin+0x52/0xc0
[  344.387679][T10257]  ? kmsan_get_metadata+0x11b/0x180
[  344.393034][T10257]  __ia32_compat_sys_openat+0x353/0x3c0
[  344.398782][T10257]  __do_fast_syscall_32+0x96/0xf0
[  344.403979][T10257]  do_fast_syscall_32+0x34/0x70
[  344.408989][T10257]  do_SYSENTER_32+0x1b/0x20
[  344.413657][T10257]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  344.420159][T10257] RIP: 0023:0xf6f06549
[  344.424333][T10257] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00
[  344.444091][T10257] RSP: 002b:00000000f45005fc EFLAGS: 00000296 ORIG_RAX: 0000000000000127
[  344.452745][T10257] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000640
[  344.460836][T10257] RDX: 0000000000000300 RSI: 0000000000000000 RDI: 0000000000000000
[  344.468908][T10257] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  344.476999][T10257] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  344.485075][T10257] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
16:10:15 executing program 5:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x300, 0x0) (fail_nth: 3)

[  344.999557][ T6661] Bluetooth: hci5: command 0x040f tx timeout
16:10:15 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x9)

16:10:15 executing program 4:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5c11, 0x0)

16:10:15 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8, 0x200], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:10:15 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x2f000000)

16:10:15 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x1000000, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

[  345.524313][T10275] FAULT_INJECTION: forcing a failure.
[  345.524313][T10275] name failslab, interval 1, probability 0, space 0, times 0
[  345.540535][T10275] CPU: 1 PID: 10275 Comm: syz-executor.5 Not tainted 5.15.0-syzkaller #0
[  345.549146][T10275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  345.559346][T10275] Call Trace:
[  345.562721][T10275]  dump_stack_lvl+0x1ff/0x28e
[  345.567584][T10275]  dump_stack+0x25/0x28
[  345.571917][T10275]  should_fail+0x8bc/0x9c0
[  345.576520][T10275]  __should_failslab+0x223/0x2b0
[  345.581650][T10275]  should_failslab+0x29/0x70
[  345.586473][T10275]  kmem_cache_alloc+0xe4/0xff0
[  345.591436][T10275]  ? stack_trace_save+0x1a0/0x1a0
[  345.596656][T10275]  ? __alloc_file+0x87/0x480
[  345.601432][T10275]  ? kmsan_get_metadata+0x11b/0x180
[  345.606865][T10275]  ? kmsan_get_shadow_origin_ptr+0x97/0xd0
[  345.612899][T10275]  __alloc_file+0x87/0x480
[  345.617488][T10275]  alloc_empty_file+0x2a8/0x590
[  345.622503][T10275]  ? kmsan_get_metadata+0x11b/0x180
[  345.627867][T10275]  path_openat+0xfc/0x5eb0
[  345.632606][T10275]  ? kmsan_get_metadata+0x11b/0x180
[  345.637964][T10275]  ? kmsan_get_shadow_origin_ptr+0x97/0xd0
[  345.643945][T10275]  ? should_fail+0x221/0x9c0
[  345.648684][T10275]  ? memcg_slab_post_alloc_hook+0x34/0xb20
[  345.654696][T10275]  ? kmsan_get_metadata+0x11b/0x180
[  345.660051][T10275]  ? kmsan_get_shadow_origin_ptr+0x97/0xd0
[  345.666025][T10275]  ? kmsan_get_metadata+0x11b/0x180
[  345.671384][T10275]  ? kmsan_get_metadata+0x11b/0x180
[  345.676727][T10275]  ? kmsan_get_shadow_origin_ptr+0x97/0xd0
[  345.682702][T10275]  do_filp_open+0x306/0x760
[  345.687377][T10275]  ? get_unused_fd_flags+0x90/0xb0
[  345.692677][T10275]  do_sys_openat2+0x263/0x8f0
[  345.697527][T10275]  ? kmsan_get_metadata+0x11b/0x180
[  345.702872][T10275]  ? kmsan_internal_set_shadow_origin+0x52/0xc0
[  345.709324][T10275]  ? kmsan_get_metadata+0x11b/0x180
[  345.714682][T10275]  __ia32_compat_sys_openat+0x353/0x3c0
[  345.720426][T10275]  __do_fast_syscall_32+0x96/0xf0
[  345.725642][T10275]  do_fast_syscall_32+0x34/0x70
[  345.730681][T10275]  do_SYSENTER_32+0x1b/0x20
[  345.735365][T10275]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  345.741884][T10275] RIP: 0023:0xf6f06549
[  345.746067][T10275] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00
[  345.765854][T10275] RSP: 002b:00000000f45005fc EFLAGS: 00000296 ORIG_RAX: 0000000000000127
[  345.774418][T10275] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000640
[  345.782509][T10275] RDX: 0000000000000300 RSI: 0000000000000000 RDI: 0000000000000000
[  345.790585][T10275] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  345.798662][T10275] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  345.806749][T10275] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
16:10:16 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0xa)

