last executing test programs:

6m46.470214227s ago: executing program 32 (id=179):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000020315000000000000000000000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000010301", @ANYRESDEC=r4], 0x20}}, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000280)={{0x2, 0x4e22, @broadcast}, {0x1, @broadcast}, 0x2a, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'bond_slave_1\x00'})
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000044d564b"])
r8 = open(&(0x7f0000000080)='./file0\x00', 0x400, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x0, 0x0, 0x36}, @fd={0x66642a85, 0x0, r8}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f00000005c0)="2078b98d43d07572a4ac17e070f6e4ffd39036ed0af8f56f83f08868dc94aaa397e205bed98262b9477344a911603869d9f3f877f7aad1829f47273251843760bd7de0381b6c857784bb0ddc8246ff1e"})

6m43.607102602s ago: executing program 33 (id=92):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/77, 0x0}) (async)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0xdddd1000}) (async)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000180))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) (async)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000800)) (async)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98)
openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async)
fcntl$setlease(r2, 0x400, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fddbdf25050000000c00018008000100", @ANYRES32=r6, @ANYBLOB="1400038004000400040001000800020000000000080005"], 0x3c}}, 0x4000000)
fcntl$setlease(r1, 0x400, 0x0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='f2fs\x00', 0x4000, 0x0)

5m25.91316711s ago: executing program 34 (id=1149):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r2, 0xffff)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000)
r3 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15)
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1})
fcntl$addseals(r2, 0x409, 0x7)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
r5 = fsopen(&(0x7f0000000040)='fusectl\x00', 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
fsconfig$FSCONFIG_SET_PATH(r5, 0x3, &(0x7f0000000080)=',^\x00', &(0x7f00000000c0)='./file0\x00', r6)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02020409100000000000004c"], 0x80}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ptrace$getregset(0x4205, r4, 0x1, &(0x7f0000000080)={0x0})
ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000})
dup(r2)
close_range(r0, 0xffffffffffffffff, 0x0)

5m21.156513401s ago: executing program 3 (id=1187):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa2f81, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3b)
r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000080)=[@wrmsr={0x1e, 0x20, {0x960}}, @wrmsr={0x1e, 0x20, {0x850, 0x8}}, @cpuid={0x14, 0x18, {0x4, 0x8001}}], 0x58})
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000140)="0f069a00205f0066b98d08000066b80088000066ba000000000f300fbec866b80500000066b9573400000f01c13e653ef30f22d0642e0f01c366b9aa0900000f32385a370f2394", 0x47}], 0x1, 0x40, &(0x7f0000000200)=[@cr4={0x1, 0x40084}, @flags={0x3, 0x81400}], 0x2)
capset(&(0x7f0000000980)={0x20080522}, &(0x7f00000009c0)={0x610, 0x5, 0x7, 0x6, 0x1ff, 0x800})
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000085, 0x0, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
iopl(0x3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
setpgid(r5, r5)
ptrace$setregs(0xd, r5, 0x0, 0x0)
ptrace$cont(0x20, r5, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
times(&(0x7f0000000140))
syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0xd8c, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0xd8, 0x10, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x8001, 0x5, 0x1, {0x22, 0xe98}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0xdb, 0x15}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x5, 0x4, 0x4}}]}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x200, 0xf, 0xf, 0xfd, 0x20, 0x6}, 0x62, &(0x7f00000007c0)=ANY=[@ANYBLOB="050f62000614100497f2c1cd2bcced00867acae1a775de1e100411328ad8e0f1bab6de965638a648ad635b07100218c1080014100403b69e744101442e9d2369dd281cd00c0510100a00010060000f0ff1060000ff000a1003020a0004100600d26f37ff853699eafb4ec7e85a83896f"], 0x6, [{0xe1, &(0x7f0000000a40)=ANY=[@ANYBLOB="e103825567b49632e178492544d7b202ec1855c2b0912583743cd162c6a1a38cc8199797f845cebb4bb5706557718dabf82288c7ba3d0453f62a64176dc936de4cdc4d716f3e34e61c9dfbff6a0dbbb30a09ed41811fda5708208592214cd406041584737aa469a4877ee24efe4901db8ab808ad46861db338e4faab174956b6c239fde119eeb6475b543fd893359caf085623ba27f5131983bcd5f018c885f167b62dcdb08109ddb418b2ae07438d0e2870f49ade90a061794efb02ee720565cb0458434a3197ee96741a4a36e32015d0d627fd282dd352a1492b0dcdac"]}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x409}}, {0xa, &(0x7f0000000a00)=@string={0xa, 0x3, "72731e08efb36172"}}, {0x3a, &(0x7f00000004c0)=@string={0x3a, 0x3, "c67d387126184ba92c3838fbf7c5a1b592d63e351b3fd273056d215a845a8b049ab2c800a04a93744c8d7490eba65bbffd2afd78cfcefada"}}, {0x89, &(0x7f0000000500)=@string={0x89, 0x3, "11f8f8b9a764aa4fcc5309738d5420485c21a64f2c2ba8e6b8686bbba1cca3bd4fc4b67714e56d6a34ac27316219b25c5a29abe73295ba4d8567a8d535485467a3c41b5696a6bcc3b70c634fe469241bb18db4eb2a2b71dd3a178ba68c3a5150239f306fcef2ce7f2a285e85332210baad70ddfb2b32b319d501cf154b4601e42cb493b595096c"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x44a}}]})
ptrace$peeksig(0x4209, r5, &(0x7f0000000680)={0xc7, 0x1, 0x2}, &(0x7f00000006c0)=[{}, {}])
syz_clone(0x80008080, &(0x7f0000000300)="186467f4fda98f8409bbce6bcd5ddc3bdd3368", 0x13, &(0x7f0000000840), &(0x7f0000000880), &(0x7f00000008c0)="0478fe80bd5300eddb06e499bec1a54dd03b1197e307b566c2649c507cff281bed48ce39290cac773cf866993315abdd649948669affc5b1b744bae8ff9a211fe7a346c706a3f4d7eeb10551efb957e5d4061b385681873b90633aa58ed889ec35ab20083b8282d6edfb72947b4882071e3778362bfe5f79fe1fe4a80f9e8fde0c92b9c1c168769fc6433bfb74c70f2d715ecf3f83")
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r7, &(0x7f00000041c0)={0x2020, 0x0, 0x0, <r8=>0x0}, 0x2020)
syz_fuse_handle_req(r7, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x2, {0x3, 0x0, 0x0, 0x5, 0x0, 0x1000, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0xf5, 0x0, 0x0, 0x0, 0x7, 0x2000, 0x2, r8, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
quotactl_fd$Q_QUOTAON(r4, 0xffffffff80000200, r8, &(0x7f0000000340)='./file0\x00')
r9 = syz_open_dev$loop(&(0x7f0000000040), 0x4, 0x100202)
ioctl$LOOP_SET_FD(r9, 0x4c00, r1)

5m20.623568262s ago: executing program 3 (id=1208):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[])
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = socket(0x10, 0x3, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000300000000000001000000000000000141000000030017"], 0x34}}, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f00000000c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}})
write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="280000000100000000000000000000000100"], 0x28)
write$cgroup_int(r2, &(0x7f0000000200)=0x38, 0x12)
ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000340)={0xdddd0000, 0x8000000, 0x33, 0x1, 0x9})
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x9, 0x0, 0x3}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00"], 0x20}}, 0x40816)
ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000380)={0x60000, 0x800, 0x1})
mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0xc, 0x0)
syz_io_uring_setup(0x14a4, &(0x7f00000002c0)={0x0, 0xc2ca, 0x400, 0x3, 0x0, 0x0, r2}, &(0x7f0000000140), &(0x7f0000000240))
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
r7 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3d)
ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
read$FUSE(r6, &(0x7f00000005c0)={0x2020}, 0x2020)

5m19.771113908s ago: executing program 3 (id=1226):
r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381)
ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000080))
timer_create(0x3, &(0x7f0000000140)={0x0, 0x1, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r1=>0x0)
timer_settime(r1, 0x1, &(0x7f0000000380), 0x0)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB='max=00000000000000000000001,stats'])
r2 = timerfd_create(0x2, 0x100000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xa0401, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000140)={0x4, <r5=>0xffffffffffffffff})
ioctl$KVM_HAS_DEVICE_ATTR(r5, 0x4018aee3, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, 0x0})
timerfd_settime(r2, 0x3, &(0x7f0000000000)={{0x0, 0x989680}}, &(0x7f0000000080))

5m19.385765435s ago: executing program 3 (id=1240):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0)
vmsplice(r0, 0x0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1ed43000000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x804, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000200)='bridge0\x00')
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)})
syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="20010400"], 0x0})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00')
getdents64(r5, 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xf)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r7 = dup3(r6, r4, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x402, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000740)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2000, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0)

5m19.385351625s ago: executing program 35 (id=1240):
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0)
vmsplice(r0, 0x0, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000407d1ed43000000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x804, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000200)='bridge0\x00')
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)})
syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="20010400"], 0x0})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00')
getdents64(r5, 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0xf)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r7 = dup3(r6, r4, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x402, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000740)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2000, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0})
ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0)

