last executing test programs:

4m7.876140619s ago: executing program 0 (id=751):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r1)
listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40041, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xb8)
process_madvise(r3, 0x0, 0x0, 0x15, 0x0)
r5 = socket(0x10, 0x80002, 0x2)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x7d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x4000080)
close_range(r0, 0xffffffffffffffff, 0x0)

4m7.79679923s ago: executing program 0 (id=753):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='attr/prev\x00')
r0 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
mknodat(r1, &(0x7f0000000580)='./file0\x00', 0x8000, 0xcb)
r2 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
r5 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000780)={0x0, 0x0, 0x3, 0x1f, 0x160, &(0x7f0000000380)="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"})
write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r6 = dup(r4)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r6, &(0x7f0000000000)=ANY=[], 0x138)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="2c7766fa9a6f646e6f3d", @ANYRESHEX=r4, @ANYBLOB=',ignoreqv,\x00'])
open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724", 0x2}], 0x1)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0)
close(r8)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r8, 0x4010744d, &(0x7f0000000180))
r10 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x20)
preadv(r10, &(0x7f0000000080)=[{&(0x7f00000003c0)=""/153, 0x99}], 0x1, 0x2, 0xfffffffd)
read$FUSE(r10, &(0x7f0000004540)={0x2020}, 0xfffffffffffffdae)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
openat$binfmt(0xffffffffffffff9c, r11, 0x42, 0x1ff)

4m7.760184701s ago: executing program 0 (id=756):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r1, 0x147a5000)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r2, &(0x7f00000000c0), 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x1b, 0x1, 0x0, 0x0, {{@in6=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x0, 0x0, 0x80, 0xa, 0x0, 0xb0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xf, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x2, 0x2}, 0x2, 0x8, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x8, [{{@in6=@loopback={0x800000000000000}, 0x4d4}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0xfc}}, 0x0)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r3)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000002c0)={0x0, 0x1016000, 0x1000, 0xf7fffffe, 0x4}, 0x20)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x24000050)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', <r7=>0x0})
r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x145480, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r10, 0x4068aea3, &(0x7f0000000100)={0xcc, 0x0, 0x1})
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r11, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x200, 0x3}, 0xe)
r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_RUN(r12, 0xae80, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r13=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000002300), 0x808000, &(0x7f0000002400)={'trans=fd,', {'rfdno', 0x3d, r13}, 0x2c, {'wfdno', 0x3d, r8}})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[@ANYBLOB="000000000cbe07172fb160819aa595de16eab8530fcc9b6f24eecd00000000000000002bf611ddb03add82b23bb31b21fcaca41f25f6f028c4ede69f8d569f8567bfce", @ANYRES16=r5, @ANYBLOB="110025bd7000ffdbdf251d00000068002f8008000100040000004400038005000200000000000c000500090000000000000008000100000000000c00050006000000000000000800010001000000050002000200000008000400030000000c00020000000000000000000c0002000201aaaaaaaaaaaa08000300", @ANYRES32=r7, @ANYBLOB="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"], 0x240}, 0x1, 0x0, 0x0, 0x2000c080}, 0x10)
socket(0x5, 0x80000, 0x9)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0)

4m7.732879611s ago: executing program 0 (id=757):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101101)
futex(0x0, 0x10b, 0x4, 0x0, 0x0, 0x1) (async)
ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000040)=ANY=[@ANYBLOB="62da00000b"]) (async)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xa8002, 0x0)
preadv2(r1, &(0x7f0000000880)=[{0x0}, {&(0x7f0000000840)=""/56, 0x38}], 0x2, 0xa67, 0x2, 0xf)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8})
clock_gettime(0x0, &(0x7f0000000080)={<r3=>0x0, <r4=>0x0}) (async, rerun: 64)
clock_gettime(0x0, &(0x7f0000000100)={<r5=>0x0, <r6=>0x0}) (rerun: 64)
write$evdev(r2, &(0x7f0000000140)=[{{r3, r4/1000+10000}, 0x5, 0x34, 0x8}, {{}, 0x7, 0x4, 0xfff}, {{r5, r6/1000+60000}, 0x5, 0x4, 0x17}, {{0x0, 0xea60}, 0x4, 0x10cb, 0x3}, {{0x0, 0xea60}, 0x15, 0x844e, 0x3}], 0x78)

4m7.677629262s ago: executing program 0 (id=760):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4a, &(0x7f0000001600)=0xffffffff, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'pimreg\x00'})
r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip6_flowlabel\x00')
lseek(r2, 0xffffffffffffffff, 0x1)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10)
r3 = getpid()
syz_pidfd_open(r3, 0x0)
write(r0, &(0x7f0000000040)="240000001a005f0014f9f507000909000aff8000000000000000000008001e0000000000", 0x24)
r4 = epoll_create(0x3)
ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x80088a02, 0x0)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs2\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=r4])
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_int(r5, 0x29, 0xc9, &(0x7f0000000040)=0x29, 0xfffffffffffffeed)

4m7.432937926s ago: executing program 0 (id=763):
r0 = socket$pptp(0x18, 0x1, 0x2)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x2000000, 0x12, r2, 0xffffa000)

4m7.374030907s ago: executing program 32 (id=763):
r0 = socket$pptp(0x18, 0x1, 0x2)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe)
r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x2000000, 0x12, r2, 0xffffa000)

2m51.464290828s ago: executing program 3 (id=2244):
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0x4f, 0x0, 0xfd, 0xfffffffc}, {0x4}, {0x6, 0xfc, 0x0, 0x7fff0000}, {0x8, 0x7, 0x10, 0x7}]})
r0 = openat$incfs(0xffffffffffffffff, &(0x7f00000000c0)='.log\x00', 0x0, 0x41)
readahead(0xffffffffffffffff, 0x59, 0xfffffffffffffffc)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000100), 0x4)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x410302, 0x0)
ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000040))

2m50.576959651s ago: executing program 3 (id=2250):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000000301010200000000000000000a00fffe0c001980080002002c0800001c0002800c00028005000100110000000c000280130001003a000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x24000800)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r3 = userfaultfd(0x801)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x88})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000001a00)={{&(0x7f0000978000/0x3000)=nil, 0x3000}, 0x1})
r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x38)
ioprio_set$uid(0x3, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6)
connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x41200003, @loopback, 0x7}, 0x1c)
writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2, 0xd8, 0x1, 0x2, 0x2, 0x1, 0x1, 0xff, 0x5, 0x0, 0x0, 0x10, 0xa, 0x1, 0xd, 0x5}})
ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x7, 0x0, 0xf1, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0xbd9], 0x1, 0x3c4210})
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000000480)={0x3, 0x0, [{0x7, 0x1, 0x1, 0x0, @adapter={0x6e3, 0x5, 0x8000000000000000, 0x100, 0x6}}, {0x2, 0x4, 0x1, 0x0, @msi={0x20000000, 0xf62, 0x11d, 0x8000}}, {0x3, 0x0, 0x0, 0x0, @irqchip={0x3, 0xd7d}}]})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req={0x2, 0x6, 0x3, 0x3}, 0x10)
socket$packet(0x11, 0x2, 0x300)
pipe(&(0x7f0000000080))
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)

2m50.337371476s ago: executing program 3 (id=2251):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async)
r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async)
r2 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)
write$binfmt_format(r2, &(0x7f00000001c0)='1\x00', 0x1)
pipe2$9p(&(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x80) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async)
r5 = dup(r4)
write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async)
r6 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x10) (async, rerun: 64)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="f5ae26f037b59f0c00"/23]) (rerun: 64)
r7 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
sendfile(r7, r0, 0x0, 0x80000000)

2m50.320584146s ago: executing program 3 (id=2252):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f00000001c0)=0xc8, 0x4)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x205)
close_range(r4, 0xffffffffffffffff, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f0000000240)=0x4, 0x4)
syslog(0x3, &(0x7f0000000000)=""/47, 0x2f)
r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000280)='veno\x00', 0x5)
close_range(r0, 0xffffffffffffffff, 0x0)
r8 = pidfd_getfd(0xffffffffffffffff, r2, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_WOWLAN(r8, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r9, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void, @void}}, [""]}, 0x14}}, 0x40)

2m50.153020658s ago: executing program 3 (id=2257):
r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/wireless\x00')
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$SO_TIMESTAMP(r1, 0x1, 0x4c, 0x0, &(0x7f00000001c0))
preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000080)=ANY=[@ANYBLOB="7365636c6162656c2c00942c080000009437ea07c356c65acde62e03f42a9fe5fe94b8112b2ae400bb0c000000000000"])

2m50.143576238s ago: executing program 3 (id=2258):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r1, 0x1, 0x3, 0x100000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9084)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace_dev_match', 0x244000, 0x40)
ioctl$int_in(r2, 0x5452, &(0x7f0000000140))
openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0)
keyctl$reject(0x13, 0x0, 0x9, 0x202, 0xfffffffffffffff9)
r3 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d9, 0xa070, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x0, 0x2}}]}}}]}}]}}, 0x0) (async)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104050000000000000000000000000105000100"], 0x1c}, 0x1, 0x0, 0x0, 0x814}, 0x20000000)
syz_usb_ep_write(r3, 0x2, 0xac, &(0x7f0000000000)="89eb71671ac2ac73fcc4493e1f92918af7bf5ffd2a26bf3340b689760b9e994b12784081f25c347e678fdab44cfebc73f1ac1067d83ec7aaaf6642bded71a7da5e4c4e5b1076465a43134bda763ace8a1f11c9cdcc8984ff7c0262df968dd988c94f4cd3d9842c8ce32fd4c6c1d8f680e58fcd37c94de7e568baa098d3b5079fdf7cb57b937842a08b6581b8fa995d8d80323841c5bd29700f95466bfd4ea0271387e8cdc212a69ef0bf398e") (async, rerun: 32)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async, rerun: 32)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
close(r4) (async)
openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) (async)
close_range(r4, r5, 0x0)
pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000100)="81", 0x1}], 0x1, 0x8, 0x2)

2m50.03147977s ago: executing program 33 (id=2258):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000980)={0x30, r1, 0x1, 0x3, 0x100000, {{}, {}, {0x14, 0x19, {0x1, 0x1, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9084)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_trace_dev_match', 0x244000, 0x40)
ioctl$int_in(r2, 0x5452, &(0x7f0000000140))
openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0)
keyctl$reject(0x13, 0x0, 0x9, 0x202, 0xfffffffffffffff9)
r3 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d9, 0xa070, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x0, 0x2}}]}}}]}}]}}, 0x0) (async)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000104050000000000000000000000000105000100"], 0x1c}, 0x1, 0x0, 0x0, 0x814}, 0x20000000)
syz_usb_ep_write(r3, 0x2, 0xac, &(0x7f0000000000)="89eb71671ac2ac73fcc4493e1f92918af7bf5ffd2a26bf3340b689760b9e994b12784081f25c347e678fdab44cfebc73f1ac1067d83ec7aaaf6642bded71a7da5e4c4e5b1076465a43134bda763ace8a1f11c9cdcc8984ff7c0262df968dd988c94f4cd3d9842c8ce32fd4c6c1d8f680e58fcd37c94de7e568baa098d3b5079fdf7cb57b937842a08b6581b8fa995d8d80323841c5bd29700f95466bfd4ea0271387e8cdc212a69ef0bf398e") (async, rerun: 32)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async, rerun: 32)
r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
close(r4) (async)
openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) (async)
close_range(r4, r5, 0x0)
pwritev(r6, &(0x7f0000000040)=[{&(0x7f0000000100)="81", 0x1}], 0x1, 0x8, 0x2)

2m39.60103251s ago: executing program 1 (id=2485):
mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280))

2m39.59991612s ago: executing program 1 (id=2486):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r1, 0x40045567, 0x0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3)
write$uinput_user_dev(r1, &(0x7f0000001740)={'syz1\x00', {0x0, 0xb4e}, 0x0, [0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffd, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) (async)
write$uinput_user_dev(r1, &(0x7f0000000300)={'syz1\x00', {0x35, 0xa5, 0x40, 0x1ff}, 0xf, [0x8, 0x8, 0x5, 0x5, 0x80, 0x3, 0x5, 0x800, 0x8, 0x6, 0x4, 0x8, 0x8, 0x3, 0x7, 0x2f29, 0xff, 0x401, 0x7, 0x6, 0xe06, 0x4, 0xff, 0x7, 0x2, 0x8, 0x4, 0x4, 0x401, 0xd, 0x2, 0x3, 0x982b, 0x2, 0x1, 0x3, 0x7fff, 0x2, 0x2, 0x7, 0x8, 0x200, 0x3, 0x0, 0x6, 0x7, 0x5, 0x3, 0x9, 0x7, 0x3, 0xd10, 0x7, 0x8000, 0x9, 0x6, 0x130b, 0x5, 0xfffffff7, 0xbf90, 0x3, 0x54, 0x0, 0x1], [0x8, 0x2, 0x80, 0x5, 0x1, 0x4, 0x1, 0x480000, 0x2, 0x0, 0x8, 0x3, 0x7b, 0x1, 0x7ff, 0xa1e000, 0x0, 0x8000, 0x40, 0x3, 0x800, 0x654d, 0x2, 0x40, 0x1, 0x9, 0xfffffff9, 0xffffffc0, 0xaa, 0x3, 0x8, 0x1ff, 0x11c, 0x5, 0x3, 0x3, 0xffff8001, 0x7, 0x8, 0x6, 0xeadb, 0x2e, 0x6, 0x4f69, 0x4, 0x4, 0x11c, 0x10001, 0x4, 0x4, 0xc60a, 0x40, 0x8, 0x40000, 0x6, 0x0, 0x9, 0x2, 0x7, 0x7, 0x7, 0x4, 0x9, 0xc210], [0x52, 0x1ff, 0xfa, 0x7, 0x8c, 0xa, 0x5, 0x6, 0x2, 0x745, 0x1, 0x0, 0x61, 0xffff, 0x1, 0x8, 0x5, 0xfb, 0xffff, 0x6, 0x0, 0x0, 0x3, 0x10000, 0x6, 0x7fff, 0x6, 0x7, 0x401, 0x8000, 0x80000000, 0x0, 0xffff, 0x200008, 0x1, 0x6, 0x0, 0x2908, 0x2, 0x6, 0x0, 0x1000, 0x5, 0x8b2f, 0xd, 0xffff2cbf, 0x7fff, 0x5, 0x7, 0x8, 0x101, 0x7, 0x1eb, 0x8, 0x28, 0x4, 0x4e, 0x8, 0x2, 0x3, 0x6, 0xf, 0x5, 0x3], [0x3, 0x1, 0x9, 0xf, 0x7, 0x81, 0x7, 0x7, 0x2, 0x8, 0x0, 0xfffffffe, 0x2, 0x6, 0x2, 0x6, 0x0, 0x7, 0x6, 0xf4dc, 0x8, 0x7ff, 0x0, 0x7fffffff, 0xfffffff9, 0x0, 0x2, 0x6, 0x9, 0x6, 0x3, 0xfff, 0x10001, 0x7fffffff, 0xfffffffa, 0x401, 0x4cdc1a6e, 0x4, 0x6, 0x3, 0x8, 0x0, 0x2f81, 0x200, 0x80000001, 0x1, 0x4, 0x8, 0x3, 0x9, 0xffff, 0x8000, 0x5, 0x1, 0xc, 0x1, 0xa, 0xfffffffa, 0xd, 0x8, 0x7, 0x8, 0xc4, 0x10001]}, 0x45c) (async)
chmod(0x0, 0x23f) (async)
setuid(0xee01) (async)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8) (async)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0xc92480, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={&(0x7f00000000c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x29, 0x1, 0x800, 0xbe2, 0x200, 0xffff, 0x12800, 0x0, 0x0, 0x1, 0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) (async)
syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58)
ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x0})

2m38.862086881s ago: executing program 1 (id=2487):
setreuid(0x0, 0x0) (async)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async)
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
pipe2$9p(&(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
accept$unix(r3, 0x0, 0x0) (async)
r4 = dup(r2)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2cfbffffff653d232c6e6f78617474722c00"])
r5 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
sendfile(r5, r0, 0x0, 0x80000000)

2m38.804685692s ago: executing program 1 (id=2496):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xfffffffe, @my=0x0}, 0x10, 0x800)
getpeername(r2, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000100)=0x80)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f00000001c0)='./file0/../file0/file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0/file0\x00', 0x103)
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r5 = eventfd2(0x58, 0x80000)
ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000000)={0x41, r5})
close_range(r0, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async)
mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) (async)
accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xfffffffe, @my=0x0}, 0x10, 0x800) (async)
getpeername(r2, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000100)=0x80) (async)
mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000040)='./file0/../file0/file0\x00', 0x0, 0x8b101a, 0x0) (async)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async)
move_mount(r3, &(0x7f00000001c0)='./file0/../file0/file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0/file0\x00', 0x103) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
eventfd2(0x58, 0x80000) (async)
ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000000)={0x41, r5}) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)

2m38.578887476s ago: executing program 1 (id=2497):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x42802, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, &(0x7f0000000300))

2m38.409018268s ago: executing program 1 (id=2499):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) (async)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x2000000, 0x12, r0, 0xffffa000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x4d809000) (async)
symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')

2m38.387172768s ago: executing program 34 (id=2499):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) (async)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x2000000, 0x12, r0, 0xffffa000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x4d809000) (async)
symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')

2m2.755081093s ago: executing program 4 (id=3266):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000856000/0x400000)=nil)
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
mremap(&(0x7f0000bca000/0x7000)=nil, 0x7000, 0x1000, 0x4, &(0x7f0000ffc000/0x1000)=nil)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x5)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xa, 0x0, &(0x7f00000001c0)=[@free_buffer], 0x0, 0x0, 0x0})

2m2.714452304s ago: executing program 4 (id=3267):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140), 0x3c3002, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000003)
getresuid(&(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080), &(0x7f0000000000))
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000640)={'filter\x00', 0xb001, 0x4, 0x430, 0x0, 0x130, 0x0, 0x348, 0x348, 0x348, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x3f5e, 0x4, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x10, {@empty, {[0xff]}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x10001, 'syz0\x00', {0x7b}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @local, @broadcast, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x480)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
setreuid(0x0, r1)
mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0xee439000)
mremap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)='/dev/ashmem\x00')

2m2.703839024s ago: executing program 4 (id=3268):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace', 0x121262, 0x1b2)
write$cgroup_pid(r0, &(0x7f0000000000), 0x12)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x10400, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
keyctl$set_reqkey_keyring(0xe, 0x1)
r2 = dup(r1)
ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x0)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x22052, r3, 0xfffff000)

2m2.644744705s ago: executing program 4 (id=3269):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = eventfd2(0x0, 0x80000)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x8})
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f00000005c0), 0x10)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000040)={r3, 0x3dc, 0x0, 0x29})
recvmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x10125, 0x0)
sendmsg$can_bcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "4cf90fba85c830e42a3ca4b10f01bbcb15f3806c4853e7c44a6974759d9f643905a56baa4195fb396d9bfa306999f1586e5d1ca49add100a36b751a7d9fe0b182ebf2c8a0e66f72c1c08260030752f07cd4089473e52885a3c85bacf3ccfac5bb9435fe036dcfccd7254bbd8bce90e2284d29e1f17d6652270fd0abcb8729f16ff602b438bd122a9e09984e2799d0dbfef7533d1a930ea4f4b57605ace45f5815450693650ae122d34aa0c5ca5e793516d156e5a5b34d6c17c40d753426a3d8e15e726d0f2622e873e0cbe63751bb62c68594d4cb0a21b92ad2e80f24a9b290a87ee6779022a0b7f5223e4e8c9f53f501ec8c439724078fdc076a51d50760566"})
sendmsg$IPCTNL_MSG_EXP_NEW(r3, 0x0, 0x24000840)
timer_create(0x0, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r6, 0x29, 0xb, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2m2.642237015s ago: executing program 4 (id=3270):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/reserved_size', 0x80802, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='\v\x00'], 0x1c7)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x100})
r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0xbc, 0x19, 0x1, 0x0, 0x25dfdbff, {{@in6=@rand_addr=' \x01\x00', @in=@multicast1, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x3c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x80000000, 0x0, 0x2d9}, 0x3, 0x6e6bc0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x4}]}, 0xbc}}, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="440f20c03505000000440f22c0f26df20f38f17a64b805000000b9e10d00000f01d9d8dd0f01728eb8010000000f01d94c0fc71d000000003ef245dbed410fc7f7", 0x41}], 0x1, 0x72, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 32)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x4c, 0x0, 0x0}) (async, rerun: 32)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
pread64(r7, &(0x7f00000002c0)=""/191, 0xbf, 0x720) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x7c, 0x0, &(0x7f0000001540)=[@free_buffer={0x40086303, r2}, @free_buffer={0x40086303, r2}, @acquire_done={0x40106309, 0x1}, @enter_looper, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000001c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000540)=""/4096, 0x1000, 0x2, 0x23}, @flat=@handle={0x73682a85, 0x1101}, @fda={0x66646185, 0x1, 0x2, 0x7}}, &(0x7f0000000000)={0x0, 0x28, 0x40}}}, @release={0x40046306, 0x2}], 0x75, 0x0, &(0x7f00000015c0)="492e715a8de875a08408ee0ee0a023c75bcdc2b47dc450340fcb73c40644c009643c875e1018b144c308eb51fda84518877475327e6643f422471150f17d08609e332c2b26f6ff4cce57b516228f9d43c286446cdc53278f6a294c443c94edf7024c31cc1add81823ca44d8ae065a2729e06e27cdc"})