16:10:16 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3, 0x8], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:10:16 executing program 4:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5c12, 0x0)

16:10:16 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x3f000000)

16:10:17 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0xb)

16:10:17 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x2000000, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

[  347.078615][ T6661] Bluetooth: hci5: command 0x0419 tx timeout
16:10:17 executing program 5:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x300, 0x0)

16:10:17 executing program 4:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5c18, 0x0)

16:10:17 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000, 0x3], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:10:17 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x5c000000)

16:10:17 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0xc)

16:10:17 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x3000000, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:10:18 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1, 0x400000], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:10:18 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0xebffffff)

16:10:18 executing program 4:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5c25, 0x0)

16:10:18 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0xd)

16:10:18 executing program 5:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x302, 0x0)

16:10:18 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x4000000, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:10:19 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8, 0x1], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:10:19 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0xf6ffffff)

16:10:19 executing program 4:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5c2f, 0x0)

16:10:19 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0xe)

16:10:19 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x5000000, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:10:19 executing program 5:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x303, 0x0)

16:10:20 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6, 0x8], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:10:20 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0xfeffffff)

16:10:20 executing program 4:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5c5c, 0x0)

16:10:20 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x10)

16:10:20 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x6000000, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:10:20 executing program 5:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x304, 0x0)

16:10:20 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8, 0x6], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:10:20 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0xffffffeb)

16:10:21 executing program 4:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5c00, 0x0)

16:10:21 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x11)

16:10:21 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x7000000, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:10:21 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82, 0x8], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:10:21 executing program 5:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x305, 0x0)

16:10:21 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0xfffffff6)

16:10:22 executing program 2:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x12)

16:10:22 executing program 4:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x5c00, 0x2)