5m7.337678408s ago: executing program 4 (id=1463):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000100)={@broadcast, @broadcast, <r3=>0x0}, &(0x7f0000000180)=0xc) (async, rerun: 64)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000340)={'tunl0\x00', &(0x7f0000000880)={'gre0\x00', <r4=>0x0, 0x40, 0x80, 0x0, 0x707, {{0x41, 0x4, 0x1, 0x2, 0x104, 0x64, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @local, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x44, 0x9e, 0x1, 0xd, [{@dev={0xac, 0x14, 0x14, 0x1a}, 0x4}, {@remote, 0x3}, {@empty, 0x2}, {@local, 0x3ff}, {@multicast2, 0x4}, {@remote, 0x4734}, {@local, 0x89}, {@broadcast, 0x3}]}, @lsrr={0x83, 0xb, 0x6a, [@broadcast, @private=0xa010100]}, @timestamp_prespec={0x44, 0xc, 0x2, 0x3, 0x0, [{@rand_addr=0x64010102, 0x7}]}, @timestamp_addr={0x44, 0x3c, 0xfb, 0x1, 0x6, [{@remote}, {@rand_addr=0x64010100, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7c9}, {@remote, 0xffffffff}, {@local, 0x3}, {@empty, 0xff}, {@local, 0x40}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0x87, [@remote, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x2c, 0xd4, 0x1, 0x8, [{@remote, 0x101}, {@local, 0x1}, {@empty, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@broadcast, 0x401}]}, @end, @lsrr={0x83, 0xf, 0x4d, [@multicast2, @multicast2, @local]}]}}}}}) (async, rerun: 64)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000380)={'tunl0\x00', <r5=>0x0, 0x7, 0x700, 0xc, 0x8, {{0xc, 0x4, 0x3, 0x1, 0x30, 0x65, 0x2, 0x87, 0x4, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x14, 0xa7, 0x1, 0x2, [{@empty, 0x4}, {@remote, 0x1}]}, @ra={0x94, 0x4}, @generic={0x86, 0x2}]}}}}}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000440)={'ip6gre0\x00', <r6=>0x0, 0x0, 0x4, 0xd, 0x1000, 0x70, @private2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x780, 0x2, 0x4000000}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000500)={'batadv_slave_1\x00', <r7=>0x0}) (async)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101842, 0x0)
ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000140)=0x4) (async, rerun: 32)
ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f0000000000)=0xffff0001) (async, rerun: 32)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x60000000000, 0x0) (async, rerun: 64)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800) (async)
close_range(r8, 0xffffffffffffffff, 0x0) (async)
getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000540)={@private, @broadcast, <r10=>0x0}, &(0x7f0000000580)=0xc) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000005c0)={'batadv_slave_0\x00', <r11=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000b40)=ANY=[@ANYBLOB="84010000", @ANYRES16=r2, @ANYBLOB="08002abd7000fcdbdf25040000000c00018008000300030000003c000180080003000200000008000100", @ANYRES32=r3, @ANYBLOB="1400020074756e6c30000000000000000000000014000200626f6e645f736c6176655f310000000014000180080003000300000008000100", @ANYRES32=r4, @ANYBLOB="6400018008000100", @ANYRES32=r5, @ANYBLOB="08000300010000001400020076657468305f6d61637674617000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000300000008000100", @ANYRES32=r6, @ANYBLOB="e07045963fe6105a39cef432de0eab87531fc17b4303c1727014f1c66c889a964a66ae4666ff8d990d312edd1857125b6cef0c620ad0a06a4dab359dce614d7d103d02ca5f48d6f0325c558251524cd5a2c31f83ccdf2cfd8057eb53f60b73cc027932e400c210a6fa70957b65aeae95089de450a5e26d5de7044a69d6d19beb8dcc50fe3c171c966b9a3e13", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="140002007465616d5f736c6176655f310000000030000180080003000200000008000300000000001400020063616966300000000000000000000000080003000100000044000180140002006d6163766c616e30000000000000000008000300030000001400020064756d6d793000000000000000000000080003000300000008000300000000003c0001800800030003000000140002006261746164765f736c6176655f31000008000100", @ANYRES32=r11, @ANYBLOB="1400020076657468315f746f5f7465616d000000"], 0x184}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040014)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) (async)
write(r1, &(0x7f0000000140)="240000001e00fffffff881ff00081d000000000000000800090a00cf9aa5fba4dafbd70d", 0x24)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001e0009000200001edfc296d075fff11d"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async)
r12 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, 0x0, 0x0, 0xd, 0x0, 0x0) (async)
syz_usb_control_io$hid(r12, 0x0, 0x0)
syz_usb_control_io(r12, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async)
r13 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r13, 0x501c4814, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x20000}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)

5m7.337439798s ago: executing program 4 (id=1464):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
fsetxattr(r1, &(0x7f0000005f40)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x2)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3d29)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000ec0)='\x00\x00\x00\x00\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00')

5m7.335135448s ago: executing program 4 (id=1465):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003b00)=ANY=[@ANYBLOB="20100000180001000000000000000000020000000800000004000000040012"], 0x1020}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
ioprio_set$uid(0x3, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x7ffff000)

5m7.326703218s ago: executing program 4 (id=1466):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
r4 = open(&(0x7f00000000c0)='.\x00', 0x48800, 0x50)
getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)={0x14, r3, 0x303, 0x0, 0x25dfdbfe, {0x13}}, 0x14}, 0x1, 0x0, 0x0, 0x48045}, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000003480)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000600)=""/251, 0xfb}], 0x1}, 0xa}], 0x1, 0x40002100, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="58010000160013"], 0x158}, 0x1, 0x0, 0x0, 0x4048010}, 0x24040014)
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(0xffffffffffffffff, &(0x7f000000ddc0)={0x2020, 0x0, <r7=>0x0, <r8=>0x0, <r9=>0x0}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r7, {0x7, 0x24, 0x0, 0x41046100, 0xffff, 0x0, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006dc0)="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", 0x2000, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe81, {0x2, 0x7, 0x80002, 0x0, 0x8081, 0x0, {0x101, 0x7, 0x80000000000, 0x80000000004, 0x400000000003, 0x4000000000006, 0x0, 0xfffffffd, 0x2, 0xc000, 0x4000000, r8, r9, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', &(0x7f0000000300), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=virtio,directio,mmap,version=9p2000.u,access=any,afid=0x00000000002c4c00,version=9p2000,access=user,smackfsfloor=,measure,appraise_type=imasig,appraise_type=imasig,smackfshat=,context=sysadm_u,fowner=', @ANYRESDEC=r8, @ANYRES16=0x0])
r10 = dup(r6)
write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@afid={'afid', 0x3d, 0xc5c2}}]}})
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r11, &(0x7f00000029c0)={0x2020}, 0x2020)

5m7.288529868s ago: executing program 4 (id=1467):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8803, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r3=>0x0)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f00000000c0)={0x8, 0x5, 0x0, 0x4, 0x0, [0x76a, 0x40, 0x4, 0x810]})
io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x2, r1, 0x0}])
ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000000))
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8803, 0x0) (async)
ioctl$BLKRRPART(r0, 0x125f, 0x0) (async)
pipe(&(0x7f0000000040)) (async)
io_setup(0x3ff, &(0x7f0000000500)) (async)
ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f00000000c0)={0x8, 0x5, 0x0, 0x4, 0x0, [0x76a, 0x40, 0x4, 0x810]}) (async)
io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x2, r1, 0x0}]) (async)
ioctl$TUNGETVNETLE(r1, 0x800454dd, &(0x7f0000000000)) (async)

5m7.110943022s ago: executing program 4 (id=1470):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x8ee46000)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000040)="91", 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, r4, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x400}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x33, 0xbe, "ad93306b44eb1ec729b5604b9ef4c67bcf1da5cfdab21c7596612e9558df67cb27e06afadffdae8549bfa6fcdb618c"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3ff}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}]}, 0x88}, 0x1, 0x0, 0x0, 0x884}, 0x80)
setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e22, 0xff, @mcast1, 0xe3}, {0xa, 0x4e22, 0x9, @private0, 0x7}, 0x1, {[0x1, 0x7fffffff, 0x8, 0x9a, 0x1, 0x6, 0x7, 0x94c0]}}, 0x5c)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RLERRORu(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ff", @ANYRES16], 0x52)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)

5m7.082749992s ago: executing program 36 (id=1470):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5441000)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x8ee46000)
r2 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000040)="91", 0x1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, r4, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x400}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x33, 0xbe, "ad93306b44eb1ec729b5604b9ef4c67bcf1da5cfdab21c7596612e9558df67cb27e06afadffdae8549bfa6fcdb618c"}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x3ff}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r5}]}, 0x88}, 0x1, 0x0, 0x0, 0x884}, 0x80)
setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e22, 0xff, @mcast1, 0xe3}, {0xa, 0x4e22, 0x9, @private0, 0x7}, 0x1, {[0x1, 0x7fffffff, 0x8, 0x9a, 0x1, 0x6, 0x7, 0x94c0]}}, 0x5c)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RLERRORu(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ff", @ANYRES16], 0x52)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)

4m48.793224615s ago: executing program 6 (id=1696):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r1 = inotify_init1(0x800)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)
r2 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0))
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001540)={0x10, 0x10, 0x1, 0x0, 0x25dfdbfe}, 0x10}], 0x1}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x60000526)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0x449)
r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff)
inotify_add_watch(r4, &(0x7f00000001c0)='./file0\x00', 0x80000006)
r6 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff)
write$binfmt_elf64(r7, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x82, 0x1, 0x2, 0x3, 0xfffffffffffffffc, 0x3, 0x3e, 0x5, 0x100, 0x40, 0x2001df, 0x0, 0x3e, 0x38, 0x0, 0x7, 0x2, 0x1}}, 0x40)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x11}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/167, 0xa7, 0x0, 0x1e}}, &(0x7f00000001c0)={0x0, 0x24, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