2m2.641643815s ago: executing program 4 (id=3271):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x1000810, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x26da2d2a}}]}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) (async)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@remote}, 0x0, @in=@private}}, &(0x7f0000000280)=0xe8)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x1, &(0x7f0000000180)={[{@metacopy_on}, {@verity_require}, {@xino_auto}], [{@dont_appraise}, {@fowner_eq={'fowner', 0x3d, r5}}, {@context={'context', 0x3d, 'user_u'}}, {@euid_lt={'euid<', r4}}]}) (async)
sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x14, 0x1e, 0x101, 0x0, 0x0, "", [@nested={0x4, 0x12}]}, 0x14}], 0x1}, 0x0)
r6 = syz_clone(0x280, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$pokeuser(0x6, r6, 0xd8, 0x0) (async, rerun: 64)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async, rerun: 64)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) (async)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
lseek(r7, 0x10001, 0x0)

1m47.24054526s ago: executing program 35 (id=3271):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x1000810, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x26da2d2a}}]}})
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) (async)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$F2FS_IOC_FLUSH_DEVICE(r3, 0x4008f50a, 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@initdev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0}}, {{@in6=@remote}, 0x0, @in=@private}}, &(0x7f0000000280)=0xe8)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x1, &(0x7f0000000180)={[{@metacopy_on}, {@verity_require}, {@xino_auto}], [{@dont_appraise}, {@fowner_eq={'fowner', 0x3d, r5}}, {@context={'context', 0x3d, 'user_u'}}, {@euid_lt={'euid<', r4}}]}) (async)
sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x14, 0x1e, 0x101, 0x0, 0x0, "", [@nested={0x4, 0x12}]}, 0x14}], 0x1}, 0x0)
r6 = syz_clone(0x280, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace$pokeuser(0x6, r6, 0xd8, 0x0) (async, rerun: 64)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async, rerun: 64)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) (async)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
lseek(r7, 0x10001, 0x0)

1m35.607719888s ago: executing program 7 (id=3703):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x2, 0x0)
mmap$binder(&(0x7f0000704000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0xffffffffffffe1f7)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x100001000000b8ae)
mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x200000a, 0x12, r1, 0x2546c000)

1m35.576498569s ago: executing program 7 (id=3705):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x147a5000) (async)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x5, 0x0, &(0x7f00000003c0))
r3 = syz_pidfd_open(r1, 0x0)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace(0x18, r4) (async)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f00000003c0))
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe}, 0x10) (async)
write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500080002000000", 0x24)
sendmmsg$inet6(r5, &(0x7f0000000880)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0xc, @mcast1, 0x2}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000080)="26f334c28a3d9361bfcdbb61db5d115f344b15e37d5ac6374faaa8f2204a3ab13f0c04e870ab555ca6aa25243de9f45cdc5034", 0x33}, {&(0x7f0000000200)="b1075fbb7c0166cda1dd6d782559ef9c47318ec73e360a4c94c3af1435b6651dfb61756d11354cae02f05386551d241d8ad5c77b14d1343b10f5ea4428319526f10a6da38ebcf998dc979eedbb62a518c19a9a998522b86e9b4a5932592a12a98f2e12795afd874f608cea2db8c47bede20d586eacf53ac44de38a6262158526c41606dae52ccd3538065b0323bda4983f61c6cdc1542602fdcd715b8b47ad019daa31b304f83f97d8e72e70f13c057bc5742dc01a", 0xb5}, {&(0x7f00000002c0)="a3c1cc080e1c2ca62b35eef077b5", 0xe}, {&(0x7f0000000300)="0283028113258048cbd1d46e1e270e9eb8c0b38acca95b523c83a95146b38353feddb1c4605faaf95ee73b204a8bd0aea2c639a83be5859ca998a43f545399fe", 0x40}, {&(0x7f0000000400)="99da97e02930bae2d87853ca4ba744bb67e8c946a2d84f69693e24d34fd3cc78539713faaf0187c611189912ba98fa99f9ba7c02ef8e8084439738aef883b862ef8a5cb3f9ca24e2a7d129efcd903a3d58cb6a8caf523396a05b8465cb211fa46ce72808177fc319829f898af46eea0b408ec5b746307160530eaf8f50f11d81db3a3bf68cbad76d9ea007646b8e00878c102c8514657ce96fd74dcb0cd99fbb1ad54deb7f957aa34288c2d3b7a1ee391c78673d555d0fe020e4", 0xba}, {&(0x7f00000004c0)="1d869e5d32a1fbc5427bf94862d86fef56607feb926bd6a6b1be55f7278fb2a69d40af070bc4569804b0a4265f1ade240647146ed8c30bbc0dc9d7509e195509ea32e26c4a9144dbd7db7dc315388c5bfcbc1101a92c38c2f61b783499600afd729b797df2265da761a60bcb449c3533841fe15bd0f2da31feac30b93162d3c4f9a5ff826a66d15e9538a5a881802c0ad5d4ed6bfd400dbb5986a1e40d9ecacd3b0860974767b1be3e1971ccaba719287b36555ad20523698cedd44ece4d8c7a48f43f29", 0xc4}, {&(0x7f0000000340)="8d0eab8631874ac0843b3646b270602d01f95d65299839e3fb097bbcea3129ee20afff010c2746e816660cf8e52c7fdc1a920fd5a0cad8235fa2cfa6fe9766494aadccbbd65aa8c74a4f80e8b3e358", 0x4f}, {&(0x7f00000005c0)="1d6025159810754a59843d902aaa376c7f80a91d298d7f18f9cbf6b40d6201c9b7b49c66f6f3c5527639517454897feacde44b64adbc16d6f340fe98f0bc79c9c75333f9a5788fdeff3e242629740393ca8a965ba7fec2bd252545274e78992b0bf7527fc7f0341035e341bb7beb39183acd7a440110768a334d3a68ef027af73978fafb1a7e1820906dc703de6a3e753b5e1937d7ea7112f67049608e098a0ea782b0f07ef7ecf4f389ed6eccb425f152ffece8e1072574e1eefaa5679bde0d92ef1e6a3643433c9d25d00f", 0xcc}], 0x8, &(0x7f0000000740)=[@rthdr={{0x58, 0x29, 0x39, {0x2e, 0x8, 0x1, 0x2, 0x0, [@remote, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x6c, 0x6, 0x0, 0xfa, 0x0, [@local, @mcast1, @dev={0xfe, 0x80, '\x00', 0x44}]}}}, @rthdr={{0x98, 0x29, 0x39, {0x29, 0x10, 0x0, 0x40, 0x0, [@mcast1, @local, @mcast1, @remote, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}]}}}], 0x138}}], 0x1, 0x55)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r6, 0x29, 0x24, 0x0, &(0x7f00000000c0)) (async)
openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
write$nbd(r7, &(0x7f0000000100)={0x67446698, 0x1, 0x0, 0x3, 0x3, "04cbb96103000000697cca18470d375de3c5d6a0e1f1f3270d4d7ec3e261d2594ac791ef1cda061cb63521da7519a78612e2f013b86e521dde4948ed679e6059ed70f87a42d55d0c8b74761a30e4b113eed66b31ec8667a54c35692012027745a8b5c2055bbd6cbffd3360bfc6a53abfe6dec99815282c9235c976669a9dc9260d5cc789053b31e97c92cd9e65bf6c6235e975c3544dc6cf45f9602391952c8ca4ecd3b4927ceaf83c4b7f918227b0bfe38b6c9399963673f9906f6ced866e5852c3fbf0cf"}, 0xd5)

1m35.50900173s ago: executing program 7 (id=3706):
prctl$PR_SET_VMA(0x23, 0x0, &(0x7f0000ff8000/0x3000)=nil, 0xbcaaf1788315a778, &(0x7f0000000140)='\x9a\xb5\xbe1\x9cMP\xae\x93\x10\xb0\xcfv\xac\xdd\"\xd65\x01 \xef\x10\xd6%\xf4`cq\x1ddG\xd4BN\x15\xdaX\x03\xdc\xe9;hxX\xa1\xe7\xa3\rZ,\xbb\n\x92K\xd6\xc8\xf2\x97F&\xe0\xd3\xd3\x11 Y\x04\x82\x1a\xe5\x8d\xf4\xf1\xc7\x8eL\x03O\x9b\xf4\xa7\x04\n\xbc&\x1b\x88?\\~n*\x02\xef\xce\xe4\x9a|\xe1n\x86\x93\x92\xed\xc1\x1bv1\xbd\x85\xd1\xdbv>\x99\x82\x19\xf3\xe6\x17\'\xfc\x17\x8b\xf2\xba\xd8\xb2c\xeb\xffK\x9b\x1b\x0f\xf1\xa7[G\x89\xb7\x9dp#F1\x16\x8b\x11`\xcd[\x9c\xac\t)\xd8R\xc7\xac\xc8I?\xe4u\x8b\x81\xa3\xe4 \xfbt\xd5\\\x02\xab\x00E#o-v*\xff\xf0yTG\xca\'\xed.\x878\xc4\x81\x06\xe9\x7fL\xf6\xf0X\r\x1f\xaaq\xa5/\x91\xec\xc0,\x01Z\x91\xc3\x95\x14<\v>P\xe1\xff\x1d\x14\x9c\'\x95\x00\x00\x00\x00\xe6Jg\x8b\x85pT\x87\x89r\xd2\xafei\x84\x82O\xae\x80\xe2\xad\xac\xfa\xd8\xa4\xf6\x03\xb5\x18,\xc2\xae}\x11>\xce\xba\x8a0\a\x85g\xde\xde\xafT.\xa9V>o\xed\xca\xd6\xf0\x19\x90\xb4l\xff\x13\x14\xea;\x8f\x93wUoFE') (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x402, 0x0)
ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000000))

1m35.50715824s ago: executing program 7 (id=3707):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x2000000, 0x20002, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="020dfd001f00000028ac00000000000005000600000000000a00000000000000fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000006002b00020300000000000000000000fe880000000000000000000000000001fc01000000000000000000000000000004000400000000000000000000000000000000000000000000ac38000000000005001a0020010000000000000000000000000000ffffffff000000000000000000000000150010000200010000"], 0xf8}}, 0x0)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={&(0x7f00000000c0)={0x50, 0xffffffffffffffda, 0x1, {0x7, 0x29, 0x3, 0x800, 0xbe2, 0x200, 0xffff, 0x8, 0x0, 0x0, 0x1, 0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
syz_clone3(&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xfffffffffffffffe)
inotify_init()
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x3d, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$setregs(0xd, r5, 0x5, 0xfffffffffffffffe)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000bedbdf25030000005800018044000400200001000a00000000000000fe80000000000000000000000000040000000000000002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a7379"], 0x6c}}, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)={0x148, r6, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9d}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xa}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xae7d}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffb}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xffffffff, @remote, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7, @private2, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x359}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4ae}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x840}, 0xf46616be8410f03e)
close_range(r0, 0xffffffffffffffff, 0x0)

1m35.317537083s ago: executing program 7 (id=3713):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001400110200000000fcdbdf25280068fdfa"], 0x28}}, 0x0)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000000240)=""/116, 0x74}], 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
chmod(&(0x7f0000000040)='.\x00', 0x35e)
setuid(0xee01)
renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x121030, &(0x7f0000000000)=ANY=[@ANYBLOB='defcontext', @ANYRES32=r0])

1m35.247445764s ago: executing program 7 (id=3717):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e00"], 0x44}}, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x8b22, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f422741b13103e52f400", [0x0, 0x2000000000001]}})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x24, 0x13, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4, 0x1a}]}, 0x24}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x8000, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108)
close_range(r0, 0xffffffffffffffff, 0x0)

1m35.193650165s ago: executing program 36 (id=3717):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e00"], 0x44}}, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x8b22, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f422741b13103e52f400", [0x0, 0x2000000000001]}})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x24, 0x13, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4, 0x1a}]}, 0x24}], 0x1}, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f0000000340)={0x8, {{0x2, 0x8000, @multicast2}}, {{0x2, 0x0, @multicast2}}}, 0x108)
close_range(r0, 0xffffffffffffffff, 0x0)

3.708679524s ago: executing program 5 (id=5335):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f570c0000002a000007ff00be0083"], 0x0}, 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='./bus\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xdc)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x10)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x1, 0xc73f, 0x81, 0x1})
mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x0)
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f00000001c0)={0x1ff, 0x1c0, 0x100, &(0x7f0000000d00)=[0xe0b, 0x8e0, 0xffffffffffff7b3b, 0x3ff, 0xfffffffffffffffd, 0x7, 0x0, 0x8, 0x0, 0xd, 0x2, 0x7, 0x7, 0x8000000000000000, 0xfffffffffffeffff, 0x0, 0x7ff, 0x3, 0x4, 0x4, 0x9, 0x5, 0x113b041f800000, 0x5, 0xc, 0x3, 0x77fbebcd, 0x6, 0x81, 0xffffffff80000001, 0x3, 0xc0e4, 0x1, 0x86, 0x5809, 0x8, 0x7fffffffffffffff, 0xb2, 0x1, 0x8, 0x0, 0x1000, 0x9a, 0x2, 0xfffffffffffffffa, 0x1, 0xff, 0x1, 0xd, 0x2, 0xd6, 0x7, 0x8, 0x6, 0xc, 0x8, 0x5, 0x7, 0x80000001, 0xc0, 0x800, 0x4, 0x7, 0x1464, 0x2, 0x9, 0x1, 0x511, 0x90, 0x9, 0x8, 0x9, 0xb, 0x604, 0x9, 0xfff, 0x3, 0x4, 0x3b, 0x4, 0x5, 0x3a31, 0xffffffffffffff67, 0x67, 0x1a, 0x6, 0x1, 0x3, 0xfe6, 0xa, 0x3, 0x3, 0x1ff, 0xa79, 0x8, 0x8, 0x3, 0x0, 0xffffffffffffff7f, 0x7bf, 0x5, 0xfffffffffffffff7, 0x7, 0x100000000, 0x7, 0x5, 0x8, 0x101, 0x2, 0x1b2, 0x4, 0x6, 0xcea8, 0x3ff, 0xd, 0x9be9, 0x8, 0x8, 0x3, 0x2ac2, 0xdc92, 0x0, 0xffffffffffff2522, 0xfffffffffffffffa, 0xea, 0x5, 0xe, 0x3]})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1})
syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000000000/0x400000)=nil)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1})
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = getpid()
futimesat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file4\x00', &(0x7f0000000200)={{}, {0x0, 0xea60}})
r5 = syz_pidfd_open(r4, 0x0)
setns(r5, 0x24020000)
r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r7 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000440)={0x64, 0x0, &(0x7f0000000340)=[@acquire_done={0x40106309, 0x3}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r7}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}, @fd}, &(0x7f0000000300)={0x0, 0x18, 0x30}}, 0x1000}, @enter_looper], 0x46, 0x0, &(0x7f00000003c0)="7b03619f35135dcd48193319e7737435335149bb5cec095c23fefe12f86497caf29fb4b47f33059ea7b2a34679e4a2a57f516981e93df44598b7254e0d3c84a1e7e2f0af2a7b"})
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0), 0x0)
socket$tipc(0x1e, 0x5, 0x0)

3.097740733s ago: executing program 5 (id=5350):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x8, &(0x7f0000000100)=0xffffffff00040000, 0x112)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="48777bf2b4cbc68ec9200aa69fa5b2f6a11e170ad2127ebdf3e8cbc92b1862a7c80c1b712ef84ef3045e2dccc6449a0565b6723f2f99b88f24c64b24d95ef794cff518c83050feb8358dd4e9a904907acab982ff11b536beda0513d4559522d9cdf8193a71af4e2622a2ef7707a711d4f030a7a710da8e6b4be01f02bb9b85e087eedb30562154ea1184d23232a9ea45bc748d5b08e5c1694d8f801b08c64203360e08d96c9836842062cae0f624dcd723346a76e5fa34c04d95dc60", 0xbc}], 0x1)

3.097012633s ago: executing program 5 (id=5352):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') (async)
r1 = creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) (async)
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r4 = dup(r3) (async, rerun: 64)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (rerun: 64)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r5, &(0x7f000000e280)={0x2020, 0x0, <r6=>0x0}, 0x2020)
syz_fuse_handle_req(r5, &(0x7f000000c280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b7c447bf9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e7fccfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992fecfc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda4518b2e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0xc9, 0x0, 0x8000000, 0x0, 0x0, 0x81, 0x6000, 0x2000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
write$FUSE_INIT(r5, &(0x7f0000000380)={0x50, 0x0, r6, {0x7, 0x29, 0x1c000, 0x0, 0x0, 0x2, 0x100, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x50) (async, rerun: 32)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x5}, 0x4) (async, rerun: 32)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, r6}, 0x18) (async, rerun: 32)
write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async, rerun: 32)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB='\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00']) (async)
r7 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x1)
sendfile(r7, r0, 0x0, 0x80000000)

3.095733523s ago: executing program 5 (id=5354):
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x100001000000b8ae)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000540)={0x0, <r0=>0x0, "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", "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"})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000001540)={{r0, 0x3ff, 0x8, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0x8, 0x81, 0xfffffe01, 0x7, 0xffffffffffffffff, 0x5, 0x2, 0x401}})
r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0x6, 0x7, 0x5, 0x9, 0xc1, 0x9}, 0xc)
mmap(&(0x7f0000701000/0x4000)=nil, 0x4000, 0x200000a, 0x12, 0xffffffffffffffff, 0x2546c000)

3.042146364s ago: executing program 5 (id=5355):
syz_usb_connect$uac1(0x2, 0x93, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000206b1d01014000010203010902810003013140070904000000010120"], &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000001280)={0x8, {"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", 0x1000}}, 0xde6)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x4b301, 0x0)
ioctl$TCSETSF(r1, 0x5404, 0x0)
clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x92)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_on}, {@uuid_on}, {@verity_require}]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_buf(r5, 0x6, 0x23, &(0x7f0000000040)=""/48, &(0x7f0000000200)=0x30)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
lseek(r6, 0x10001, 0x0)

2.726701089s ago: executing program 2 (id=5367):
openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0)
move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0)
openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@empty, 0x2, 0x3c}, @in=@loopback, {}, {}, {0x0, 0x1ec}, 0x0, 0x0, 0x2, 0x2}, [@coaddr={0x14, 0xe, @in=@multicast2}]}, 0x104}}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='notify_on_release\x00', 0x2, 0x0)
write$cgroup_int(r3, &(0x7f0000000100), 0x12)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="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"])

2.7014252s ago: executing program 2 (id=5368):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, 0xfffffffffffffffe) (async, rerun: 64)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88) (rerun: 64)
setsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f0000000180), 0x4) (async)
r4 = socket$inet6(0xa, 0x1, 0x0) (async, rerun: 32)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x10b, 0x2}) (async, rerun: 32)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r6)
sendmsg$IEEE802154_START_REQ(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, r7, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x8080) (async)
r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xd, 0x200, &(0x7f0000000080)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000a0000fdfd000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000005000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0xc0686611, &(0x7f0000000180)={0x10200, 0x0, 0x18, 0x1000, &(0x7f00005e8000/0x1000)=nil}) (async)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r9, &(0x7f00000000c0), 0x10) (async)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}}, 0x0)
sendmmsg$inet(r9, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) (async, rerun: 32)
mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x80000000000000) (rerun: 32)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f00000007c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000600)={@fd={0x66642a85, 0x0, r4}, @flat=@binder={0x73622a85, 0x101, 0x3}, @flat=@binder={0x73622a85, 0x100, 0x3}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async)
r10 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00')
pread64(r10, 0x0, 0x0, 0xc2a)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r6)
sendmsg$IEEE802154_SET_MACPARAMS(r6, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="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"], 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x8081)

2.592673131s ago: executing program 2 (id=5369):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
unlinkat(r0, &(0x7f0000000280)='./file0\x00', 0x200)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x3, 0x2, 0x7, 0x1, 0x2, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x7, 0x3, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x81, 0x1, 0x4}}]}}}]}}]}}, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000002240)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x0, 0x0}, {0x0, 0x0}, {0x4, &(0x7f0000002300)=@lang_id={0x4, 0x3, 0x40a}}]})
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x1000, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = eventfd(0xff7ffff7)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r5 = eventfd(0x2)
ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r5, 0x200, 0x2, r4})
connect$can_bcm(r1, &(0x7f00000000c0), 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c001785e25c1a90856b247803bf"])
write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="2a00000006"], 0x2a)
sendmsg$can_bcm(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x6, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="01010000340400000600001000008e25", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="000000400100000000000040080300008d416cfa6fc2313e"], 0x48}}, 0x0)
pread64(r1, &(0x7f00000001c0)=""/48, 0x30, 0x16)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x202882, 0x0)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private0, 0x2}, 0x1c)

2.065624849s ago: executing program 2 (id=5378):
socket$unix(0x1, 0x1, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000006d0001", @ANYRESHEX], 0x28}], 0x1}, 0x0)
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000189000/0x3000)=nil, 0x4000, 0x3})
getrandom(&(0x7f0000000040)=""/28, 0x1c, 0x1)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x2)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8)
madvise(&(0x7f0000472000/0x1000)=nil, 0x1000, 0x11)
syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000081000/0x400000)=nil)

