last executing test programs:

14.878568602s ago: executing program 0 (id=91):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="00100000fffa00f3eec5357af537bc3a675fb3e3ec3667d6"])
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"])

14.705605059s ago: executing program 0 (id=92):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000480))
ioprio_get$pid(0x2, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

14.70211804s ago: executing program 0 (id=93):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) (async)
r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (async)
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000e80), 0x0, 0x0)
timerfd_settime(r1, 0x3, &(0x7f00000013c0)={{}, {0x0, 0x989680}}, 0x0) (async)
r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
mmap$KVM_VCPU(&(0x7f0000002000/0x4000)=nil, r0, 0x100000a, 0x10, r2, 0x0) (async)
r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) (async)
r4 = syz_io_uring_setup(0x4e40, &(0x7f0000000000)={0x0, 0x54ea, 0x1, 0x2, 0x1}, &(0x7f0000000080), &(0x7f0000000100))
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r5, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x1) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x50, r4, 0x8000000)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r7 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r7, &(0x7f0000000380)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x41, 0x1}, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40004}, 0x0) (async, rerun: 32)
sendmsg$tipc(r7, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x3, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4040851}, 0x0) (rerun: 32)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r8, 0xffffffffffffffff, 0x0) (async)
write$binfmt_aout(r3, &(0x7f0000000380)=ANY=[], 0xff2e)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r11, 0x1, 0x70bd28, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x200080c0}, 0x0) (async)
sendmsg$TIPC_CMD_SHOW_PORTS(r9, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r11, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}}, 0x80)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)

14.70185778s ago: executing program 0 (id=94):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0)
readv(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x30, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x4d4, 0x2b}, @in6=@local, {0x0, 0x0, 0x2, 0x1, 0x0, 0x1}, {0xaabc, 0x200000, 0x9be, 0xfffffffffdfffffd}, {0xc0000, 0x7, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x56}}, 0xf0}}, 0x840)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)})
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r3 = openat$incfs(r2, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r3, 0xc058671e, &(0x7f00000000c0))
fcntl$getown(r1, 0x9)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c)
ioctl$KVM_CAP_DIRTY_LOG_RING(r4, 0x4068aea3, &(0x7f00000000c0)={0xc0, 0x0, 0xb000})
preadv2(r0, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/176, 0xb0}], 0x1, 0xffffffc8, 0xb, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0x0, r0, 0x7, 0x3, 0x400, 0xfffffffffffffffe})
syz_clone(0x6002000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000180), &(0x7f00000001c0)="5779377856374493573beed0a34827bac7d25e22ed0b013d42d4b5fab076e88fab32ef74ffa9ed64467297bc9f3b9513d88766203b3245636c86752e53dddbe637726f5215c6e4e2f11fe65353cba52f15344fc61147a4e7da204fff6b6159ef7e222018bd4985864e55b29c3d1338217707dd57176ce4f69b5592a92ae5f0422a086a09248d91f86e79dab686771bf4f065d896d7d3e961ee0553bee8e1e2b06206d34e7c863853ecda68918c350e207816400ef43d926584cfc90d013d6f14f137f08e93c873b99b8fb113cde34cfa38a9")
write(r1, &(0x7f0000000400)="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", 0xfffffcf1)

14.7010655s ago: executing program 0 (id=95):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r2 = memfd_create(&(0x7f00000009c0)='y\x105\xf3\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x2)
ftruncate(r2, 0xffff)
fcntl$addseals(r2, 0x409, 0x7)
r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0xc0086202, &(0x7f0000000080)=0x6)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_SIGNAL_MSI(r5, 0x4020aea5, &(0x7f0000000040)={0x2, 0x10000, 0x5, 0xc18aaa7c744b6fd8, 0x47e15ce3})
syz_usb_connect(0x0, 0x3f, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0xff, 0xac, 0xc5, 0x8, 0x763, 0x1011, 0xb796, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc2, 0x0, 0x3, 0xff, 0x46, 0xf7, 0x0, [], [{{0x9, 0x5, 0x8, 0x4, 0x40, 0x9, 0x1, 0x7f}}, {{0x9, 0x5, 0x3, 0x3, 0x400, 0x6, 0x8, 0x4}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0xbe, 0x0, 0xf}}]}}]}}]}}, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

14.613039108s ago: executing program 0 (id=96):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x161142, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
read$ptp(r2, 0x0, 0x0)
memfd_create(&(0x7f00000000c0)='/dev/rnullb0\x00', 0x1)
write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000280)={0xe, {0x3, 0x6, 0x1}}, 0xc)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0)
r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000000140))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0)
openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write(r0, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9", 0x678)

14.611584448s ago: executing program 32 (id=96):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x161142, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
read$ptp(r2, 0x0, 0x0)
memfd_create(&(0x7f00000000c0)='/dev/rnullb0\x00', 0x1)
write$UHID_SET_REPORT_REPLY(r2, &(0x7f0000000280)={0xe, {0x3, 0x6, 0x1}}, 0xc)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0)
r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCGDEV(r4, 0x80045432, &(0x7f0000000140))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0)
openat$cgroup_devices(r3, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write(r0, &(0x7f0000000400)="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", 0x678)

2.445289374s ago: executing program 2 (id=276):
r0 = openat$kvm(0x0, &(0x7f0000000300), 0x22382, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
getgroups(0x2, &(0x7f0000000040)=[0xee00, <r4=>0x0])
ioctl$TUNSETGROUP(r1, 0x400454ce, r4)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1})
setresuid(0x0, 0xffffffffffffffff, 0xee01)
ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"])
r6 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0)
ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000540)={0x0, 0x0, 0x100000001, 0x9})
ioctl$KVM_IRQ_LINE_STATUS(r5, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007})
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1000000205, 0x531802)
r9 = openat$kvm(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
ioctl$USBDEVFS_BULK(r8, 0xc0185502, &(0x7f0000000140)={{{0x1, 0x1}}, 0x6, 0x61, &(0x7f0000000200)="82a7ab534646"})
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0)
prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil)
ioctl$KVM_CREATE_VM(r9, 0xae01, 0x1)
ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, 0x0)
ioctl$MON_IOCX_GETX(0xffffffffffffffff, 0x4018920a, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0)
setpgid(0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r7, 0x88dd)

2.323895276s ago: executing program 2 (id=277):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x34, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x2, 0x0, 0x0, '\x00\x00(\x00'}}, 0x48}, 0x300}, 0x4844)
sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000"], 0x48}, 0x300}, 0x8040)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4, 0x0, &(0x7f0000000040)=[@clear_death={0x400c630f, 0x1}], 0xfffffffffffffff5, 0x0, 0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x60, r2, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x523, 0x27}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x11}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28a}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x296}]}, 0x60}, 0x1, 0x0, 0x0, 0x4c000}, 0x200000c4)

2.249134294s ago: executing program 2 (id=278):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0)
mmap(&(0x7f0000958000/0x4000)=nil, 0x4000, 0x800008, 0x810, r0, 0x92a90000)
r1 = syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000057b000/0x400000)=nil)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r4, 0x4068aea3, &(0x7f0000000180)={0x94, 0x0, 0x1})
r5 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = syz_kvm_add_vcpu$x86(r1, &(0x7f00000000c0)={0x0, &(0x7f0000000600)=[@code={0xa, 0x42, {"f3e1f4dff4f34d0f1ece0f01c3660fe983b9600000c40241457757c4e1fc77660f3a62c800cd0d66ba2000b838688520ef"}}, @wr_crn={0x46, 0x20, {0x3, 0x2}}, @cpuid={0x14, 0x18, {0x6, 0xf}}, @cpuid={0x14, 0x18, {0xca6b, 0x2}}, @wr_crn={0x46, 0x20, {0x0, 0x10}}, @cpuid={0x14, 0x18, {0x86a5, 0x4}}, @wr_drn={0x6e, 0x20, {0x2, 0x3}}, @uexit={0x0, 0x18, 0x9775}], 0x102})
ioctl$KVM_NMI(r7, 0xae9a)
sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0x158, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x40000040, 0x32}, @in=@private=0xa010100, {0x4, 0x7, 0x3, 0x40000000000004, 0xffffffffffffffff, 0xffffffffffffffff, 0x7f}, {0x0, 0x8, 0xcc}, {0xf6}, 0x0, 0x0, 0x2, 0x1, 0xfe}, [@algo_aead={0x67, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0xd8, 0x60, "6fc3070b4f8f7330202b93875f2d67a6a77871db764ec62c9599d2"}}]}, 0x158}}, 0x804)
fcntl$setlease(r5, 0x400, 0x1)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0106000000000000000009001000240004801300010062726f6164636173742d6c696e6b00000c0007800800050002000000"], 0x38}}, 0x40040)
fcntl$getflags(r5, 0x401)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x15c, 0x10, 0x633, 0x0, 0x0, {{@in6=@local, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004}, {@in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x3f}, {0x327, 0x9, 0x0, 0x4, 0xfff, 0x0, 0x1}, {}, {0x8f, 0x0, 0x8}, 0x70bd29, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x5e21, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3f}}}, @replay_thresh={0x8, 0xb, 0x7ff}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
madvise(&(0x7f00001e2000/0x400000)=nil, 0x400000, 0x17)

1.943162224s ago: executing program 2 (id=281):
capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7})
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) (async)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100))
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0xe)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r3 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x800, 0x103)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
rmdir(&(0x7f0000000200)='./cgroup\x00')
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x2802, 0x0)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) (async)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x2000}) (async)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x2000})
ioctl$TUNSETLINK(r6, 0x400454cd, 0x301)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448df, &(0x7f0000000200)) (async)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448df, &(0x7f0000000200))
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRES8=r1, @ANYBLOB=',allow_other,\x00'])
listxattr(&(0x7f00000004c0)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0)
r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r8, 0x0, 0x0) (async)
write$rfkill(r8, 0x0, 0x0)
r9 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_type(r9, &(0x7f00000001c0), 0x9)
fcntl$setlease(r3, 0x400, 0x1) (async)
fcntl$setlease(r3, 0x400, 0x1)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000003ac0), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000003ac0), 0xffffffffffffffff)

1.937546005s ago: executing program 2 (id=284):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x68080, 0x0)
close(r3)
fstat(0xffffffffffffffff, &(0x7f0000000200))
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r2, &(0x7f00000022c0)={@void, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x0, 0x5, 0xe98, 0x67, 0x0, 0xd7, 0x0, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x1c}, {[@lsrr={0x83, 0x3, 0x7f}, @ra={0x94, 0x4}]}}, "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"}}}}}, 0xea6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x1c, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
ioprio_set$pid(0x2, r1, 0x0)
sendfile(r0, r0, 0x0, 0x1000007fd)