4m48.469630931s ago: executing program 6 (id=1698):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002e00), 0x2, 0x0)
write$vga_arbiter(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='lock '], 0xa)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x42, 0x20000004, 0x2}, 0x2e)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
r6 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10)
r7 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be)
bind$tipc(r7, 0x0, 0x0)
sendmsg$tipc(r7, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x41}}, 0x10, 0x0}, 0x0)
listen(0xffffffffffffffff, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0xbf})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r8=>0xffffffffffffffff})
recvmmsg$unix(r8, &(0x7f0000002b00)=[{{&(0x7f00000001c0), 0x6e, &(0x7f0000000780)=[{&(0x7f0000000140)=""/64, 0x40}, {&(0x7f00000002c0)=""/169, 0xa9}, {&(0x7f0000000380)=""/214, 0xd6}, {&(0x7f0000000480)=""/153, 0x99}, {&(0x7f0000000240)}, {&(0x7f0000000540)=""/117, 0x75}, {&(0x7f00000005c0)=""/20, 0x14}, {&(0x7f0000000600)=""/1, 0x1}, {&(0x7f0000000640)=""/220, 0xdc}, {&(0x7f0000000740)=""/23, 0x17}], 0xa, &(0x7f0000000840)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000000880), 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000940)=""/78, 0x4e}, {&(0x7f00000009c0)=""/38, 0x26}, {&(0x7f0000001100)=""/4096, 0x1000}], 0x3, &(0x7f0000000a40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xa0}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000b00)=""/77, 0x4d}], 0x1, &(0x7f0000000bc0)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x158}}, {{&(0x7f0000000d40)=@abs, 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000dc0)=""/231, 0xe7}, {&(0x7f0000000ec0)=""/134, 0x86}], 0x2, &(0x7f0000000fc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}, {{&(0x7f0000002100), 0x6e, &(0x7f00000021c0)=[{&(0x7f0000002180)=""/55, 0x37}], 0x1, &(0x7f0000002200)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xd0}}, {{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000002300)=""/172, 0xac}, {&(0x7f00000023c0)=""/96, 0x60}, {&(0x7f0000002440)=""/60, 0x3c}], 0x3, &(0x7f00000024c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000002500), 0x6e, &(0x7f00000027c0)=[{&(0x7f0000002580)=""/250, 0xfa}, {&(0x7f0000002680)=""/115, 0x73}, {&(0x7f0000002700)=""/175, 0xaf}], 0x3, &(0x7f0000002800)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f00000028c0)=""/61, 0x3d}, {&(0x7f0000002900)=""/207, 0xcf}, {&(0x7f0000002a00)=""/107, 0x6b}, {&(0x7f0000002e40)=""/4096, 0x1000}], 0x4, &(0x7f0000002ac0)=[@cred={{0x1c}}], 0x20}}], 0x8, 0x10002, &(0x7f0000002d00)={0x0, 0x3938700})
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4m47.625453067s ago: executing program 6 (id=1704):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001) (async)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x2000) (async, rerun: 32)
r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) (rerun: 32)
write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [{0x20, '{.*@)'}, {0x20, '/dev/ashmem\x00'}], 0xa, "cd64bc3803212827"}, 0x26)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d1c26001, 0x13, r0, 0xd3c59000)

4m47.561766569s ago: executing program 6 (id=1705):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x83, 0x4)
mount$bpf(0x0, 0x0, 0x0, 0x8100c8, &(0x7f0000000180)=ANY=[@ANYRES64=r0]) (async)
mount$bpf(0x0, 0x0, 0x0, 0x8100c8, &(0x7f0000000180)=ANY=[@ANYRES64=r0])
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,size=8'])
chdir(&(0x7f0000000140)='./file0\x00') (async)
chdir(&(0x7f0000000140)='./file0\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
pipe(&(0x7f0000019480)) (async)
pipe(&(0x7f0000019480))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0)
signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) (async)
signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000)
syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r3 = syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0)
rt_sigqueueinfo(r3, 0x5, &(0x7f0000000280)={0x41, 0x5, 0x4})
write(r2, &(0x7f0000000400)="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", 0x1f000)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240), 0x2, 0x0) (async)
lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200), &(0x7f0000000240), 0x2, 0x0)

4m47.557951758s ago: executing program 6 (id=1706):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
chroot(&(0x7f0000000000)='./cgroup\x00')
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101442, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
munmap(&(0x7f0000fe7000/0x1000)=nil, 0x1000)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x5c}], 0x1, 0xc, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0)
mmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000008, 0x1010, r1, 0x70738000)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0)
r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r4, 0x0, 0x0, 0x0)
wait4(r4, 0x0, 0x2, 0x0)
capset(&(0x7f0000000140)={0xf1504, r4}, &(0x7f00000001c0)={0x1, 0x6b1, 0x8, 0x0, 0x0, 0xfaa})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async)
chroot(&(0x7f0000000000)='./cgroup\x00') (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101442, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
munmap(&(0x7f0000fe7000/0x1000)=nil, 0x1000) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x5c}], 0x1, 0xc, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) (async)
mmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000008, 0x1010, r1, 0x70738000) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
wait4(r4, 0x0, 0x0, 0x0) (async)
wait4(r4, 0x0, 0x2, 0x0) (async)
capset(&(0x7f0000000140)={0xf1504, r4}, &(0x7f00000001c0)={0x1, 0x6b1, 0x8, 0x0, 0x0, 0xfaa}) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2c) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)

4m47.47819575s ago: executing program 6 (id=1707):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1800, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
r2 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480)
ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000080)) (async)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$inet6(0xa, 0x2, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2af01c3d0040fbffffffffffffff00"})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r8 = syz_open_pts(r7, 0x40840)
ioctl$TCSETS(r7, 0x5402, &(0x7f00000001c0)={0x7f, 0x0, 0x1, 0x100, 0x7, "61821f6f7b00eeec0585a4dfabaa5bcfb5c019"}) (async, rerun: 64)
read(r8, 0x0, 0x1c) (rerun: 64)
r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffdca}) (async)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', <r11=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r11})
r12 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', <r13=>0x0})
sendmsg$can_raw(r12, &(0x7f0000000300)={&(0x7f0000000000)={0x1d, r13}, 0x10, &(0x7f0000000180)={&(0x7f00000004c0)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x10}, 0x1, 0x0, 0x0, 0x48004}, 0x40) (async)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbba3bb03b9850fd8f2e000100000008000b00f5ffffff08000600", @ANYRES32=r11, @ANYBLOB="0500380001000000080031000600000008000600", @ANYRES32=r13, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0)

4m47.380512272s ago: executing program 37 (id=1707):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1800, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
r2 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0x2480)
ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000000080)) (async)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$inet6(0xa, 0x2, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) (async)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r7, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2af01c3d0040fbffffffffffffff00"})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r8 = syz_open_pts(r7, 0x40840)
ioctl$TCSETS(r7, 0x5402, &(0x7f00000001c0)={0x7f, 0x0, 0x1, 0x100, 0x7, "61821f6f7b00eeec0585a4dfabaa5bcfb5c019"}) (async, rerun: 64)
read(r8, 0x0, 0x1c) (rerun: 64)
r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) (async)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffdca}) (async)
ioctl$KVM_RUN(r10, 0xae80, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'sit0\x00', <r11=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r11})
r12 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'veth0_to_batadv\x00', <r13=>0x0})
sendmsg$can_raw(r12, &(0x7f0000000300)={&(0x7f0000000000)={0x1d, r13}, 0x10, &(0x7f0000000180)={&(0x7f00000004c0)=@can={{}, 0x80, 0x3, 0x4, 0x2, "07000000008000"}, 0x10}, 0x1, 0x0, 0x0, 0x48004}, 0x40) (async)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd7000ffdbba3bb03b9850fd8f2e000100000008000b00f5ffffff08000600", @ANYRES32=r11, @ANYBLOB="0500380001000000080031000600000008000600", @ANYRES32=r13, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x40)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0)

3m49.868647904s ago: executing program 8 (id=2517):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION2(r2, 0x40a0ae49, &(0x7f0000000280)={0x10201, 0x5, 0x1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x8000000000000001})
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x339)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) (async)
setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0) (async)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x6, 0x13, r4, 0xc15d2000)
r5 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) (async)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) (async)
ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x48, 0x4)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xc5)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000280)='./file0\x00') (async)
chdir(&(0x7f0000000280)='./file0\x00')
r7 = creat(&(0x7f00000001c0)='./bus\x00', 0x77)
write$tun(r7, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x38)
open(&(0x7f0000000100)='./bus\x00', 0x0, 0x90)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)

3m49.858010905s ago: executing program 8 (id=2518):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r2 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r2, 0xffff)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000771000/0x2000)=nil, 0x2000}, 0x1})
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$unix(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
sendmmsg$unix(r5, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="d8", 0x1}], 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
fcntl$addseals(r2, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000})
dup(r0)
close_range(r0, 0xffffffffffffffff, 0x0)

3m49.805706685s ago: executing program 8 (id=2519):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
socket$packet(0x11, 0x3, 0x300) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x2, 0x300) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'gretap0\x00', <r3=>0x0})
sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x8100, r3, 0x1, 0xe0}, 0x14)
r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0)
r5 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r5)
r6 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_control_io(r5, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x4, &(0x7f0000000040)=ANY=[]) (async)
syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x4, &(0x7f0000000040)=ANY=[])
pidfd_getfd(0xffffffffffffffff, r0, 0x0) (async)
r7 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async)
r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={0x2c, r8, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_LISTEN_PORT={0xffffffffffffffc7, 0x6, 0x4e21}, @WGDEVICE_A_PEERS={0x0, 0x8, 0x0, 0x1, [{0x0, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x0, 0x5, 0xe9}, @WGPEER_A_ENDPOINT4={0x0, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x0, 0x5, 0xfffb}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x0, 0x5, 0x7}, @WGPEER_A_ENDPOINT4={0x0, 0x4, {0x2, 0x4e22, @rand_addr=0x64010101}}, @WGPEER_A_PROTOCOL_VERSION]}, {0x0, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x0, 0x2, "b44c4aadcbf7aa5b046826777d3407637c3efaf9e9c5becf818e650792b6d2ff"}, @WGPEER_A_PROTOCOL_VERSION]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040}, 0x1011)
r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x10, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x1, 0x4, 0x8}}}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x200, 0x65, 0x0, 0xe, 0xff, 0x7}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x7, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc1a}}, {0xe4, &(0x7f0000000380)=@string={0xe4, 0x3, "0e59f7c73edf47a5acacc575aa6bd4576d811a40204de5ce6b2a628309c1806034e0673285ab2d5c8c02fecc5ed2e115d6878c5b714014e34618727147d068364ad55b85d3f6af9e161bca496d1664554b02a46eeaf982de2d1db31f511d34270e4b8d1fd6cdd34fb4adc911231929408ad7ea3146ca84528d80976dee8f200096f407a7251e4191f30b16c8afd590a50700747407b3624d6127f1eb27228e59ef71823ac93a3ae30726c7e176bf9733f96b1912e4242546ea72ceffd4ad13c77c560c5b9371effcace45795cb68f88a94c9b34fba517c7d75a400339a9bdd23e821"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1801}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xd933f89cad8bb447}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x44e}}]})
ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000080)=0x6) (async)
ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000080)=0x6)
readv(r9, &(0x7f0000000340)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