1.624159666s ago: executing program 2 (id=5393):
r0 = socket$unix(0x1, 0x1, 0x0)
shutdown(r0, 0x0)
socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = open(&(0x7f0000000300)='./file2\x00', 0x101442, 0xa3)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000e, 0x40010, r2, 0x7b95b000)
r3 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file2/file0\x00', &(0x7f0000000040), 0x1000004, &(0x7f0000000080)={[{@volatile}, {@metacopy_off}, {@uuid_null}, {@xino_off}, {@uuid_off}, {@redirect_dir_off}], [{@subj_role={'subj_role', 0x3d, 'binder\x00'}}, {@obj_type={'obj_type', 0x3d, 'binder\x00'}}, {@pcr={'pcr', 0x3d, 0x35}}]}) (async)
mount$overlay(0x0, &(0x7f0000000000)='./file2/file0\x00', &(0x7f0000000040), 0x1000004, &(0x7f0000000080)={[{@volatile}, {@metacopy_off}, {@uuid_null}, {@xino_off}, {@uuid_off}, {@redirect_dir_off}], [{@subj_role={'subj_role', 0x3d, 'binder\x00'}}, {@obj_type={'obj_type', 0x3d, 'binder\x00'}}, {@pcr={'pcr', 0x3d, 0x35}}]})
getsockopt$netlink(r3, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a)
sendto$inet6(r1, 0x0, 0x10, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141400}}, 0x1c) (async)
sendto$inet6(r1, 0x0, 0x10, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141400}}, 0x1c)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
mkdirat(r2, &(0x7f0000000200)='./file0\x00', 0x30)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
socket$netlink(0x10, 0x3, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005e000101000000000000000008f0"], 0x1c}], 0x1}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000004c0)={'vcan0\x00', <r7=>0x0})
connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r7}, 0x10) (async)
connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r7}, 0x10)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000680)={0x6, 0x5, 0x1, 0xd1fb, 0x5, 0x0, [{0x8000000, 0x1, 0x2, '\x00', 0x204}, {0x10000, 0x18bd, 0x9, '\x00', 0x888}, {0xc1, 0x7ff, 0x7, '\x00', 0x1202}, {0x0, 0x4, 0x7, '\x00', 0x1000}, {0x101, 0x19, 0x8, '\x00', 0x2001}]}) (async)
ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, &(0x7f0000000680)={0x6, 0x5, 0x1, 0xd1fb, 0x5, 0x0, [{0x8000000, 0x1, 0x2, '\x00', 0x204}, {0x10000, 0x18bd, 0x9, '\x00', 0x888}, {0xc1, 0x7ff, 0x7, '\x00', 0x1202}, {0x0, 0x4, 0x7, '\x00', 0x1000}, {0x101, 0x19, 0x8, '\x00', 0x2001}]})
recvfrom$inet6(r1, &(0x7f0000000500)=""/149, 0x95, 0x40000000, &(0x7f0000000240)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80000001}, 0x1c)
syz_open_dev$evdev(&(0x7f0000000180), 0x464, 0x260200)
fcntl$notify(r0, 0x402, 0x2)
sendmsg$can_bcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000010400000300000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="030000e0010000000400008007020000d4674cf0f23fe738"], 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000)
ptrace(0x10, r4)
ptrace$pokeuser(0x6, r4, 0x358, 0x5)
mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0xa001, &(0x7f0000000380)=ANY=[]) (async)
mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', &(0x7f0000000280), 0xa001, &(0x7f0000000380)=ANY=[])

692.78843ms ago: executing program 2 (id=5399):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x2aa, 0x41)
setsockopt$inet6_int(r2, 0x29, 0x2, &(0x7f0000000180)=0x7, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0x24000800, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast2, 0x2}, 0x1c)
recvmmsg(r2, &(0x7f00000066c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x2000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = userfaultfd(0x801)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'erspan0\x00', 0x0, 0x7800, 0x8, 0x3, 0x8, {{0x5, 0x4, 0x2, 0x1d, 0xff27, 0x66, 0x0, 0x81, 0x29, 0x0, @loopback, @local}}}})
read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x2020)

633.624461ms ago: executing program 8 (id=5405):
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@loopback, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, {}, 0x0, 0x0, 0x0, 0x1, 0x2}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x2, 0x1, 0x4}}, 0xe8)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x200000, 0x0)

626.858741ms ago: executing program 8 (id=5406):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async)
r1 = socket(0xa, 0x3, 0x3a)
bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async)
write(0xffffffffffffffff, &(0x7f0000000040)="7ea2eb7b72edc39eb6e625f5000a9908c7ca01e8797cb289d9bd9958d9971de1d675079cac118004755d8bc53ad04b671245526573ecfe99db6e64e6a8811e93213093562b9d697e6122c05c412cfd8f", 0x50)

622.644661ms ago: executing program 8 (id=5407):
r0 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb)
keyctl$update(0x2, r0, &(0x7f0000001600)='a`h', 0x3)
ioprio_set$uid(0x3, 0x0, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
read(r1, &(0x7f0000000040)=""/141, 0x8d)
read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
prlimit64(r2, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0)
getpid()
syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0)
prlimit64(r2, 0x4, &(0x7f0000000100)={0x7fffffffffffffff, 0xa}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r3)
pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4)
sendfile(r1, r1, 0x0, 0x7ffff000)
add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000240)={'fscrypt:', @desc3}, &(0x7f0000001580)={0x0, "e5cf9087c0bc4eecd575619bf7fe717b09a75040d67944bdf74658aa573ec7ec5fd9ecb3bf2ad2cceb6d2f7879709ab2db2fcfa073f7ab9055774346282c82cc", 0x17}, 0x48, 0xfffffffffffffffb) (async)
keyctl$update(0x2, r0, &(0x7f0000001600)='a`h', 0x3) (async)
ioprio_set$uid(0x3, 0x0, 0x0) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async)
read(r1, &(0x7f0000000040)=""/141, 0x8d) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000001640)={0x2020}, 0x2020) (async)
prlimit64(r2, 0xe, &(0x7f0000000000)={0x9, 0x88}, 0x0) (async)
getpid() (async)
syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) (async)
prlimit64(r2, 0x4, &(0x7f0000000100)={0x7fffffffffffffff, 0xa}, 0x0) (async)
syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') (async)
fchdir(r3) (async)
pread64(0xffffffffffffffff, &(0x7f0000000140)=""/15, 0xf, 0x4) (async)
sendfile(r1, r1, 0x0, 0x7ffff000) (async)

556.843412ms ago: executing program 8 (id=5408):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d000000000000010902240001000000000904b00001030000000921000000012205000905810300"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000180)={0x0, 0x10, 0x5, {0x5, 0xc, "74f18f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0)
preadv(r2, &(0x7f0000000200)=[{&(0x7f0000000100)=""/16, 0x10}, {0x0}], 0x2, 0x2a0800, 0x0)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000040)=0x80, 0x4)

392.971605ms ago: executing program 6 (id=5411):
pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='f2fs\x00', 0x10, 0x0)

390.940455ms ago: executing program 6 (id=5412):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder1\x00', 0x800, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0xa, 0x4}) (async)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)

389.444995ms ago: executing program 6 (id=5413):
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) (async)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r1, 0x0, 0x0)
r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000400)={'syztnl2\x00', <r3=>0x0, 0x80, 0x7, 0x4, 0x3ef, {{0x16, 0x4, 0x1, 0x0, 0x58, 0x68, 0x0, 0x7, 0x4, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @timestamp_prespec={0x44, 0x4, 0x63, 0x3, 0xa}, @timestamp={0x44, 0x2c, 0xbd, 0x0, 0x9, [0x4, 0x9f, 0x9, 0x9e, 0xb, 0x6, 0x9, 0x7, 0x8213, 0x0]}, @generic={0x7, 0xe, "bac0d6e15988bc6a371accf2"}, @rr={0x7, 0x3, 0x2e}]}}}}})
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9}) (async)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x6, 0xa, 0x0, 0x9})
r4 = getpid()
r5 = syz_pidfd_open(r4, 0x0)
r6 = fcntl$dupfd(r5, 0x406, r5)
fcntl$setpipe(r1, 0x407, 0x7) (async)
fcntl$setpipe(r1, 0x407, 0x7)
setns(r6, 0x2000000) (async)
setns(r6, 0x2000000)
socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f00000001c0)={'IDLETIMER\x00'}, &(0x7f0000000180)=0x1e) (async)
getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f00000001c0)={'IDLETIMER\x00'}, &(0x7f0000000180)=0x1e)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0xf5, r3, 0x1, 0xff, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x14) (async)
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0xf5, r3, 0x1, 0xff, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x14)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r7 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x54)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
pipe2$9p(&(0x7f0000000000)={<r8=>0xffffffffffffffff}, 0x0)
r9 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
splice(r8, 0x0, r9, 0x0, 0x10000000000016, 0x0)

210.572258ms ago: executing program 6 (id=5414):
r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', <r4=>0x0})
sendto$packet(r2, &(0x7f0000000500)="10030600e0fc020004004788aa96a13bb1000011000a7389f252ae0dba4c807fca1a0022afc0d5071a204bd31870", 0x2e, 0x40800, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14)
read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200898, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$SIOCGIFHWADDR(r5, 0x8927, &(0x7f00000001c0)={'macvtap0\x00'})
ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f00000000c0)={0xb0880, 0x14})
pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4e6)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = dup(r7)
ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000080)="66b82e000f00d0d1e6c4c1792feef3a4b86d1c00000f23c80f21f8350400a0000fc76703660f3881b700000000360f35c4c17850f40ff9ab50b30000", 0x3c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r9, 0xae80, 0x0)
r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa00, 0x0)
close(r10)
ioctl$KVM_CAP_HYPERV_TLBFLUSH(r7, 0x4068aea3, &(0x7f00000002c0))
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r10, 0xac506000)
mkdirat(r0, &(0x7f0000000240)='./file0\x00', 0xc0)

190.392908ms ago: executing program 6 (id=5415):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0)
copy_file_range(r0, 0x0, r1, 0x0, 0x9, 0x0)
keyctl$KEYCTL_CAPABILITIES(0x1f, 0x0, 0xfffffffffffffdaf)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x808081, 0x0)

32.83663ms ago: executing program 6 (id=5416):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000740)=0x5, 0x4)
syz_genetlink_get_family_id$mptcp(&(0x7f00000007c0), r0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x0)
close(0x3)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always'])
r2 = inotify_init1(0x80800)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sigaltstack(&(0x7f0000001b40)={&(0x7f0000000b40)=""/4096, 0x80000000, 0x1000}, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
dup3(r2, r3, 0x80000)
fgetxattr(r3, &(0x7f0000000140)=@random={'security.', '#}((+\x00'}, 0x0, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000000, 0x10010, r2, 0x7f2d1000)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r4, &(0x7f0000000f00)={0x2020}, 0x2020)

31.51029ms ago: executing program 8 (id=5417):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x1000, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x8, {{0xa, 0x4e21, 0x6de, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x4, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffd}}}, 0x108)
close_range(r0, 0xffffffffffffffff, 0x0)
ioperm(0xd1df, 0x9, 0x80)
remap_file_pages(&(0x7f000012e000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x1)
openat(0xffffffffffffff9c, &(0x7f000000c380)='\x00', 0x260601, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="3d0000000000000f0000", @ANYRESDEC=0x0, @ANYRESDEC=0x0, @ANYRES8=r2])
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x2000000, 0x20002, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = dup(r5)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
getresuid(0x0, 0x0, 0x0)
madvise(&(0x7f00003db000/0x4000)=nil, 0x4000, 0x3)
syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r9 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
dup(r10)
sendmsg$DEVLINK_CMD_TRAP_SET(r9, 0x0, 0x8000)
dup3(r8, 0xffffffffffffffff, 0x80000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)

19.972451ms ago: executing program 5 (id=5418):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4040044) (async)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 8 (id=5419):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) (async, rerun: 64)
recvmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x40010041) (async, rerun: 64)
read(r1, &(0x7f0000000040)=""/98, 0x3a) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async, rerun: 32)
pipe(0x0) (async)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60c040, 0x0) (async)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x1c, r4, 0x7d243a6ea807936d, 0x12, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x404c881}, 0x4040080)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x5, <r6=>0xffffffffffffffff, 0x1})
ioctl$FIGETBSZ(r6, 0x2, &(0x7f00000000c0)) (async, rerun: 64)
socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64)
ioctl$BLKTRACESTART(r3, 0x1274, 0x0) (async)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r7, 0x107, 0x17, &(0x7f0000000000)=0x5, 0x4)

kernel console output (not intermixed with test programs):