1.744243204s ago: executing program 3 (id=290):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0)
pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='P', 0x1}], 0x1, 0x800000, 0x0)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f00000005c0)={{r0}, 0x6, &(0x7f0000000580)=[0x2, 0x6, 0x40, 0xffff, 0x0, 0xffffffff], 0xb, 0xe, 0x1})
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000500)={0x0, @aes128, 0x0, @desc3})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000004c0)='./file0\x00')
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000480)={{{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x2, 0x4e21, 0x4b, 0x2}, {0x0, 0x0, 0x4, 0x34a, 0x0, 0x0, 0x9c0, 0x6}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x3c}, 0xa, @in6=@private0, 0x3507, 0x4, 0x3, 0x0, 0x0, 0x4000000, 0x1}}, 0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r5, 0xffffffffffdffffe, 0x1)
ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xfffffffd})
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x2)
mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x40010, r2, 0x0)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/warn_count', 0x80000, 0x20)
read$FUSE(r6, &(0x7f00000022c0)={0x2020}, 0x2045)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r7, 0x0, 0xc, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x1)
r8 = dup2(r2, r2)
write$uinput_user_dev(r8, &(0x7f0000000080)={'syz1\x00', {0x9, 0x4, 0x7, 0xd8a8}, 0xf, [0x8001, 0xa0, 0x8, 0x3372, 0x10c, 0x1, 0x7fffffff, 0x77, 0x4, 0x40, 0x30, 0xfffffff8, 0x7, 0x7, 0xff, 0x1, 0x9, 0x97, 0x3, 0x5fa0, 0xffffffd4, 0xf6, 0x4, 0x42, 0x5, 0x8, 0x4, 0xfffffff5, 0x7f1, 0x0, 0x1, 0x9587, 0x5, 0x5, 0x4, 0x9, 0x4, 0x0, 0xb4, 0x7, 0xfffffff8, 0x2, 0xff6, 0x5, 0x6, 0xf95, 0x5, 0x401, 0x9, 0x9, 0x8, 0xbe4, 0x90a, 0x3, 0x2, 0x1f6d, 0x0, 0x5, 0x9, 0xf6d, 0x6, 0x802, 0x6, 0x7], [0x8a, 0xd032, 0x1, 0x711, 0x4, 0x7, 0x200, 0x6, 0x7fff, 0x6, 0x8, 0x4, 0x3, 0x6, 0x2, 0x613, 0x6, 0x7, 0x4, 0x3, 0xfffffffe, 0x10, 0x3, 0xa, 0x81, 0x5, 0x5, 0x9, 0x1000, 0x4, 0x2, 0x1000, 0x2, 0xb1, 0x6, 0x9, 0x3ff, 0x5, 0x2, 0x400, 0x3, 0x6, 0xfff, 0x4431, 0x2, 0x4, 0x9, 0x2, 0x800, 0xee15, 0x3, 0x7ff, 0x52, 0xa642, 0x8, 0x200, 0x8, 0xf98, 0x3, 0x7, 0x7, 0x506, 0x0, 0x2], [0x58e, 0x6, 0x2, 0x80, 0x2, 0x200, 0x9, 0x5, 0x731c, 0x7fffffff, 0x2, 0x8, 0x401, 0xffffff81, 0x81, 0x1, 0x10000, 0x7, 0xd, 0x1b9, 0x1, 0x7, 0x1000, 0x9, 0x1476, 0x9, 0x9, 0x5, 0x4, 0x1, 0xd, 0x1, 0x8000, 0xfffffffc, 0x6, 0x6, 0x45b, 0x7, 0x2a, 0x5, 0x6, 0x6, 0x9, 0x6b, 0x87, 0x9, 0x3, 0x9, 0x8, 0x7, 0x4, 0x0, 0x5, 0xf9, 0x4, 0x7, 0x8, 0x6, 0x800, 0x5, 0x400, 0x8, 0xfff, 0x80], [0x9, 0xa1, 0x8000, 0x4, 0x5, 0x8, 0xf63d, 0x7, 0x9, 0x8, 0x4, 0xfffffffa, 0xeb1b, 0x5, 0x3, 0x2, 0x2, 0xfffffff7, 0x0, 0x6, 0x0, 0xf, 0x7, 0x4, 0xf, 0xb, 0xa, 0x80da, 0x2, 0x1b1be47b, 0x1, 0x6, 0x4, 0x5, 0x4, 0x9, 0x9, 0x0, 0x3d2, 0x0, 0x63bc, 0x8002, 0x7, 0x6, 0x3, 0x9, 0x1000, 0x7, 0x7f, 0x200, 0x7, 0x8, 0x101, 0x6, 0x6, 0x24362aae, 0x8, 0x8, 0x0, 0x3, 0x0, 0xf5ca, 0x8, 0xea4]}, 0x45c)
ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000040)='}.\x00')

1.658479653s ago: executing program 2 (id=291):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0)
syz_usb_connect(0x3, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="120101016068c540360405000001010603010902120001017f67fe92b409ad47f564c8fd"], 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x50, 0x0, &(0x7f0000000000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @free_buffer], 0x0, 0x0, 0x0})
setns(r1, 0x24020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
socket$inet(0x2, 0x6, 0x4)
ptrace$setopts(0x4200, r0, 0x255, 0x20)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20)

1.655430923s ago: executing program 4 (id=295):
socket$vsock_stream(0x28, 0x1, 0x0) (async)
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r0, 0x28, 0x8, &(0x7f0000000080)=""/54, &(0x7f0000000000)=0x36) (async)
getsockopt(r0, 0x28, 0x8, &(0x7f0000000080)=""/54, &(0x7f0000000000)=0x36)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r1 = getpid()
syz_pidfd_open(r1, 0x0) (async)
r2 = syz_pidfd_open(r1, 0x0)
setns(r2, 0x2000000)
r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_pidfd_open(r3, 0x0)
setns(r4, 0x24020000) (async)
setns(r4, 0x24020000)
capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000080)={0x6, 0x1, 0x0, 0x0, 0x0, 0x5}) (async)
capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000080)={0x6, 0x1, 0x0, 0x0, 0x0, 0x5})
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) (async)
mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
mkdir(&(0x7f0000000180)='./file1\x00', 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r6, 0x40086602, &(0x7f0000000140)={0x10}) (async)
ioctl$FS_IOC_FSSETXATTR(r6, 0x40086602, &(0x7f0000000140)={0x10})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioperm(0x1, 0x3, 0x163f)
r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r7)
ptrace$getregset(0x4204, r7, 0x201, &(0x7f00000001c0)={0x0, 0x300})
fstat(r6, &(0x7f0000000700)) (async)
fstat(r6, &(0x7f0000000700))
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) (async)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'tunl0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f0000000080)="33031600d1fd140000007ef52f555f2a3b9fe67025c1d97bfbf719143baa4b1f0f858c6632f470", 0x27, 0x44054, &(0x7f00000000c0)={0x11, 0x86dd, r9, 0x1, 0x62}, 0x14)

1.58478967s ago: executing program 4 (id=296):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x140, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)={0x0, 0x5, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local]})
fsetxattr$security_capability(r1, &(0x7f0000000080), &(0x7f00000000c0)=@v1={0x1000000, [{0x7, 0x1000}]}, 0xc, 0x3)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{0x8, 0x9, 0x5, 0xfffffffd}, {0x6, 0x9, 0xe9, 0xffff}, {0x0, 0xfa, 0x8, 0xffff9775}, {0x0, 0xc, 0x60, 0x6}, {0x94, 0x8, 0x0, 0x9}, {0xe, 0x2, 0x5a, 0xfffffffc}]})
r2 = fsmount(0xffffffffffffffff, 0x1, 0x4e)
r3 = syz_genetlink_get_family_id$team(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00', <r4=>0x0})
getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, <r5=>0x0}, &(0x7f0000000280)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl1\x00', <r8=>0x0, 0x2f, 0x9b, 0x7f, 0x3, 0x40, @private2, @loopback, 0x20, 0x80, 0x8, 0x4}})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', <r9=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', <r10=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'syztnl2\x00', <r11=>0x0, 0x2f, 0xa, 0x9, 0x9, 0x6, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x700, 0x0, 0x1}})
getpeername$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000640)={@private, @private, <r13=>0x0}, &(0x7f0000000680)=0xc)
sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000c40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f00000006c0)={0x534, r3, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc708}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfe000000}}}]}}, {{0x8, 0x1, r5}, {0xe4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r9}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x534}, 0x1, 0x0, 0x0, 0x24024011}, 0x10)
r14 = accept4$vsock_stream(r2, &(0x7f0000000c80)={0x28, 0x0, 0x2710}, 0x10, 0x40800)
getsockopt$SO_TIMESTAMP(r14, 0x1, 0x1d, &(0x7f0000000cc0), &(0x7f0000000d00)=0x4)
getsockopt$inet6_mreq(r2, 0x29, 0x1c, &(0x7f0000000d40), &(0x7f0000000d80)=0x14)
r15 = openat$cgroup_ro(r2, &(0x7f0000000dc0)='pids.events\x00', 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000e40)={0x1, &(0x7f0000000e00)=[{0x9, 0x0, 0x2, 0xf8}]})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000ec0)={'wlan1\x00', <r16=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r15, &(0x7f0000000fc0)={&(0x7f0000000e80), 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x68, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="23f8865497eef3b052fe1d1bdd963fb0"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3e64223299e5e249"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffff}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "e7c6451033885167"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "638ccdae5dc380c9"}]}]}, 0x68}}, 0x20000081)
getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000001080)={0x0, <r17=>0x0}, &(0x7f00000010c0)=0xc)
getresgid(&(0x7f0000001100)=<r18=>0x0, &(0x7f0000001140), &(0x7f0000001180))
read$FUSE(r15, &(0x7f00000011c0)={0x2020, 0x0, 0x0, <r19=>0x0}, 0x2020)
mount$fuse(0x0, &(0x7f0000001000)='./file0\x00', &(0x7f0000001040), 0x2000024, &(0x7f0000003200)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r17}, 0x2c, {'group_id', 0x3d, r18}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x2}}], [{@fowner_lt={'fowner<', r19}}, {@flag='mand'}]}})

1.58423854s ago: executing program 4 (id=297):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6cb, 0x81a7, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f0000000240)={0x2c, &(0x7f0000000080)={0x40, 0x21, 0x74, {0x74, 0x24, "a6845cb067deb587d949f9ea323e1eb3c36ad77a491d485e7d5c6342b46634dc5ef7ddba7f38d5a51d6d60608a8bd7b735ae8f3b1e9d386f867b24d6e8e1f8c0cbf7dcc44092b52e049ea06aa4123b02dfc1a3863d51f8cd7dad65940fb3f180aec48b6b7606637adb5c23dd4a15a71a7de1"}}, &(0x7f0000000140)=ANY=[@ANYBLOB="e963e404000000000000"], 0x0, 0x0, 0x0}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000210000c0d5add6ae5578fc2b748f440001000000030000ba6f00f7ffefff00000000870dd627845ff980e67caaa0d0f517bd5b03b8de213c69b64f"])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_usb_connect$uac1(0x0, 0xc5, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb3, 0x3, 0x1, 0x8, 0x70, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x1d6}, [@processing_unit={0xd, 0x24, 0x7, 0x2, 0x0, 0x48, "25261b316a31"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1e, 0x2, 0xb5, 0xf, "29dd90"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x8, 0x55, 0x1, "8ccb080bdc"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x6, 0x2, 0xff, 0x2, "202a8408"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x0, 0x1001}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x5c, 0x200, 0x5, '_F'}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0x4, 0x7f, {0x7, 0x25, 0x1, 0x180, 0x3, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x1, 0x8000, 0x3, "d0a3d848cabd2b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0xed, 0x2, {0x7, 0x25, 0x1, 0x80, 0x5}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x7f, 0x2, 0x5a, 0xff, 0x8}, 0x15, &(0x7f0000000140)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x1000, 0x870f, 0x8, [0xf]}]}, 0x7, [{0x7c, &(0x7f00000002c0)=@string={0x7c, 0x3, "d75aa193e0bd4e8efd7bace82297bfe510f3e6d7ed175a01e9d5c111f9f0d39891e6314008e42845a3158c735528e85c761041d8dfda06f134bcdd1603e50a82f877b0c156c5df47f77b7db9c81f729bbc04db3f51dc42bab7269bb91a0d9b1b367d8328607aa5f0eb8362059a1326e117e0d416509715e082c5"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x445}}, {0xfc, &(0x7f0000000380)=@string={0xfc, 0x3, "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"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4}}, {0x5e, &(0x7f00000004c0)=@string={0x5e, 0x3, "e06940a81bc27111b4d2d003691b4ec92325e761981247926a52857619c5f3aa64d8ec676386bc24d8daf747e7282214864d67abe37101b3cfaf7b77397330ba13fa135c453089e4554651bff3b47fea763a1d0241028e6ba3c58a83"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x446}}]})
socket$netlink(0x10, 0x3, 0x4)
socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x2040400)
r5 = socket$netlink(0x10, 0x3, 0x0)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='msdos\x00', 0x808081, 0x0)

1.576296391s ago: executing program 3 (id=298):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
syz_clone(0x1204000, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85)
r1 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x8)
fcntl$setlease(r1, 0x400, 0x1)
removexattr(&(0x7f0000000940)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_access\x00')
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1c1f40, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0)
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f0000000240)={{0x0, 0x0, 0x80, {0x100000, 0x80a0000, 0x1}}, "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", "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"})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000)

1.366367802s ago: executing program 3 (id=303):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$FIONCLEX(r0, 0x5450)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00')
sendmsg$nl_xfrm(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001200010028bd7000fadbdffd9fc32500000000000000000000ffffac1e0001000004d602002b0014000d00e0000001000000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24000004}, 0x40040d0)
r3 = socket(0x28, 0x805, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000440), 0x10)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x508, 0x4)
sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{&(0x7f0000000080)="9435a4f028155d212acfe652b08c39c9764460b0d6e4a05bb65edad9e5bc1d968d84baa79dae", 0xffe3}]}}], 0x1, 0x4000800)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xc)
ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x3)
recvfrom(r0, &(0x7f0000000200)=""/131, 0xf92e58a67d38802c, 0x2101, 0x0, 0x0)
mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', &(0x7f0000000140), 0x24800, &(0x7f0000000040)=ANY=[@ANYBLOB="6465663ef16e5a6578743d22fe53ea0b33226809fe11ff82c164a30891bdc15fecb8ef18e3b48e7eb4f5349c88a68b81b99ed2fcb66c9a2ac3c2"])