3m49.097825729s ago: executing program 8 (id=2522):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x2}, 0x4)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x0, 0x0, 0x1, 0x4, {0xa, 0x4e23, 0xffffff09, @local, 0x730b}}}, 0x3a)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xd4, 0x0, &(0x7f0000000340)=[@reply={0x40406301, {0xffffffff, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x23, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_handle={0x77682a85, 0xa}, @flat, @flat=@binder={0x73622a85, 0x101, 0x3}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}, 0x1000}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/29, 0x1d, 0x5, 0x34}, @flat=@binder={0x73622a85, 0xa, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/167, 0xa7, 0x2, 0x16}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0})

3m49.096903179s ago: executing program 8 (id=2523):
openat$random(0xffffffffffffff9c, &(0x7f0000000c80), 0x181, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x20102)
io_setup(0x3ff, &(0x7f0000000140))
open(0x0, 0x1a1342, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x57, 0x8004, 0x0, 0xffffff98)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x1, 0x1, 0xef2, 0x1, 0x4}})
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000340)=0x60)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000200)={{0x0, 0x1, 0x7723, 0x0, 0x3}, 0x2, 0x3, 'id0\x00', 'timer1\x00', 0x0, 0x80, 0x1, 0x7, 0x386})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000540))
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}})

3m49.085245399s ago: executing program 8 (id=2524):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x800, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x3, 0x0, 0x8, 0x7fffffff}]})
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x11, 0xeda0c611a677553c, @random="ee941a2536cb"}, 0x10)
close_range(r1, 0xffffffffffffffff, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r6, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0xbf})
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000640)={0x73622a85, 0x0, 0x3})
ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r8 = socket$inet(0x2, 0x2, 0x0)
r9 = add_key$keyring(&(0x7f0000002740), &(0x7f0000002780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$clear(0x7, r9)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
close(r8)
r10 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r10, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1)
setsockopt$inet_opts(r8, 0x0, 0x200000000000c, &(0x7f0000000240)="ea0eaa6600000000", 0x8)
sendmmsg$sock(r8, &(0x7f0000000280)=[{{&(0x7f0000000100)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000300)="18626cfdb437719c10c8aff5097e1d3cd364556f4ce29877d8f10524329973ed9db4109d803429f694fdf8b8a459cb16cf5b49e03778d408df36c1c1bf5006fa560e4f140211d1004e302859b86339087af51d36895d0460b2391fa1dfac6a8b5458573b0ea6f4e286495f44b17068e20c4af28192552aea555d2c8abce088190cd2cda6eec1ff533ce05a44dd5d2c65b09c1e5e378731ddfc209cbe062e0f9f428fbf49e436ee0cb6e2e2725c8827", 0xaf}, {&(0x7f0000001100)="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", 0x1000}, {&(0x7f00000003c0)="f9c928e8867ecb195def7f3d5612b42c8d8f6c0a3534c76c36726bf995b0bb4db05c80e077c7e964a1ce7e7145ee6c8dc21a751eca0785efcd00b3f5b5f30f9d9178581676c7442de5d0ddceff877c41bcc0778a7c387ea259cca5c55d831de20c35d87c41d48a26392e28135b25c497bd60aa3d0f28779063cf6c550bc53ff6bfcc09c18f3e35f61e3e03a67fae796943e62265ef2e05608a83ca42ec4792742b9517193843e2cbab3b", 0xaa}, {&(0x7f0000000480)="81be18dc4de79e4845a083793830a640503fe3b40976222ef4fb3350998d661521bfb1676e124dd628e3bb2f6b51cd37ba49cf472652b96830074ee15211182c7a7f5d42b6f33136200c8420c6d417f1c0239fb81c9eac86c3fe8c16eccc0cf5521fe866dd062a7672ff6fc26c63b99893f8e84b8ee77dcdbcd1c54f11de12ac692f79102a0a40a38eb4c5b589ef00ea2001ca7fc6241024ee91bba6cfeedb5e3251ddde2716b8da156fae5bede333ba101f2f3937a99f5d", 0xb8}, {&(0x7f0000000540)="0c95c9c1650c54d2b7902dd25a8caae949504b07bdc1c40234034e29039ed68218c9d0a985b7c1724398edeb2b98da509fc95879fd14688024431a89e9323f826c5e0b265c2db23e43d92d0476512380bfd96940aabebe57ebb494fa216801cd70492a30f23c96", 0x67}], 0x5, &(0x7f0000000200)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x7308f0f9}}], 0x30}}], 0x1, 0x24000040)
close_range(r0, 0xffffffffffffffff, 0x0)