 177.636878][ T8956] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  177.786901][ T8980] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2874'.
[  177.827261][ T8983] netlink: 'syz.6.2875': attribute type 16 has an invalid length.
[  177.835209][ T8983] netlink: 'syz.6.2875': attribute type 1 has an invalid length.
[  177.843039][ T8983] netlink: 'syz.6.2875': attribute type 1 has an invalid length.
[  177.850816][ T8983] netlink: 'syz.6.2875': attribute type 2 has an invalid length.
[  177.858578][ T8983] netlink: 51686 bytes leftover after parsing attributes in process `syz.6.2875'.
[  177.904188][ T8991] overlayfs: failed to clone upperpath
[  177.933620][ T8998] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2881'.
[  178.016318][   T36] kauditd_printk_skb: 18 callbacks suppressed
[  178.016336][   T36] audit: type=1400 audit(177.990:679): avc:  denied  { write } for  pid=9017 comm="syz.6.2889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  178.058068][ T9022] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2891'.
[  178.067068][    T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  178.218583][    T9] usb 3-1: Using ep0 maxpacket: 8
[  178.225565][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  178.238564][    T9] usb 3-1: config 4 has an invalid interface number: 147 but max is 0
[  178.246848][    T9] usb 3-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[  178.258063][    T9] usb 3-1: config 4 has no interface number 0
[  178.265812][    T9] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  178.275097][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.283331][    T9] usb 3-1: Product: syz
[  178.287520][    T9] usb 3-1: Manufacturer: syz
[  178.292315][    T9] usb 3-1: SerialNumber: syz
[  178.501389][ T8985] binder: Bad value for 'max'
[  178.576186][    T9] usb 3-1: Found UVC 0.02 device syz (04f2:b746)
[  178.588345][    T9] usb 3-1: No valid video chain found.
[  178.599699][    T9] usb 3-1: USB disconnect, device number 12
[  179.091303][   T65] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0
[  179.099774][   T65] hid-generic 0000:0000:0000.0014: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  179.127275][ T9068] fido_id[9068]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  179.182921][ T9066] binder: Unknown parameter 'm	'
[  179.252115][ T9079] batadv_slave_1: entered promiscuous mode
[  179.258056][   T36] audit: type=1326 audit(179.230:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9080 comm="syz.2.2912" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f319cf8e929 code=0x0
[  179.298372][ T9078] batadv_slave_1: left promiscuous mode
[  179.571836][ T9120] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9120 comm=syz.2.2927
[  179.605317][ T9127] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2929'.
[  179.675573][ T9139] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2934'.
[  179.712962][ T9137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=9137 comm=syz.2.2933
[  179.742208][ T9150] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  179.900992][ T9162] rust_binder: 9160 RLIMIT_NICE not set
[  180.117003][ T9170] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2943'.
[  180.268286][ T9189] 9pnet_fd: Insufficient options for proto=fd
[  180.579371][   T36] audit: type=1400 audit(180.569:681): avc:  denied  { execute } for  pid=9208 comm="syz.2.2959" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  180.701051][   T36] audit: type=1400 audit(180.689:682): avc:  denied  { getopt } for  pid=9220 comm="syz.2.2964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  180.728469][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2965'.
[  180.760895][   T36] audit: type=1400 audit(180.749:683): avc:  denied  { accept } for  pid=9220 comm="syz.2.2964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  181.242639][ T9261] overlay: ./bus is not a directory
[  181.290969][   T36] audit: type=1400 audit(181.279:684): avc:  denied  { create } for  pid=9191 comm="syz.4.2952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1
[  181.367707][   T36] audit: type=1400 audit(181.349:685): avc:  denied  { sys_module } for  pid=9262 comm="syz.4.2977" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  181.542634][ T9266] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2978'.
[  181.688497][ T9282] sit0: entered promiscuous mode
[  181.694678][ T9282] netlink: 'syz.6.2985': attribute type 1 has an invalid length.
[  181.702561][ T9282] netlink: 1 bytes leftover after parsing attributes in process `syz.6.2985'.
[  181.712494][ T9284] binder: Bad value for 'max'
[  181.732632][   T36] audit: type=1400 audit(181.719:686): avc:  denied  { append } for  pid=9285 comm="syz.2.2986" name="loop8" dev="devtmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  181.740752][ T9286] loop8: detected capacity change from 0 to 8
[  181.768287][   T36] audit: type=1400 audit(181.749:687): avc:  denied  { read write } for  pid=9285 comm="syz.2.2986" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  181.793416][   T36] audit: type=1400 audit(181.749:688): avc:  denied  { open } for  pid=9285 comm="syz.2.2986" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  181.909741][ T9303] rust_binder: Write failure EFAULT in pid:438
[  181.982607][ T9308] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  182.084221][ T9316] devpts: called with bogus options
[  182.399368][ T9326] netlink: 'syz.5.3002': attribute type 16 has an invalid length.
[  182.407393][ T9326] netlink: 'syz.5.3002': attribute type 3 has an invalid length.
[  182.415196][ T9326] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.3002'.
[  182.537616][ T9335] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=9335 comm=syz.5.3005
[  182.919839][ T9355] : Can't lookup blockdev
[  182.976767][ T9366] binder: Unknown parameter 'se�labe�����W	 l'
[  183.208722][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3022'.
[  183.229896][ T9392] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3022'.
[  183.271731][ T9398] overlayfs: failed to clone upperpath
[  183.737157][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  183.737188][   T36] audit: type=1400 audit(183.719:690): avc:  denied  { execute } for  pid=9408 comm="syz.4.3030" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=39323 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  184.041702][ T9416] rust_binder: 9416: no such ref 3
[  184.197239][ T9432] overlayfs: missing 'lowerdir'
[  184.217944][ T9435] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.267725][ T9452] /dev/loop0: Can't lookup blockdev
[  184.274787][ T9452] overlayfs: failed to resolve './file1/file0': -2
[  184.394025][   T36] audit: type=1326 audit(185.374:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9477 comm="syz.5.3053" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fc6b8e929 code=0x0
[  184.512047][ T9486] 9pnet: Could not find request transport: ��D��5É�e������d����y�UBQ۠��-�{����I&�N8n
[  184.884820][ T9489] tmpfs: Bad value for 'nr_blocks'
[  184.890113][ T9488] tmpfs: Bad value for 'nr_blocks'
[  185.091105][ T9499] rust_binder: Error while translating object.
[  185.091136][ T9499] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  185.097345][ T9499] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:466
[  185.120445][   T36] audit: type=1400 audit(186.104:692): avc:  denied  { search } for  pid=9500 comm="syz.2.3062" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  185.159887][ T9506] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3063'.
[  185.269574][ T9525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.278621][ T9525] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  185.304017][ T9529] netlink: 'syz.6.3070': attribute type 1 has an invalid length.
[  185.439787][   T36] audit: type=1326 audit(186.424:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9544 comm="syz.4.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c28d8e929 code=0x7ffc0000
[  185.476086][   T36] audit: type=1326 audit(186.424:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9544 comm="syz.4.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c28d8e929 code=0x7ffc0000
[  185.499309][   T36] audit: type=1326 audit(186.444:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9544 comm="syz.4.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9c28d8e929 code=0x7ffc0000
[  185.524674][   T36] audit: type=1326 audit(186.444:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9544 comm="syz.4.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c28d8e929 code=0x7ffc0000
[  185.547540][  T398] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  185.548209][   T36] audit: type=1326 audit(186.444:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9544 comm="syz.4.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c28d8e929 code=0x7ffc0000
[  185.577996][   T36] audit: type=1326 audit(186.444:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9544 comm="syz.4.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f9c28d8e929 code=0x7ffc0000
[  185.601200][   T36] audit: type=1326 audit(186.444:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9544 comm="syz.4.3076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c28d8e929 code=0x7ffc0000
[  185.678246][  T398] usb 3-1: device descriptor read/64, error -71
[  185.918206][  T398] usb 3-1: device descriptor read/64, error -71
[  186.158218][  T398] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  186.274879][ T9575] netlink: 'syz.6.3086': attribute type 4 has an invalid length.
[  186.282894][ T9575] netlink: 'syz.6.3086': attribute type 27 has an invalid length.
[  186.290883][ T9575] netlink: 3609 bytes leftover after parsing attributes in process `syz.6.3086'.
[  186.308218][  T398] usb 3-1: device descriptor read/64, error -71
[  186.558227][  T398] usb 3-1: device descriptor read/64, error -71
[  186.669503][  T398] usb usb3-port1: attempt power cycle
[  186.816781][ T9620] netlink: 'syz.6.3103': attribute type 3 has an invalid length.
[  187.018212][  T398] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  187.042998][  T398] usb 3-1: device descriptor read/8, error -71
[  187.050334][ T9644] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3114'.
[  187.179349][  T398] usb 3-1: device descriptor read/8, error -71
[  187.418221][  T398] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  187.439304][  T398] usb 3-1: device descriptor read/8, error -71
[  187.569215][  T398] usb 3-1: device descriptor read/8, error -71
[  187.688302][  T398] usb usb3-port1: unable to enumerate USB device
[  188.402821][ T9696] gretap0: entered allmulticast mode
[  188.521831][ T9729] fuse: Bad value for 'user_id'
[  188.526773][ T9729] fuse: Bad value for 'user_id'
[  188.688229][    T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  188.818216][    T9] usb 3-1: device descriptor read/64, error -71
[  189.058222][    T9] usb 3-1: device descriptor read/64, error -71
[  189.103003][ T9750] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3155'.
[  189.151381][ T9756] netlink: 108 bytes leftover after parsing attributes in process `syz.6.3158'.
[  189.308210][    T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  189.416176][   T36] kauditd_printk_skb: 4 callbacks suppressed
[  189.416190][   T36] audit: type=1400 audit(190.394:704): avc:  denied  { mount } for  pid=9768 comm="syz.4.3163" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[  189.444367][    T9] usb 3-1: device descriptor read/64, error -71
[  189.534405][ T9790] overlayfs: failed to resolve './file1': -2
[  189.688210][    T9] usb 3-1: device descriptor read/64, error -71
[  189.731848][ T9826] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3185'.
[  189.798309][    T9] usb usb3-port1: attempt power cycle
[  190.148214][    T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  190.169423][    T9] usb 3-1: device descriptor read/8, error -71
[  190.309332][    T9] usb 3-1: device descriptor read/8, error -71
[  190.548232][    T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  190.573861][    T9] usb 3-1: device descriptor read/8, error -71
[  190.592981][ T9870] overlayfs: failed to clone upperpath
[  190.709336][    T9] usb 3-1: device descriptor read/8, error -71
[  190.736207][ T9895] veth1_macvtap: mtu less than device minimum
[  190.820842][    T9] usb usb3-port1: unable to enumerate USB device
[  191.445890][ T9946] netlink: 'syz.4.3223': attribute type 4 has an invalid length.
[  191.595687][ T9966] KVM: debugfs: duplicate directory 9966-4
[  191.675270][   T36] audit: type=1400 audit(192.654:705): avc:  denied  { append } for  pid=9967 comm="syz.2.3230" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  191.698632][   T36] audit: type=1400 audit(192.664:706): avc:  denied  { ioctl } for  pid=9967 comm="syz.2.3230" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x941b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  191.781245][ T9986] fuseblk: Bad value for 'fd'
[  192.033540][ T9991] netlink: 'syz.4.3238': attribute type 10 has an invalid length.
[  192.055351][ T9993] netlink: 'syz.4.3239': attribute type 1 has an invalid length.
[  192.075236][ T9998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3240'.
[  192.182184][T10015] __vm_enough_memory: pid: 10015, comm: syz.6.3246, bytes: 21200224198656 not enough memory for the allocation
[  192.379812][T10026] bridge0: port 3(veth1_macvtap) entered blocking state
[  192.386823][T10026] bridge0: port 3(veth1_macvtap) entered disabled state
[  192.393935][T10026] veth1_macvtap: entered allmulticast mode
[  192.400183][T10026] veth1_macvtap: left allmulticast mode
[  192.444686][T10035] fuseblk: Bad value for 'fd'
[  192.602802][T10045] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  192.611001][T10045] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  192.628231][T10045] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  192.636354][T10045] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  192.667539][T10049] overlayfs: failed to clone upperpath
[  192.710483][T10057] 9pnet_fd: Insufficient options for proto=fd
[  192.711528][   T36] audit: type=1400 audit(193.694:707): avc:  denied  { setopt } for  pid=10056 comm="syz.5.3262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  192.730988][T10051] 9pnet_fd: Insufficient options for proto=fd
[  192.743259][T10058] 9pnet_fd: Insufficient options for proto=fd
[  192.759718][T10061] /dev/rnullb0: Can't lookup blockdev
[  192.892976][T10079] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  193.309498][T10092] No source specified
[  193.316252][T10092] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  193.446822][T10104] 9pnet_fd: Insufficient options for proto=fd
[  193.576784][   T36] audit: type=1400 audit(194.554:708): avc:  denied  { compute_member } for  pid=10111 comm="syz.2.3283" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  193.858225][   T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  194.008305][   T10] usb 3-1: Using ep0 maxpacket: 16
[  194.019587][   T10] usb 3-1: config 8 has an invalid interface number: 12 but max is 1
[  194.027937][   T10] usb 3-1: config 8 has an invalid interface number: 139 but max is 1
[  194.034227][T10133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3291'.
[  194.036710][   T10] usb 3-1: config 8 has an invalid interface number: 21 but max is 1
[  194.053355][   T10] usb 3-1: config 8 has 3 interfaces, different from the descriptor's value: 2
[  194.062986][   T10] usb 3-1: config 8 has no interface number 0
[  194.069200][   T10] usb 3-1: config 8 has no interface number 1
[  194.086336][   T10] usb 3-1: config 8 has no interface number 2
[  194.094025][   T10] usb 3-1: config 8 interface 12 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  194.107371][   T10] usb 3-1: too many endpoints for config 8 interface 139 altsetting 23: 140, using maximum allowed: 30
[  194.116525][T10142] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3295'.
[  194.118795][   T10] usb 3-1: config 8 interface 139 altsetting 23 has an invalid descriptor for endpoint zero, skipping
[  194.140047][T10142] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3295'.
[  194.147333][   T10] usb 3-1: config 8 interface 139 altsetting 23 has an invalid descriptor for endpoint zero, skipping
[  194.149315][T10142] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  194.165474][   T10] usb 3-1: config 8 interface 139 altsetting 23 endpoint 0xE has invalid maxpacket 512, setting to 64
[  194.196480][   T10] usb 3-1: config 8 interface 139 altsetting 23 has a duplicate endpoint with address 0x6, skipping
[  194.207392][   T10] usb 3-1: config 8 interface 139 altsetting 23 endpoint 0xA has invalid maxpacket 1023, setting to 64
[  194.219235][   T10] usb 3-1: config 8 interface 139 altsetting 23 has an invalid descriptor for endpoint zero, skipping
[  194.230328][   T10] usb 3-1: config 8 interface 139 altsetting 23 has a duplicate endpoint with address 0x6, skipping
[  194.241492][   T10] usb 3-1: config 8 interface 139 altsetting 23 bulk endpoint 0x3 has invalid maxpacket 16
[  194.251951][   T10] usb 3-1: config 8 interface 139 altsetting 23 has a duplicate endpoint with address 0xA, skipping
[  194.269227][   T10] usb 3-1: config 8 interface 139 altsetting 23 has 12 endpoint descriptors, different from the interface descriptor's value: 140
[  194.283114][   T10] usb 3-1: config 8 interface 21 altsetting 4 has a duplicate endpoint with address 0x3, skipping
[  194.295414][   T10] usb 3-1: config 8 interface 12 has no altsetting 0
[  194.302919][   T10] usb 3-1: config 8 interface 139 has no altsetting 0
[  194.309925][   T10] usb 3-1: config 8 interface 21 has no altsetting 0
[  194.309999][T10156] netlink: 324 bytes leftover after parsing attributes in process `syz.5.3299'.
[  194.318113][   T10] usb 3-1: New USB device found, idVendor=1b3d, idProduct=01ea, bcdDevice=af.4f
[  194.346151][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.354324][   T10] usb 3-1: Product: ﳋ쫊핛톦Ｖ씩隋䝫砧㰤籙鯐⡽꽺윾䜽ꕡ䙛⛒盥쯗ꝛ騱姩靇茈樎峁䕨鲯깦謽꣬窟헧卙ﾋ疟鎢驆쯽ᤄ眭榧⇧᷼壘栔錉咷琒⁶﹊꬀膔맒뀘㴺馇ﮧ칰宵卋轡⪚뿩鼨㷡꘻骎ልﻙ裸蜅砪要蜷Ţ៞쎘࿍⼟檏䗬饭䵰巐䒗ㄿ᭝來ਖ਼෸ɴﳦⳓ蚽耪瓳ﷹ⻠㩪슪鸝䂸걞錍걔鶳ዀ뜂؊姷
[  194.390501][   T10] usb 3-1: Manufacturer: ခ
[  194.395238][   T10] usb 3-1: SerialNumber: syz
[  194.544385][T10180] ������: renamed from bridge0 (while UP)
[  194.608396][   T10] ftdi_sio 3-1:8.12: FTDI USB Serial Device converter detected
[  194.616506][   T10] ftdi_sio ttyUSB0: unknown device type: 0xaf4f
[  194.811964][   T10] ftdi_sio 3-1:8.139: FTDI USB Serial Device converter detected
[  194.820074][   T10] ftdi_sio ttyUSB1: unknown device type: 0xaf4f
[  194.829466][   T10] ftdi_sio 3-1:8.21: FTDI USB Serial Device converter detected
[  194.837450][   T10] ftdi_sio ttyUSB2: unknown device type: 0xaf4f
[  194.846256][   T10] usb 3-1: USB disconnect, device number 21
[  194.852746][   T10] ftdi_sio 3-1:8.12: device disconnected
[  194.860294][   T10] ftdi_sio 3-1:8.139: device disconnected
[  194.867027][   T10] ftdi_sio 3-1:8.21: device disconnected
[  195.437378][T10200] fuseblk: Bad value for 'fd'
[  195.542581][   T36] audit: type=1326 audit(196.524:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10202 comm="syz.5.3313" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fc6b8e929 code=0x0
[  197.669020][T10270] fuse: Bad value for 'user_id'
[  197.674010][T10270] fuse: Bad value for 'user_id'
[  197.891193][T10292] netlink: 393 bytes leftover after parsing attributes in process `syz.2.3348'.
[  198.429046][T10337] rust_binder: Error while translating object.
[  198.429086][T10337] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  198.435288][T10337] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:581
[  198.469262][T10340] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  198.478579][T10340] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:583
[  198.593683][   T36] audit: type=1400 audit(199.574:710): avc:  denied  { map } for  pid=10357 comm="syz.6.3371" path="socket:[41722]" dev="sockfs" ino=41722 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  198.629753][   T36] audit: type=1400 audit(199.594:711): avc:  denied  { audit_write } for  pid=10357 comm="syz.6.3371" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  198.639302][T10362] netlink: 'syz.2.3372': attribute type 1 has an invalid length.
[  198.651087][   T36] audit: type=1107 audit(199.594:712): pid=10357 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='[Q+Ð�D���A�E�ERyP�զ0�x�>+`�G>�����϶�3Y}>��P��/�{��@֘�Ĭ�b�b��pD�\��.��:Cj�#��:�����A�{L��pc�l~	*������O����k�a��|�T=�ES�D��'
[  198.712824][   T36] audit: type=1326 audit(199.694:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10367 comm="syz.6.3375" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4cf58e929 code=0x0
[  198.713655][T10366] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3374'.
[  199.988244][    T9] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[  200.118206][    T9] usb 3-1: device descriptor read/64, error -71
[  200.358266][    T9] usb 3-1: device descriptor read/64, error -71
[  200.598236][    T9] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[  200.728206][    T9] usb 3-1: device descriptor read/64, error -71
[  200.968204][    T9] usb 3-1: device descriptor read/64, error -71
[  201.078347][    T9] usb usb3-port1: attempt power cycle
[  201.418215][    T9] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[  201.439223][    T9] usb 3-1: device descriptor read/8, error -71
[  201.481970][T10380] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3378'.
[  201.562061][T10394] fuseblk: Bad value for 'fd'
[  201.569277][    T9] usb 3-1: device descriptor read/8, error -71
[  201.828218][    T9] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  201.849332][    T9] usb 3-1: device descriptor read/8, error -71
[  201.979378][    T9] usb 3-1: device descriptor read/8, error -71
[  202.088375][    T9] usb usb3-port1: unable to enumerate USB device
[  202.652298][   T36] audit: type=1400 audit(203.634:714): avc:  denied  { connect } for  pid=10409 comm="syz.2.3388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  202.735361][T10420] fuse: Bad value for 'fd'
[  202.886138][T10431] rust_binder: 10431: no such ref 1
[  203.142816][T10458] fuseblk: Unknown parameter 'nd0x0000000000000008'
[  203.734320][T10474] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3409'.
[  203.785669][T10479] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3411'.
[  203.879940][T10484] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  203.912101][T10487] netlink: 'syz.2.3414': attribute type 4 has an invalid length.
[  203.937721][T10487] netlink: 'syz.2.3414': attribute type 4 has an invalid length.
[  204.045624][T10497] netlink: 'syz.2.3417': attribute type 11 has an invalid length.
[  204.054512][T10497] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.3417'.
[  204.086594][T10500] devpts: called with bogus options
[  204.696250][T10539] cgroup2: Unknown parameter 'nQ
'
[  205.563812][T10618] netlink: 'syz.6.3437': attribute type 4 has an invalid length.
[  205.640678][T10637] overlayfs: failed to clone upperpath
[  206.095160][T10659] 9pnet_fd: Insufficient options for proto=fd
[  206.138354][T10668] netlink: 'syz.5.3452': attribute type 12 has an invalid length.
[  206.710897][T10687] 9pnet_fd: Insufficient options for proto=fd
[  206.941430][T10701] batadv_slave_0: entered promiscuous mode
[  207.427500][T10717] fuse: Unknown parameter 'd'
[  207.452345][T10719] overlay: Unknown parameter 'obj_user'
[  207.488308][T10723] syzkaller0: entered promiscuous mode
[  207.493819][T10723] syzkaller0: entered allmulticast mode
[  207.554284][T10725] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[  207.562001][T10725] rust_binder: Write failure EINVAL in pid:665
[  207.562801][T10726] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  207.645623][   T36] audit: type=1326 audit(208.624:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10733 comm="syz.6.3476" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4cf58e929 code=0x0
[  207.671709][T10732] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  207.674470][T10732] rust_binder: Read failure Err(EFAULT) in pid:672
[  207.726585][T10739] binder: Binderfs stats mode cannot be changed during a remount
[  207.764577][T10700] batadv_slave_0: left promiscuous mode
[  207.793662][T10747] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3481'.
[  208.347118][T10750] SELinux:  Context system_u:object_r:var_auth_t:s0 is not valid (left unmapped).
[  208.356696][   T36] audit: type=1400 audit(209.334:716): avc:  denied  { relabelto } for  pid=10749 comm="syz.5.3483" name="NETLINK" dev="sockfs" ino=42930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_generic_socket permissive=1 trawcon="system_u:object_r:var_auth_t:s0"
[  208.487804][T10751] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.495260][T10751] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.502586][T10751] bridge_slave_0: entered allmulticast mode
[  208.509071][T10751] bridge_slave_0: entered promiscuous mode