1.313089828s ago: executing program 3 (id=304):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0)
write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000000), 0x4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) (async, rerun: 32)
r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000010c0)=ANY=[@ANYBLOB="240000002800010023bd700000000000100000000c"], 0x24}], 0x1}, 0x0) (async, rerun: 32)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 32)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) (async)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000440)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0xd1, 0x7, 0x7, 0x2, 0x9, 0x6, "e237ff2b0ac9c8441837fb12f06b1630ec82fbb3b4777cc4c530b69d580b23845737e4caa9284e516f59495f73c93e4ee9d92b0183f3de4ce639e02bb9239507796eddcb5ca04f40452c0fb329b7ee7f0771f15146860d7c57eb482ffc48531bd5215ebf3890e9cfe62c081e93ad39f5d38aa0291c018b3522a643c8a794b7c656e91ecac3b8d05957823f74435bf2ff27f778e8c6e0a474b1b1cd90b77c4d2da427a0e67292ef30b82127f67534223b94d7061d51d4667b7a7200a9070a05a4539c25bab76e18715bf3651131fe50a641"}}, 0x1e9) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1100, 0x1}, @fd, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})

1.232566786s ago: executing program 3 (id=305):
syz_open_dev$evdev(&(0x7f0000000180), 0x100000000, 0x482802)
r0 = socket$tipc(0x1e, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080089064803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14)
mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0)
munlockall()
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, 0x0, 0x0)
bind$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000280)="1f", 0x1}, {&(0x7f00000003c0)="50256b43091c3f815a1300e6c154395c0dc24aed6c88097d119bf4957a0f32a792e235b80e3d8e7eed523e552d790ee24221e49f9c20587aeff336d00f", 0x3d}, {&(0x7f00000004c0)="d5702b5e69bb05f78b6771937abbbd169a20dc3734ffe55dc02b9ef24cb339ea8ca54691e2d4e10a23c1422d0000000081006e31f1205d9b4c12970da65fe89b39892ed0ab475d24cae06be6797e59af74b747af2bcbe08a1621cde2207e2b02cc32e00da6077e5ee654927e6cf7f3b6639a177dbaa7136a5978", 0x7a}, {&(0x7f0000000540)="e95855148692dd6e3816230dfd224a923e22897afbe7246b448d46235f610504cd62e4d2317a187cecc446f302efb004d2c90d8cf1d8211aa4520e293f7ade73df7c3309aaedb89c45f8de9d4c44885e3473665d41a6a64a00422a1c85450e4fa31d6e26d7401d1aefea3202882697943b2906ccd5bc952e7b9213ce43fe3d8cd29df05af0f947e05671b2017fdb05f7d8c561f2fa7361960bc3fcedaca72dd673f7ad93af52ffaaa3f5e6f691a3154180fcdb96574de388ed0b02e9787746adaa4be1f485a150b0f929d4d8ee972435", 0xd0}, {&(0x7f0000000680)="147ef412a172f0b5c9f0443e6913ead4735daeeea4340eac85899c0da63e6bfa93e2c45bab956e651f131ef1b558dd80427c72d933fc0fed5a312f814d9ad99ec6aaf84d52f3a0d7bb7b8452b8bbde5d156c71548b3abbfe84dfa675cdde5ef95394d293451a74e16ee5a0caf39abbbadb1ef8df3aa7fd02635197c154a2d0e5855474032051d6269927d0130e688678d4efae274311799484ad6d92a2351d92b92c74d04de62a11b48bcf7186441c30538c79838c0361f78615c75636566abf9cd2128a9a24bf002f6cb33205eb1516875d3d7d7dd68d1d0fee9269820fd0056fdd", 0xe2}], 0x5}, 0x20004010)
recvmmsg(r4, &(0x7f0000003f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/2, 0x2}, 0x2}], 0x1, 0x40010002, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0)
r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0xc2, 0x4f, 0x40, 0x5d, 0xa0, 0x5, 0x0, 0x44, 0x8, 0x0, 0x100000000009}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0xff, 0x0, 0x87, 0x1a, 0x13, 0x7, 0x6, 0x1}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0x6, 0x4, 0xa0, 0x0, 0x2, 0x100000000}], 0x2})
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000140)={[0xffffffff, 0x4, 0xf3b5, 0x8, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x2, 0x3, 0x4, 0x0, 0xdbd], 0xeeee8000, 0x400})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'})
r8 = socket(0x8000000010, 0x2, 0x0)
write(r8, &(0x7f00000002c0)="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", 0xfc)

1.078468992s ago: executing program 4 (id=308):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil})
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0xe8) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0xe8)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') (async)
r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00')
r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0xa4)
sendfile(r4, r3, 0x0, 0xffffffff)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="64000000030601040000edffffff0000070000080500010007000000050001000700000005000100070000000900020073797a30000000000900020073797a31000000000900020073797a320000000005000100070000000900020073797a3000000000"], 0x64}}, 0x8) (async)
sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="64000000030601040000edffffff0000070000080500010007000000050001000700000005000100070000000900020073797a30000000000900020073797a31000000000900020073797a320000000005000100070000000900020073797a3000000000"], 0x64}}, 0x8)
r5 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) (async)
sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sendmsg$key(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)
sendmsg$key(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="020a00000200000000000000000000009fe7e2792ac337c7ca"], 0x10}}, 0x0)
ioctl$KVM_CREATE_DEVICE(r1, 0xc018aec0, 0x0)
r6 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r6) (async)
syz_usb_disconnect(r6)
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0)
syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0)
openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0x44, &(0x7f00000001c0)=ANY=[])
syz_open_dev$char_usb(0xc, 0xb4, 0x1000)
close_range(r0, 0xffffffffffffffff, 0x0)

1.027692586s ago: executing program 3 (id=311):
r0 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2)
shutdown(0xffffffffffffffff, 0xe35077dcf84945bb)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x5, 0x2, 0x4000, 0x2000, &(0x7f0000ff8000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, &(0x7f0000000080)=[@efer={0x2, 0x800}], 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0)
fcntl$addseals(r0, 0x409, 0x20)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x12, r0, 0x4e652000)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r4 = socket$packet(0x11, 0x2, 0x300)
bind$packet(r4, &(0x7f00000000c0)={0x11, 0x18, 0x0, 0x1, 0x81}, 0x14)
ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r2, 0x40089413, &(0x7f0000000000)=0xffffffff)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000000001010400000000000000000a0000000800154000000003"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"])

1.009979158s ago: executing program 1 (id=312):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24)
write(r0, &(0x7f00000000c0)="240800001a007f0214f9000000000000feff5fd8ab6892090cbdf667fc00000e000000000000000000e94e4df0929ec9848e6d882add1e9323d0f36b27c603768d29655d213e9a3795ec0bd698472ff8b370d3d8f700000000000000b9765b8d785b7b914aebaf8c76907976695f89eb4d5c09ef2e1c721e27470a86cc1c01603f563ccecb5487e9efc6b394584c4f00"/158, 0xf0)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x1998420, &(0x7f0000000000)=ANY=[@ANYRESHEX=r0])
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)={0x1a8, 0x1, 0x9, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFCTH_TUPLE={0xcc, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x14}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @local}}}]}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x6c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2e}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x10}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4005004)

963.599343ms ago: executing program 1 (id=313):
r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14, 0x800)
sendto$packet(r0, &(0x7f0000000340)="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", 0x12b, 0x845, 0x0, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000540)={0x20, 0xc, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000)
ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000140)={@local, 0x2f, r1})
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4b301, 0x0)
write(r4, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x6, 0x4)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10)
sendmmsg$inet(r6, &(0x7f0000003040)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000940)="b3fe109a0a0e5fbf3f4e8ce314c9dee2296599bb37db484506f7f4a1fab11782e0e1581812720001a80b9a0f3b1906d25b5efb254a1119eafe8167fa354fb03a066c8733d91c9127a8c77f2d647fbee113e52351c782ebfba85879d9482fd52ff178111c30472dc8243f1e28fc4d6127452b0d5b98c225054f78c4db08b2aaa9275252150a05682058a0c2b50728dd04c8040000007233beaa311ecc5fe3fa158d", 0xa1}, {&(0x7f0000000cc0)="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", 0x12d}, {&(0x7f0000001040)="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", 0x113}, {&(0x7f00000007c0)="ae01c1ffa47432736ef41d1ca7a55e6ee84fc95a490173e6f97a5c34095cb06b53d352aa1286e3af37ba4d1bac9280fe71822e0900ef5878455e97286102cdde893d7ccc8f6fbaf39ebfc87a0889162556dd2c750b72373cfc7c03b20d68bac0e03f2957d4cebb8fbac2af9aba141fe5820064122f5bd93ebef6e200989cdb3c826109a322a771d15a939ef2b800089a8694e29cbdf892bb8117526046ceb41781f58ebd2fa05936a120f19ecc081392e9996f697e2f", 0xb6}, {&(0x7f0000000580)="6b9cacb7f6804c331a3aa9379734ec2aedb597c32af634ddb581e3cef4c3058812b5118b70a11b4169426d7df4887c10782a5cfc7f8ea9995dea4ac79993469d55895298a177c1e96fbc02b422b2f658450f124c1f7fbb0ffc995cac4fb8186835e2811d77f90cd9a4d933cb708bc5a346e7fc85379cca848191ce387c3aba4c12d2c7a110b4ce3114b3bd8d1b7b116a803bd8ce2405f7c43700329ad680dfa721b65823c09cca147a24f365e0cbc678092ae44a632b5c8da7f3e8b31ceaf1b5577b783908da7734f30d7ade6113b3adfebb2b03ed05", 0xd6}, {&(0x7f0000001180)="c545b8e6891930d00e0c9f9a34b60edab22431d599675d86f2f876ea962ace703f8afaf9c4262d97ed63349f484d868856c1bc9cca3150f7e96d42e36ab839caeb28614673b668f1d4bfbc2ffdc9bbb7faa421ca301c10368c46010ec37a088c3414908889082d9fdffe5f74be78e4ab3d545c22d3148d9b024b52ac9280db8ea86894997c083e31229fa2365a8bceb69178468b0b7741df61069d66365ec555624cf395e1359669aec4eb18c84c59149442a7315383dd26efb1c7e3ad05", 0xbe}], 0x6}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="65582f9359a0131171dfb403e1249c431ad1fe8b66afd6ef0c978154f4a27eb98cb25896eeff99e775a758a7a4ce88468bea15e461e3cc83087a642104112fe047a567b0714f81ac002aab74fc8c960ad78df3473fa60d537ecf5a373c13a0c8a6b5686cee856ff661c9399efe5bfe82d20be58ac1339835874e9dcb22e5", 0x7e}], 0x1}}], 0x3, 0xc044)
write$binfmt_misc(r6, &(0x7f0000000300), 0x5b0)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x4, 0x8, 0xa}]}, 0x10)
bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x116}, 0x1, 0x0, 0x0, 0x44040}, 0x4008000)
setsockopt$inet6_MCAST_LEAVE_GROUP(r2, 0x29, 0x2d, &(0x7f0000000880)={0xa, {{0xa, 0x4e24, 0x80, @remote, 0xd4}}}, 0x88)
r7 = socket(0x10, 0x803, 0x0)
sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0x8}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x7ffffff7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x247}}], 0x18}}], 0x2, 0x4044800)
recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x1a3}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000000ae, 0x2000, &(0x7f0000003700)={0x77359400})
mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x208003, 0x0)

872.884832ms ago: executing program 1 (id=314):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x161142, 0x0)
r0 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0)
ftruncate(r0, 0x3)
write(r0, &(0x7f0000000400)="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", 0xc01)