3m34.041452609s ago: executing program 38 (id=2524):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x800, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x3, 0x0, 0x8, 0x7fffffff}]})
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r3=>0x0})
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x11, 0xeda0c611a677553c, @random="ee941a2536cb"}, 0x10)
close_range(r1, 0xffffffffffffffff, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r6, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0xbf})
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000640)={0x73622a85, 0x0, 0x3})
ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r8 = socket$inet(0x2, 0x2, 0x0)
r9 = add_key$keyring(&(0x7f0000002740), &(0x7f0000002780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$clear(0x7, r9)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
close(r8)
r10 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r10, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1)
setsockopt$inet_opts(r8, 0x0, 0x200000000000c, &(0x7f0000000240)="ea0eaa6600000000", 0x8)
sendmmsg$sock(r8, &(0x7f0000000280)=[{{&(0x7f0000000100)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000300)="18626cfdb437719c10c8aff5097e1d3cd364556f4ce29877d8f10524329973ed9db4109d803429f694fdf8b8a459cb16cf5b49e03778d408df36c1c1bf5006fa560e4f140211d1004e302859b86339087af51d36895d0460b2391fa1dfac6a8b5458573b0ea6f4e286495f44b17068e20c4af28192552aea555d2c8abce088190cd2cda6eec1ff533ce05a44dd5d2c65b09c1e5e378731ddfc209cbe062e0f9f428fbf49e436ee0cb6e2e2725c8827", 0xaf}, {&(0x7f0000001100)="02596d685376700ec1a3d91c9cd63db48c08b060ee987ce0b046d71bcb5cf6e4a052b2c0eb123a1335ad59de82b1838051e76d320f7e5b6b94c9b9cacf5a1d21023a62df707980884bc24c33598553423c1d4be8ba4b5eb16fcfef16ec70f83389ad0b04ce6af918ec5cb360faa65778e0ae96ba658c54ab5c063ab9a5d4f59cd12dfbca7e8358282334cfba6f532b4f64e36ea4aece709a0ddf2ab52334cbc0a899e0229a232b889653ddd3f3dde52abf811228c188779e4fe4aae5c81411303397dc40d0c8b205427545323ab228907a3775d49ca7d1e545ba8f25750dacea99d2988e81bdbfe4e7628346a5c55d5f22ff758a67efe7c6b1153322e9ca0482808d301117854ad032a2c25576062969513e8afa15d96f75dd7a8863ca076a8d3ef6bf6fe56cd715f3d5b1ca6110679475851434480e5292a1ef3cdc8b6469780f3dc5bbe4b0d612a46e5139c9c74be771da26134676954b88a30b9b467aa0cc7c4fc2a94e4e6f39e5c396355030af62239c1d8c4ae5d19beba04698b32a3c2ad9a37fb120cda3995b311c9f1c822d62690066cc17139a9f7626d5098a8f34b3cb233e68149e06f6193905e6653b9638bd5cd152beaaecda7da0d1fb0fc7413a9a0c64aba0997a7cc2817e1ed265c821ceb3cc063664c6abbee6cf11490a0d7271b2b04add7cdd93a7040b961fcb1cfcff9be4698fd0ede83ea0c5bd4f1fbb7a95ab5d7aeb1a29066890c29dae3d225cbd8f3424f49dcea914e4122a3882511ceae394b4e46b369cff995b107cd6da38342cb8bfc3214c3259d032de3012ac85f3ac0c4512442eee51a81d4c7ccef328c1f474b4c79b93b88401f7790cfe2e4d40de427989b68456ef61c0a872832f2dd52cafb042cb2f2080bddf6192471450b4d55c099f85f80749447fc94936ab8d1147d68e307c39376315fbecf939a32f9ccbe0d745979ce661c35a2e8fded171d0170cf9b3735076c50950f1565d6e1fe5c861a0bdb8c3d8373001cca2673f22e930c7c937f445d782fd3b23f3c802994eca7e4b898e8ceae08ea13e64745a7255df565f184e16ea72d1ba2ecaeb8bc595dfbd7f8dba58843b1c74b99b354a7bfca8d41e0262b878eb13768ab1bf6e55f39acf04eda7a3101f59174ddd6013cb5460b8305cb6507c568ebfd01e29c1740bccbb397c82063494dd17d7a38d71ce8468377435f90be00484ca0616805074b6f1058b39116bc65b46566e7f3667808ccad95852f92b61d177c48ab0dd116d24959c941c1ae022f531874072f9dc89d5c80aa417f1189af685210a2db3afbacbd702ba3f078edda5b44fc5b44421150ac3df264ddbe324896d5ea0a930ab4ec192c05a4723ac35395c3fa12106bf92bc0355ac868e54af797ec9b4f7de9119c569e2e796da8ea1089f9c57a6202a6b9ab596955e232e0311b5972bcd9928259593486bfd1f44302477b81f6a6023492267327c2a7995d6240d178480dc70e487605374b77cdf7bfa693148f07ae03d09c0a00568b45262f7ee6a6058ebd2847d04aa96ac3a49f8806125de9b3b25c00fef364a09696a44d55a9a67f75f07067ae2e2228e5eff7370c622784438dc0e03ea16fa2907bb7faa6e718ef0d1525264207fbec389952bfb2c8841618b15459adc545fb6694c3af32810b7521e7ecf36e10e1ce946df694214d19dd820dc70ae3f8bca55d3bf13de9d2e5cc3e29261f44d3c69ddd131d2864916d024d85d807b7043022576432cf319bed1e836577468190cf4327f969df4f94713eba26ca3609cf71263cf12f1b6038b96914a50c7377a8cdc2dfa0990c66be4260a9f0bf83ca28cfcde4e95093a74690e7dd98009118408ef35ed52cd0725dab9ebc0ff59144f2a8b69fd546179358c2510f2132f07870b2a94f59f32f1982ccfd5b25d2864d464c2e4c325bbca3b8fefca2701baa0cd6ec30562eea6604a13359d41da04af4f00e58547d7ea86e651d437b38ed0a9d2ef04a1cd17dad9c1bb4fef049da6b31c51dc741405ecbabafda76a22ff20115616d0e2bc9ee1180bffb444c4ed03386d554315f426e4ee0c1ae71e29959262b4cbc5dcc1991b5a350bae922b631e2ccda68f630933034a4bd4c7ad364681151805601c0699395e7a5930cbc5bf2c3d72be23e64a198c22150375c79a5c377b63563719f2adb8a605c83fdbb25f5b8a17a0dab7111f93fd250c8d56b5eecc8bfdfdd41f8b84cf6679158b153d6b3d0c66308e7e899dcc4bd1d9d1977dd9c5c3f736c165f79e5c01158c32463b5eaee49e1d6a4ec2f9b0e888c4f968fdd7f3bcac4062e128f44933825bfa50ee702422d34a993c9a3912b477ce94120d25626503c3b86264c3d153b72f424e18f0979049d858b9f3300fc84421133ac1891bab5db2fd16bd0d864ddf9998e390e20e0f47a1203a4d00743bb272f6134ccb68e51b90e4a2156796aa10855f20fb37997d79aef5cc97414489ccc3fc7fe47ec73fab8c6919f9342f30d38c3552c37be15d6a78bcca69408c616e32ac4f4995f60e4b8fa769c5b45ca1f4b3dc96a30a0b77062eac0ad9068c55d4618c226e1354a8c7807dace9e4a5dd14f63165b435693dcf00224a63b877e9244bfec16cb1d457185b620e152691c593e5c47304213a61ba099a9178e9545f8cac1e7c96029528717a4b655753c01cccafce9973f6149549a81eb077322ebd9c91d9d3d1f781a82ac280868f6741388e30ba5412673ab18f8e2db5b6c63c07e0dd3f346247f81f9c746d4d582621a7f413f6c698eaedef0f2097c13b78d7c2ddce64c0e54b83dc7e0ba68228f461be4fe80f38ed517ab7e500152b79ffed7dfce4bc12afcbe06b6d7d4fc3e4711a05441bb2001c8b31e49087007e1ee5eee92d7bf75751e38d37743a5b78694a5897602277713c4dce64648fa49c90aaa369bcdbd1062b366dbf43cc0a6da4f461c16082f4b8868d3f224e56e486e0ec2ff0b1dba367ac354b8243301c29e49c17f2425516c48198ee46153c41ad27a149a6c908ac5fd03c9c9eb8f2228d3e308f5a28cc87d0dcf28dacc94c315c84eb50e52859068388408211921dc8aa344799a8d327a6163e0e03e8d8b84109235bb3121260c8382ed72a31e850f4255312c7519313237b92102b963d06c23047080fa96bee7cf49d8ca69a307102bfb685ac591dd71f5230096d5627174841bc3ba8d98ce3fb1d5e50b67e7b9d6279ee4a53a5ac3e33d403475c2a44c53643f3f33a5f275856748937368e978e9ebd8ba533cd83c65e873a60f3d5d99475a878de860b0a5736c43ca432e9f44831b9042654b4ee1bfccc3dc4b4e66e3898a2aee87d2d845c02d9364dccebaeb870ddbb0f1c027de72d67e38d93b5fafffb866970fe8524efa45f5a77a73ad6bda6076284433d59a59f5069dbb3a3cc65fdfb94cb8564bcb4eff6e4309b542d47f81a412ac865db5abfbab9f27d5111b5682c63ac30bef3d1e912c812651c443bc65630b52047f7d7d3cc596939e53b82e26c0ea87254feb290ba7d28389d11886b1a830724db593a88f0eab221f0434e2279f2e44349eaf6aaf049b2b19719a79ed7a8fd73370947370e849801460ca85318402b513482ec73951cfb66f89fb1138f6a149b2e731e1eef5e772746ae2e50d9366367109ce88643d2be3c72e07f169e9dda9cd5f41a902315b75c18ea0974aab9f1a35199ab2eac981e302164bdfb7c14c9eec249375c1e6467315d73ae378ec2a9f94a7d753e7e4a70c407f0557764d0c2085ea89c60e1ac28dc0bc97a5936b105edff192babca86d69bf76fd7d3a2f0f58ce5e6b06c75832352eaab11ced807701b7a407fc16bf00474c0812ede4cc87a9e731309966aabb7597b5986e9eef8795be950a336a409f607f2d85d10209c9e039a2086826dac0bd401e943e5f005d4ec4d355fbe10306cc3b40d0bf957c18b8d1670910de9ff4d9b89505bb0c2325c108597d27f65e6afcae99700cda62b077ce547a66706a54792a3ff61e15a9779be071cef12bc7b051157b8b1ed065fe2bc84e8bb3ab74c4014638a29c0d3d945b329b8f037ee73cc35d7b64c8363f50d975090cc8031f3f54974e69b01ef704e28151ba0abe6569bf6c8eb116bc334f5777c10dcfd79df3e469d9b65fef04257cd12b6de609d86df12d054fb345e5d06badb1a15f8e98f3bbd09300879828a6e221141e889a3c2500f00a31bef89e7247299616ee6a4f884b96ebf7cb448bdc600c363b769f0e253f22f38008d4b733bb6b58feff39f7fbd9ad457d559a4ec2202bf4f0f7c669d48600249e15e261bce39c7a7f51a7702aebed56a76375c03f24980e85aa3d6fc656adfc517b1e17753a3085c6b9fd9cf1f94056c796ddc4f9d5b7b98d860e52edde5a42c6b7b6461bc541741a4e0fd6e9df555a6da2ae0eba22ba77b93ac836afed72e0a290069d14d7dbd70f0febc877512417f0965c38e47411a3c03619c2d5aeee826f92a6b030b7c9b343a90095e7de1a5f63beba2269b0614649720d0371bb0271db2049bcadf2cc22d47027554e2f7fcdac9a6ee4f0158538749c19008bf5c21c72c858d4b79306c489e07ee0af4ad82afdaaab133e06ef00ea0ed3115bd8ca9c437e1850ac525a85fc4991619be5ebcaa92373f51603ad0e13bb97a761bb40aab2a774a997907e970bb85ff8af0320b1417ba659636487a4768600b7b766e400349c300d6a2665d8a7ec44f8d55e0c466ae06aa5ad33cf3ac930fa8cfd6116c637c9a0a7b52387c011a450df003dfcee7115b80384e098a77ffb5106a325203609f31ec6c78b99c38887dabd106872889bbec33c5e1d31490f056e46b525ea9424db091ca0b2d89c0a30a06e4c0fded490854c1e4c112998b47f60b0f70d59a56e4414a85e320efd09f4f6d104c7f3b50de86dde17e08e4b2653576428ab9ad495d2d9bfbe751e81f077ab585513443bcc81bf5db748e4c0cf4845d8901bc98931b9ddea7ab5d7fcd0b19cc6f5b5b280fc22724dcd8d8dc87bf611ff62b8fb3b7dff094450c3c55e6d92549b53424e41225ac02b8bc8a49d1fa5f474f99f1d52703a1a28909cfaae82d0d599035e52ebdb89180c7d665c915f46fa7a2808519c5f3fa79e61189cce2a0328f656aaa6942bd21862c7d12878c7d80e355500529b04538764f7215b07f9277b7be2807bc7998fc35dfb5f9a1f7dc5e79103be64d3f3b9d638668e930802fc925040057cb23b02aff2e2686c561218938e4c9642a59c56cb57d39d8543e6b4465a904c57b7481c42cecb18a9b827c22ba6be87a8a645048572b5e3b79d5b121bceb54cb39b6ae21bbe33d018eec80a4a80f733a5b3de6331e015810c3869cfee3db6ba7b3d47fbdc37aadbfc216eddb51e7208278db135ef203099b05248a35b601ed27697d5dcd40969e5fc39ea76a2d081255eb1198b3f87be928d3e7d8e9693cfc1ca0afd1b5d583f8fadd4ad55f22161cdea9659e3e9c46ed7fc58eae0a8866013c30acfc324cd920e16a089c1aa9aa1a755694b907bbff33668343117d0bd3875c1a406aabcfad97ec5d19e09ef32e2d680b053c99d3d746138320bc2ceccff1004cfb45e5f737c35c95c38fd899fb166cbb48bdbaa55267a287e0a72e793cc3974c3cb446a50387c45054f37cae97fc07261ba66e31a4a64ec3240028f4c0f310044650830d38fe73cb692b958d0e4afe0e87673fecc711c6c232f68788690d61836391a818e013f29c0a7ca80d53b005fe9815c942a69a9d9061665aec9d675cd25761f13f700cee4d6b59007840bb9b", 0x1000}, {&(0x7f00000003c0)="f9c928e8867ecb195def7f3d5612b42c8d8f6c0a3534c76c36726bf995b0bb4db05c80e077c7e964a1ce7e7145ee6c8dc21a751eca0785efcd00b3f5b5f30f9d9178581676c7442de5d0ddceff877c41bcc0778a7c387ea259cca5c55d831de20c35d87c41d48a26392e28135b25c497bd60aa3d0f28779063cf6c550bc53ff6bfcc09c18f3e35f61e3e03a67fae796943e62265ef2e05608a83ca42ec4792742b9517193843e2cbab3b", 0xaa}, {&(0x7f0000000480)="81be18dc4de79e4845a083793830a640503fe3b40976222ef4fb3350998d661521bfb1676e124dd628e3bb2f6b51cd37ba49cf472652b96830074ee15211182c7a7f5d42b6f33136200c8420c6d417f1c0239fb81c9eac86c3fe8c16eccc0cf5521fe866dd062a7672ff6fc26c63b99893f8e84b8ee77dcdbcd1c54f11de12ac692f79102a0a40a38eb4c5b589ef00ea2001ca7fc6241024ee91bba6cfeedb5e3251ddde2716b8da156fae5bede333ba101f2f3937a99f5d", 0xb8}, {&(0x7f0000000540)="0c95c9c1650c54d2b7902dd25a8caae949504b07bdc1c40234034e29039ed68218c9d0a985b7c1724398edeb2b98da509fc95879fd14688024431a89e9323f826c5e0b265c2db23e43d92d0476512380bfd96940aabebe57ebb494fa216801cd70492a30f23c96", 0x67}], 0x5, &(0x7f0000000200)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x7308f0f9}}], 0x30}}], 0x1, 0x24000040)
close_range(r0, 0xffffffffffffffff, 0x0)