[  208.516648][T10751] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.524100][T10751] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.529062][   T36] audit: type=1400 audit(209.514:717): avc:  denied  { relabelfrom } for  pid=10757 comm="syz.6.3485" name="RAW" dev="sockfs" ino=43283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  208.531754][T10751] bridge_slave_1: entered allmulticast mode
[  208.553798][T10758] SELinux:  Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped).
[  208.560697][T10751] bridge_slave_1: entered promiscuous mode
[  208.570745][   T36] audit: type=1400 audit(209.554:718): avc:  denied  { relabelto } for  pid=10757 comm="syz.6.3485" name="RAW" dev="sockfs" ino=43283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=rawip_socket permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0"
[  208.702416][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.709551][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  208.730835][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.737931][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.760251][T10751] veth0_vlan: entered promiscuous mode
[  208.773871][T10751] veth1_macvtap: entered promiscuous mode
[  208.858512][   T65] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  208.861074][T10776] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3491'.
[  208.868178][   T36] audit: type=1400 audit(209.844:719): avc:  denied  { setopt } for  pid=10775 comm="syz.6.3491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  209.038184][   T65] usb 3-1: Using ep0 maxpacket: 32
[  209.047968][   T65] usb 3-1: config 1 interface 0 altsetting 21 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  209.061332][   T65] usb 3-1: config 1 interface 0 has no altsetting 0
[  209.071761][   T65] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c0b, bcdDevice= 0.40
[  209.081963][   T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.090381][   T65] usb 3-1: Product: Ј
[  209.094787][   T65] usb 3-1: Manufacturer: Ц
[  209.099560][   T65] usb 3-1: SerialNumber: ៫杲㛦渶뻢ᾣ陇ㇼ䜯穹ǽ潂僴죊ዀ≣࢑᠒煘樝뗛臹♘⢔柛⼒왠完䪽摑鳣⥎뢍臙ꌚ趍㽛蹃爉갂袂崤池喓覹林〉❈䲲譃霠㱝⫫믭襁跦ﳂ蝴皻垛磌為胄퀹요樆ᖴǒ뮍꣜⺂뺙繡嫈줲ᠳ뎫⁒滢扗斻
[  209.235963][   T36] audit: type=1400 audit(210.214:720): avc:  denied  { create } for  pid=10811 comm="syz.5.3503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[  209.275130][T10815] overlayfs: failed to resolve './file1': -2
[  209.353582][T10762] x_tables: duplicate underflow at hook 4
[  209.372340][   T65] usbhid 3-1:1.0: can't add hid device: -71
[  209.385755][   T65] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  209.395388][   T65] usb 3-1: USB disconnect, device number 26
[  209.582213][T10824] netlink: 'syz.6.3507': attribute type 4 has an invalid length.
[  209.622794][   T36] audit: type=1400 audit(210.604:721): avc:  denied  { map } for  pid=10830 comm="syz.6.3510" path="socket:[44169]" dev="sockfs" ino=44169 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  209.726891][T10836] overlayfs: conflicting options: nfs_export=on,index=off
[  209.889386][   T31] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0
[  209.905640][   T31] hid-generic 0000:0000:0000.0015: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  210.198256][T10869] overlayfs: failed to clone upperpath
[  210.212477][T10869] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3522'.
[  210.302203][T10874] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3524'.
[  210.313980][T10876] SELinux: security_context_str_to_sid () failed with errno=-22
[  210.354326][T10883] IPv6: NLM_F_CREATE should be specified when creating new route
[  210.514328][T10888] overlayfs: failed to clone lowerpath
[  210.520856][T10888] overlayfs: failed to clone upperpath
[  210.624319][T10929] incfs: Options parsing error. -22
[  210.629733][T10929] incfs: mount failed -22
[  210.753027][   T36] audit: type=1400 audit(211.734:722): avc:  denied  { setattr } for  pid=10955 comm="syz.5.3554" name="PACKET" dev="sockfs" ino=43950 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  210.824190][T10964] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:712
[  210.883125][  T304] Bluetooth: hci0: Frame reassembly failed (-84)
[  210.884658][T10966] binder: Unknown parameter ''
[  210.998214][   T31] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  211.148372][   T31] usb 8-1: Using ep0 maxpacket: 16
[  211.154669][   T31] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  211.164892][   T31] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  211.175290][   T31] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  211.184394][   T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.192425][   T31] usb 8-1: Product: syz
[  211.196587][   T31] usb 8-1: Manufacturer: syz
[  211.201450][   T31] usb 8-1: SerialNumber: syz
[  211.335937][T10971] fuse: Bad value for 'fd'
[  211.407641][T10954] rust_binder: BC_CLEAR_DEATH_NOTIFICATION death notification not active
[  211.419824][   T31] usb 8-1: 0:2 : does not exist
[  211.427307][   T31] usb 8-1: 5:0: failed to get current value for ch 0 (-22)
[  211.439412][   T31] usb 8-1: USB disconnect, device number 2
[  211.449481][T10763] udevd[10763]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  212.007455][   T36] audit: type=1326 audit(212.984:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10997 comm="syz.7.3569" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f161f98e929 code=0x0
[  212.696568][T11017] 9pnet: p9_errstr2errno: server reported unknown error 
[  212.730387][T11017] fuseblk: Bad value for 'fd'
[  212.777081][   T36] audit: type=1326 audit(213.754:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11026 comm="syz.6.3580" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe4cf58e929 code=0x0
[  212.904896][   T36] audit: type=1400 audit(213.884:725): avc:  denied  { map } for  pid=11029 comm="syz.7.3581" path="socket:[45062]" dev="sockfs" ino=45062 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  212.908340][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  212.934267][ T3916] Bluetooth: hci0: command 0x1003 tx timeout
[  212.981971][T11036] rust_binder: 11036: no such ref 2
[  212.987263][T11036] rust_binder: 11036: no such ref 1
[  212.992838][T11036] rust_binder: 11036: no such ref 1
[  212.998173][T11036] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:718
[  213.208230][   T65] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  213.268213][    T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  213.368240][   T65] usb 8-1: Using ep0 maxpacket: 32
[  213.374711][   T65] usb 8-1: config 6 has an invalid interface number: 111 but max is 0
[  213.383138][   T65] usb 8-1: config 6 has no interface number 0
[  213.389286][   T65] usb 8-1: config 6 interface 111 has no altsetting 0
[  213.397638][   T65] usb 8-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice=fa.e9
[  213.406773][   T65] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  213.414836][   T65] usb 8-1: Product: syz
[  213.419033][   T65] usb 8-1: Manufacturer: syz
[  213.423638][   T65] usb 8-1: SerialNumber: syz
[  213.431424][   T65] usbhid 8-1:6.111: couldn't find an input interrupt endpoint
[  213.438200][    T9] usb 3-1: Using ep0 maxpacket: 16
[  213.445260][    T9] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  213.456295][    T9] usb 3-1: config 0 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  213.469442][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  213.476060][    T9] usb 3-1: New USB device found, idVendor=04d9, idProduct=a070, bcdDevice= 0.00
[  213.485229][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.494129][    T9] usb 3-1: config 0 descriptor??
[  213.625913][T11051] overlayfs: failed to clone upperpath
[  213.656298][   T65] usb 8-1: USB disconnect, device number 3
[  213.901546][    T9] usbhid 3-1:0.0: can't add hid device: -71
[  213.908445][    T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  213.918540][    T9] usb 3-1: USB disconnect, device number 27
[  214.197175][   T36] kauditd_printk_skb: 2 callbacks suppressed
[  214.197194][   T36] audit: type=1326 audit(215.174:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11074 comm="syz.6.3599" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4cf58e929 code=0x0
[  214.247033][T11078] SELinux:  Context system_u:object_r:crash_device_t:s0 is not valid (left unmapped).
[  214.259153][   T36] audit: type=1400 audit(215.234:729): avc:  denied  { relabelto } for  pid=11074 comm="syz.6.3599" name="" dev="pipefs" ino=45123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:crash_device_t:s0"
[  214.363587][   T36] audit: type=1326 audit(215.344:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11091 comm="syz.7.3602" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f161f98e929 code=0x0
[  214.448467][   T36] audit: type=1400 audit(215.434:731): avc:  denied  { mounton } for  pid=11096 comm="syz.7.3603" path="/31/file0" dev="tmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[  214.732544][T11135] netlink: 37 bytes leftover after parsing attributes in process `syz.5.3612'.
[  214.744430][T11139] /dev/md0: Can't lookup blockdev
[  214.750391][T11139] /dev/md0: Can't lookup blockdev
[  214.755668][T11139] /dev/md0: Can't lookup blockdev
[  214.761367][T11139] /dev/md0: Can't lookup blockdev
[  214.766914][T11139] : Can't lookup blockdev
[  214.787547][   T36] audit: type=1326 audit(215.764:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11143 comm="syz.5.3616" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fc6b8e929 code=0x0
[  214.812779][T11146] rust_binder: Error while translating object.
[  214.812830][T11146] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  214.819404][T11146] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:751
[  214.829492][T11146] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  215.081075][T11166] 9pnet_fd: Insufficient options for proto=fd
[  215.238220][  T398] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  215.389306][  T398] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  215.400403][  T398] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  215.410196][  T398] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  215.423119][  T398] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  215.432181][  T398] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.440988][  T398] usb 3-1: config 0 descriptor??
[  215.851109][  T398] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving
[  215.865601][  T398] plantronics 0003:047F:FFFF.0016: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  216.119162][T11155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  216.127807][T11155] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  216.137824][   T45] usb 3-1: USB disconnect, device number 28
[  216.169425][T11216] futex_wake_op: syz.6.3641 tries to shift op by -1; fix this program
[  216.301845][T11219] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  216.302867][T11219] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:117
[  216.411549][T11231] binder: Unknown parameter ''
[  216.425660][T11231] binder: Unknown parameter ''
[  216.430966][T11231] binder: Unknown parameter ''
[  216.435877][T11231] binder: Unknown parameter ''
[  216.440835][T11231] binder: Unknown parameter ''
[  216.445741][T11231] binder: Unknown parameter ''
[  216.450673][T11231] binder: Unknown parameter ''
[  216.455574][T11231] binder: Unknown parameter ''
[  216.460529][T11231] binder: Unknown parameter ''
[  216.465469][T11231] binder: Unknown parameter ''
[  216.470403][T11231] binder: Unknown parameter ''
[  216.475315][T11231] binder: Unknown parameter ''
[  216.480318][T11231] binder: Unknown parameter ''
[  216.485249][T11231] binder: Unknown parameter ''
[  216.490195][T11231] binder: Unknown parameter ''
[  216.495230][T11231] binder: Unknown parameter ''
[  216.500232][T11231] binder: Unknown parameter ''
[  216.505233][T11231] binder: Unknown parameter ''
[  216.510168][T11231] binder: Unknown parameter ''
[  216.515079][T11231] binder: Unknown parameter ''
[  216.520061][T11231] binder: Unknown parameter ''
[  216.524981][T11231] binder: Unknown parameter ''
[  216.529922][T11231] binder: Unknown parameter ''
[  216.534943][T11231] binder: Unknown parameter ''
[  216.540113][T11231] binder: Unknown parameter ''
[  216.545029][T11231] binder: Unknown parameter ''
[  216.550068][T11231] binder: Unknown parameter ''
[  216.555052][T11231] binder: Unknown parameter ''
[  216.560129][T11231] binder: Unknown parameter ''
[  216.565056][T11231] binder: Unknown parameter ''
[  216.570029][T11231] binder: Unknown parameter ''
[  216.574941][T11231] binder: Unknown parameter ''
[  216.579917][T11231] binder: Unknown parameter ''
[  216.597254][T11233] rust_binder: Write failure EFAULT in pid:131
[  216.727920][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3651'.
[  216.743208][T11248] sit0: entered promiscuous mode
[  216.743837][T11246] cgroup: No subsys list or none specified
[  216.751696][T11248] netlink: 'syz.2.3652': attribute type 1 has an invalid length.
[  216.761895][T11248] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3652'.
[  216.912834][   T36] audit: type=1326 audit(217.894:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11253 comm="syz.2.3654" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f319cf8e929 code=0x0
[  216.951918][T11259] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  216.951951][T11259] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  216.961731][T11259] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  216.984741][T11259] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  216.984773][T11259] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  216.986852][T11264] binder: Bad value for 'max'
[  216.991426][T11262] rust_binder: Error in use_page_slow: ESRCH
[  217.002790][T11259] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  217.009026][T11262] rust_binder: use_range failure ESRCH
[  217.013341][T11259] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  217.024062][T11262] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false
[  217.026199][T11259] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  217.032750][T11262] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  217.045528][T11262] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:779
[  217.083365][T11270] kvm: user requested TSC rate below hardware speed
[  217.203047][T11275] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  217.254285][T11276] rust_binder: Failed to allocate buffer. len:96, is_oneway:true
[  217.358203][    T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  217.519622][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[  217.528027][    T9] usb 3-1: config 6 has an invalid interface number: 144 but max is 0
[  217.536254][    T9] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  217.546395][    T9] usb 3-1: config 6 has no interface number 0
[  217.552523][    T9] usb 3-1: config 6 interface 144 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  217.565591][    T9] usb 3-1: config 6 interface 144 has no altsetting 0
[  217.573828][    T9] usb 3-1: New USB device found, idVendor=7f55, idProduct=02fc, bcdDevice=20.c2
[  217.582917][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.590931][    T9] usb 3-1: Product: syz
[  217.595178][    T9] usb 3-1: Manufacturer: syz
[  217.599804][    T9] usb 3-1: SerialNumber: syz
[  218.845464][   T36] audit: type=1326 audit(219.824:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11285 comm="syz.7.3664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f161f98e929 code=0x7fc00000
[  219.002481][T11336] 9pnet_fd: Insufficient options for proto=fd
[  219.720903][T11385] overlay: ./bus is not a directory
[  219.807588][T11389] 9pnet_fd: Insufficient options for proto=fd
[  219.814989][T11389] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  219.911807][   T36] audit: type=1400 audit(220.894:735): avc:  denied  { append } for  pid=11397 comm="syz.7.3702" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  219.957809][T11404] __vm_enough_memory: pid: 11404, comm: syz.7.3703, bytes: 1152922604118523904 not enough memory for the allocation
[  220.120048][    T9] usb 3-1: MIDIStreaming interface descriptor not found
[  220.139359][    T9] usb 3-1: USB disconnect, device number 29
[  220.156192][T10708] udevd[10708]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:6.144/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  220.181499][T11415] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3707'.
[  220.193018][T11415] tipc: Invalid UDP bearer configuration
[  220.193045][T11415] tipc: Enabling of bearer <udp:sy> rejected, failed to enable media
[  220.299792][T11436] 9pnet_fd: Insufficient options for proto=fd
[  220.370072][   T46] bridge_slave_1: left allmulticast mode
[  220.375786][   T46] bridge_slave_1: left promiscuous mode
[  220.391136][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.400343][   T46] bridge_slave_0: left allmulticast mode
[  220.412376][   T46] bridge_slave_0: left promiscuous mode
[  220.422292][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.554786][   T46] veth1_macvtap: left promiscuous mode
[  220.560498][   T46] veth0_vlan: left promiscuous mode
[  220.611169][T11471] overlayfs: failed to resolve './file1/file0': -2
[  220.647089][T11450] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.656321][T11450] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.664692][T11450] bridge_slave_0: entered allmulticast mode
[  220.673015][T11450] bridge_slave_0: entered promiscuous mode
[  220.679941][T11450] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.687099][T11450] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.694957][T11450] bridge_slave_1: entered allmulticast mode
[  220.701912][T11450] bridge_slave_1: entered promiscuous mode
[  220.791206][T11450] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.798321][T11450] bridge0: port 2(bridge_slave_1) entered forwarding state
[  220.805635][T11450] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.812816][T11450] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.838274][  T304] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.846506][  T304] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.863227][  T304] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.870330][  T304] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.877967][  T304] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.885053][  T304] bridge0: port 2(bridge_slave_1) entered forwarding state
[  220.914179][T11450] veth0_vlan: entered promiscuous mode
[  220.929421][T11450] veth1_macvtap: entered promiscuous mode
[  220.941899][T11508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11508 comm=syz.5.3741
[  220.955682][T11508] incfs: Error accessing: ./bus.
[  220.962180][T11508] incfs: mount failed -20
[  221.053303][   T36] audit: type=1400 audit(222.034:736): avc:  denied  { execute } for  pid=11511 comm="syz.8.3718" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  221.203156][   T36] audit: type=1400 audit(222.184:737): avc:  denied  { shutdown } for  pid=11536 comm="syz.6.3751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  221.840571][T11548] rust_binder: Write failure EFAULT in pid:5
[  221.868545][T11552] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3756'.
[  221.939140][T11554] binder: Bad value for 'max'
[  221.939140][T11553] binder: Bad value for 'max'
[  222.460966][T11588] overlayfs: missing 'lowerdir'
[  222.607690][   T36] audit: type=1400 audit(223.584:738): avc:  denied  { connect } for  pid=11597 comm="syz.6.3770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  222.634652][T11602] 2N: renamed from vcan0 (while UP)
[  222.714727][T11605] rust_binder: Error while translating object.
[  222.714757][T11605] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  222.721032][T11605] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:13
[  223.038216][   T45] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[  223.198577][   T45] usb 9-1: too many configurations: 151, using maximum allowed: 8
[  223.214493][   T45] usb 9-1: New USB device found, idVendor=9869, idProduct=1d22, bcdDevice=75.02
[  223.224370][   T45] usb 9-1: New USB device strings: Mfr=251, Product=96, SerialNumber=130
[  223.233663][   T45] usb 9-1: Product: syz
[  223.238543][   T45] usb 9-1: Manufacturer: syz
[  223.243579][   T45] usb 9-1: SerialNumber: syz
[  223.257530][   T45] usb 9-1: config 0 descriptor??
[  223.525153][  T398] usb 9-1: USB disconnect, device number 2
[  223.544285][   T36] audit: type=1400 audit(224.524:739): avc:  denied  { shutdown } for  pid=11654 comm="syz.8.3791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  224.140746][T11689] tipc: Enabling of bearer <Yth:v> rejected, media not registered
[  224.302459][   T36] audit: type=1400 audit(225.284:740): avc:  denied  { nlmsg_write } for  pid=11710 comm="syz.2.3812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  224.788117][T11739] tipc: Started in network mode
[  224.793093][T11739] tipc: Node identity ac14140f, cluster identity 4711
[  224.800177][T11739] tipc: New replicast peer: 255.255.255.255
[  224.806370][T11739] tipc: Enabled bearer <udp:syz2>, priority 10
[  225.022610][   T36] audit: type=1326 audit(226.004:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11702 comm="syz.5.3809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc6b8e929 code=0x7fc00000
[  225.064391][T11754] netlink: 'syz.2.3825': attribute type 16 has an invalid length.
[  225.072809][T11754] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.3825'.
[  225.116228][T11760] netlink: 37 bytes leftover after parsing attributes in process `syz.5.3827'.
[  225.137805][T11760] bond_slave_0: entered allmulticast mode
[  225.798198][   T65] tipc: Node number set to 2886997007
[  226.254497][   T36] audit: type=1400 audit(227.234:742): avc:  denied  { getattr } for  pid=11832 comm="syz.5.3850" path="socket:[46902]" dev="sockfs" ino=46902 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  226.418919][   T36] audit: type=1326 audit(227.404:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11846 comm="syz.6.3854" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4cf58e929 code=0x0
[  246.006686][   T36] audit: type=1400 audit(246.984:744): avc:  denied  { link } for  pid=11879 comm="syz.8.3863" name="#15" dev="tmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  246.046274][   T36] audit: type=1400 audit(246.984:745): avc:  denied  { rename } for  pid=11879 comm="syz.8.3863" name="#16" dev="tmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  246.140915][T11892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  246.158550][T11892] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  246.414891][T11896] overlayfs: failed to clone upperpath
[  246.438194][   T45] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  246.589350][   T45] usb 9-1: config index 0 descriptor too short (expected 4114, got 18)
[  246.597809][   T45] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 48, using maximum allowed: 30
[  246.608846][   T45] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  246.623218][   T45] usb 9-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.09
[  246.633960][   T45] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.642441][   T45] usb 9-1: Product: syz
[  246.646958][   T45] usb 9-1: Manufacturer: syz
[  246.651678][   T45] usb 9-1: SerialNumber: syz
[  246.657406][   T45] usb 9-1: config 0 descriptor??
[  246.871643][   T45] usb 9-1: USB disconnect, device number 3
[  246.884972][T11870] udevd[11870]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  248.314819][T12007] rust_binder: 12006 RLIMIT_NICE not set
[  248.340512][   T36] audit: type=1400 audit(249.324:746): avc:  denied  { read write } for  pid=12010 comm="syz.8.3905" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  248.370161][   T36] audit: type=1400 audit(249.324:747): avc:  denied  { open } for  pid=12010 comm="syz.8.3905" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1
[  249.016434][   T36] audit: type=1400 audit(249.994:748): avc:  denied  { relabelto } for  pid=12045 comm="syz.5.3915" name="file0" dev="tmpfs" ino=2686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  249.045448][   T36] audit: type=1400 audit(250.024:749): avc:  denied  { unlink } for  pid=7038 comm="syz-executor" name="file0" dev="tmpfs" ino=2686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  249.093634][T12050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3917'.
[  249.139664][T12056] netlink: 393 bytes leftover after parsing attributes in process `syz.5.3920'.
[  249.211967][T12073] fuseblk: Bad value for 'fd'
[  249.357755][T12086] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3929'.
[  249.368815][T12086] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3929'.