871.682332ms ago: executing program 1 (id=315):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000040)=@add_del={0x2, &(0x7f0000000000)='batadv0\x00'})
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d)
r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=[@wr_crn={0x46, 0x20, {0x3, 0x620}}, @uexit={0x0, 0x18, 0x32c}, @out_dx={0xaa, 0x28, {0x1f3b, 0x2, 0xe}}, @in_dx={0x82, 0x20, {0xa150, 0x5}}, @wr_crn={0x46, 0x20, {0x0, 0x4}}, @wr_drn={0x6e, 0x20, {0x1}}, @in_dx={0x82, 0x20, {0x9a2f, 0x3}}, @cpuid={0x14, 0x18, {0xc3, 0x9}}, @uexit={0x0, 0x18, 0x800000000000000}, @rdmsr={0x32, 0x18, {0x972}}], 0x128})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000200)="66660f01f848b80e000000000000000f23d00f21f835200000010f23f866baf80cb8f0b4108def66bafc0cedc42181d8a90ea40000c4e24d360867362e450f9ca8798100000f20d835080000000f22d80f7887555f1bff470f792b0f01c9", 0x5e}], 0x1, 0x30, &(0x7f00000002c0)=[@cr4={0x1, 0x6000c0}], 0x1)
syz_clone3(&(0x7f0000000600)={0x4000, &(0x7f0000000300)=<r3=>0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000380), {0x3}, &(0x7f00000003c0)=""/198, 0xc6, &(0x7f00000004c0)=""/212, &(0x7f00000005c0)}, 0x58)
r4 = eventfd2(0x8, 0x80000)
ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000680)={0x2, r4, 0x1})
write(r0, &(0x7f00000006c0)="b2be9185c4178e2c8a64bdfae52eb7149484b1aec069ad62dee90f5768f51ad915567e547a4fbefd39549a3e28a85ddabe5bc9ad4fd072e43cadc4b099e44111c0397834d37eacda73f893f0fb58a8e860676495a708954d8d5a16a0f481bc40e0ae859690851979f7aad5431f69c94f8d2260679aa6b23118f1086aac72caed903719a68156f762692526895852252bd59bbf4016124204ee2f70c5aeab03fb975d1412918aa6b34faf1ac0ea517816e959304c1fd66319ed5df8bee9638051fd5d7bb9789a27240a7a759a1391677b116d6cee696d63f3", 0xd8)
io_setup(0x6, &(0x7f00000007c0)=<r5=>0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000800), 0x40001, 0x0)
io_submit(r5, 0x4, &(0x7f0000000b80)=[&(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x1, r6, &(0x7f0000000840)="c47c01315dd44ee6dc98c7f639d9d7046bfc8c8fe78b1544384168bed850918569771637444ae366f3798ffb9c11372e0c9ad236824b23e5b063906c2da7e9bb016fb193f7ba652ae2763f7fe30ee9053b8fd3f8c40be7433e5cc0d15d234eb8a427643e29cb4f79fd8aa1b52ae0934b146f5853e09be1b45439f805d029f57ad63a1aa10c754ef0aca7cc662d17676108f42e00f1de17ca14301d971c7afd", 0x9f, 0x0, 0x0, 0x2, r4}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000940)="c6f1981c9940cf1da2f33002799b99c4ce20c50ffa52c5f3e1b5e87f1dfe337792a4898e1f08fa8aa9fcad92be80dbe8daeefc4a03ab6ecb054568cdf978b2c1a341d50132d072133e9657cb22427bd332d0c673c11052ff227e3893ef409ca721a95017b033a1b46d3551d954e2122d3ec388a1a6c164d53b7a6baec66345e3b559c216b84a8835434bb79c82ff8a45b64beaeef9056b0947cbe4eb6946e88d49bd9503a70922af", 0xa8, 0x5, 0x0, 0x0, r4}, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x3, 0x80, r0, &(0x7f0000000a40)="7deea614bb7b2c6146ee83c32b53a6d926aa575d609d16615842ac721dc56a2476909d1ae2fc0b736a14f0f88595046b69fcb095f5e570cb669c2da21af342e5ce", 0x41, 0x8, 0x0, 0x1}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x1, 0x6, r4, &(0x7f0000000b00)="57b422517b962a20f9cad5a6b71a18c5bb493ac4bd97e43696c5420b3b1c2167c45b28fd04513079c9af1f1efb4e9c5af47c8eb4306a5c89bd8d409e", 0x3c, 0x5, 0x0, 0x2, r4}])
write(r0, &(0x7f0000000bc0)="bd", 0x1)
quotactl_fd$Q_SYNC(r6, 0xffffffff80000101, 0x0, 0x0)
process_madvise(r3, &(0x7f0000002f00)=[{&(0x7f0000000c00)="949c2883b5ef3e45e14c37e077f82e73a28ef6d76b65e27240cc9d1d37d0878936e53d1c8448e5b026ad876b46f34f7d362015f29391d8842a38ef15c64e72e6c670d0f903aa36b5c32ce5e631596122489c810932ef238d732f34c57f20", 0x5e}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="4c6d43d7821b8bcfa9d381b63da93f57a06dd3de09fd6edd9172e9e897d3443859a55cc2de3491f81ed13d236989285238ceb747a12c6d692f6bf36d11350af89d6ee3a41fabbeb39925da4117ee69478f79499485d3408d279ed9c93ab9e0f4aee05fa15314e3323c15a34f497ade272644e693ac81654570faa5ea8aae7b248702fdc49a9ce79e83ac70a46edccd3d4a8d40a91c69dc6572f06c2d8ae88854f405495d0b8047f79a4194ab6c3b2ef3a57935bb4d0b5884f04e939e98d93eed3078b1857f198b2bbe7344325d510f327cded6ae215c130e25a7c214", 0xdc}, {&(0x7f0000001d80)="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", 0x1000}, {&(0x7f0000002d80)="9c31f3aca8afd64320b47694c7a4c699e8f7e16a94", 0x15}, {&(0x7f0000002dc0)="a68766607e269d32a85738c0556931c0198cea6b3bce5d2784e541e51e2ecff8b9d9eb3801d89716787328601604e7", 0x2f}, {&(0x7f0000002e00)="7f042b0329bc2aaadebb105992bf925428ab29650f4ac0ff0f25d1b8d5ed70a399cc335be5315b9d676102dd1f289e51bd8c3f7659fc6fd7279a50cc58ef6bdbb0c8512abe79f952a9888cc199fff5264dc654a3da9da73a982d686f2e1e6805212c06f6e229c2974bcef1653821535c858d026a29afb88817d30b2d5538fb1d78d02dd4a7cc9e0cc29a8221184833828a0927ab81014cf54f82363acd0fc3094acc5956756013d5cbd0bec7f266eade6cecfc132dd41733937291a0bafdb6423a65c7109ef0db7609647c7b42d285dea61d3b6f2c5c536cde38b218c022187ad97789b61c30a5fa8769aaa0eb35ce2d30d891e4", 0xf4}], 0x7, 0x14, 0x0)
ioctl$KVM_SET_DEVICE_ATTR_vcpu(r0, 0x4018aee1, &(0x7f0000002fc0)=@attr_pmu_filter={0x0, 0x1, 0x1, &(0x7f0000002f80)={0x2, 0x9}})
r7 = accept$inet6(r0, &(0x7f0000003000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000003040)=0x1c)
setsockopt$sock_int(r7, 0x1, 0x27, &(0x7f0000003080)=0x93, 0x4)
lseek(r0, 0x1, 0x5)
fchdir(r1)
ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000030c0)={0x4, 0x0, 0x8})
close_range(r0, r4, 0x2)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000003100)='bbr', 0x3)
ioctl$FS_IOC_GETFSSYSFSPATH(r7, 0x80811501, &(0x7f0000003140)={0x80})
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000003200)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000003240)='blkio.bfq.io_serviced\x00', 0x0, 0x0)
ioctl$VT_DISALLOCATE(r9, 0x5608)
ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000003280)=[0x3, 0x9])
r10 = openat$full(0xffffffffffffff9c, &(0x7f00000032c0), 0x400140, 0x0)
ioctl$EXT4_IOC_GROUP_EXTEND(r10, 0x40086607, &(0x7f0000003300)=0x7)

846.962945ms ago: executing program 1 (id=316):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x800000000088}, 0x0)
symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
getdents64(r0, &(0x7f0000000100)=""/134, 0x86)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
add_key$keyring(&(0x7f0000000380), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)})
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130)
get_robust_list(0x0, 0x0, 0x0)
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f00000000c0))
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x6082, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f0000000180)=[{&(0x7f0000000240)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc}, 0x0)
ioprio_set$pid(0x2, 0x0, 0x0)
sendfile(r3, r3, 0x0, 0x1000007fd)

272.727122ms ago: executing program 4 (id=317):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x1000, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
io_setup(0x6, &(0x7f0000000080))
bind$can_raw(r2, &(0x7f0000000500), 0x10)
bind$can_raw(r2, &(0x7f0000000340)={0x1d, r3}, 0x10)
write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d)
recvmmsg(r1, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000ec0)=""/236, 0xec}, {&(0x7f0000000440)=""/183, 0xb7}, {&(0x7f0000002780)=""/4096, 0x1000}], 0x3}, 0x8}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1000}, {{0x0, 0x0, 0x0}, 0x7d08}, {{0x0, 0x0, 0x0}, 0x229}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x83}, {{0x0, 0x0, 0x0}, 0x2}], 0x9, 0x40000020, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000600), 0x43, 0x0, &(0x7f0000000740)="ff0000205610ea990eaaba1fb8f28d72130f79cd4e21e0ee676b6be7e753dfed4627798d969499de1f768fc4055d42a92633794589c0ce58ba4bb7f709a95a8827959f"})