16:10:22 executing program 1:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x200000000801, 0x0)
ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [], [0x1000, 0x9, 0x6, 0x6, 0x2, 0x7, 0x10001, 0x6, 0x0, 0x4, 0x7ff, 0xfff, 0xfffffffc, 0x10001, 0x4, 0x9, 0x3ff, 0x0, 0xff, 0x7, 0x4, 0x5, 0x4902, 0x9, 0x400, 0x3, 0x100, 0x82], [0x7f, 0x400, 0xfffffffc, 0x80, 0x1, 0xffff, 0x4, 0x5, 0xffffff01, 0xffff, 0x8, 0x1, 0x52, 0x3099, 0x2, 0x7, 0x1, 0x66d, 0x8, 0x0, 0x1, 0x6, 0x1, 0x5, 0x4, 0x5, 0x5, 0x2, 0x0, 0x8, 0xe157, 0x80000000, 0x1, 0x7fff, 0x7, 0x68fa, 0x97, 0xdc02, 0x7fff, 0x400, 0xabb9, 0xfffff9d8, 0x1f, 0x1f, 0x7, 0x0, 0x911, 0xffff, 0x8, 0x7, 0x401, 0x8001, 0x4, 0x2, 0xbf, 0x4, 0x2, 0x4, 0x4, 0x7, 0x9, 0x8, 0x7f, 0x1], [0x1000, 0x8, 0xc1, 0x7f, 0x6, 0xfff, 0x4, 0xffff, 0x101, 0x736, 0xfffffff8, 0xffffffff, 0x0, 0x3, 0x0, 0x8, 0x0, 0xfffffff7, 0x7, 0x3, 0x4, 0x0, 0x10001, 0x1000, 0x400, 0x8, 0x8, 0xc12, 0x846, 0x8, 0x80000000, 0x1f, 0x8, 0x0, 0x10000, 0x8001, 0x744d, 0x5, 0x0, 0xfffffffb, 0xb5, 0x10001, 0x9, 0x10001, 0x27, 0x3, 0x4, 0x400, 0x8, 0x267, 0x6, 0x7fff, 0x5, 0x5, 0x7, 0x8, 0x5, 0x21, 0x9, 0x4, 0x400, 0x7fffffff, 0x7fffffff, 0x3f]}, 0x45c)

16:10:22 executing program 5:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x306, 0x0)

16:10:22 executing program 0:
clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
exit_group(0x0)
mkdir(&(0x7f0000000140)='./bus\x00', 0x0)
mount$overlay(0x8000000, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

16:10:22 executing program 3:
openat$binder_debug(0xffffff9c, &(0x7f0000000640)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0xfffffffe)