[  249.412245][   T36] audit: type=1400 audit(250.394:750): avc:  denied  { validate_trans } for  pid=12097 comm="syz.8.3934" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  249.426247][T12100] netlink: 388 bytes leftover after parsing attributes in process `syz.8.3934'.
[  249.485982][T12100] fuse: Bad value for 'rootmode'
[  249.508335][T12107] veth1_vlan: mtu greater than device maximum
[  249.521627][T12111] rust_binder: 12111: no such ref 3
[  249.544767][T12115] fuseblk: Bad value for 'user_id'
[  249.549995][T12115] fuseblk: Bad value for 'user_id'
[  249.585705][   T65] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0
[  249.594054][   T65] hid-generic 0000:0000:0000.0017: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  249.810869][T12119] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3941'.
[  250.376115][T12169] overlayfs: failed to clone lowerpath
[  250.390803][T12171] overlayfs: failed to clone lowerpath
[  250.518232][   T36] audit: type=1400 audit(251.494:751): avc:  denied  { mounton } for  pid=12179 comm="syz.8.3962" path="/36/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1
[  250.597664][   T36] audit: type=1400 audit(251.564:752): avc:  denied  { ioctl } for  pid=12188 comm="syz.8.3965" path="socket:[49365]" dev="sockfs" ino=49365 ioctlcmd=0xf50a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  250.651640][   T36] audit: type=1400 audit(251.564:753): avc:  denied  { setattr } for  pid=12188 comm="syz.8.3965" name="NFC_LLCP" dev="sockfs" ino=49365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  250.673729][T12196] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  250.765248][T12209] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709
[  250.816486][T12218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3977'.
[  251.469956][T12254] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=12254 comm=syz.5.3988
[  251.488178][T12254] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=12254 comm=syz.5.3988
[  251.695406][T12274] fuseblk: Bad value for 'fd'
[  251.769188][T12296] overlayfs: missing 'lowerdir'
[  251.895082][T12315] overlayfs: failed to clone upperpath
[  251.919007][T12317] 9pnet_fd: Insufficient options for proto=fd
[  252.121296][T12289] 9pnet: Could not find request transport: =0x0000000000000006
[  252.339871][T12342] netlink: 'syz.2.4021': attribute type 6 has an invalid length.
[  252.444179][T12346] 9pnet_fd: Insufficient options for proto=fd
[  252.541587][T12352] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  252.677452][T12357] 9pnet_fd: Insufficient options for proto=fd
[  253.002948][T12380] overlayfs: conflicting options: userxattr,verity=on
[  253.597173][T12414] overlayfs: failed to clone upperpath
[  253.880315][T12417] netlink: 'syz.2.4049': attribute type 28 has an invalid length.
[  254.022550][   T36] kauditd_printk_skb: 1 callbacks suppressed
[  254.022569][   T36] audit: type=1326 audit(255.004:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12428 comm="syz.5.4051" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5fc6b8e929 code=0x0
[  254.072577][T12435] 9pnet_fd: Insufficient options for proto=fd
[  254.345972][T12459] overlayfs: failed to clone upperpath
[  254.346238][T12460] overlayfs: failed to clone upperpath
[  254.604170][T12465] overlayfs: cannot append lower layer
[  255.383712][T12500] devpts: called with bogus options
[  255.684537][T12523] incfs: Error accessing: ./file0.
[  255.689849][T12523] incfs: mount failed -20
[  256.216832][T12553] 9pnet_fd: Insufficient options for proto=fd
[  256.284043][T12558] overlay: ./bus is not a directory
[  256.503441][T12588] tipc: Failed to remove unknown binding: 66,1,1/2886997007:3179120562/3179120564
[  256.563263][T12594] overlayfs: failed to resolve './file1': -2
[  256.571480][T12598] overlayfs: failed to clone upperpath
[  256.578077][T12598] overlayfs: failed to clone upperpath
[  256.665447][T12604] overlayfs: failed to clone upperpath
[  257.050148][T12619] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4123'.
[  257.076864][T12623] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4124'.
[  257.282279][   T36] audit: type=1400 audit(258.264:756): avc:  denied  { watch watch_reads } for  pid=12632 comm="syz.8.4127" path="/76/file0" dev="tmpfs" ino=464 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  257.326325][T12640] overlayfs: failed to clone upperpath
[  258.018615][T12665] /dev/loop0: Can't lookup blockdev
[  258.049615][T12667] overlayfs: failed to clone upperpath
[  258.694563][T12707] x_tables: duplicate underflow at hook 1
[  259.895540][T12773] fuseblk: Bad value for 'fd'
[  260.532155][T12828] netlink: 116 bytes leftover after parsing attributes in process `syz.2.4199'.
[  261.013120][T12846] fuse: Unknown parameter 'Nd'
[  261.018150][   T36] audit: type=1400 audit(261.994:757): avc:  denied  { write } for  pid=12845 comm="syz.2.4206" name="file0" dev="tmpfs" ino=2247 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  261.040216][   T36] audit: type=1400 audit(261.994:758): avc:  denied  { open } for  pid=12845 comm="syz.2.4206" path="/405/file0" dev="tmpfs" ino=2247 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  261.062779][   T36] audit: type=1400 audit(261.994:759): avc:  denied  { mounton } for  pid=12845 comm="syz.2.4206" path="/405/file0" dev="tmpfs" ino=2247 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  261.319503][T12865] overlayfs: failed to clone upperpath
[  261.776810][T12874] fuse: Bad value for 'fd'
[  261.799029][T12874] overlay: ./file0 is not a directory
[  262.100249][T12882] /dev/rnullb0: Can't lookup blockdev
[  262.343939][   T36] audit: type=1400 audit(263.324:760): avc:  denied  { setattr } for  pid=12912 comm="syz.5.4228" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  262.389942][T12918] netlink: 'syz.5.4229': attribute type 4 has an invalid length.
[  262.410963][T12918] overlayfs: failed to clone upperpath
[  262.469287][T12925] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4231'.
[  262.495282][T12927] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4232'.
[  262.546715][T12936] 9pnet_virtio: no channels available for device syz
[  262.626524][T12955] cgroup: release_agent respecified
[  262.627349][T12941] netlink: 'syz.5.4237': attribute type 16 has an invalid length.
[  262.738510][T12965] fuse: Bad value for 'fd'
[  262.774802][T12967] overlayfs: failed to clone upperpath
[  262.782507][T12967] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12967 comm=syz.5.4244
[  262.810848][T12974] overlayfs: failed to clone upperpath
[  262.821359][T12977] overlayfs: failed to clone upperpath
[  262.852660][T12985] batadv_slave_0: entered promiscuous mode
[  262.859784][T12985] batadv_slave_0: left promiscuous mode
[  262.929019][T13008] cgroup: Invalid name
[  262.929361][T13007] netlink: 'syz.6.4259': attribute type 3 has an invalid length.
[  262.941208][T13007] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4259'.
[  262.951918][   T36] audit: type=1326 audit(263.934:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13005 comm="syz.6.4259" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4cf58e929 code=0x0
[  262.984553][   T36] audit: type=1400 audit(263.964:762): avc:  denied  { create } for  pid=13016 comm="syz.5.4263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1
[  263.030148][T13024] overlayfs: missing 'lowerdir'
[  263.036297][T13026] overlayfs: missing 'lowerdir'
[  264.128562][T13072] fuse: Bad value for 'fd'
[  264.319250][   T36] audit: type=1400 audit(265.304:763): avc:  denied  { map } for  pid=13087 comm="syz.8.4287" path="socket:[51483]" dev="sockfs" ino=51483 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  264.475285][   T36] audit: type=1400 audit(265.454:764): avc:  denied  { getopt } for  pid=13104 comm="syz.8.4294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  264.677103][   T36] audit: type=1400 audit(265.654:765): avc:  denied  { bpf } for  pid=13130 comm="syz.6.4304" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  264.697870][T13131] overlayfs: failed to clone upperpath
[  264.751474][T13139] overlayfs: conflicting options: nfs_export=on,index=off
[  264.771596][T13141] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  265.156871][   T36] audit: type=1400 audit(266.134:766): avc:  denied  { map } for  pid=13153 comm="syz.2.4313" path="socket:[51592]" dev="sockfs" ino=51592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  266.204430][T13226] fuseblk: Bad value for 'group_id'
[  266.218153][T13226] fuseblk: Bad value for 'group_id'
[  266.238334][T13216] tipc: Trying to set illegal importance in message
[  266.463223][T13249] overlayfs: failed to clone lowerpath
[  266.960330][T13279] overlayfs: missing 'lowerdir'
[  267.005126][T13285] cgroup: Invalid name
[  267.119889][T13295] overlay: ./bus is not a directory
[  267.303506][T13311] overlayfs: failed to clone lowerpath
[  267.309942][T13311] overlayfs: failed to clone upperpath
[  267.512124][T13338] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  267.523998][T13338] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  267.737903][T13355] SELinux: security_context_str_to_sid (��3�7B��k%���tѝ�#,��溴���0A�4��8#ڒ�ڂ2�\}�r؀��n��l�w٨Q�E��ۢ �2؃^];��=��³���*����x2}'h�h�����{$����!3��D�_z���olO栟�E}BǺ����) failed with errno=-22
[  268.257295][T13375] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4391'.
[  268.338480][T13380] overlayfs: failed to clone upperpath
[  268.588695][T13397] overlay: Bad value for 'uuid'
[  268.783566][T13416] tmpfs: Unknown parameter './binderfs2/custom0'
[  268.862770][T13426] 9pnet_fd: Insufficient options for proto=fd
[  268.943884][   T36] kauditd_printk_skb: 2 callbacks suppressed
[  268.943902][   T36] audit: type=1400 audit(269.924:769): avc:  denied  { nlmsg_read } for  pid=13432 comm="syz.8.4414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  269.032625][T13442] incfs: Options parsing error. -22
[  269.048218][T13442] incfs: mount failed -22
[  269.100052][T13444] incfs: Error accessing: ./bus.
[  269.118165][T13444] incfs: mount failed -20
[  269.128580][T13444] overlay: ./bus is not a directory
[  269.148431][T13444] overlay: ./bus is not a directory
[  269.156059][T13444] netlink: 124 bytes leftover after parsing attributes in process `syz.2.4418'.
[  269.202701][T13459] IPv6: NLM_F_CREATE should be specified when creating new route
[  269.262109][T13462] netlink: 316 bytes leftover after parsing attributes in process `syz.6.4425'.
[  269.288482][T13462] netlink: 316 bytes leftover after parsing attributes in process `syz.6.4425'.
[  270.026361][T13488] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.034016][T13488] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.041359][T13488] bridge_slave_0: entered allmulticast mode
[  270.048008][T13488] bridge_slave_0: entered promiscuous mode
[  270.054684][T13488] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.061849][T13488] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.069040][T13488] bridge_slave_1: entered allmulticast mode
[  270.075614][T13488] bridge_slave_1: entered promiscuous mode
[  270.113261][T13511] SELinux:  Context system_u:object_r:crack_exec_t:s0 is not valid (left unmapped).
[  270.118193][   T36] audit: type=1400 audit(276.098:770): avc:  denied  { relabelfrom } for  pid=13510 comm="syz.6.4441" name="TCP" dev="sockfs" ino=52383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[  270.147095][   T36] audit: type=1400 audit(276.108:771): avc:  denied  { relabelto } for  pid=13510 comm="syz.6.4441" name="TCP" dev="sockfs" ino=52383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tcp_socket permissive=1 trawcon="system_u:object_r:crack_exec_t:s0"
[  270.171426][T13515] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4443'.
[  270.173691][   T36] audit: type=1400 audit(276.128:772): avc:  denied  { listen } for  pid=13512 comm="syz.6.4442" path=2F3535392FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  270.184710][T13515] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4443'.
[  270.214405][T13515] netlink: 'syz.2.4443': attribute type 6 has an invalid length.
[  270.222250][T13515] netlink: 'syz.2.4443': attribute type 5 has an invalid length.
[  270.230047][T13515] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4443'.
[  270.273536][T13488] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.280661][T13488] bridge0: port 2(bridge_slave_1) entered forwarding state
[  270.288024][T13488] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.295119][T13488] bridge0: port 1(bridge_slave_0) entered forwarding state
[  270.317764][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.325168][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  270.335014][  T304] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.342097][  T304] bridge0: port 1(bridge_slave_0) entered forwarding state
[  270.351293][  T304] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.358400][  T304] bridge0: port 2(bridge_slave_1) entered forwarding state
[  270.384817][T13488] veth0_vlan: entered promiscuous mode
[  270.397252][T13488] veth1_macvtap: entered promiscuous mode
[  270.501972][   T36] audit: type=1400 audit(276.488:773): avc:  denied  { view } for  pid=13529 comm="syz.5.4447" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  270.714076][T13538] overlayfs: missing 'lowerdir'
[  270.777612][T13542] overlayfs: failed to clone upperpath
[  271.140294][T13576] overlay: ./bus is not a directory
[  271.467338][T13598] overlayfs: failed to resolve './file1': -2
[  271.485627][T13598] overlayfs: failed to resolve './file1': -2
[  271.496489][T13598] overlayfs: failed to resolve './file1': -2
[  271.508668][T13598] overlayfs: failed to resolve './file1': -2
[  271.519722][T13598] overlayfs: failed to resolve './file1': -2
[  271.528682][T13598] overlayfs: failed to resolve './file1': -2
[  271.538829][T13598] overlayfs: failed to resolve './file1': -2
[  271.565437][T13598] overlayfs: failed to resolve './file1': -2
[  271.580077][T13598] overlayfs: failed to resolve './file1': -2
[  271.598554][T13598] overlayfs: failed to resolve './file1': -2
[  271.605249][T13598] overlayfs: failed to resolve './file1': -2
[  271.612410][T13598] overlayfs: failed to resolve './file1': -2
[  271.622803][T13598] overlayfs: failed to resolve './file1': -2
[  271.638460][T13598] overlayfs: failed to resolve './file1': -2
[  271.651952][T13598] overlayfs: failed to resolve './file1': -2
[  271.661084][T13598] overlayfs: failed to resolve './file1': -2
[  271.673774][T13607] __vm_enough_memory: pid: 13607, comm: syz.5.4470, bytes: 1152922604118523904 not enough memory for the allocation
[  271.675294][T13598] overlayfs: failed to resolve './file1': -2
[  271.692758][T13598] overlayfs: failed to resolve './file1': -2
[  271.701126][T13598] overlayfs: failed to resolve './file1': -2
[  271.707467][T13598] overlayfs: failed to resolve './file1': -2
[  271.714063][T13598] overlayfs: failed to resolve './file1': -2
[  271.722225][T13598] overlayfs: failed to resolve './file1': -2
[  271.731558][T13598] overlayfs: failed to resolve './file1': -2
[  271.740933][T13598] overlayfs: failed to resolve './file1': -2
[  271.748452][T13598] overlayfs: failed to resolve './file1': -2
[  271.755888][T13598] overlayfs: failed to resolve './file1': -2
[  271.768748][T13598] overlayfs: failed to resolve './file1': -2
[  271.783775][T13598] overlayfs: failed to resolve './file1': -2
[  271.793216][T13598] overlayfs: failed to resolve './file1': -2
[  271.795814][T13627] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4479'.
[  271.823619][T13598] overlayfs: failed to resolve './file1': -2
[  271.844660][T13598] overlayfs: failed to resolve './file1': -2
[  271.854271][T13630] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4481'.
[  271.863755][T13598] overlayfs: failed to resolve './file1': -2
[  271.870748][T13598] overlayfs: failed to resolve './file1': -2
[  271.877469][T13598] overlayfs: failed to resolve './file1': -2
[  271.884378][T13598] overlayfs: failed to resolve './file1': -2
[  271.892044][T13598] overlayfs: failed to resolve './file1': -2
[  271.898544][T13598] overlayfs: failed to resolve './file1': -2
[  271.904849][T13598] overlayfs: failed to resolve './file1': -2
[  271.911288][T13598] overlayfs: failed to resolve './file1': -2
[  271.917621][T13598] overlayfs: failed to resolve './file1': -2
[  271.924720][T13598] overlayfs: failed to resolve './file1': -2
[  271.931073][T13598] overlayfs: failed to resolve './file1': -2
[  271.937417][T13598] overlayfs: failed to resolve './file1': -2
[  271.943825][T13598] overlayfs: failed to resolve './file1': -2
[  271.950708][T13598] overlayfs: failed to resolve './file1': -2
[  271.957040][T13598] overlayfs: failed to resolve './file1': -2
[  271.963332][T13598] overlayfs: failed to resolve './file1': -2
[  271.969623][T13598] overlayfs: failed to resolve './file1': -2
[  271.975845][T13598] overlayfs: failed to resolve './file1': -2
[  271.982149][T13598] overlayfs: failed to resolve './file1': -2
[  271.988711][T13598] overlayfs: failed to resolve './file1': -2
[  271.994994][T13598] overlayfs: failed to resolve './file1': -2
[  272.001297][T13598] overlayfs: failed to resolve './file1': -2
[  272.007584][T13598] overlayfs: failed to resolve './file1': -2
[  272.014070][T13598] overlayfs: failed to resolve './file1': -2
[  272.020511][T13598] overlayfs: failed to resolve './file1': -2
[  272.026848][T13598] overlayfs: failed to resolve './file1': -2
[  272.033259][T13598] overlayfs: failed to resolve './file1': -2
[  272.039637][T13598] overlayfs: failed to resolve './file1': -2
[  272.045868][T13598] overlayfs: failed to resolve './file1': -2
[  272.052181][T13598] overlayfs: failed to resolve './file1': -2
[  272.058796][T13598] overlayfs: failed to resolve './file1': -2
[  272.065116][T13598] overlayfs: failed to resolve './file1': -2
[  272.071432][T13598] overlayfs: failed to resolve './file1': -2
[  272.077673][T13598] overlayfs: failed to resolve './file1': -2
[  272.083739][  T398] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  272.224358][  T398] usb 6-1: device descriptor read/64, error -71
[  272.448574][T13658] overlayfs: failed to clone upperpath
[  272.461552][T13660] overlay: Unknown parameter 'fowner>00000000000000000000'
[  272.471952][  T398] usb 6-1: device descriptor read/64, error -71
[  272.719563][  T398] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  272.864014][  T398] usb 6-1: device descriptor read/64, error -71
[  272.875860][  T304] vlan0: left allmulticast mode
[  272.880781][  T304] veth0_vlan: left allmulticast mode
[  272.886383][  T304] vlan0: left promiscuous mode
[  272.891315][  T304] bridge0: port 3(vlan0) entered disabled state
[  272.902037][  T304] bridge_slave_1: left allmulticast mode
[  272.907796][  T304] bridge_slave_1: left promiscuous mode
[  272.913467][  T304] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.921382][  T304] bridge_slave_0: left promiscuous mode
[  272.927081][  T304] bridge0: port 1(bridge_slave_0) entered disabled state
[  273.001518][T13693] /dev/loop0: Can't lookup blockdev
[  273.041634][  T304] veth1_macvtap: left promiscuous mode
[  273.047221][  T304] veth0_vlan: left promiscuous mode
[  273.111534][  T398] usb 6-1: device descriptor read/64, error -71
[  273.228830][  T398] usb usb6-port1: attempt power cycle
[  273.296239][T13720] bridge0: port 3(syz_tun) entered blocking state
[  273.302785][T13720] bridge0: port 3(syz_tun) entered disabled state
[  273.309674][T13720] syz_tun: entered allmulticast mode
[  273.315325][T13720] syz_tun: entered promiscuous mode
[  273.320852][T13720] bridge0: port 3(syz_tun) entered blocking state
[  273.327322][T13720] bridge0: port 3(syz_tun) entered forwarding state
[  273.574830][  T398] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  273.617241][  T398] usb 6-1: device descriptor read/8, error -71
[  273.750904][  T398] usb 6-1: device descriptor read/8, error -71
[  273.996993][  T398] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  274.028990][  T398] usb 6-1: device descriptor read/8, error -71
[  274.162593][  T398] usb 6-1: device descriptor read/8, error -71
[  274.295279][  T398] usb usb6-port1: unable to enumerate USB device
[  274.573924][T13801] overlayfs: failed to clone upperpath
[  274.576552][T13803] netlink: 'syz.8.4544': attribute type 3 has an invalid length.
[  274.587215][T13803] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4544'.
[  275.045573][T13843] exFAT-fs (rnullb0): invalid boot record signature
[  275.052194][T13843] exFAT-fs (rnullb0): failed to read boot sector
[  275.058620][T13843] exFAT-fs (rnullb0): failed to recognize exfat type
[  275.519394][T13901] devpts: called with bogus options
[  275.527144][T13901] 9pnet_fd: Insufficient options for proto=fd
[  275.551984][T13904] netlink: 3 bytes leftover after parsing attributes in process `syz.8.4579'.
[  275.563476][T13904] netlink: 3 bytes leftover after parsing attributes in process `syz.8.4579'.
[  275.572712][T13904] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  275.638792][T13922] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4587'.
[  275.663909][T13928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4160 sclass=netlink_route_socket pid=13928 comm=syz.6.4589
[  275.720123][T13937] SELinux:  Context system_u:object_r:initrc_exec_t:s0 is not valid (left unmapped).
[  275.730350][   T36] audit: type=1400 audit(281.613:774): avc:  denied  { relabelto } for  pid=13936 comm="syz.8.4593" name="TCPv6" dev="sockfs" ino=53223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tcp_socket permissive=1 trawcon="system_u:object_r:initrc_exec_t:s0"
[  276.073540][T13957] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  276.340373][T13967] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  276.746589][T13990] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.753757][T13990] bridge0: port 1(bridge_slave_0) entered disabled state
[  276.761692][T13990] bridge_slave_0: entered allmulticast mode
[  276.771569][T13990] bridge_slave_0: entered promiscuous mode
[  276.782467][T13990] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.798999][T13990] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.810987][T13990] bridge_slave_1: entered allmulticast mode
[  276.817433][T13990] bridge_slave_1: entered promiscuous mode
[  276.921795][T13990] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.928886][T13990] bridge0: port 2(bridge_slave_1) entered forwarding state
[  276.936230][T13990] bridge0: port 1(bridge_slave_0) entered blocking state
[  276.943292][T13990] bridge0: port 1(bridge_slave_0) entered forwarding state
[  277.038013][T13990] veth0_vlan: entered promiscuous mode
[  277.052968][T13990] veth1_macvtap: entered promiscuous mode
[  277.113551][T14002] overlayfs: failed to resolve './file1/file0': -2
[  277.207686][T14025] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4623'.
[  277.329056][T14049] 9pnet_fd: Insufficient options for proto=fd
[  277.515207][T14042] fuse: Bad value for 'user_id'
[  277.520203][T14042] fuse: Bad value for 'user_id'
[  277.700805][   T46] bridge_slave_1: left allmulticast mode
[  277.706502][   T46] bridge_slave_1: left promiscuous mode
[  277.712214][   T46] ������: port 2(bridge_slave_1) entered disabled state
[  277.719955][   T46] bridge_slave_0: left allmulticast mode
[  277.725682][   T46] bridge_slave_0: left promiscuous mode
[  277.731436][   T46] ������: port 1(bridge_slave_0) entered disabled state
[  277.823484][   T46] tipc: Disabling bearer <udp:syz2>
[  277.828820][   T46] tipc: Left network mode
[  277.834166][   T46] veth1_macvtap: left promiscuous mode
[  278.158422][T14092] sock: sock_timestamping_bind_phc: sock not bind to device
[  278.223447][T14097] 9p: Unknown access argument : -22
[  278.289748][T14100] rust_binder: Got transaction with invalid offset.
[  278.289793][T14100] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  278.302582][T14100] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17
[  278.345340][T14104] overlayfs: overlapping lowerdir path
[  278.361790][T14104] tipc: Started in network mode
[  278.367063][T14104] tipc: Node identity 000000002d0000000000000000000001, cluster identity 4711
[  278.376006][T14104] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  279.067302][T14139] /dev/rnullb0: Can't lookup blockdev
[  279.194555][T14104] overlayfs: statfs failed on './file0'
[  279.215481][T14145] netlink: 'syz.6.4665': attribute type 3 has an invalid length.
[  279.334099][T14152] Invalid logical block size (15)
[  279.467827][T14165] fuseblk: Unknown parameter 'f��͑ճ����c�*����{�c]�	�.����%&�(3{�� ����\���b���o�Ǜ�y�Y�w
]T�ۉ����� ��0xffffffffffffffff'
[  279.818275][   T36] audit: type=1326 audit(285.603:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14188 comm="syz.6.4679" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba1198e929 code=0x0
[  280.017546][T14194] 9pnet_fd: Insufficient options for proto=fd
[  280.322907][   T36] audit: type=1326 audit(286.104:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14218 comm="syz.8.4692" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f824678e929 code=0x0