1m2.937237543s ago: executing program 0 (id=5104):
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder0\x00'}) (async, rerun: 32)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async, rerun: 32)
io_setup(0x10000, &(0x7f0000000000)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000480)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x5, 0x0, 0x4}]) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f00000002c0)={&(0x7f0000000040), 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x40, r5, 0x10, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x40000)

1m2.914268784s ago: executing program 0 (id=5105):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0xa)
fchdir(r2)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r3, 0x100, 0x1)
getdents64(r3, 0x0, 0x4f)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x6000}})
write$FUSE_DIRENTPLUS(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000", @ANYRES64=r5], 0x10)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r5, 0xc400941d, &(0x7f00000005c0)={<r6=>0x0, 0x80000000, 0xfad, 0x1})
ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f0000000080)={{r3}, {@val={r6}, @actul_num={@val=0x2b, 0x80, 0x74}}})
sendfile(r4, r0, 0x0, 0xffffffff)

1m2.825848586s ago: executing program 0 (id=5106):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000003c0), 0x3) (async)
getsockopt$bt_hci(r1, 0x11a, 0x1, 0x0, &(0x7f0000000280))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x402, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f00000000c0), 0x10)
sendmsg$can_bcm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1, 0x8, 0x2, {}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @can={{0x2, 0x1, 0x1, 0x1}, 0x81, 0x1, 0x0, 0x0, "68c76dee16687b11"}}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) (async)
r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async)
dup3(r2, r0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x8, 0x0, &(0x7f0000000000)=[@decrefs], 0x0, 0x0, 0x0})

1m2.825141596s ago: executing program 0 (id=5107):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
socketpair$unix(0x1, 0x2, 0x0, 0x0)
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000001400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000480)={@flat=@weak_handle={0x77682a85, 0x1000, 0x3}, @fda={0x66646185, 0xa, 0x2, 0x7}, @fd={0x66642a85, 0x0, r1}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}}], 0xfffffffffffffcc1, 0x0, 0x0})

1m2.734674367s ago: executing program 0 (id=5108):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000180)={0x0, 0x59, &(0x7f00000003c0)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x20, 0x25dfdbfd, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
r3 = userfaultfd(0x801)
r4 = socket$inet6(0xa, 0x80002, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@local, 0x6, 0x1, 0x1, 0x6, 0x0, 0x1}, &(0x7f0000000040)=0x20)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x511})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r6 = fcntl$dupfd(r3, 0x0, r3)
ioctl$UFFDIO_CONTINUE(r6, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1})
write(r2, &(0x7f0000000400)="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", 0x1f000)

1m2.662273739s ago: executing program 0 (id=5109):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x7, 0x0)
ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000140)={{{0x8, 0x1}}, 0x1a, 0x94, &(0x7f0000000100)="7e28dbbc34a447fd03448bcca1b23dad4f91ecebdcb1eb859c5b"})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x3})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r2, r0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d40)={0x2c, 0x19, 0x15, 0x0, 0xfeffffff, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x10, 0x9, 0x0, 0x1, [@nested={0x9, 0x88, 0x0, 0x1, [@generic="985098a0af"]}]}]}, 0x2c}], 0x1}, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x10, 0x0, &(0x7f0000001b40)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0})

1m2.532172421s ago: executing program 39 (id=5109):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x7, 0x0)
ioctl$USBDEVFS_BULK(r1, 0xc0185502, &(0x7f0000000140)={{{0x8, 0x1}}, 0x1a, 0x94, &(0x7f0000000100)="7e28dbbc34a447fd03448bcca1b23dad4f91ecebdcb1eb859c5b"})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x3})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r2, r0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d40)={0x2c, 0x19, 0x15, 0x0, 0xfeffffff, "", [@typed={0xa, 0x0, 0x0, 0x0, @str='\x02\x02\x00\x00\x00\x00'}, @nested={0x10, 0x9, 0x0, 0x1, [@nested={0x9, 0x88, 0x0, 0x1, [@generic="985098a0af"]}]}]}, 0x2c}], 0x1}, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x10, 0x0, &(0x7f0000001b40)=[@clear_death={0x400c630f, 0x1}], 0x0, 0x0, 0x0})

25.477907518s ago: executing program 1 (id=5710):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000)
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000) (async)
connect$netlink(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0}) (async)

25.475598478s ago: executing program 1 (id=5711):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close_range(r0, 0xffffffffffffffff, 0x0)

25.431010109s ago: executing program 1 (id=5712):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
prctl$PR_GET_KEEPCAPS(0x7)
r1 = eventfd2(0xfff, 0x800)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x48, 0x0, &(0x7f0000000200)=[@exit_looper, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fda={0x66646185, 0x2, 0x2, 0x36}, @fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0xa, 0x2, 0x38}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0})
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000000))

25.422523689s ago: executing program 1 (id=5713):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x2, 0x10a5fa13, 0x9, 0x6, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000051aa776d83e9c02100", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents(r3, 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x2, 0x7fff0003}]})
close_range(r4, 0xffffffffffffffff, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341)
ioctl$USBDEVFS_IOCTL(r5, 0xc00c5512, 0x0)
unshare(0x22020600)
mount$overlay(0x0, &(0x7f0000000080)='./file0/file0/file0\x00', &(0x7f0000000140), 0x1102410, &(0x7f0000000340)={[{@nfs_export_on}, {@metacopy_on}, {@volatile}], [{@seclabel}, {@fowner_eq={'fowner', 0x3d, r2}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x65, 0x32, 0x62, 0x65, 0x63, 0x66, 0x66], 0x2d, [0x36, 0x31, 0x65, 0x61], 0x2d, [0x36, 0x32, 0xd, 0x62], 0x2d, [0x65, 0x63, 0x36, 0x33], 0x2d, [0x31, 0x37, 0x35, 0x37, 0x32, 0x35, 0x32, 0x62]}}}]})
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
read$FUSE(r6, &(0x7f00000005c0)={0x2020}, 0x2020)

25.268828372s ago: executing program 1 (id=5719):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x10)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)=ANY=[@ANYRES64], 0x14}}, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000), 0x8)
ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

25.173696774s ago: executing program 1 (id=5722):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
socket$netlink(0x10, 0x3, 0x13)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, <r3=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, 0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000))
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffffff1)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, r4, 0xa03c0000) (async)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)

25.113850495s ago: executing program 40 (id=5722):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
socket$netlink(0x10, 0x3, 0x13)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, <r3=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, 0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000))
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffffff1)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4, 0x12, r4, 0xa03c0000) (async)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil)

4.922915105s ago: executing program 7 (id=6116):
mmap(&(0x7f000000c000/0x4000)=nil, 0x4000, 0xa, 0x31, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) (async, rerun: 64)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0) (rerun: 64)
preadv2(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/129, 0x81}, {0x0}], 0x2, 0xffffffff, 0x8, 0xd) (async)
syz_open_dev$mouse(&(0x7f0000000000), 0x9, 0x4080)