[  352.653382][T10401] =====================================================
[  352.660531][T10401] BUG: KMSAN: uninit-value in number+0xd27/0x24c0
[  352.666989][T10401]  number+0xd27/0x24c0
[  352.671080][T10401]  vsnprintf+0x1f3a/0x36a0
[  352.675528][T10401]  snprintf+0x244/0x290
[  352.679705][T10401]  tomoyo_init_log+0xd39/0x3b50
[  352.684610][T10401]  tomoyo_supervisor+0x8bd/0x2820
[  352.689658][T10401]  tomoyo_path_perm+0x96c/0xc70
[  352.694539][T10401]  tomoyo_path_symlink+0xfc/0x190
[  352.699601][T10401]  security_path_symlink+0x222/0x310
[  352.704922][T10401]  do_symlinkat+0x212/0xb50
[  352.709447][T10401]  __ia32_sys_symlink+0x12b/0x170
[  352.714495][T10401]  __do_fast_syscall_32+0x96/0xf0
[  352.719549][T10401]  do_fast_syscall_32+0x34/0x70
[  352.724425][T10401]  do_SYSENTER_32+0x1b/0x20
[  352.728952][T10401]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  352.735311][T10401] 
[  352.737630][T10401] Local variable digest created at:
[  352.742819][T10401]  fscrypt_match_name+0xb2/0x480
[  352.747851][T10401]  ext4_match+0x290/0xab0
[  352.752248][T10401] =====================================================
[  352.759171][T10401] Disabling lock debugging due to kernel taint
[  352.769717][T10401] Kernel panic - not syncing: panic_on_kmsan set ...
[  352.776419][T10401] CPU: 0 PID: 10401 Comm: syz-executor.4 Tainted: G    B             5.15.0-syzkaller #0
[  352.786257][T10401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  352.796331][T10401] Call Trace:
[  352.799615][T10401]  dump_stack_lvl+0x1ff/0x28e
[  352.804326][T10401]  dump_stack+0x25/0x28
[  352.808509][T10401]  panic+0x44f/0xdeb
[  352.812523][T10401]  ? add_taint+0x187/0x210
[  352.817018][T10401]  ? add_taint+0x187/0x210
[  352.821478][T10401]  kmsan_report+0x2e9/0x2f0
[  352.826003][T10401]  ? update_stack_state+0xa39/0xc00
[  352.831255][T10401]  ? __msan_warning+0xb4/0x100
[  352.836058][T10401]  ? number+0xd27/0x24c0
[  352.840326][T10401]  ? vsnprintf+0x1f3a/0x36a0
[  352.844938][T10401]  ? snprintf+0x244/0x290
[  352.849291][T10401]  ? tomoyo_init_log+0xd39/0x3b50
[  352.854341][T10401]  ? tomoyo_supervisor+0x8bd/0x2820
[  352.859567][T10401]  ? tomoyo_path_perm+0x96c/0xc70
[  352.864623][T10401]  ? tomoyo_path_symlink+0xfc/0x190
[  352.869861][T10401]  ? security_path_symlink+0x222/0x310
[  352.875350][T10401]  ? do_symlinkat+0x212/0xb50
[  352.880055][T10401]  ? __ia32_sys_symlink+0x12b/0x170
[  352.885284][T10401]  ? __do_fast_syscall_32+0x96/0xf0
[  352.890615][T10401]  ? do_fast_syscall_32+0x34/0x70
[  352.895683][T10401]  ? do_SYSENTER_32+0x1b/0x20
[  352.900395][T10401]  ? entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  352.906944][T10401]  ? __module_address+0x61/0x630
[  352.911991][T10401]  ? kmsan_get_metadata+0x11b/0x180
[  352.917226][T10401]  ? kmsan_get_shadow_origin_ptr+0x97/0xd0
[  352.923066][T10401]  ? kmsan_get_metadata+0x11b/0x180
[  352.928293][T10401]  ? kmsan_internal_set_shadow_origin+0x52/0xc0
[  352.934585][T10401]  __msan_warning+0xb4/0x100
[  352.939216][T10401]  number+0xd27/0x24c0
[  352.943310][T10401]  ? kmsan_internal_set_shadow_origin+0x52/0xc0
[  352.949609][T10401]  ? kmsan_get_shadow_origin_ptr+0x97/0xd0
[  352.955444][T10401]  vsnprintf+0x1f3a/0x36a0
[  352.959902][T10401]  snprintf+0x244/0x290
[  352.964099][T10401]  tomoyo_init_log+0xd39/0x3b50
[  352.969017][T10401]  tomoyo_supervisor+0x8bd/0x2820
[  352.974084][T10401]  ? tomoyo_check_acl+0x591/0x630
[  352.979150][T10401]  ? tomoyo_execute_permission+0x5e0/0x5e0
[  352.985003][T10401]  tomoyo_path_perm+0x96c/0xc70
[  352.989905][T10401]  tomoyo_path_symlink+0xfc/0x190
[  352.994975][T10401]  ? tomoyo_path_rmdir+0x170/0x170
[  353.000123][T10401]  security_path_symlink+0x222/0x310
[  353.005454][T10401]  do_symlinkat+0x212/0xb50
[  353.009993][T10401]  __ia32_sys_symlink+0x12b/0x170
[  353.015046][T10401]  __do_fast_syscall_32+0x96/0xf0
[  353.020107][T10401]  do_fast_syscall_32+0x34/0x70
[  353.025003][T10401]  do_SYSENTER_32+0x1b/0x20
[  353.029535][T10401]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  353.035907][T10401] RIP: 0023:0xf6efe549
[  353.039984][T10401] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00
[  353.059620][T10401] RSP: 002b:00000000ffeebb1c EFLAGS: 00000282 ORIG_RAX: 0000000000000053
[  353.068058][T10401] RAX: ffffffffffffffda RBX: 00000000f6fae427 RCX: 00000000f6faf137
[  353.076048][T10401] RDX: 00000000f7034000 RSI: 00000000ffeebbf4 RDI: 00000000f7034000
[  353.084038][T10401] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  353.092021][T10401] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  353.100010][T10401] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  353.108255][T10401] Kernel Offset: disabled
[  353.121423][T10401] Rebooting in 86400 seconds..