148.948615ms ago: executing program 4 (id=318):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r3=>0x0)
r4 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r4, 0x2)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001e0021002bbd7000000000000a000000050000000000000008000880"], 0x24}}, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000008c0)='ns/cgroup\x00')
ioctl$NS_GET_OWNER_UID(r6, 0xb704, 0x0)
r7 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0)
flock(r7, 0x1)
r8 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r8, 0x2)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r3, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 1 (id=319):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0) (async, rerun: 64)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) (rerun: 64)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) (async, rerun: 64)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0x1, 0x100000, 0xb, 0x9, 0xfb, 0xe4, 0x40, 0xd, 0x0, 0x2e, 0x19}, {0x2, 0x8080000, 0xe, 0x0, 0x40, 0x4, 0x7d, 0x7f, 0x5, 0x3, 0x3}, {0xeeee0000, 0xdddd0000, 0xc, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x6, 0x81}, {0x6000, 0x1, 0xd, 0x6, 0x4, 0x42, 0xb, 0xff, 0x8, 0xaf, 0xe, 0x1}, {0x100000, 0xeeef0000, 0xb, 0x3, 0x15, 0x6, 0xab, 0x7f, 0x7, 0xa3, 0xf7, 0xf8}, {0x2000, 0x80a0000, 0x8, 0x18, 0x3, 0x9, 0x1, 0xa5, 0x80, 0xf, 0x1}, {0x3000, 0x0, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0xff, 0x70}, {0x8080000, 0x1000, 0xb, 0x4, 0xb, 0x7, 0x1, 0xff, 0xa6, 0xc, 0x7, 0x9}, {0xeeef0000, 0x30}, {0x1, 0x7}, 0x80000031, 0x0, 0x4, 0x2024, 0xe, 0x1003, 0x10000, [0x6800000000000200, 0x4, 0x3, 0xff]}) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x50, 0x0, 0x0) (async, rerun: 32)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003}) (rerun: 32)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000000)={'tunl0\x00', &(0x7f00000002c0)=@ethtool_sfeatures}) (async)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000700)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1100, 0x1}, @fd, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x2f}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.44' (ED25519) to the list of known hosts.
[   20.978431][   T36] audit: type=1400 audit(1762908917.370:64): avc:  denied  { mounton } for  pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   20.979965][  T282] cgroup: Unknown subsys name 'net'
[   21.001082][   T36] audit: type=1400 audit(1762908917.370:65): avc:  denied  { mount } for  pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   21.028435][   T36] audit: type=1400 audit(1762908917.400:66): avc:  denied  { unmount } for  pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   21.028660][  T282] cgroup: Unknown subsys name 'devices'
[   21.213824][  T282] cgroup: Unknown subsys name 'hugetlb'
[   21.219431][  T282] cgroup: Unknown subsys name 'rlimit'
[   21.372332][   T36] audit: type=1400 audit(1762908917.770:67): avc:  denied  { setattr } for  pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   21.395776][   T36] audit: type=1400 audit(1762908917.770:68): avc:  denied  { mounton } for  pid=282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   21.420576][   T36] audit: type=1400 audit(1762908917.770:69): avc:  denied  { mount } for  pid=282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   21.499236][  T284] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   21.508134][   T36] audit: type=1400 audit(1762908917.900:70): avc:  denied  { relabelto } for  pid=284 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[   21.533571][   T36] audit: type=1400 audit(1762908917.900:71): avc:  denied  { write } for  pid=284 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.570379][   T36] audit: type=1400 audit(1762908917.960:72): avc:  denied  { read } for  pid=282 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.596024][   T36] audit: type=1400 audit(1762908917.960:73): avc:  denied  { open } for  pid=282 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.596278][  T282] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   22.423384][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.430884][  T289] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.438165][  T289] bridge_slave_0: entered allmulticast mode
[   22.444417][  T289] bridge_slave_0: entered promiscuous mode
[   22.452023][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.459140][  T291] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.466368][  T291] bridge_slave_0: entered allmulticast mode
[   22.472538][  T291] bridge_slave_0: entered promiscuous mode
[   22.479821][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.487041][  T291] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.494162][  T291] bridge_slave_1: entered allmulticast mode
[   22.500294][  T291] bridge_slave_1: entered promiscuous mode
[   22.506494][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.513581][  T289] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.520634][  T289] bridge_slave_1: entered allmulticast mode
[   22.526895][  T289] bridge_slave_1: entered promiscuous mode
[   22.575711][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.582812][  T292] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.589847][  T292] bridge_slave_0: entered allmulticast mode
[   22.596160][  T292] bridge_slave_0: entered promiscuous mode
[   22.602479][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.609589][  T292] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.616725][  T292] bridge_slave_1: entered allmulticast mode
[   22.622957][  T292] bridge_slave_1: entered promiscuous mode
[   22.655837][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.662959][  T290] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.670096][  T290] bridge_slave_0: entered allmulticast mode
[   22.676407][  T290] bridge_slave_0: entered promiscuous mode
[   22.691739][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.698779][  T290] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.705880][  T290] bridge_slave_1: entered allmulticast mode
[   22.712251][  T290] bridge_slave_1: entered promiscuous mode
[   22.828405][  T291] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.835475][  T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.842792][  T291] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.849810][  T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.873155][  T289] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.880205][  T289] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.887563][  T289] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.894595][  T289] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.907131][  T292] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.914212][  T292] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.921481][  T292] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.928519][  T292] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.951563][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.958664][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.965967][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.973001][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.006318][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.014260][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.021522][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.029012][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.036795][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.044111][   T60] bridge0: port 1(bridge_slave_0) entered disabled state
[   23.051252][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[   23.064244][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.071303][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.090282][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.097389][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.105422][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.112594][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.124094][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.131143][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.138799][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.145838][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.178199][   T60] bridge0: port 1(bridge_slave_0) entered blocking state
[   23.185302][   T60] bridge0: port 1(bridge_slave_0) entered forwarding state
[   23.193252][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   23.200388][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   23.232073][  T289] veth0_vlan: entered promiscuous mode
[   23.248646][  T292] veth0_vlan: entered promiscuous mode
[   23.256297][  T291] veth0_vlan: entered promiscuous mode
[   23.274419][  T289] veth1_macvtap: entered promiscuous mode
[   23.281522][  T290] veth0_vlan: entered promiscuous mode
[   23.292273][  T291] veth1_macvtap: entered promiscuous mode
[   23.304518][  T290] veth1_macvtap: entered promiscuous mode
[   23.328208][  T292] veth1_macvtap: entered promiscuous mode
[   23.359629][  T289] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   23.417060][  T337] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   23.417120][  T337] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:2
[   23.449782][  T340] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   23.500691][  T347] __vm_enough_memory: pid: 347, comm: syz.0.6, bytes: 18014402804453376 not enough memory for the allocation
[   23.501381][  T345] rust_binder: Write failure EINVAL in pid:4
[   23.576372][  T351] usb usb7: usbfs: process 351 (syz.0.7) did not claim interface 0 before use
[   23.616324][  T343] =======================================================
[   23.616324][  T343] WARNING: The mand mount option has been deprecated and
[   23.616324][  T343]          and is ignored by this kernel. Remove the mand
[   23.616324][  T343]          option from the mount to silence this warning.
[   23.616324][  T343] =======================================================
[   23.681553][  T359] tipc: Started in network mode
[   23.686976][  T359] tipc: Node identity 4, cluster identity 4711
[   23.699602][  T359] tipc: Node number set to 4
[   23.877223][  T372] tipc: Started in network mode
[   23.882489][  T372] tipc: Node identity 4, cluster identity 4711
[   23.888759][  T372] tipc: Node number set to 4
[   23.913958][  T376] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   23.938985][  T376] rust_binder: 17: no such ref 5
[   23.944021][  T376] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   23.951102][  T376] rust_binder: 17: no such ref 2
[   23.956255][  T376] rust_binder: Failed to allocate buffer. len:4192, is_oneway:false
[   23.961808][   T63] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[   23.974851][  T381] overlay: ./file0 is not a directory
[   23.983689][  T381] overlay: ./file0 is not a directory
[   24.029841][  T390] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   24.029861][  T390] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:27
[   24.054634][  T393] process 'syz.3.22' launched './file0' with NULL argv: empty string added
[   24.074006][  T393] FAT-fs (rnullb0): bogus number of reserved sectors
[   24.080753][  T393] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   24.125555][  T399] rust_binder: Write failure EFAULT in pid:35
[   24.135591][   T63] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   24.152186][   T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[   24.163626][   T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[   24.166193][  T404] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613)
[   24.173672][   T63] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   24.173917][  T404] rust_binder: Error while translating object.
[   24.185963][   T63] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[   24.198722][    T9] usb 2-1: new low-speed USB device number 2 using dummy_hcd
[   24.205401][   T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   24.215914][  T404] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   24.222814][   T63] usb 3-1: config 0 descriptor??
[   24.237196][  T404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:40
[   24.240182][   T63] usb 3-1: MIDIStreaming interface descriptor not found
[   24.275552][  T406] overlayfs: failed to resolve './file0redirect_dir=follow': -2
[   24.353907][  T406] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   24.353929][  T406] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:42
[   24.392900][    T9] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   24.411154][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   24.420179][    T9] usb 2-1: config 0 descriptor??
[   24.458383][  T412] rust_binder: Error while translating object.
[   24.458424][  T412] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   24.462181][  T363] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set
[   24.464651][  T412] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:48
[   24.475827][  T363] rust_binder: Error while translating object.
[   24.492092][  T363] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   24.498310][  T363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10
[   24.511117][   T10] usb 3-1: USB disconnect, device number 2
[   24.561179][  T415] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:51
[   24.561302][  T415] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   24.570666][  T417] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:51
[   24.728015][  T431] netlink: 'syz.3.35': attribute type 3 has an invalid length.
[   24.744757][  T431] netlink: 944 bytes leftover after parsing attributes in process `syz.3.35'.
[   24.754546][  T431] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   24.754907][  T431] rust_binder: Error while translating object.
[   24.761373][  T431] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   24.767728][  T431] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:67
[   25.048130][  T438] netlink: 'syz.2.38': attribute type 4 has an invalid length.
[   25.071778][   T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   25.221739][   T10] usb 4-1: Using ep0 maxpacket: 16
[   25.228014][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   25.238953][   T10] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[   25.248526][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   25.257270][   T10] usb 4-1: config 0 descriptor??
[   25.311793][   T63] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   25.462787][   T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   25.473894][   T63] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64
[   25.485586][   T63] usb 3-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00
[   25.494804][   T63] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   25.503636][   T63] usb 3-1: config 0 descriptor??
[   25.508941][  T438] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[   25.664963][   T10] hid-generic 0003:04F3:0755.0001: unknown main item tag 0x0
[   25.672456][   T10] hid-generic 0003:04F3:0755.0001: unknown main item tag 0x0
[   25.679870][   T10] hid-generic 0003:04F3:0755.0001: unknown main item tag 0x0
[   25.687328][   T10] hid-generic 0003:04F3:0755.0001: unknown main item tag 0x0
[   25.694756][   T10] hid-generic 0003:04F3:0755.0001: unknown main item tag 0x0
[   25.703344][   T10] hid-generic 0003:04F3:0755.0001: hidraw0: USB HID v0.05 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0
[   25.719225][   T63] usbhid 3-1:0.0: can't add hid device: -71
[   25.725583][   T63] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   25.734568][   T63] usb 3-1: USB disconnect, device number 3
[   26.029315][  T378] rust_binder: Write failure EFAULT in pid:6
[   26.029565][    T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   26.045704][    T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[   26.056037][    T9] asix 2-1:0.0: probe with driver asix failed with error -71
[   26.064920][    T9] usb 2-1: USB disconnect, device number 2
[   26.067514][  T436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   26.080436][  T436] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   26.092303][   T63] usb 4-1: USB disconnect, device number 2
[   26.106218][   T36] kauditd_printk_skb: 89 callbacks suppressed
[   26.106235][   T36] audit: type=1400 audit(1762908922.500:163): avc:  denied  { getopt } for  pid=446 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   26.134580][   T36] audit: type=1400 audit(1762908922.500:164): avc:  denied  { map } for  pid=446 comm="syz.3.39" path="socket:[4478]" dev="sockfs" ino=4478 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   26.149115][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[   26.157604][   T36] audit: type=1400 audit(1762908922.500:165): avc:  denied  { accept } for  pid=446 comm="syz.3.39" path="socket:[4478]" dev="sockfs" ino=4478 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   26.186750][   T36] audit: type=1400 audit(1762908922.530:166): avc:  denied  { create } for  pid=448 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   26.206543][   T36] audit: type=1400 audit(1762908922.530:167): avc:  denied  { write } for  pid=448 comm="syz.3.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   26.235131][   T36] audit: type=1400 audit(1762908922.630:168): avc:  denied  { unmount } for  pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   26.279455][  T455] rust_binder: 16: no such ref 2