4.022980172s ago: executing program 7 (id=6138):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4050)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r4, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r5, &(0x7f0000000180)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e23, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4004044}, 0x50)
sendmsg$tipc(r5, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0)
accept4(r4, 0x0, 0x0, 0x400000000000000)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0xe, 0x0, 0x0)
ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000001c0)={{0x1, 0xdddd0000, 0xe, 0xf0, 0x40, 0xfd, 0xd4, 0xc, 0x0, 0x4, 0x7, 0x7}, {0x80a0000, 0x0, 0xd, 0x9, 0x8, 0x3, 0x6, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x1, 0xc, 0x0, 0x6, 0x5}, {0xeeef0000, 0x3000, 0x8, 0x11, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0x7, 0x5, 0x4, 0x1e, 0x4b}, {0x2, 0xd000, 0x9, 0x7, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x3, 0xfc}, {0xeeee8000, 0x1000, 0xf, 0x9d, 0x3, 0x0, 0x1, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0x4000, 0x8000000, 0x4, 0x5, 0x3, 0x3, 0xa, 0x9, 0x5, 0x6, 0x2, 0x7}, {0xeeef0000, 0x5}, {0xdddd1000, 0x5}, 0x40010000, 0x0, 0xf000, 0x3d8, 0x5, 0x8001, 0xe6e70c00, [0xffffffffffffff47, 0x3ff, 0x7, 0x10800000000000c5]})
ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000800)={"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"})
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000000f08"])
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0)
futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000440)={{0x77359400}, {0x0, 0xea60}})
r11 = syz_io_uring_setup(0x11c7, &(0x7f0000000400)={0x0, 0x5683, 0x80}, &(0x7f0000000080), &(0x7f00000005c0))
syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2, 0x0, 0x0, r11}, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xffffffff7fffffff, 0xfffffffffffffffe, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0})

3.836595186s ago: executing program 7 (id=6140):
socket$igmp6(0xa, 0x3, 0x2) (async)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, 0x0, 0x0) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00')
preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/187, 0xbb}], 0x1, 0x14a, 0x80a) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
bind$pptp(r1, &(0x7f0000000100)={0x18, 0x2, {0x3, @loopback}}, 0x1e) (async)
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r3}, @flat=@weak_binder={0x77622a85, 0x29bdfb4895f82e9a, 0x1}, @fda={0x66646185, 0x1000000004, 0x0, 0x1d}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.836057756s ago: executing program 7 (id=6141):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x11307000)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xa, 0x98af02)
ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f0000000180)=0xffff)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]})
r3 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70)
mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x400, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')
creat(&(0x7f0000000240)='./file0\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f0000002100)={0x2020, 0x0, <r5=>0x0}, 0xfffffcdf)
write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f, 0x3000}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc7441, 0x0)
write$cgroup_netprio_ifpriomap(r6, 0x0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000007c0)='\x00\x00\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00')
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000034c0)='\x00\x00\x03\x86\x00\x00\x00\x01\x00x\x92\x12\xbc\x00\x00\xbb\x0642\x9c\x1a\xd1\xcbx\xb0\xd6\x1e\x10gQ\xca\x0e;\xf7\'\x8c\x95\x83=\t7\x94\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcbzA\x8e\xf6\x89\xc2\'\xdfn\x054Y\xd4\x91s\x00\x00\x00-<\r\xd1?$\x8b\x17Bn\xe0\\\x98\xe1%\x1c\xf4\xd0\xf5\xd5\x80\xc4\xb4a \xac\xc4K\x03\xfa\x13Vz\xbf\xe3c\x8d \x0f\xb1\xe9\xf2oci(\xcb\x82\x05\xfe[H\xaf\x01\x18\xc8\x1b\x1e\xbe\xd8>\a\x00\x00\x00\xf7\xafd%\xf1\xdbjE\x01\xd1sD5hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\x851Y9OB\xdeB\xe1\x02-&\"1hS\x92\xe4$-\x02\x00\xe4\x8e\"\x85\xc9x\xef\x81E.r\x89\xe5\x00\x9e\x97\x96\xb8j\x81\xf0\xa5a\xfb\xa6\xff\xfbj\x11\x12\xc0\xbb\xfdq~#\xf7\xa8\"$,\xf4\x84|\x89o\x00<\xa6-\xb0\xd3\x80\xbe\xcf\a\x00\xfc\xa6\xb1\x05\x94\x84l\x05\x00\xeb\xd8\t\x00\x00\x00CvNx461\x04Nl\xedV\xcet\xaa~\x01j\x94\xec\x92\x86uY\xf6\xb5\t?,~\xa67\\\xb9\xc9K\xf8\x9d\x96\xc0\xb5\xc7wF\f\x00\x97T\x90.\x9c\xe3\x9a\xf1\xb9\x9c\x13\xbc\x19\xde/\xaahB\t\x97\a03\xcd\xb3\xc8\xd5l\x14!\xf9Xg\xc52\x1d\xeeB\xccT\x0e\xd8\xef\xc8\xe9\xb4\xf3l\xc3\x99f.\xeb\xe9\x05\xcbkz3+\xdd\xe1*8\x95@0t0\xad\xe3#\xd7\x19\xe7Q\xdfmI\xe5\x1e\xe4\x87\xc9\x8f\xa7\xe0\xd9v\xf6\x01\x9d\x8f`,\x1a8\x81I\x86l\x8f2\r:\xc1\x02\xdeZ%\xa7\x01\x00\x00\x00\x01\x00\x00\x00\xbe\x97\x1fGe\x94\xa6\xa3\xab\xdb\r\x17\xff[\xb1\x00\xff\x7f\x00\x00\x1c\x00\x80\x00\x00\x00\x00\x00\x00\x00\x00\x00\"Y\xad\xaf\x83\xaf\x93\xdaHg\xd4\x8c\xee\x0f\x00\x1c/\x9a\xf83\';:q\x92\x010g\\Ym\xd8,\x8d\b\xab\x9dq\xed\xcc\xba\x06\x1ej\xb7s33\xe5\xec\xe90M\xd1\xfd\xbb\xdf\xedc\xd1\xbbI\xa3\xbdqU\x02\x00\x00\x00\x00\x00\x00\x00\xee\xb0\v\x84\xc7\xac\xec\x92t\x00\x00\x00\x92\x1a\f\xbbM\x1cG\xb8\xa4\x05\x16\x06\xb6\x1a\tL\xe3C$K~\xf7\xa1mt\x87E\xc4\xb6h\xf3\x8cG=&\xbd\xa16\xaa\xa2N\xac\xad,Q\x97\xd6\x15\xc46v\x9a\x97\xa6\xb9`\x03\x8ff,V\xe8\xeb\x8bJn\x12o\x8b\xe7K)+\xe0\x06\x8a\\\xfc\nw\xf8\x01\xc4\xd8\x97\xd2\x9cF\xda6F\xfa6I\x03o\xa7\x15&*\xf6Wn\xb9\x00~Y\x17:\x03\xef\xf9\x03\xe7\x8d\x16\\/\xe3\xfcV\x9d\xf2g\xbcFy\xca\x8a\x10*\xbdU#\x7f\xbb\'6\x9e\x1d\n\x19\xff[\x92n\xe1\x81q\xfe\x10\xfd\xa6pL\xc6\x0fN\x06&W\xa2\x9dPWp\x94r\xe2\x92X\x12\x87\xe5\x94\xb3Aa\xb1/\\\xde\x9c\x93\xf5(,u|\f`\x8e\x86\xeb\xcb\x18J+\xdcv\x894\x01\xd0\xc6\x95\xea^j(x\xa5\x9b\xd6f1\x9d\x8fcr\x18\x1fs%\x91~\x19@\x84!u\xc8u\x8aL\x021k\xb4\b\xbb_#A{dw<\xb9\x9dR\xef\xaf]\xe0\xca\xd9x\xdab7@\xfd\x0e\x94\xf8\xab\x8c\xf4\xf1\xb0\xd6\xbe\x8e,\xa2Y\x000F\xe6q\xe3~\xc9\xaa!\xf3\'UF\xf0\xc0\x11\x11\xc2\xc9\x93#K\xea\xc2c\xb9\xe7)\xa4\xd9X\xb9\xaay\xd1\xc7\xab\xe9F\xc6r5\xdf\xa0\'y\r\xbf\xbd\x97\x9d\x8aS\xdb\rF\x9e99\xb4\xf7\x8c\xf9\xca;\xef\xc7]\xa4\xdd<6wc5\xc6\xdeS\xe5*H\xed\xc8^a-\xe8\xb1\xc2\xca\xfa\t\xd0\\\xfc\xe9\x90\x83oj\xa9E\xfb\x8du\x94\x97\x1cF\x0f\xe9d\xf2\xe4\fc\xdf\xde\x1c\xd8u\x9b\xd7\x9c\x11\xbe\b\xb5\x1e\x04\xa0\xdc\xe1Oxu\xd7O#\n%\x89+\xcc\x9f\x8e\xb2:\xa0\xb0\xdc\xd1\xba\xbd@\xf4\x00\x00\xfd\aqn:\x83\x84N\x83K\xbf^\xd8&\xde\x14\x17\x9d\xcd\xed\x19\xd0\xc1$*K\b$\x12\xf3\x88#\xb1#\xb6RX\x11\x86X\x94\x84\x8e\xdd\x82b\x19b\x9fQ\x91\x98\x9e\xf7\xf6`\x03\xb3\x8a\x86\xf9\x00\x00\x00\x00\x00P\x00'/1066)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7)

1.816944505s ago: executing program 5 (id=6172):
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_MM_AUXV(0x23, 0xc, 0xffffffffffffffff, 0x2b)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0)
arch_prctl$ARCH_GET_CPUID(0x1011)
sendfile(r0, r0, 0x0, 0x20000023896)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0x5, 0xc, 0x3d, 0x7fff, 0x14, "71feaf33432ed6fe90107884be157e88b3e578"})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000)
r2 = userfaultfd(0x801)
ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r2, 0xc018aa06, &(0x7f0000000080)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x2})
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000aa6000/0x400000)=nil)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2)