[  280.379821][T14221] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4693'.
[  280.483748][T14234] 9pnet_fd: Insufficient options for proto=fd
[  280.824201][T14259] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 4200, limit: 4216, size: 18446744073709550742)
[  280.824234][T14259] rust_binder: Error while translating object.
[  280.836942][T14259] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  280.843268][T14259] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:61
[  280.869144][T14261] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock
[  280.889968][T14261] devpts: called with bogus options
[  280.915202][T14263] netlink: 328 bytes leftover after parsing attributes in process `syz.6.4710'.
[  280.919881][T14267] netlink: 328 bytes leftover after parsing attributes in process `syz.6.4710'.
[  281.031081][T14275] SELinux: security_context_str_to_sid () failed with errno=-22
[  282.008375][T14311] netlink: 5 bytes leftover after parsing attributes in process `syz.8.4725'.
[  282.017436][T14311] 0����M: renamed from gretap0 (while UP)
[  282.024785][T14311] 0����M: entered allmulticast mode
[  282.030311][T14311] A link change request failed with some changes committed already. Interface 
30����M may have been left with an inconsistent configuration, please check.
[  282.750945][T14360] 9pnet_fd: Insufficient options for proto=fd
[  282.793921][T14365] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  282.803206][T14365] overlayfs: failed to set xattr on upper
[  282.811520][T14365] overlayfs: ...falling back to redirect_dir=nofollow.
[  282.825567][T14365] overlayfs: ...falling back to index=off.
[  282.833040][T14365] overlayfs: ...falling back to uuid=null.
[  282.845705][T14365] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  282.854735][T14365] overlayfs: conflicting lowerdir path
[  282.871393][T14367] kvm: pic: non byte write
[  282.912407][T14388] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4748'.
[  282.928738][T14391] TCP: TCP_TX_DELAY enabled
[  282.934249][T14391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4750'.
[  283.033591][T14408] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  283.033618][T14408] rust_binder: Read failure Err(EFAULT) in pid:123
[  283.067893][T14419] /dev/rnullb0: Can't lookup blockdev
[  283.109994][T14425] overlayfs: failed to clone upperpath
[  283.137518][T14432] overlayfs: failed to clone lowerpath
[  283.144205][T14432] overlayfs: failed to clone upperpath
[  283.289284][T14441] @: renamed from vlan0 (while UP)
[  283.303604][T14441] binder: Unknown parameter 'defcontext01777777777777777777777'
[  283.366924][T14448] fuseblk: Bad value for 'fd'
[  283.757916][T14470] rust_binder: Error while translating object.
[  283.757940][T14470] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  283.764202][T14470] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:138
[  284.054506][T14491] netlink: 140 bytes leftover after parsing attributes in process `syz.6.4786'.
[  284.152806][T14493] 9pnet_fd: Insufficient options for proto=fd
[  284.178831][   T36] audit: type=1326 audit(289.890:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14496 comm="syz.8.4788" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f824678e929 code=0x0
[  284.224370][T14504] netlink: 'syz.6.4793': attribute type 4 has an invalid length.
[  284.241402][T14507] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4794'.
[  284.254863][T14508] cgroup: noprefix used incorrectly
[  284.261178][   T36] audit: type=1400 audit(289.979:778): avc:  denied  { listen } for  pid=14509 comm="syz.6.4795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  284.302050][T14520] exFAT-fs (rnullb0): invalid boot record signature
[  284.308769][T14520] exFAT-fs (rnullb0): failed to read boot sector
[  284.315135][T14520] exFAT-fs (rnullb0): failed to recognize exfat type
[  284.326412][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[  284.799984][T14524] overlayfs: failed to clone lowerpath
[  284.807436][T14525] overlayfs: failed to clone lowerpath
[  284.928587][T14535] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  284.949105][T14535] overlayfs: missing 'lowerdir'
[  285.282927][T14565] netlink: 'syz.8.4816': attribute type 4 has an invalid length.
[  285.578858][T14586] incfs: Options parsing error. -22
[  285.584202][T14586] incfs: mount failed -22
[  285.667840][T14598] netlink: 'syz.2.4826': attribute type 13 has an invalid length.
[  286.217412][T14656] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4847'.
[  286.226456][T14656] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4847'.
[  286.235380][T14656] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  286.296331][T14675] devpts: called with bogus options
[  286.406145][ T3916] Bluetooth: hci0: command 0x1003 tx timeout
[  286.412445][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  286.601662][T14726] overlayfs: failed to clone lowerpath
[  286.636317][   T36] audit: type=1400 audit(292.307:779): avc:  denied  { mount } for  pid=14721 comm="syz.2.4868" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  286.645210][T14730] overlayfs: failed to clone upperpath
[  286.725162][T14745] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4875'.
[  286.735341][T14745] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4875'.
[  286.744283][T14745] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  286.775640][T14754] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1310 sclass=netlink_route_socket pid=14754 comm=syz.5.4877
[  286.789482][T14756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1310 sclass=netlink_route_socket pid=14756 comm=syz.5.4877
[  286.852618][   T36] audit: type=1400 audit(292.535:780): avc:  denied  { setattr } for  pid=14773 comm="syz.8.4883" name="file0" dev="tmpfs" ino=1698 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  287.257621][T14816] overlayfs: failed to resolve './file1': -2
[  287.302463][T14819] overlay: ./bus is not a directory
[  287.335839][T14821] overlayfs: failed to clone upperpath
[  287.690577][T14842] SELinux:  Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped).
[  287.704804][   T36] audit: type=1400 audit(293.375:781): avc:  denied  { relabelto } for  pid=14841 comm="syz.6.4904" name="cgroup" dev="tmpfs" ino=408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0"
[  287.732580][   T36] audit: type=1400 audit(293.394:782): avc:  denied  { associate } for  pid=14841 comm="syz.6.4904" name="cgroup" dev="tmpfs" ino=408 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_log_t:s0"
[  287.943909][T14868] netlink: 3 bytes leftover after parsing attributes in process `syz.8.4911'.
[  287.953086][T14868] netlink: 3 bytes leftover after parsing attributes in process `syz.8.4911'.
[  287.961998][T14868] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  288.229397][T14885] overlayfs: failed to clone upperpath
[  288.245992][   T36] audit: type=1400 audit(296.917:783): avc:  denied  { unlink } for  pid=13990 comm="syz-executor" name="cgroup" dev="tmpfs" ino=408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0"
[  288.286699][T14887] fuse: Bad value for 'fd'
[  288.385221][T14918] overlay: Bad value for 'uuid'
[  288.414883][T14922] overlay: ./bus is not a directory
[  288.605544][   T65] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  288.766628][   T65] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  288.777714][   T65] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  288.792397][   T65] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  288.802110][   T65] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.810541][   T65] usb 7-1: Product: syz
[  288.814857][   T65] usb 7-1: Manufacturer: syz
[  288.820181][   T65] usb 7-1: SerialNumber: syz
[  289.042819][   T65] cdc_mbim 7-1:1.0: failed GET_NTB_PARAMETERS
[  289.049816][   T65] cdc_mbim 7-1:1.0: bind() failure
[  289.065318][   T65] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found
[  289.072364][   T65] cdc_ncm 7-1:1.1: bind() failure
[  289.080180][   T65] usb 7-1: USB disconnect, device number 12
[  289.093616][T14986] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  289.101623][T14986] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  289.110096][T14986] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  289.118098][T14986] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  289.455125][   T65] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  289.606198][   T65] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  289.617210][   T65] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  289.627017][   T65] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  289.636121][   T65] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.644758][   T65] usb 7-1: config 0 descriptor??
[  289.762736][   T36] audit: type=1326 audit(298.428:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14997 comm="syz.2.4956" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f319cf8e929 code=0x0
[  289.851164][T14990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.860280][T14990] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.868641][T14990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.877254][T14990] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.885535][T14990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.894092][T14990] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.902334][T14990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.910889][T14990] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.919244][T14990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  289.929952][T14990] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  289.959073][   T65] usbhid 7-1:0.0: can't add hid device: -71
[  289.965785][   T65] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  289.988797][   T65] usb 7-1: USB disconnect, device number 13
[  290.012285][T15018] fuse: Unknown parameter 'rootmode000040000'
[  290.056192][T15025] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  290.065029][T15025] overlayfs: missing 'lowerdir'
[  290.938818][   T36] audit: type=1400 audit(299.608:785): avc:  denied  { append } for  pid=15066 comm="syz.6.4976" name="file0" dev="tmpfs" ino=466 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  291.132703][T15071] rust_binder: Error while translating object.
[  291.132750][T15071] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  291.145374][T15071] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:228
[  292.068427][T15104] cgroup2: Unknown parameter 'net_cls'
[  292.090770][T15105] cgroup2: Unknown parameter 'net_cls'
[  292.558688][T15123] tipc: Started in network mode
[  292.563736][T15123] tipc: Node identity 2, cluster identity 2
[  292.569764][T15123] tipc: Node number set to 2
[  292.574793][T15123] tipc: Cannot configure node identity twice
[  292.581818][   T36] audit: type=1400 audit(301.249:786): avc:  denied  { create } for  pid=15121 comm="syz.8.4994" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  292.972691][   T36] audit: type=1400 audit(301.639:787): avc:  denied  { remove_name } for  pid=15139 comm="syz.6.5000" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  292.995677][   T36] audit: type=1400 audit(301.639:788): avc:  denied  { unlink } for  pid=15139 comm="syz.6.5000" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  293.263218][  T398] usb 7-1: new full-speed USB device number 14 using dummy_hcd
[  293.414728][  T398] usb 7-1: unable to get BOS descriptor or descriptor too short
[  293.422935][  T398] usb 7-1: not running at top speed; connect to a high speed hub
[  293.431542][  T398] usb 7-1: config 148 has an invalid interface number: 145 but max is 0
[  293.440043][  T398] usb 7-1: config 148 has no interface number 0
[  293.446388][  T398] usb 7-1: config 148 interface 145 has no altsetting 0
[  293.455015][  T398] usb 7-1: New USB device found, idVendor=07b4, idProduct=0f02, bcdDevice=53.70
[  293.464139][  T398] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.472158][  T398] usb 7-1: Product: νᐲ⓰䧒쓑硰讪뭩⥢붪塆≬낙⿡첗ﱃᕀ웶멫꧑邲欑漢퇋Εꗯ佝棙텂ퟜ╶嬱䰔읢ᨊ泷훬竤锉늅〡쌲뭒殰埨쾻鼇诀簪᾿
[  293.490820][  T398] usb 7-1: Manufacturer: ь
[  293.495393][  T398] usb 7-1: SerialNumber: syz
[  293.711577][  T398] usb 7-1: bad CDC descriptors
[  293.723033][  T398] usb 7-1: USB disconnect, device number 14
[  293.944818][   T36] audit: type=1400 audit(302.610:789): avc:  denied  { module_load } for  pid=15177 comm="syz.5.5013" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=57876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1
[  294.269258][T15200] kernel profiling enabled (shift: 63)
[  294.299883][T15200] profiling shift: 63 too large
[  294.376441][T15201] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.383543][T15201] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.390787][T15201] bridge_slave_0: entered allmulticast mode
[  294.397196][T15201] bridge_slave_0: entered promiscuous mode
[  294.404017][T15201] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.411068][T15201] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.418204][T15201] bridge_slave_1: entered allmulticast mode
[  294.424685][T15201] bridge_slave_1: entered promiscuous mode
[  294.524104][T15201] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.531211][T15201] bridge0: port 2(bridge_slave_1) entered forwarding state
[  294.538555][T15201] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.545634][T15201] bridge0: port 1(bridge_slave_0) entered forwarding state
[  294.562567][   T65] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  294.573001][  T304] bridge0: port 1(bridge_slave_0) entered disabled state
[  294.582055][  T304] bridge0: port 2(bridge_slave_1) entered disabled state
[  294.597655][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  294.604757][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  294.629686][  T304] bridge0: port 2(bridge_slave_1) entered blocking state
[  294.636810][  T304] bridge0: port 2(bridge_slave_1) entered forwarding state
[  294.673883][T15201] veth0_vlan: entered promiscuous mode
[  294.687503][T15201] veth1_macvtap: entered promiscuous mode
[  294.716218][T15225] overlayfs: failed to clone upperpath
[  294.722907][   T65] usb 7-1: Using ep0 maxpacket: 32
[  294.730497][   T65] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  294.744111][   T65] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  294.754377][   T65] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  294.775267][   T65] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.789273][   T65] usb 7-1: config 0 descriptor??
[  294.805495][T15237] SELinux: security_context_str_to_sid (syste_u�Gй�:��) failed with errno=-22
[  294.814906][T15237] SELinux: security_context_str_to_sid (syste_u�Gй�:��) failed with errno=-22
[  295.017528][T15261] rust_binder: 15261: no such ref 0
[  295.022959][T15261] rust_binder: Write failure EINVAL in pid:20
[  295.027319][T15261] tipc: Started in network mode
[  295.038529][T15261] tipc: Node identity 8e0c3aa8d1a2, cluster identity 4711
[  295.045774][T15261] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  295.054457][T15261] tipc: Resetting bearer <eth:syzkaller0>
[  295.066173][T15261] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  295.073528][T15261] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  295.082545][T15260] tipc: Disabling bearer <eth:syzkaller0>
[  295.198856][   T65] koneplus 0003:1E7D:2D51.0018: unknown main item tag 0x0
[  295.212308][   T65] koneplus 0003:1E7D:2D51.0018: unknown main item tag 0x0
[  295.222574][   T65] koneplus 0003:1E7D:2D51.0018: unknown main item tag 0x0
[  295.239914][   T65] koneplus 0003:1E7D:2D51.0018: unknown main item tag 0x0
[  295.252222][   T65] koneplus 0003:1E7D:2D51.0018: unknown main item tag 0x0
[  295.263447][   T65] koneplus 0003:1E7D:2D51.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.6-1/input0
[  295.584233][T15275] exFAT-fs (rnullb0): invalid boot record signature
[  295.591011][T15275] exFAT-fs (rnullb0): failed to read boot sector
[  295.597566][T15275] exFAT-fs (rnullb0): failed to recognize exfat type
[  295.881945][   T65] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  296.023329][T15294] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5051'.
[  296.033741][   T65] usb 3-1: config 1 interface 0 has no altsetting 0
[  296.041912][   T65] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  296.051053][   T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  296.059073][   T65] usb 3-1: Product: syz
[  296.063332][   T65] usb 3-1: Manufacturer: syz
[  296.067931][   T65] usb 3-1: SerialNumber: syz
[  296.278357][   T65] usb 3-1: USB disconnect, device number 30
[  296.580979][T15303] overlay: ./bus is not a directory
[  297.021426][   T65] usb 3-1: new full-speed USB device number 31 using dummy_hcd
[  297.172683][   T65] usb 3-1: not running at top speed; connect to a high speed hub
[  297.183184][   T65] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  297.192570][   T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.200628][   T65] usb 3-1: Product: syz
[  297.205081][   T65] usb 3-1: Manufacturer: љ
[  297.209864][   T65] usb 3-1: SerialNumber: syz
[  297.314337][  T306] usb 7-1: USB disconnect, device number 15
[  297.363438][   T36] audit: type=1400 audit(306.032:790): avc:  denied  { remount } for  pid=15340 comm="syz.6.5071" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  297.422071][   T65] usb 3-1: 2:1 : unknown format tag 0x5 is detected.  processed as MPEG.
[  297.437442][   T65] usb 3-1: found format II with max.bitrate = 8, frame size=0
[  297.445358][   T65] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  297.467742][   T65] usb 3-1: USB disconnect, device number 31
[  297.491918][T14323] udevd[14323]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  297.631076][   T36] audit: type=1326 audit(306.302:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15358 comm="syz.6.5075" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fba1198e929 code=0x0
[  297.935160][T15363] rust_binder: Error while translating object.
[  297.935189][T15363] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  297.941653][T15363] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:33
[  298.157679][T15386] incfs: Options parsing error. -22
[  298.172039][T15386] incfs: mount failed -22
[  298.176573][   T36] audit: type=1326 audit(306.842:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15385 comm="syz.2.5084" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4b6018e929 code=0x0
[  298.209220][T15395] 9pnet_fd: Insufficient options for proto=fd
[  298.227068][T15387] rust_binder: Failed to allocate buffer. len:18446744073709551232, is_oneway:true
[  298.227098][T15387] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  298.236601][T15387] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:44
[  298.526351][T15402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3601 sclass=netlink_route_socket pid=15402 comm=syz.6.5089
[  298.592914][   T36] audit: type=1400 audit(307.262:793): avc:  denied  { accept } for  pid=15408 comm="syz.6.5091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  298.907701][T15431] netlink: 7 bytes leftover after parsing attributes in process `syz.6.5097'.
[  299.000452][T15436] binder: Binderfs stats mode cannot be changed during a remount
[  299.079454][   T36] audit: type=1326 audit(307.742:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15398 comm="syz.8.5088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f824678e929 code=0x7fc00000
[  299.266242][  T306] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  299.349399][T15460] overlayfs: missing 'lowerdir'
[  299.425812][T15467] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  299.434799][  T306] usb 3-1: Using ep0 maxpacket: 32
[  299.444765][T15474] netlink: 3 bytes leftover after parsing attributes in process `syz.8.5109'.
[  299.446056][  T306] usb 3-1: config 0 has an invalid interface number: 213 but max is 0
[  299.453955][T15474] netlink: 3 bytes leftover after parsing attributes in process `syz.8.5109'.
[  299.470519][  T306] usb 3-1: config 0 has no interface number 0
[  299.472701][T15474] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  299.480876][  T306] usb 3-1: config 0 interface 213 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  299.508704][  T306] usb 3-1: config 0 interface 213 has no altsetting 0
[  299.517187][  T306] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=1d.85
[  299.520804][T15477] overlayfs: failed to clone upperpath
[  299.527718][  T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  299.547059][  T306] usb 3-1: Product: syz
[  299.551673][  T306] usb 3-1: Manufacturer: syz
[  299.556359][  T306] usb 3-1: SerialNumber: syz
[  299.566712][  T306] usb 3-1: config 0 descriptor??
[  299.601084][T15491] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5119'.
[  299.667358][T15504] SELinux: syz.6.5124 (15504) set checkreqprot to 1. This is no longer supported.
[  299.667361][   T36] audit: type=1400 audit(308.333:795): avc:  denied  { setcheckreqprot } for  pid=15503 comm="syz.6.5124" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  299.697681][T15504] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5124'.
[  299.708158][T15504] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5124'.
[  299.717144][T15504] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  299.834976][T15509] exFAT-fs (rnullb0): invalid boot record signature
[  299.841807][T15509] exFAT-fs (rnullb0): failed to read boot sector
[  299.848289][T15509] exFAT-fs (rnullb0): failed to recognize exfat type
[  299.895509][  T306] usb 3-1: USB disconnect, device number 32
[  300.030257][  T398] usb 7-1: new full-speed USB device number 16 using dummy_hcd
[  300.169789][  T398] usb 7-1: device descriptor read/64, error -71
[  300.409652][  T398] usb 7-1: device descriptor read/64, error -71
[  300.411961][T15520] Bluetooth: hci0: Frame reassembly failed (-90)
[  300.422453][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[  300.660009][  T398] usb 7-1: new full-speed USB device number 17 using dummy_hcd
[  300.675143][T15545] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5139'.
[  300.707457][T15552] netlink: 3 bytes leftover after parsing attributes in process `syz.8.5141'.
[  300.716738][T15552] netlink: 3 bytes leftover after parsing attributes in process `syz.8.5141'.
[  300.725662][T15552] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  300.799453][  T398] usb 7-1: device descriptor read/64, error -71
[  301.039369][  T398] usb 7-1: device descriptor read/64, error -71
[  301.068282][T15563] fuseblk: Bad value for 'fd'
[  301.149949][  T398] usb usb7-port1: attempt power cycle
[  301.489139][  T398] usb 7-1: new full-speed USB device number 18 using dummy_hcd
[  301.510279][  T398] usb 7-1: device descriptor read/8, error -71
[  301.640192][  T398] usb 7-1: device descriptor read/8, error -71
[  301.670614][T15576] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5151'.
[  301.878933][  T398] usb 7-1: new full-speed USB device number 19 using dummy_hcd
[  301.900049][  T398] usb 7-1: device descriptor read/8, error -71
[  301.946040][   T36] audit: type=1326 audit(310.614:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15599 comm="syz.8.5159" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f824678e929 code=0x0
[  302.030321][  T398] usb 7-1: device descriptor read/8, error -71
[  302.138855][  T398] usb usb7-port1: unable to enumerate USB device
[  302.418675][ T3916] Bluetooth: hci0: command 0x1003 tx timeout
[  302.418675][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  302.519878][T15626] netlink: 1351 bytes leftover after parsing attributes in process `syz.2.5168'.
[  302.532041][T15627] binder: Bad value for 'stats'
[  302.535615][T15626] binder: Bad value for 'stats'
[  302.537516][T15627] KVM: debugfs: duplicate directory 15627-7
[  302.859493][  T304] Bluetooth: hci0: Frame reassembly failed (-84)
[  302.898444][   T65] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  303.048308][   T65] usb 3-1: Using ep0 maxpacket: 8
[  303.059387][   T65] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  303.078440][   T65] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  303.088433][   T65] usb 3-1: config 0 interface 0 has no altsetting 0
[  303.095159][   T65] usb 3-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00
[  303.104476][   T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.114834][   T65] usb 3-1: config 0 descriptor??
[  303.525449][T15656] netlink: 92 bytes leftover after parsing attributes in process `syz.5.5178'.
[  303.536329][   T65] ntrig 0003:1B96:0004.0019: unknown main item tag 0x0
[  303.543388][   T65] ntrig 0003:1B96:0004.0019: unknown main item tag 0x0
[  303.550510][   T65] ntrig 0003:1B96:0004.0019: unknown main item tag 0x0
[  303.557448][   T65] ntrig 0003:1B96:0004.0019: unknown main item tag 0x0
[  303.564879][   T65] ntrig 0003:1B96:0004.0019: unknown main item tag 0x0