[   26.449381][   T36] audit: type=1400 audit(1762908922.840:169): avc:  denied  { write } for  pid=458 comm="syz.2.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   26.458808][  T459] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   26.482522][   T36] audit: type=1400 audit(1762908922.880:170): avc:  denied  { write } for  pid=458 comm="syz.2.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   26.545708][   T36] audit: type=1400 audit(1762908922.940:171): avc:  denied  { setattr } for  pid=462 comm="syz.1.44" path="/dev/binderfs/binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   26.545935][  T463] rust_binder: Error while translating object.
[   26.570058][  T463] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   26.571020][   T36] audit: type=1400 audit(1762908922.970:172): avc:  denied  { create } for  pid=460 comm="syz.2.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   26.577089][  T463] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:8
[   26.745128][  T474] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[   26.761323][  T474] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   26.769140][  T474] rust_binder: 14: no such ref 0
[   26.774343][  T474] rust_binder: 14: no such ref 6
[   26.779274][  T474] rust_binder: 14: no such ref 3
[   26.784504][  T474] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3
[   26.905224][  T485] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:18
[   26.967127][  T489] rust_binder: Write failure EFAULT in pid:22
[   27.051756][    T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   27.206823][  T499] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   27.211706][    T9] usb 2-1: Using ep0 maxpacket: 32
[   27.222199][    T9] usb 2-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   27.233400][    T9] usb 2-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   27.246469][    T9] usb 2-1: config 1 interface 0 has no altsetting 0
[   27.254850][    T9] usb 2-1: New USB device found, idVendor=2453, idProduct=0100, bcdDevice= 0.40
[   27.264346][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   27.272381][    T9] usb 2-1: Product: 몮ᩨ䶽￱ꧮ쳔䑩섿吧䤳촚俲劲曟셌羲℻䞻嫢逾肌龸燉僡顝㮥᡻魵뱊꓍Ꮑ㵰
[   27.287396][    T9] usb 2-1: Manufacturer: ѕ
[   27.291937][    T9] usb 2-1: SerialNumber: syz
[   27.498547][  T478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   27.501715][   T63] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   27.507239][  T478] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   27.517735][  T510] rust_binder: Got transaction with invalid offset.
[   27.522458][  T510] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   27.529397][    T9] usbhid 2-1:1.0: can't add hid device: -71
[   27.529714][  T510] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:27
[   27.539347][    T9] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[   27.563846][    T9] usb 2-1: USB disconnect, device number 3
[   27.641896][   T63] usb 3-1: device descriptor read/64, error -71
[   27.881777][   T63] usb 3-1: device descriptor read/64, error -71
[   27.961851][  T526] fuse: Bad value for 'fd'
[   28.122163][   T63] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   28.161279][  T540] binder: Unknown parameter 'defcontextve_0'
[   28.192072][  T330] Bluetooth: hci1: Frame reassembly failed (-84)
[   28.198522][  T330] Bluetooth: hci1: Frame reassembly failed (-84)
[   28.202378][  T548] netlink: 16 bytes leftover after parsing attributes in process `syz.1.75'.
[   28.205317][  T549] Bluetooth: hci0: command 0x1003 tx timeout
[   28.213751][  T548] netlink: 17 bytes leftover after parsing attributes in process `syz.1.75'.
[   28.219646][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   28.228647][  T548] tipc: Invalid UDP bearer configuration
[   28.241738][  T548] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   28.261743][   T63] usb 3-1: device descriptor read/64, error -71
[   28.342310][  T560] rust_binder: 90: no such ref 0
[   28.347576][  T560] netlink: 20 bytes leftover after parsing attributes in process `syz.3.78'.
[   28.394492][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.394518][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.401074][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.407841][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.414518][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.421042][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.427746][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.434531][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.440987][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.448443][  T568] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.455272][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.461974][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.468425][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.475161][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.481614][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.488347][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.494981][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.501477][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.507985][   T63] usb 3-1: device descriptor read/64, error -71
[   28.520896][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.520918][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.528249][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.534919][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.541373][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.548126][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.555142][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.561638][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.568351][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.575027][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.581475][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.588224][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.595034][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.601528][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.609554][  T569] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.631706][    T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[   28.631769][   T63] usb usb3-port1: attempt power cycle
[   28.783027][    T9] usb 4-1: config 66 has an invalid interface number: 105 but max is 0
[   28.791331][    T9] usb 4-1: config 66 has no interface number 0
[   28.797554][    T9] usb 4-1: config 66 interface 105 has no altsetting 0
[   28.806260][    T9] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.7d
[   28.815540][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   28.823589][    T9] usb 4-1: Product: syz
[   28.827814][    T9] usb 4-1: Manufacturer: syz
[   28.832453][    T9] usb 4-1: SerialNumber: syz
[   28.981762][   T63] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   29.003375][   T63] usb 3-1: device descriptor read/8, error -71
[   29.046880][  T567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   29.056008][  T567] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   29.065068][  T567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   29.074592][  T567] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   29.083635][  T567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   29.092745][  T567] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   29.101485][  T567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   29.111728][  T567] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   29.120233][  T567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   29.130133][  T567] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   29.139969][   T63] usb 3-1: device descriptor read/8, error -71
[   29.149032][    T9] usb 4-1: USB disconnect, device number 3
[   29.330374][  T605] rust_binder: 92: no such ref 0
[   29.335381][  T605] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   29.342453][  T605] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[   29.349479][  T605] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   29.356536][  T605] rust_binder: 92: no such ref 0
[   29.363634][  T605] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:92
[   29.375001][  T607] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   29.381773][   T63] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   29.423961][   T63] usb 3-1: device descriptor read/8, error -71
[   29.552778][   T63] usb 3-1: device descriptor read/8, error -71
[   29.584230][  T329] bridge_slave_1: left allmulticast mode
[   29.589959][  T329] bridge_slave_1: left promiscuous mode
[   29.595829][  T329] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.603784][  T329] bridge_slave_0: left allmulticast mode
[   29.609791][  T329] bridge_slave_0: left promiscuous mode
[   29.615788][  T329] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.661813][   T63] usb usb3-port1: unable to enumerate USB device
[   29.693515][  T623] rust_binder: Read failure Err(EAGAIN) in pid:105
[   29.745488][  T329] tipc: Left network mode
[   29.760102][  T329] veth1_macvtap: left promiscuous mode
[   29.765679][  T329] veth0_vlan: left promiscuous mode
[   29.804991][  T627] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.812121][  T627] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.819232][  T627] bridge_slave_0: entered allmulticast mode
[   29.825420][  T627] bridge_slave_0: entered promiscuous mode
[   29.831763][  T627] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.838794][  T627] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.845870][  T627] bridge_slave_1: entered allmulticast mode
[   29.852239][  T627] bridge_slave_1: entered promiscuous mode
[   29.893078][  T627] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.900159][  T627] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.907451][  T627] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.914497][  T627] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.932812][  T330] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.940103][  T330] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.949643][  T330] bridge0: port 1(bridge_slave_0) entered blocking state
[   29.956723][  T330] bridge0: port 1(bridge_slave_0) entered forwarding state
[   29.965945][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[   29.973002][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[   29.981722][   T63] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   29.998699][  T627] veth0_vlan: entered promiscuous mode
[   30.008927][  T627] veth1_macvtap: entered promiscuous mode
[   30.037872][  T645] No source specified
[   30.111779][   T63] usb 4-1: device descriptor read/64, error -71
[   30.201778][   T53] Bluetooth: hci1: command 0x1003 tx timeout
[   30.201784][  T451] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   30.284614][  T651] rust_binder: Write failure EFAULT in pid:47
[   30.351780][   T63] usb 4-1: device descriptor read/64, error -71
[   30.433273][  T669] netlink: 96 bytes leftover after parsing attributes in process `syz.2.108'.
[   30.442868][  T669] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 4256, size: 18446744073709551613)
[   30.442891][  T669] rust_binder: Error while translating object.
[   30.455364][  T669] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   30.461689][  T669] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62
[   30.461800][   T31] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[   30.552250][  T674] binder: Bad value for 'stats'
[   30.611773][   T63] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   30.632981][   T31] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   30.644245][   T31] usb 2-1: config 0 interface 0 altsetting 254 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[   30.655269][   T31] usb 2-1: config 0 interface 0 has no altsetting 0
[   30.661923][   T31] usb 2-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00
[   30.670981][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   30.679581][   T31] usb 2-1: config 0 descriptor??
[   30.685513][  T649] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   30.751739][   T63] usb 4-1: device descriptor read/64, error -71
[   30.801769][    T9] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   30.931741][    T9] usb 5-1: device descriptor read/64, error -71
[   30.991717][   T63] usb 4-1: device descriptor read/64, error -71
[   31.101854][   T63] usb usb4-port1: attempt power cycle
[   31.171751][    T9] usb 5-1: device descriptor read/64, error -71
[   31.296143][   T31] usbhid 2-1:0.0: can't add hid device: -71
[   31.302211][   T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   31.311400][   T31] usb 2-1: USB disconnect, device number 4
[   31.374942][  T683] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   31.375499][   T36] kauditd_printk_skb: 72 callbacks suppressed
[   31.375514][   T36] audit: type=1400 audit(1762908927.770:245): avc:  denied  { watch } for  pid=682 comm="syz.2.114" path="/26" dev="tmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   31.377865][  T683] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:72
[   31.382206][   T36] audit: type=1400 audit(1762908927.770:246): avc:  denied  { read } for  pid=682 comm="syz.2.114" name="file0" dev="tmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   31.441047][    T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[   31.451812][   T63] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   31.472894][   T63] usb 4-1: device descriptor read/8, error -71
[   31.523542][  T685] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.115' resets device
[   31.571880][    T9] usb 5-1: device descriptor read/64, error -71
[   31.612860][   T63] usb 4-1: device descriptor read/8, error -71
[   31.621152][  T695] rust_binder: Error while translating object.
[   31.621179][  T695] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   31.627469][  T695] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:84
[   31.647071][  T697] netlink: 'syz.2.118': attribute type 15 has an invalid length.
[   31.663932][  T697] netlink: 24 bytes leftover after parsing attributes in process `syz.2.118'.
[   31.811729][    T9] usb 5-1: device descriptor read/64, error -71
[   31.851834][   T63] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[   31.872819][   T63] usb 4-1: device descriptor read/8, error -71
[   31.921813][   T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   31.921909][    T9] usb usb5-port1: attempt power cycle
[   32.002946][   T63] usb 4-1: device descriptor read/8, error -71
[   32.072985][   T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   32.083208][   T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   32.093366][   T31] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   32.102457][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   32.110467][   T31] usb 3-1: SerialNumber: syz
[   32.115542][   T63] usb usb4-port1: unable to enumerate USB device
[   32.281761][    T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[   32.303018][    T9] usb 5-1: device descriptor read/8, error -71
[   32.324891][   T36] audit: type=1400 audit(1762908928.720:247): avc:  denied  { connect } for  pid=698 comm="syz.2.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   32.350321][   T31] usb 3-1: 0:2 : does not exist
[   32.364427][   T31] usb 3-1: unit 5: unexpected type 0x03
[   32.376155][   T31] usb 3-1: USB disconnect, device number 8
[   32.404368][  T341] udevd[341]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   32.410176][  T716] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[   32.432837][    T9] usb 5-1: device descriptor read/8, error -71
[   32.449250][   T36] audit: type=1400 audit(1762908928.840:248): avc:  denied  { execute } for  pid=717 comm="syz.2.125" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   32.484143][   T36] audit: type=1400 audit(1762908928.880:249): avc:  denied  { connect } for  pid=722 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   32.514994][  T728] Zero length message leads to an empty skb
[   32.527795][  T728] /dev/rnullb0: Can't open blockdev
[   32.593814][   T36] audit: type=1400 audit(1762908928.990:250): avc:  denied  { map } for  pid=729 comm="syz.2.128" path="/proc/112/task/113/projid_map" dev="proc" ino=5795 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[   32.593989][  T731] binder: Binderfs stats mode cannot be changed during a remount
[   32.617244][   T36] audit: type=1400 audit(1762908928.990:251): avc:  denied  { execute } for  pid=729 comm="syz.2.128" path="/proc/112/task/113/projid_map" dev="proc" ino=5795 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1
[   32.655582][   T36] audit: type=1400 audit(1762908929.050:252): avc:  denied  { mount } for  pid=733 comm="syz.2.129" name="/" dev="configfs" ino=2427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   32.681726][    T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[   32.702711][    T9] usb 5-1: device descriptor read/8, error -71