[  303.573647][   T65] ntrig 0003:1B96:0004.0019: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.2-1/input0
[  303.734987][   T65] ntrig 0003:1B96:0004.0019: Firmware version: 4.9.2.53.2 (2429 a246)
[  303.938003][T15630] netlink: 'syz.2.5169': attribute type 4 has an invalid length.
[  303.948329][   T36] audit: type=1400 audit(312.625:797): avc:  denied  { execute } for  pid=15629 comm="syz.2.5169" path="/dev/binderfs/binder1" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  304.052296][  T398] usb 3-1: USB disconnect, device number 33
[  304.897428][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  304.897426][ T3916] Bluetooth: hci0: command 0x1003 tx timeout
[  305.344218][T15703] netlink: 300 bytes leftover after parsing attributes in process `syz.2.5193'.
[  305.615009][T15726] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22
[  305.963675][T15748] devpts: called with bogus options
[  306.077769][T15765] devpts: called with bogus options
[  306.083081][T15766] binder: Bad value for 'stats'
[  306.316682][  T306] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  306.466596][  T306] usb 3-1: Using ep0 maxpacket: 16
[  306.472855][  T306] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.484512][  T306] usb 3-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=21.e3
[  306.493668][  T306] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.501695][  T306] usb 3-1: Product: syz
[  306.505891][  T306] usb 3-1: Manufacturer: syz
[  306.510577][  T306] usb 3-1: SerialNumber: syz
[  306.515815][  T306] usb 3-1: config 0 descriptor??
[  306.521655][  T306] rtl8150 3-1:0.0: couldn't find required endpoints
[  306.528411][  T306] rtl8150 3-1:0.0: probe with driver rtl8150 failed with error -5
[  306.618336][T15781] fuse: Unknown parameter 'user_i00000000000000000000'
[  306.727541][   T65] usb 3-1: USB disconnect, device number 34
[  306.739080][T15786] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5220'.
[  306.749469][T15786] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5220'.
[  306.758588][T15786] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5220'.
[  306.767668][T15786] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5220'.
[  306.917325][T15801] 9pnet_fd: Insufficient options for proto=fd
[  307.138323][T15810] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5227'.
[  307.490651][T15833] overlayfs: failed to clone upperpath
[  307.496884][T15833] netlink: 112 bytes leftover after parsing attributes in process `syz.5.5236'.
[  307.508185][T15835] overlay: ./file0 is not a directory
[  307.707678][T15859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5245'.
[  307.768958][T15860] netlink: 'syz.2.5245': attribute type 58 has an invalid length.
[  307.779085][T15860] rust_binder: 15859 RLIMIT_NICE not set
[  307.802592][T15864] binder: Bad value for 'max'
[  307.985496][T15872] netlink: 165 bytes leftover after parsing attributes in process `syz.6.5246'.
[  308.232862][T15887] 9pnet_fd: Insufficient options for proto=fd
[  308.379440][T15917] netlink: 6032 bytes leftover after parsing attributes in process `syz.8.5261'.
[  308.535585][   T65] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  308.686618][   T65] usb 3-1: config 6 has an invalid interface number: 8 but max is 0
[  308.694801][   T65] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config
[  308.705092][   T65] usb 3-1: config 6 has no interface number 0
[  308.711262][   T65] usb 3-1: config 6 interface 8 altsetting 112 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  308.722526][   T65] usb 3-1: config 6 interface 8 altsetting 112 endpoint 0x7 has invalid maxpacket 72, setting to 64
[  308.733659][   T65] usb 3-1: config 6 interface 8 altsetting 112 has 4 endpoint descriptors, different from the interface descriptor's value: 10
[  308.747224][   T65] usb 3-1: config 6 interface 8 has no altsetting 0
[  308.755269][   T65] usb 3-1: New USB device found, idVendor=1199, idProduct=68c0, bcdDevice=a0.6e
[  308.764356][   T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.772438][   T65] usb 3-1: Product: 跹᜗靿镍␉༥̉剱꠮隸쭊諎ᬥ瘩䁼ꔈ㢏框ꔰ﷞寞ᥑ竒磗매ᲅ엶㬻ꦗ襢푣戂偓碥拀ᚑ畬ꨗ⾴瘆䲵㽵Ի㨒㡘馃㬬쐇섥狚⿸複꺌얺⹦붴쿋溯餫苷ऑ崯棆욀镢倰㔞᧕怇顺ṧ袟왚뤯繪왬鮑⌍뇒俎ᑢ誎
[  308.801927][   T65] usb 3-1: Manufacturer: В
[  308.806506][   T65] usb 3-1: SerialNumber: ␊
[  308.858787][T15934] can: request_module (can-proto-3) failed.
[  309.042965][T15955] netlink: 'syz.5.5274': attribute type 27 has an invalid length.
[  309.070699][   T65] usb 3-1: USB disconnect, device number 35
[  309.750444][T15999] devpts: called with bogus options
[  309.760935][T16001] devpts: called with bogus options
[  309.801903][T16004] rust_binder: Error while translating object.
[  309.801946][T16004] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  309.814923][T16004] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:164
[  310.276005][T16023] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5297'.
[  310.294086][T16023] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  310.325188][T16026] netlink: 'syz.5.5298': attribute type 16 has an invalid length.
[  310.333128][T16026] netlink: 'syz.5.5298': attribute type 3 has an invalid length.
[  310.514196][T16069] /dev/loop0: Can't lookup blockdev
[  310.854402][   T31] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  311.014356][   T31] usb 7-1: Using ep0 maxpacket: 8
[  311.020575][   T31] usb 7-1: config 129 has an invalid interface number: 179 but max is 3
[  311.029116][   T31] usb 7-1: config 129 contains an unexpected descriptor of type 0x1, skipping
[  311.038108][   T31] usb 7-1: config 129 has an invalid interface number: 33 but max is 3
[  311.046605][   T31] usb 7-1: config 129 has an invalid interface number: 101 but max is 3
[  311.055002][   T31] usb 7-1: config 129 has an invalid interface number: 8 but max is 3
[  311.063178][   T31] usb 7-1: config 129 contains an unexpected descriptor of type 0x2, skipping
[  311.072251][   T31] usb 7-1: config 129 contains an unexpected descriptor of type 0x2, skipping
[  311.081636][   T31] usb 7-1: config 129 has no interface number 0
[  311.088111][   T31] usb 7-1: config 129 has no interface number 1
[  311.094579][   T31] usb 7-1: config 129 has no interface number 2
[  311.100862][   T31] usb 7-1: config 129 has no interface number 3
[  311.113389][   T31] usb 7-1: config 129 interface 179 altsetting 64 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  311.125170][   T31] usb 7-1: config 129 interface 179 altsetting 64 endpoint 0xB has an invalid bInterval 249, changing to 7
[  311.136999][   T31] usb 7-1: config 129 interface 179 altsetting 64 has a duplicate endpoint with address 0x3, skipping
[  311.148091][   T31] usb 7-1: config 129 interface 179 altsetting 64 endpoint 0xC has invalid maxpacket 1056, setting to 64
[  311.159427][   T31] usb 7-1: config 129 interface 179 altsetting 64 has a duplicate endpoint with address 0xC, skipping
[  311.170446][   T31] usb 7-1: config 129 interface 179 altsetting 64 bulk endpoint 0x9 has invalid maxpacket 927
[  311.180743][   T31] usb 7-1: config 129 interface 179 altsetting 64 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  311.191919][   T31] usb 7-1: config 129 interface 33 altsetting 128 bulk endpoint 0xD has invalid maxpacket 32
[  311.202117][   T31] usb 7-1: config 129 interface 33 altsetting 128 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  311.213382][   T31] usb 7-1: config 129 interface 33 altsetting 128 has a duplicate endpoint with address 0xB, skipping
[  311.224580][   T31] usb 7-1: config 129 interface 33 altsetting 128 endpoint 0xA has invalid maxpacket 512, setting to 64
[  311.235801][   T31] usb 7-1: config 129 interface 33 altsetting 128 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  311.247084][   T31] usb 7-1: config 129 interface 33 altsetting 128 has a duplicate endpoint with address 0xA, skipping
[  311.258083][   T31] usb 7-1: config 129 interface 33 altsetting 128 has a duplicate endpoint with address 0x9, skipping
[  311.269083][   T31] usb 7-1: config 129 interface 33 altsetting 128 has a duplicate endpoint with address 0x4, skipping
[  311.280080][   T31] usb 7-1: config 129 interface 33 altsetting 128 has a duplicate endpoint with address 0x9, skipping
[  311.291084][   T31] usb 7-1: config 129 interface 33 altsetting 128 has a duplicate endpoint with address 0xB, skipping
[  311.308106][   T31] usb 7-1: config 129 interface 101 altsetting 6 has a duplicate endpoint with address 0xA, skipping
[  311.319053][   T31] usb 7-1: config 129 interface 101 altsetting 6 has a duplicate endpoint with address 0x6, skipping
[  311.329953][   T31] usb 7-1: config 129 interface 101 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  311.341010][   T31] usb 7-1: config 129 interface 101 altsetting 6 has a duplicate endpoint with address 0xE, skipping
[  311.351905][   T31] usb 7-1: config 129 interface 101 altsetting 6 has a duplicate endpoint with address 0x8, skipping
[  311.362787][   T31] usb 7-1: config 129 interface 101 altsetting 6 has a duplicate endpoint with address 0x9, skipping
[  311.373673][   T31] usb 7-1: config 129 interface 101 altsetting 6 has an invalid endpoint descriptor of length 3, skipping
[  311.385044][   T31] usb 7-1: config 129 interface 101 altsetting 6 has a duplicate endpoint with address 0xE, skipping
[  311.395934][   T31] usb 7-1: config 129 interface 101 altsetting 6 has a duplicate endpoint with address 0x3, skipping
[  311.406825][   T31] usb 7-1: config 129 interface 101 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  311.417894][   T31] usb 7-1: config 129 interface 101 altsetting 6 has a duplicate endpoint with address 0x4, skipping
[  311.428797][   T31] usb 7-1: config 129 interface 101 altsetting 6 has a duplicate endpoint with address 0xA, skipping
[  311.439684][   T31] usb 7-1: config 129 interface 101 altsetting 6 has an invalid descriptor for endpoint zero, skipping
[  311.450760][   T31] usb 7-1: config 129 interface 101 altsetting 6 has 14 endpoint descriptors, different from the interface descriptor's value: 13
[  311.464280][   T31] usb 7-1: config 129 interface 8 altsetting 2 has a duplicate endpoint with address 0x3, skipping
[  311.475003][   T31] usb 7-1: config 129 interface 8 altsetting 2 has a duplicate endpoint with address 0x4, skipping
[  311.485720][   T31] usb 7-1: config 129 interface 8 altsetting 2 has a duplicate endpoint with address 0xE, skipping
[  311.496440][   T31] usb 7-1: config 129 interface 8 altsetting 2 has a duplicate endpoint with address 0x8, skipping
[  311.507165][   T31] usb 7-1: config 129 interface 8 altsetting 2 has an invalid descriptor for endpoint zero, skipping
[  311.518066][   T31] usb 7-1: config 129 interface 8 altsetting 2 has a duplicate endpoint with address 0x6, skipping
[  311.528822][   T31] usb 7-1: config 129 interface 8 altsetting 2 has a duplicate endpoint with address 0x9, skipping
[  311.540187][   T31] usb 7-1: config 129 interface 8 altsetting 2 has a duplicate endpoint with address 0x9, skipping
[  311.550946][   T31] usb 7-1: config 129 interface 179 has no altsetting 0
[  311.557985][   T31] usb 7-1: config 129 interface 33 has no altsetting 0
[  311.564898][   T31] usb 7-1: config 129 interface 101 has no altsetting 0
[  311.571865][   T31] usb 7-1: config 129 interface 8 has no altsetting 0
[  311.580197][   T31] usb 7-1: New USB device found, idVendor=1b80, idProduct=e755, bcdDevice=be.61
[  311.589310][   T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  311.597357][   T31] usb 7-1: Product: 瘩꩎ꯐꖹ볶௚ꦫ㎒젹퇏䳐깺匒쨈﫨䦗⑴⦓䢏㝢撰䱖ᓡ蛑廪荦쏸༊ߧ廂欇砅跼ከꝆ헼悳꧉
[  311.612162][   T31] usb 7-1: Manufacturer: 돿吂蜅⓷榷㞙ﻃ
[  311.618825][   T31] usb 7-1: SerialNumber: 鿚唐仐힤噴줧ࡲᥥꒆ최匂ㄻ䪆꽦ퟷ佈砩㵣欓믹품猞ꃰｳ菁뱚퍛頌ↇ萓䠊Ｐ当۝됲ꚢ릢衴焵໪﨨
[  311.640253][T16089] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  311.675467][T16124] syzkaller0: entered allmulticast mode
[  311.681251][T16124] syzkaller0: entered promiscuous mode
[  311.688016][T16124] syzkaller0 (unregistering): left promiscuous mode
[  311.694736][T16124] syzkaller0 (unregistering): left allmulticast mode
[  311.921638][T16139] veth0_vlan: entered allmulticast mode
[  311.924032][   T31] usb 7-1: USB disconnect, device number 20
[  311.947513][T16139] veth0_vlan: left promiscuous mode
[  311.953009][T16139] veth0_vlan: entered promiscuous mode
[  311.961036][T16139] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  311.961060][T16139] rust_binder: Read failure Err(EFAULT) in pid:407
[  312.005731][T16147] rust_binder: 16147: no such ref 0
[  312.020063][T16147] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:415
[  312.157782][T16162] 9pnet_fd: Insufficient options for proto=fd
[  312.186977][T16165] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:433
[  312.201955][T16167] __nla_validate_parse: 23 callbacks suppressed
[  312.201980][T16167] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5347'.
[  312.226495][T16167] netlink: 3 bytes leftover after parsing attributes in process `syz.6.5347'.
[  312.235878][T16167] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  312.252482][T16167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1794 sclass=netlink_route_socket pid=16167 comm=syz.6.5347
[  312.308100][T16175] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  312.316122][T16175] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  312.326796][T16175] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  312.339915][T16175] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  312.827582][T16229] 9pnet_fd: Insufficient options for proto=fd
[  313.346336][T16242] fuse: Bad value for 'user_id'
[  313.351265][T16242] fuse: Bad value for 'user_id'
[  313.357379][T16242] netlink: 'syz.8.5371': attribute type 3 has an invalid length.
[  313.616257][T16287] x_tables: duplicate underflow at hook 1
[  313.675236][  T306] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  313.766398][T16292] 9pnet_fd: Insufficient options for proto=fd
[  313.812315][T16297] overlayfs: failed to clone upperpath
[  313.842917][  T306] usb 7-1: Using ep0 maxpacket: 16
[  313.853875][  T306] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  313.872891][  T306] usb 7-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00
[  313.882075][  T306] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  313.914963][  T306] usb 7-1: config 0 descriptor??
[  314.124523][  T306] elecom 0003:056E:011C.001A: item fetching failed at offset 0/3
[  314.132610][  T306] elecom 0003:056E:011C.001A: probe with driver elecom failed with error -22
[  314.345216][  T306] usb 7-1: USB disconnect, device number 21
[  314.836416][T16343] x_tables: duplicate underflow at hook 1
[  314.842646][T16343] netlink: 32 bytes leftover after parsing attributes in process `syz.8.5401'.
[  315.092935][T16370] overlay: Unknown parameter 'uid<00000000000000000000'
[  315.136625][T16376] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  315.552824][T16395] ==================================================================
[  315.567498][T16395] BUG: KASAN: slab-use-after-free in unix_stream_read_actor+0xae/0xd0
[  315.575726][T16395] Read of size 4 at addr ffff888119cdb404 by task syz.8.5419/16395
[  315.583819][T16395] 
[  315.586183][T16395] CPU: 1 UID: 0 PID: 16395 Comm: syz.8.5419 Not tainted 6.12.30-syzkaller-g21ed84930c16 #0 fa4558fba7fa11aa57b2c84caea5bf67b39b1b5f
[  315.586219][T16395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  315.586240][T16395] Call Trace:
[  315.586251][T16395]  <TASK>
[  315.586262][T16395]  __dump_stack+0x21/0x30
[  315.586297][T16395]  dump_stack_lvl+0x10c/0x190
[  315.586326][T16395]  ? __cfi_dump_stack_lvl+0x10/0x10
[  315.586357][T16395]  print_address_description+0x71/0x220
[  315.586382][T16395]  print_report+0x4a/0x70
[  315.586405][T16395]  kasan_report+0x163/0x1a0
[  315.586441][T16395]  ? unix_stream_read_actor+0xae/0xd0
[  315.586476][T16395]  ? __cfi__raw_spin_lock+0x10/0x10
[  315.586500][T16395]  ? unix_stream_read_actor+0xae/0xd0
[  315.586533][T16395]  __asan_report_load4_noabort+0x18/0x20
[  315.586562][T16395]  unix_stream_read_actor+0xae/0xd0
[  315.586596][T16395]  unix_stream_recv_urg+0x1f8/0x360
[  315.586631][T16395]  unix_stream_read_generic+0x21ed/0x22d0
[  315.586665][T16395]  ? sysvec_reschedule_ipi+0x73/0x80
[  315.586698][T16395]  ? avc_has_perm_noaudit+0x268/0x360
[  315.586729][T16395]  ? avc_has_perm+0x144/0x220
[  315.586755][T16395]  ? __cfi_avc_has_perm+0x10/0x10
[  315.586782][T16395]  ? unix_stream_read_actor+0xd0/0xd0
[  315.586816][T16395]  ? __cgroup_account_cputime+0xa5/0xd0
[  315.586847][T16395]  ? selinux_socket_recvmsg+0x284/0x380
[  315.586878][T16395]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[  315.586914][T16395]  ? __cfi_selinux_socket_recvmsg+0x10/0x10
[  315.586946][T16395]  unix_stream_recvmsg+0x16c/0x1c0
[  315.586983][T16395]  ? __cfi_unix_stream_recvmsg+0x10/0x10
[  315.587018][T16395]  ? __cfi_unix_stream_read_actor+0x10/0x10
[  315.587054][T16395]  ? bpf_lsm_socket_recvmsg+0xd/0x20
[  315.587078][T16395]  ? security_socket_recvmsg+0x3a/0xf0
[  315.587110][T16395]  ? __cfi_unix_stream_recvmsg+0x10/0x10
[  315.587146][T16395]  sock_recvmsg+0x219/0x270
[  315.587170][T16395]  ____sys_recvmsg+0x1ca/0x460
[  315.587202][T16395]  ? __sys_recvmsg_sock+0x60/0x60
[  315.587236][T16395]  ? import_iovec+0x81/0xb0
[  315.587258][T16395]  ___sys_recvmsg+0x1b6/0x510
[  315.587290][T16395]  ? __sys_recvmsg+0x280/0x280
[  315.587321][T16395]  ? _raw_spin_lock+0x109/0x120
[  315.587348][T16395]  ? __fget_files+0x2c5/0x340
[  315.587385][T16395]  __x64_sys_recvmsg+0x1e8/0x2c0
[  315.587416][T16395]  ? __cfi___x64_sys_recvmsg+0x10/0x10
[  315.587449][T16395]  ? __kasan_check_write+0x18/0x20
[  315.587478][T16395]  ? fpregs_restore_userregs+0x11d/0x260
[  315.587502][T16395]  ? switch_fpu_return+0x12/0x20
[  315.587527][T16395]  x64_sys_call+0xdb5/0x2ee0
[  315.587558][T16395]  do_syscall_64+0x58/0xf0
[  315.587582][T16395]  ? clear_bhb_loop+0x50/0xa0
[  315.587615][T16395]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  315.587645][T16395] RIP: 0033:0x7f824678e929
[  315.587675][T16395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  315.587698][T16395] RSP: 002b:00007f8244dd6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  315.587730][T16395] RAX: ffffffffffffffda RBX: 00007f82469b6080 RCX: 00007f824678e929
[  315.587749][T16395] RDX: 0000000040010041 RSI: 0000200000000840 RDI: 0000000000000004
[  315.587767][T16395] RBP: 00007f8246810b39 R08: 0000000000000000 R09: 0000000000000000
[  315.587783][T16395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  315.587799][T16395] R13: 0000000000000000 R14: 00007f82469b6080 R15: 00007ffea4b70718
[  315.587820][T16395]  </TASK>
[  315.587830][T16395] 
[  315.927549][T16395] Allocated by task 16394:
[  315.932000][T16395]  kasan_save_track+0x3e/0x80
[  315.936733][T16395]  kasan_save_alloc_info+0x40/0x50
[  315.941887][T16395]  __kasan_slab_alloc+0x73/0x90
[  315.946782][T16395]  kmem_cache_alloc_node_noprof+0x139/0x3b0
[  315.952781][T16395]  __alloc_skb+0x10c/0x370
[  315.957232][T16395]  alloc_skb_with_frags+0xce/0x8b0
[  315.962365][T16395]  sock_alloc_send_pskb+0x858/0x990
[  315.967599][T16395]  queue_oob+0xe7/0x4f0
[  315.971804][T16395]  unix_stream_sendmsg+0xf19/0x1080
[  315.977131][T16395]  ____sys_sendmsg+0xa15/0xa70
[  315.981931][T16395]  ___sys_sendmsg+0x220/0x2a0
[  315.986653][T16395]  __x64_sys_sendmsg+0x1eb/0x2c0
[  315.991630][T16395]  x64_sys_call+0x2a4c/0x2ee0
[  315.996348][T16395]  do_syscall_64+0x58/0xf0
[  316.000800][T16395]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  316.006753][T16395] 
[  316.009102][T16395] Freed by task 16396:
[  316.013188][T16395]  kasan_save_track+0x3e/0x80
[  316.017901][T16395]  kasan_save_free_info+0x4a/0x60
[  316.022973][T16395]  __kasan_slab_free+0x5f/0x80
[  316.027775][T16395]  kmem_cache_free+0x1c1/0x510
[  316.032586][T16395]  __kfree_skb+0x18f/0x210
[  316.037029][T16395]  consume_skb+0x65/0x1a0
[  316.041471][T16395]  unix_stream_read_generic+0x1d36/0x22d0
[  316.047233][T16395]  unix_stream_recvmsg+0x16c/0x1c0
[  316.052379][T16395]  sock_recvmsg+0x219/0x270
[  316.056908][T16395]  sock_read_iter+0x232/0x2f0
[  316.061617][T16395]  vfs_read+0x540/0xb60
[  316.065810][T16395]  ksys_read+0x141/0x250
[  316.070082][T16395]  __x64_sys_read+0x7f/0x90
[  316.074613][T16395]  x64_sys_call+0x2638/0x2ee0
[  316.079328][T16395]  do_syscall_64+0x58/0xf0
[  316.083773][T16395]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  316.089700][T16395] 
[  316.092045][T16395] The buggy address belongs to the object at ffff888119cdb3c0
[  316.092045][T16395]  which belongs to the cache skbuff_head_cache of size 256
[  316.106638][T16395] The buggy address is located 68 bytes inside of
[  316.106638][T16395]  freed 256-byte region [ffff888119cdb3c0, ffff888119cdb4c0)
[  316.120380][T16395] 
[  316.122733][T16395] The buggy address belongs to the physical page:
[  316.129178][T16395] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x119cdb
[  316.138060][T16395] anon flags: 0x4000000000000000(zone=1)
[  316.143723][T16395] page_type: f5(slab)
[  316.147761][T16395] raw: 4000000000000000 ffff888105278640 0000000000000000 dead000000000001
[  316.156465][T16395] raw: 0000000000000000 00000000800c000c 00000001f5000000 0000000000000000
[  316.165077][T16395] page dumped because: kasan: bad access detected
[  316.171522][T16395] page_owner tracks the page as allocated
[  316.177262][T16395] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 0, tgid 0 (swapper/1), ts 69948306060, free_ts 69776069184
[  316.197283][T16395]  post_alloc_hook+0x3b9/0x3f0
[  316.202086][T16395]  prep_new_page+0x1c/0x120
[  316.206617][T16395]  get_page_from_freelist+0x46bb/0x4750
[  316.212191][T16395]  __alloc_pages_noprof+0x30d/0x6c0
[  316.217427][T16395]  alloc_slab_page+0x6b/0x1f0
[  316.222141][T16395]  allocate_slab+0x69/0x440
[  316.226692][T16395]  ___slab_alloc+0x59a/0x8b0
[  316.231341][T16395]  kmem_cache_alloc_node_noprof+0x20a/0x3b0
[  316.237277][T16395]  __alloc_skb+0x10c/0x370
[  316.241736][T16395]  wg_packet_send_keepalive+0x66/0x1e0
[  316.247240][T16395]  wg_expired_send_persistent_keepalive+0x57/0x80
[  316.253701][T16395]  call_timer_fn+0x49/0x300
[  316.258256][T16395]  __run_timer_base+0x6b3/0x9a0
[  316.263170][T16395]  run_timer_softirq+0x35/0x70
[  316.268147][T16395]  handle_softirqs+0x1ae/0x630
[  316.272954][T16395]  __irq_exit_rcu+0x48/0xc0
[  316.277493][T16395] page last free pid 2775 tgid 2773 stack trace:
[  316.283837][T16395]  free_unref_folios+0xcb0/0x1570
[  316.288897][T16395]  folios_put_refs+0x4c9/0x5c0
[  316.293684][T16395]  free_pages_and_swap_cache+0x272/0x460
[  316.299361][T16395]  tlb_flush_mmu+0x7ce/0xaf0
[  316.303988][T16395]  tlb_finish_mmu+0xcf/0x1d0
[  316.308620][T16395]  exit_mmap+0x405/0xb60
[  316.312901][T16395]  __mmput+0x93/0x320
[  316.316923][T16395]  mmput+0x55/0x170
[  316.320774][T16395]  do_exit+0x910/0x2630
[  316.324960][T16395]  do_group_exit+0x22a/0x300
[  316.329581][T16395]  get_signal+0x139d/0x14f0
[  316.334117][T16395]  arch_do_signal_or_restart+0x96/0x720
[  316.339712][T16395]  syscall_exit_to_user_mode+0x58/0xb0
[  316.345312][T16395]  do_syscall_64+0x64/0xf0
[  316.349759][T16395]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  316.355690][T16395] 
[  316.358039][T16395] Memory state around the buggy address:
[  316.363711][T16395]  ffff888119cdb300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  316.371904][T16395]  ffff888119cdb380: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[  316.379989][T16395] >ffff888119cdb400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  316.386152][T16404] overlayfs: failed to clone upperpath
[  316.388067][T16395]                    ^
[  316.388085][T16395]  ffff888119cdb480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[  316.405685][T16395]  ffff888119cdb500: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  316.413795][T16395] ==================================================================
[  316.440953][   T36] audit: type=1400 audit(325.111:798): avc:  denied  { read } for  pid=91 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  316.462328][T16395] Disabling lock debugging due to kernel taint
[  316.468720][   T36] audit: type=1400 audit(325.111:799): avc:  denied  { search } for  pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  316.489764][   T36] audit: type=1400 audit(325.111:800): avc:  denied  { write } for  pid=91 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  316.510576][   T36] audit: type=1400 audit(325.111:801): avc:  denied  { add_name } for  pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  316.530692][   T36] audit: type=1400 audit(325.111:802): avc:  denied  { create } for  pid=91 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  316.550738][   T36] audit: type=1400 audit(325.111:803): avc:  denied  { append open } for  pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  316.573237][   T36] audit: type=1400 audit(325.111:804): avc:  denied  { getattr } for  pid=91 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1