[   32.761226][   T36] audit: type=1400 audit(1762908929.150:253): avc:  denied  { create } for  pid=746 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[   32.782440][   T36] audit: type=1400 audit(1762908929.180:254): avc:  denied  { write } for  pid=737 comm="syz.2.131" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[   32.783855][  T748] usb usb8: usbfs: process 748 (syz.2.131) did not claim interface 0 before use
[   32.820221][  T748] rust_binder: Got transaction with invalid offset.
[   32.820259][  T748] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   32.826945][  T748] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:118
[   32.832686][    T9] usb 5-1: device descriptor read/8, error -71
[   32.850408][  T752] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:126
[   32.863886][  T754] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   32.873093][  T754] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:128
[   32.961774][   T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   32.961854][    T9] usb usb5-port1: unable to enumerate USB device
[   33.112246][   T31] usb 2-1: Using ep0 maxpacket: 16
[   33.118546][   T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   33.129444][   T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   33.139220][   T31] usb 2-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[   33.148297][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   33.156835][   T31] usb 2-1: config 0 descriptor??
[   33.407987][  T759] /dev/rnullb0: Can't open blockdev
[   33.494276][  T766] rust_binder: validate_parent_fixup: fixup_min_offset=46, parent_offset=35
[   33.494300][  T766] rust_binder: Error while translating object.
[   33.503080][  T766] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   33.509267][  T766] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:140
[   33.565154][   T31] playstation 0003:054C:05C4.0002: unbalanced collection at end of report description
[   33.586127][   T31] playstation 0003:054C:05C4.0002: Parse failed
[   33.592495][   T31] playstation 0003:054C:05C4.0002: probe with driver playstation failed with error -22
[   33.766991][  T740] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:39
[   33.777836][  T391] usb 2-1: USB disconnect, device number 5
[   33.791834][    T9] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[   33.942812][    T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   33.955938][    T9] usb 3-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00
[   33.965249][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   33.973312][   T10] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[   33.981706][    T9] usb 3-1: config 0 descriptor??
[   34.030932][  T773] syz.3.144 uses obsolete (PF_INET,SOCK_PACKET)
[   34.118335][  T781] /dev/rnullb0: Can't open blockdev
[   34.123093][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[   34.134533][   T10] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[   34.143602][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   34.152917][   T10] usb 5-1: config 0 descriptor??
[   34.158179][  T771] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[   34.289392][  T783] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   34.298145][  T785] /dev/rnullb0: Can't open blockdev
[   34.323903][  T787] /dev/rnullb0: Can't open blockdev
[   34.367048][  T771] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.143' sets config #0
[   34.394125][    T9] waltop 0003:172F:0037.0003: unknown main item tag 0x0
[   34.404014][    T9] waltop 0003:172F:0037.0003: unknown main item tag 0x0
[   34.411063][    T9] waltop 0003:172F:0037.0003: unknown main item tag 0x0
[   34.418158][    T9] waltop 0003:172F:0037.0003: unknown main item tag 0x0
[   34.425183][    T9] waltop 0003:172F:0037.0003: unknown main item tag 0x0
[   34.433772][    T9] waltop 0003:172F:0037.0003: hidraw0: USB HID v0.00 Device [HID 172f:0037] on usb-dummy_hcd.2-1/input0
[   34.474935][  T792] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:50
[   34.539687][  T799] rust_binder: Write failure EFAULT in pid:56
[   34.597095][    T9] usb 3-1: USB disconnect, device number 9
[   34.632099][  T802] netlink: 'syz.1.153': attribute type 1 has an invalid length.
[   34.645566][   T10] hid-generic 0003:04F3:0755.0004: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0
[   34.664779][  T801] rust_binder: Write failure EFAULT in pid:58
[   34.683972][  T805] capability: warning: `syz.1.154' uses deprecated v2 capabilities in a way that may be insecure
[   34.702415][  T805] overlayfs: failed to resolve './file0/file0': -2
[   34.710901][  T805] overlayfs: missing 'lowerdir'
[   34.824583][  T811] rust_binder: Error in use_page_slow: ESRCH
[   34.824600][  T811] rust_binder: use_range failure ESRCH
[   34.830661][  T811] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[   34.835222][  T391] usb 5-1: USB disconnect, device number 6
[   34.836349][  T811] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   34.850212][  T811] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:67
[   34.928163][  T816] rust_binder: Write failure EINVAL in pid:70
[   34.937551][  T816] rust_binder: Error while translating object.
[   34.943877][  T816] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   34.950132][  T816] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:70
[   34.973146][  T819] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 4294967293
[   34.990235][  T819] rust_binder: Write failure EINVAL in pid:72
[   35.000435][  T821] netlink: 'syz.1.161': attribute type 4 has an invalid length.
[   35.271712][  T391] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[   35.356095][  T831] rust_binder: 12: no such ref 1
[   35.361266][  T831] rust_binder: 12: no such ref 1
[   35.373224][  T831] IPv6: NLM_F_CREATE should be specified when creating new route
[   35.432749][  T391] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[   35.444318][  T391] usb 2-1: config 0 has no interface number 0
[   35.453974][  T391] usb 2-1: config 0 interface 41 has no altsetting 0
[   35.464902][  T391] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[   35.474545][  T391] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.483256][  T391] usb 2-1: Product: syz
[   35.487725][  T391] usb 2-1: Manufacturer: syz
[   35.492510][  T391] usb 2-1: SerialNumber: syz
[   35.498340][  T391] usb 2-1: config 0 descriptor??
[   35.525761][  T846] netlink: 72 bytes leftover after parsing attributes in process `syz.4.170'.
[   35.535654][  T846] netlink: 'syz.4.170': attribute type 6 has an invalid length.
[   36.021736][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[   36.171761][    T9] usb 4-1: Using ep0 maxpacket: 32
[   36.181712][    T9] usb 4-1: config 250 has an invalid interface number: 8 but max is 0
[   36.192153][    T9] usb 4-1: config 250 has no interface number 0
[   36.198451][    T9] usb 4-1: New USB device found, idVendor=0ac8, idProduct=3410, bcdDevice=b6.f9
[   36.207611][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   36.306463][  T391] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[   36.347368][  T877] rust_binder: 134: no such ref 1
[   36.420047][   T60] Bluetooth: hci0: Frame reassembly failed (-84)
[   36.442063][  T892] fuseblk: Unknown parameter ''
[   36.464029][   T60] Bluetooth: hci1: Frame reassembly failed (-84)
[   36.464850][  T897] rust_binder: 154: no such ref 0
[   36.477825][  T897] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:154
[   36.479619][  T897] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[   36.519916][  T821] rust_binder: Write failure EINVAL in pid:74
[   36.520305][  T391] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9
[   36.537141][  T391] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71
[   36.547116][  T391] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71
[   36.556582][  T391] usb 2-1: USB disconnect, device number 6
[   36.785426][   T36] kauditd_printk_skb: 27 callbacks suppressed
[   36.785442][   T36] audit: type=1326 audit(1762908933.180:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=903 comm="syz.4.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4418f6c9 code=0x7fc00000
[   36.813306][  T911] syz.4.194 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   36.891308][  T914] netlink: 'syz.4.195': attribute type 6 has an invalid length.
[   36.900867][   T36] audit: type=1400 audit(1762908933.290:283): avc:  denied  { sqpoll } for  pid=913 comm="syz.4.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   36.929888][  T917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.196'.
[   36.940392][   T36] audit: type=1400 audit(1762908933.330:284): avc:  denied  { bind } for  pid=916 comm="syz.4.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   37.046783][   T36] audit: type=1400 audit(1762908933.440:285): avc:  denied  { shutdown } for  pid=928 comm="syz.1.201" laddr=::1 lport=255 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   37.323241][   T36] audit: type=1400 audit(1762908933.720:286): avc:  denied  { link } for  pid=937 comm="syz.1.203" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[   37.553358][  T968] tipc: Started in network mode
[   37.558306][  T968] tipc: Node identity ac14142f, cluster identity 4711
[   37.565238][  T968] tipc: New replicast peer: 0.0.0.0
[   37.570679][  T968] tipc: Enabled bearer <udp:syz2>, priority 10
[   37.993446][  T973] SELinux:  Context system_u:object_r:cron_log_t:s0 is not valid (left unmapped).
[   37.993446][   T36] audit: type=1400 audit(1762908934.390:287): avc:  denied  { relabelfrom } for  pid=972 comm="syz.1.214" name="" dev="pipefs" ino=7301 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1
[   38.028107][   T36] audit: type=1400 audit(1762908934.420:288): avc:  denied  { relabelto } for  pid=972 comm="syz.1.214" name="" dev="pipefs" ino=7301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:cron_log_t:s0"
[   38.083827][  T982] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   38.441737][  T451] Bluetooth: hci0: Opcode 0x1003 failed: -110
[   38.441737][  T549] Bluetooth: hci0: command 0x1003 tx timeout
[   38.461624][    T9] usb 4-1: string descriptor 0 read error: -71
[   38.469827][    T9] usb 4-1: USB disconnect, device number 8
[   38.521752][  T451] Bluetooth: hci1: command 0x1003 tx timeout
[   38.521813][   T53] Bluetooth: hci1: Opcode 0x1003 failed: -110
[   38.681733][    T9] tipc: Node number set to 2886997039
[   38.691810][   T36] audit: type=1400 audit(1762908935.090:289): avc:  denied  { ioctl } for  pid=1002 comm="syz.2.223" path="socket:[7153]" dev="sockfs" ino=7153 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   38.717762][ T1005] /dev/loop0: Can't lookup blockdev
[   38.723622][ T1005] cgroup: none used incorrectly
[   38.736396][   T36] audit: type=1400 audit(1762908935.130:290): avc:  denied  { setopt } for  pid=1006 comm="syz.4.225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   38.745034][ T1007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.225'.
[   38.813056][ T1009] rust_binder: Error while translating object.
[   38.813121][ T1009] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   38.819372][ T1009] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:163
[   38.829601][ T1011] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   38.857421][ T1016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.228'.
[   38.959514][   T36] audit: type=1400 audit(1762908935.350:291): avc:  denied  { read } for  pid=1033 comm="syz.4.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   38.998641][ T1040] input: syz0 as /devices/virtual/input/input7
[   39.006651][ T1042] netlink: 'syz.4.238': attribute type 1 has an invalid length.
[   39.018507][ T1042] netlink: 168 bytes leftover after parsing attributes in process `syz.4.238'.
[   39.131757][   T31] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   39.281695][   T31] usb 3-1: Using ep0 maxpacket: 32
[   39.287861][   T31] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[   39.296234][   T31] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   39.304932][   T31] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[   39.313896][   T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   39.323551][   T31] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   39.333404][   T31] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   39.346383][   T31] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   39.355423][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   39.363976][   T31] usb 3-1: config 0 descriptor??
[   39.541851][ T1049] overlayfs: failed to resolve './file1': -2
[   39.577468][   T31] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   39.595222][   T31] usb 3-1: USB disconnect, device number 10
[   39.609495][   T31] usblp0: removed
[   39.668706][ T1064] netlink: 5 bytes leftover after parsing attributes in process `syz.4.246'.
[   39.677599][ T1064] 0��{X��: renamed from bridge_slave_1 (while UP)
[   39.684976][ T1064] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[   39.822172][ T1072] netlink: 'syz.1.248': attribute type 6 has an invalid length.
[   39.829872][ T1072] netlink: 6016 bytes leftover after parsing attributes in process `syz.1.248'.
[   39.839397][ T1072] usb usb8: usbfs: process 1072 (syz.1.248) did not claim interface 0 before use
[   39.882041][    T9] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[   40.011712][   T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   40.033236][    T9] usb 4-1: config 0 has an invalid interface number: 214 but max is 0
[   40.041446][    T9] usb 4-1: config 0 has no interface number 0
[   40.047618][    T9] usb 4-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64
[   40.058544][    T9] usb 4-1: config 0 interface 214 has no altsetting 0
[   40.066943][    T9] usb 4-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f
[   40.076090][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   40.084314][    T9] usb 4-1: Product: syz
[   40.088478][    T9] usb 4-1: Manufacturer: syz
[   40.093233][    T9] usb 4-1: SerialNumber: syz
[   40.098420][    T9] usb 4-1: config 0 descriptor??
[   40.103696][ T1059] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   40.181705][   T10] usb 3-1: Using ep0 maxpacket: 32
[   40.188056][   T10] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[   40.195810][ T1084] rust_binder: Error while translating object.
[   40.196396][ T1084] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   40.196525][   T10] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   40.203709][ T1084] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:142
[   40.211986][   T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[   40.244567][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   40.259299][   T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   40.269226][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   40.282412][   T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   40.291688][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   40.302144][   T10] usb 3-1: config 0 descriptor??
[   40.309709][ T1099] SELinux:  Context system_u:object_r:lastlog_t:s0 is not valid (left unmapped).
[   40.319116][ T1058] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   40.336211][ T1102] SELinux:  Context system_u:object_r:syslogd_var_lib_t:s0 is not valid (left unmapped).
[   40.450301][ T1106] SELinux:  policydb version -1726928184 does not match my version range 15-33
[   40.459351][ T1106] SELinux: failed to load policy
[   40.505429][ T1111] rust_binder: Error while translating object.
[   40.505472][ T1111] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   40.509393][   T10] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   40.513743][ T1111] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:156
[   40.553788][ T1119] loop7: detected capacity change from 0 to 7
[   40.569751][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   40.578918][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   40.586865][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   40.596093][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   40.604169][  T339]  loop7: unable to read partition table
[   40.605358][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   40.619869][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   40.629602][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   40.638759][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   40.646769][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   40.655913][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   40.663947][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   40.673187][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   40.681012][ T1119]  loop7: unable to read partition table
[   40.681171][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   40.687221][ T1119] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[   40.695815][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   40.717379][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   40.726515][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   40.741777][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   40.750930][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[   40.759024][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[   40.802478][ T1127] rust_binder: Write failure EFAULT in pid:168
[   40.857888][ T1125] rust_binder: Write failure EFAULT in pid:177
[   40.876894][ T1133] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   41.021968][    T9] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[   41.069789][ T1140] x_tables: unsorted entry at hook 2
[   41.090416][ T1143] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:188
[   41.201748][   T63] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[   41.219165][ T1153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.227741][ T1153] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.239248][  T391] usb 3-1: USB disconnect, device number 11
[   41.249847][  T391] usblp0: removed
[   41.251939][    T9] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71
[   41.254743][ T1157] netlink: 20 bytes leftover after parsing attributes in process `syz.2.275'.
[   41.268126][    T9] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71
[   41.284258][    T9] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random
[   41.295084][    T9] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71
[   41.306445][    T9] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71
[   41.317594][    T9] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[   41.328680][    T9] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[   41.339765][    T9] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[   41.350846][    T9] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[   41.361946][    T9] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71
[   41.372782][   T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   41.372813][   T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   41.384053][    T9] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[   41.394022][   T63] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[   41.405466][    T9] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71
[   41.414600][   T63] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   41.425446][    T9] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71
[   41.433937][   T63] usb 2-1: config 0 descriptor??
[   41.444721][    T9] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71
[   41.460106][    T9] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71
[   41.471460][    T9] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71
[   41.482684][    T9] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71
[   41.493954][    T9] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71
[   41.505172][    T9] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[   41.516496][    T9] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[   41.527723][    T9] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[   41.538845][    T9] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71
[   41.549874][    T9] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[   41.561040][    T9] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[   41.572220][    T9] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71
[   41.583367][    T9] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71
[   41.594641][    T9] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[   41.607363][    T9] ax88179_178a 4-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.3-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, ee:68:38:90:4f:22
[   41.625997][    T9] usb 4-1: USB disconnect, device number 9
[   41.632391][    T9] ax88179_178a 4-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.3-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter
[   41.854587][   T63] isku 0003:1E7D:319C.0005: unknown main item tag 0x0
[   41.861445][   T63] isku 0003:1E7D:319C.0005: unknown main item tag 0x0
[   41.868463][   T63] isku 0003:1E7D:319C.0005: unknown main item tag 0x0
[   41.875339][   T63] isku 0003:1E7D:319C.0005: unknown main item tag 0x0
[   41.882351][   T63] isku 0003:1E7D:319C.0005: unknown main item tag 0x0
[   41.889203][   T63] isku 0003:1E7D:319C.0005: unknown main item tag 0x0
[   41.896051][   T63] isku 0003:1E7D:319C.0005: unknown main item tag 0x0
[   41.903413][   T63] isku 0003:1E7D:319C.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0
[   41.930768][ T1162] rust_binder: Write failure EFAULT in pid:181
[   41.936334][   T36] kauditd_printk_skb: 15 callbacks suppressed
[   41.936351][   T36] audit: type=1326 audit(1762908938.330:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1144 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4278f6c9 code=0x7fc00000
[   41.972165][   T36] audit: type=1326 audit(1762908938.330:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1144 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcc4278f6c9 code=0x7fc00000
[   41.997919][   T36] audit: type=1326 audit(1762908938.330:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1144 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4278f6c9 code=0x7fc00000
[   42.021961][   T36] audit: type=1326 audit(1762908938.330:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1144 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4278f6c9 code=0x7fc00000
[   42.045758][   T36] audit: type=1326 audit(1762908938.330:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1144 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4278f6c9 code=0x7fc00000
[   42.069516][   T36] audit: type=1326 audit(1762908938.330:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1144 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4278f6c9 code=0x7fc00000
[   42.078858][ T1135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   42.093803][   T36] audit: type=1326 audit(1762908938.330:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1144 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4278f6c9 code=0x7fc00000
[   42.109842][ T1135] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   42.126276][   T36] audit: type=1326 audit(1762908938.330:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1144 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4278f6c9 code=0x7fc00000
[   42.138536][   T63] isku 0003:1E7D:319C.0005: couldn't init struct isku_device
[   42.157654][   T36] audit: type=1326 audit(1762908938.330:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1144 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4278f6c9 code=0x7fc00000
[   42.163436][   T63] isku 0003:1E7D:319C.0005: couldn't install keyboard
[   42.186432][   T36] audit: type=1326 audit(1762908938.330:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1144 comm="syz.3.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc4278f6c9 code=0x7fc00000
[   42.195199][   T63] isku 0003:1E7D:319C.0005: probe with driver isku failed with error -71
[   42.227963][   T63] usb 2-1: USB disconnect, device number 7
[   42.264268][ T1182] /dev/rnullb0: Can't open blockdev
[   42.344354][ T1192] tc_dump_action: action bad kind
[   42.391717][ T1194] input: syz1 as /devices/virtual/input/input8
[   42.408663][ T1194] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   42.408743][ T1194] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:196
[   42.423489][ T1194] rust_binder: Error in use_page_slow: ESRCH
[   42.436878][ T1194] rust_binder: use_range failure ESRCH
[   42.449684][ T1194] rust_binder: Failed to allocate buffer. len:5192, is_oneway:false
[   42.455530][ T1194] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   42.473787][ T1194] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:196
[   42.511738][ T1201] netlink: 44 bytes leftover after parsing attributes in process `syz.4.289'.
[   42.529671][ T1201] netlink: 43 bytes leftover after parsing attributes in process `syz.4.289'.
[   42.539109][ T1201] netlink: 'syz.4.289': attribute type 5 has an invalid length.
[   42.546795][ T1201] netlink: 43 bytes leftover after parsing attributes in process `syz.4.289'.
[   42.590795][ T1221] capability: warning: `syz.4.295' uses 32-bit capabilities (legacy support in use)
[   42.597699][ T1222] overlayfs: failed to clone upperpath
[   42.625777][ T1228] sit0: entered promiscuous mode
[   42.631748][ T1228] netlink: 'syz.4.297': attribute type 1 has an invalid length.
[   42.639403][ T1228] netlink: 1 bytes leftover after parsing attributes in process `syz.4.297'.
[   42.781812][   T63] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[   42.808980][ T1240] rust_binder: Write failure EFAULT in pid:180
[   42.885094][ T1248] bridge0: port 3(veth1_macvtap) entered blocking state
[   42.898259][ T1248] bridge0: port 3(veth1_macvtap) entered disabled state
[   42.905345][ T1248] veth1_macvtap: entered allmulticast mode
[   42.911437][ T1248] veth1_macvtap: left allmulticast mode
[   42.917659][ T1248] netlink: 20 bytes leftover after parsing attributes in process `syz.3.303'.
[   42.936622][   T63] usb 3-1: config 1 has an invalid descriptor of length 146, skipping remainder of the config
[   42.943448][ T1250] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   42.947189][   T63] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[   42.947495][ T1250] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   42.961943][   T63] usb 3-1: New USB device found, idVendor=0436, idProduct=0005, bcdDevice= 1.00
[   42.991698][   T63] usb 3-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3
[   43.001112][   T63] usb 3-1: Product: syz
[   43.007217][   T63] usb 3-1: Manufacturer: syz
[   43.013071][   T63] usb 3-1: SerialNumber: syz
[   43.019417][   T63] usb 3-1: rejected 1 configuration due to insufficient available bus power
[   43.029262][   T63] usb 3-1: no configuration chosen from 1 choice
[   43.123518][ T1255] netlink: 'syz.3.305': attribute type 12 has an invalid length.
[   43.179761][ T1266] /dev/rnullb0: Can't open blockdev
[   43.210929][ T1269] rust_binder: 194: no such ref 0
[   43.216050][ T1269] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[   43.223545][ T1269] rust_binder: 194: no such ref 2
[   43.245589][ T1273] netlink: 24 bytes leftover after parsing attributes in process `syz.1.312'.
[   43.255255][ T1273] binder: Unknown parameter '0x0000000000000003'
[   43.261888][ T1273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=1273 comm=syz.1.312
[   43.295334][ T1276] mmap: syz.3.311 (1276) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   43.296387][ T1275] /dev/sg0: Can't lookup blockdev
[   43.408435][ T1282] netlink: 'syz.1.316': attribute type 4 has an invalid length.
[   44.245024][  T291] ------------[ cut here ]------------
[   44.250892][  T291] WARNING: CPU: 1 PID: 291 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190
[   44.260315][  T291] Modules linked in:
[   44.264329][  T291] CPU: 1 UID: 0 PID: 291 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[   44.275995][  T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   44.286153][  T291] RIP: 0010:ovl_dir_modified+0x15a/0x190
[   44.291844][  T291] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 48 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 97 4c 03 cc e8 16 db 42 ff <0f> 0b e9 3e ff ff ff e8 0a db 42 ff 0f 0b e9 6e ff ff ff 44 89 f9
[   44.311567][  T291] RSP: 0018:ffffc9000b6bfb68 EFLAGS: 00010293
[   44.317683][  T291] RAX: ffffffff8243239a RBX: 0000000000000000 RCX: ffff88812bdc8000
[   44.325954][  T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   44.335593][  T291] RBP: ffffc9000b6bfb90 R08: ffff888113dc771f R09: 1ffff110227b8ee3
[   44.343684][  T291] R10: dffffc0000000000 R11: ffffed10227b8ee4 R12: 0000000000000000
[   44.351805][  T291] R13: dffffc0000000000 R14: ffff888113dc7680 R15: ffff88811566caa0
[   44.360265][  T291] FS:  000055556f3a7500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   44.369740][  T291] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   44.376615][  T291] CR2: 000055556f3c24a8 CR3: 0000000120018000 CR4: 00000000003526b0
[   44.384711][  T291] Call Trace:
[   44.388000][  T291]  <TASK>
[   44.390927][  T291]  ovl_do_remove+0x7b8/0xcf0
[   44.395586][  T291]  ? ovl_set_redirect+0x780/0x780
[   44.400815][  T291]  ? down_write+0xe9/0x2a0
[   44.405437][  T291]  ? __cfi_down_write+0x10/0x10
[   44.410379][  T291]  ovl_rmdir+0x1e/0x30
[   44.414485][  T291]  vfs_rmdir+0x3dd/0x560
[   44.418736][  T291]  incfs_kill_sb+0x109/0x230
[   44.423352][  T291]  deactivate_locked_super+0xd5/0x2a0
[   44.428774][  T291]  deactivate_super+0xb8/0xe0
[   44.433476][  T291]  cleanup_mnt+0x3f1/0x480
[   44.437900][  T291]  __cleanup_mnt+0x1d/0x40
[   44.442344][  T291]  task_work_run+0x1e0/0x250
[   44.447025][  T291]  ? __cfi_task_work_run+0x10/0x10
[   44.452172][  T291]  ? __x64_sys_umount+0x126/0x170
[   44.457202][  T291]  ? __cfi___x64_sys_umount+0x10/0x10
[   44.462596][  T291]  ? __kasan_check_read+0x15/0x20
[   44.467736][  T291]  resume_user_mode_work+0x36/0x50
[   44.472881][  T291]  syscall_exit_to_user_mode+0x64/0xb0
[   44.478346][  T291]  do_syscall_64+0x64/0xf0
[   44.482874][  T291]  ? clear_bhb_loop+0x50/0xa0
[   44.488601][  T291]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   44.494522][  T291] RIP: 0033:0x7f12a07909f7
[   44.498954][  T291] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   44.519024][  T291] RSP: 002b:00007ffc48aa5048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   44.527846][  T291] RAX: 0000000000000000 RBX: 00007f12a0811d7d RCX: 00007f12a07909f7
[   44.535893][  T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc48aa5100
[   44.543999][  T291] RBP: 00007ffc48aa5100 R08: 0000000000000000 R09: 0000000000000000
[   44.552115][  T291] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc48aa6190
[   44.560094][  T291] R13: 00007f12a0811d7d R14: 000000000000a9c5 R15: 00007ffc48aa61d0
[   44.568099][  T291]  </TASK>
[   44.571123][  T291] ---[ end trace 0000000000000000 ]---
[   44.576887][  T291] ------------[ cut here ]------------
[   44.582475][  T291] WARNING: CPU: 0 PID: 291 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190
[   44.591850][  T291] Modules linked in:
[   44.595918][  T291] CPU: 0 UID: 0 PID: 291 Comm: syz-executor Tainted: G        W          syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[   44.609655][  T291] Tainted: [W]=WARN
[   44.613530][  T291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   44.623617][  T291] RIP: 0010:ovl_dir_modified+0x15a/0x190
[   44.629348][  T291] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 48 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 97 4c 03 cc e8 16 db 42 ff <0f> 0b e9 3e ff ff ff e8 0a db 42 ff 0f 0b e9 6e ff ff ff 44 89 f9
[   44.648998][  T291] RSP: 0018:ffffc9000b6bfb68 EFLAGS: 00010293
[   44.655118][  T291] RAX: ffffffff8243239a RBX: 0000000000000000 RCX: ffff88812bdc8000
[   44.663117][  T291] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[   44.671097][  T291] RBP: ffffc9000b6bfb90 R08: ffff888113dc771f R09: 1ffff110227b8ee3
[   44.679108][  T291] R10: dffffc0000000000 R11: ffffed10227b8ee4 R12: 0000000000000000
[   44.687121][  T291] R13: dffffc0000000000 R14: ffff888113dc7680 R15: ffff88811566caa0
[   44.695146][  T291] FS:  000055556f3a7500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   44.704158][  T291] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   44.710742][  T291] CR2: 000000110c330eef CR3: 0000000120018000 CR4: 00000000003526b0
[   44.718787][  T291] Call Trace:
[   44.722097][  T291]  <TASK>
[   44.725035][  T291]  ovl_do_remove+0x7b8/0xcf0
[   44.729654][  T291]  ? ovl_set_redirect+0x780/0x780
[   44.734702][  T291]  ? down_write+0xe9/0x2a0
[   44.739126][  T291]  ? __cfi_down_write+0x10/0x10
[   44.743994][  T291]  ovl_rmdir+0x1e/0x30
[   44.748073][  T291]  vfs_rmdir+0x3dd/0x560
[   44.752353][  T291]  incfs_kill_sb+0x1a0/0x230
[   44.756964][  T291]  deactivate_locked_super+0xd5/0x2a0
[   44.762408][  T291]  deactivate_super+0xb8/0xe0
[   44.767098][  T291]  cleanup_mnt+0x3f1/0x480
[   44.771512][  T291]  __cleanup_mnt+0x1d/0x40
[   44.775953][  T291]  task_work_run+0x1e0/0x250
[   44.780554][  T291]  ? __cfi_task_work_run+0x10/0x10
[   44.785696][  T291]  ? __x64_sys_umount+0x126/0x170
[   44.790741][  T291]  ? __cfi___x64_sys_umount+0x10/0x10
[   44.796150][  T291]  ? __kasan_check_read+0x15/0x20
[   44.801195][  T291]  resume_user_mode_work+0x36/0x50
[   44.806352][  T291]  syscall_exit_to_user_mode+0x64/0xb0
[   44.811853][  T291]  do_syscall_64+0x64/0xf0
[   44.816370][  T291]  ? clear_bhb_loop+0x50/0xa0
[   44.821148][  T291]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   44.827101][  T291] RIP: 0033:0x7f12a07909f7
[   44.831864][  T291] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   44.851614][  T291] RSP: 002b:00007ffc48aa5048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   44.860245][  T291] RAX: 0000000000000000 RBX: 00007f12a0811d7d RCX: 00007f12a07909f7
[   44.868901][  T291] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc48aa5100
[   44.876957][  T291] RBP: 00007ffc48aa5100 R08: 0000000000000000 R09: 0000000000000000
[   44.884975][  T291] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc48aa6190
[   44.892992][  T291] R13: 00007f12a0811d7d R14: 000000000000a9c5 R15: 00007ffc48aa61d0
[   44.901063][  T291]  </TASK>
[   44.904143][  T291] ---[ end trace 0000000000000000 ]---
[   44.939524][ T1291] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   45.561070][   T10] usb 3-1: USB disconnect, device number 12