1.693750928s ago: executing program 5 (id=6179):
r0 = socket$inet(0x2, 0x3, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0)

1.686064348s ago: executing program 5 (id=6180):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20100, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6)
close(r0)

1.637864599s ago: executing program 5 (id=6181):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]})
r2 = syz_usb_connect(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f0700000000000905830300e4"], 0x0)
syz_usb_disconnect(r2)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000240)=[@decrefs={0x40046307, 0x1}], 0x50, 0x0, &(0x7f00000000c0)="70d071aa12b1c0578b26dfccb2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8edc11615cb9fab1600"/80})
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r3)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x6a, &(0x7f0000000080), 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0x18, &(0x7f00000001c0)={@fd={0x66642a85, 0x0, r5}, @flat=@weak_binder={0x77622a85, 0x29bdfb4895f82e9a, 0x21}, @ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/59, 0x3b, 0x1, 0x12}}, &(0x7f0000000180)={0x0, 0x4, 0x14}}, 0x400}], 0x0, 0x0, 0x0})
syz_clone(0x20022000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000740)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

1.06556841s ago: executing program 2 (id=6190):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8}, 0x1c) (async)
connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x7, @empty, 0x106}, 0x1c)
r3 = fcntl$dupfd(r2, 0x0, r2)
setsockopt$inet6_tcp_int(r3, 0x6, 0xa, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000d00)=ANY=[], 0x21c}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000)
getsockopt$inet6_buf(r3, 0x29, 0xd4, &(0x7f0000000000)=""/22, &(0x7f0000000340)=0x16)
ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'xfrm0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async)
sendmsg$SOCK_DESTROY(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1100000015002b01"], 0x14}, 0x1, 0x0, 0x0, 0x20008941}, 0x0) (async, rerun: 64)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async, rerun: 64)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x22001, 0x0)
write$cgroup_int(r4, &(0x7f00000001c0), 0x12) (async)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3000000, 0x10, r4, 0x8000000) (async, rerun: 64)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/233, 0xe9, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x24}, @fd}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (rerun: 64)

1.06537002s ago: executing program 2 (id=6191):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) (async, rerun: 64)
mremap(&(0x7f0000abb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00005f3000/0x2000)=nil) (rerun: 64)
listen(0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x8000000000000, 0xe, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0x0, 0x5, 0x0, 0x6a, 0x400], 0xeeee8000, 0x2011c0})
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
readv(r3, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2)

1.028605341s ago: executing program 2 (id=6192):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@flat=@handle={0x73682a85, 0x100b}, @flat=@weak_binder={0x77622a85, 0x1, 0x10000000002}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x26}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})

1.02028215s ago: executing program 2 (id=6193):
statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/64) (async)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x901)
r2 = open_tree(r1, &(0x7f00000000c0)='./file0\x00', 0x0)
utimensat(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={{}, {0x77359400}}, 0x0) (async)
syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x3f0, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x40, 0xdb, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x7, 0x1, 0x2, 0xb6, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x9, 0xdc, 0x52}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x8, 0xc, 0x2, 0x8, 0xb}, 0x1f6, &(0x7f0000000200)={0x5, 0xf, 0x1f6, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "2d09d180c4488d2b2a3b55e1ffde7480"}, @generic={0xd4, 0x10, 0xa, "24857a90f443f03ac3c33be16e34fc10e1ccea48e352c2a468953455574ddfc4194a8c87247c9fb68765753c87d38b6ee19671dacb2a0b072a95f76ca9561091875875ab9c0750092df7528c93935b318f566c85b03a5e4634db8911fe8173ff67f7b88e86c0edaaa21565ee37afcaf99ee64657b27d2fcc0666e156c85b495d22bae53bd9231b3d29a616529bb21f40d62181c6f14572f1ef8328c196f00376e0b5ed1fbf58e19420feb99771ed2478237e02700f2060b595b8a6feb2b4f2c10bdc98d847f23cec0922286f080639525d"}, @generic={0xfb, 0x10, 0x0, "e824af2ae6e9c4001b7903a66e8faff9dd610d65bf47294828c3577f275d69a09016397fabd8c78346da8aabf9d079bb26d6388af31bacdd1da6388b3760c4708db94a466172aa5cb452278deb48993bf269c40613375427b764a94914afed043ef1dd00e88510d25ceeee9d2d863a1af943c7315c8bd0a0e90058a690cf325209bfbf893ce738f60b74da91c4e691b35d5a5f716f447fcfae37e039dfc81fec4a1608b6306c7b03ff17ee7254f9ab58e94113e9f8bd2a58c9e023991caef7da2f4dd194cefd41afd438a1ad05f0478f97f55b30aa41752bf4c83c78d0af70faa8e7d11b72ac4ceebce4dd5754d280c34ce9b988d70ddbea"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0xab, 0x7, 0xf7, 0x0, 0x8}]}, 0x5, [{0xd, &(0x7f0000000400)=@string={0xd, 0x3, "ba743b5203b3e6af75b6e4"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x436}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xd8d3}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x180c}}, {0x62, &(0x7f0000000500)=@string={0x62, 0x3, "cd451e70424837f208c99efec9ddf6d5beb5268e14b04b273dedcc12ad2291ec919187ac04af561b7af59b97ca92f58dea2df4854cc905e154572c54684f26e8b2b2ac50345ec95b355c5cd996508462869edc419e4d1275dae2197e5b234150"}}]}) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVEDEF(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x4c, r4, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20}, 0x20000044) (async)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000007c0), r3)
sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x64, r5, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_REASON={0x5, 0x12, 0x3f}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_REASON={0x5}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_REASON={0x5, 0x12, 0x9}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xffff}]}, 0x64}}, 0x841) (async)
move_mount(r1, &(0x7f0000000900)='./file0\x00', r2, &(0x7f0000000940)='./file0/file0\x00', 0x10)
ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000980)=0x9)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000a00)={'wpan3\x00', <r7=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b40), r6)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r6, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r8, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x9294e96136cee10a}, 0x20000040)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x30, r5, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7fffffff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x800) (async)
sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x78, 0x5, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x20000800}, 0x4800) (async)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f0000000f80)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x70, 0x0, 0x2, 0x70bd2b, 0x6e, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x40, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a358ca7f8a8c656a3409c44ad1d5ce15"}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4000) (async)
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000fc0)={0x5000200d})
socket$packet(0x11, 0x2, 0x300)
sendmsg$NFT_BATCH(r2, &(0x7f0000001300)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x23c, 0x6, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_USERDATA={0xe9, 0x7, 0x1, 0x0, "e9d1538f96adefd70b05ba07ff78e2a9ee824c36c48a580f5210c0262d72c1e97048cc1b256798ad14ec71ae316ace9f07a23b19424d815cf33dff7bcb4cdcb09d16463658de6238f7d33b3f9097c4ce030bd3408b911e0734c6b58d88529827a4ae6d3d92c9b443feca189f4dcb6b84b6504d60da837e2a220f1d8b79a93e8dcdb47d2f7422c72b485aba1e5b79b7e322ac5ac83a12e0caa04a7041b6cf03aa2b1da8f786893039be52e1c2130ffd638d0d09e37a3386a9335724358bfc4169e425a25b612b6017fc35ed42b4117d88ab171ad0f0ab73c05fb77ff7ce627b27fa9f091f45"}, @NFTA_RULE_EXPRESSIONS={0xd0, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x1c, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4}}}, {0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x50, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xcf37}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x313}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}]}, @NFTA_RULE_USERDATA={0x6b, 0x7, 0x1, 0x0, "684182bba6e0eefaa2c0d2cfa8184740c5131a77e20d89398380a5434a86d074f2be9d61b10061f9406ca139d5954cda972e59ae2314ecfa94c6f51e4ee78d362dc2d4a2fe896e13aa0308a20791da8fd2c5db5cfa1c6f4f70e44f7a37d82b93c144429f37493d"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x264}, 0x1, 0x0, 0x0, 0x10}, 0x4000018)
setrlimit(0x7, &(0x7f0000001340)={0xfffffffffffffff8, 0x80000000})
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000016c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001680)={&(0x7f00000013c0)={0x2bc, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "47a6282a96987b90e86cfbde722b6a3fbe1e2589e2d67704383356d7e4348e5e"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x81}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff6a3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb51}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0xf0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xdd, 0x3, "c547ac5ca752b96a1a6d9744ad71f1eebe4feda8a61dc7ed2f0456505cf3e94aa87e3f39e340cb89f6897cda39fa009839c8c422d266360c3e76498710255e9b86ae3085dc6b7453ab3e27b0a926833d30e9a9e8a6ec23663aa47d73a73136d328c125c8a2b06c732220115b88ea6094dd971a4bfa3037300cc2a7a37d72c6b320500e95857efeef779f6fe47f68b83cebe3113ea93af612ca08564b675fe680fa1e984957ed1641962433770ca33dbe415882f5f2adf9ce97a247c80dfc1c9b9bfc89d70a2d32ebff893a816a7461be21ed3d1167ba5ec0f5"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x401}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xe326}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x2bc}, 0x1, 0x0, 0x0, 0x8c0}, 0x8000) (async)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001740), r1)
sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x74, r9, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8000, 0x35}}}}, [@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000800}, 0x1) (async)
socket$inet_tcp(0x2, 0x1, 0x0)
mmap$xdp(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000008, 0xc0010, r2, 0x80000000)

865.899104ms ago: executing program 5 (id=6194):
mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', &(0x7f0000000140), 0x2b15801, &(0x7f0000000040)=ANY=[])

865.028654ms ago: executing program 5 (id=6195):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000200)='./file1\x00', 0x2)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000003c0)='./bus\x00')
setreuid(0xffffffffffffffff, 0xee01)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
socket$nl_audit(0x10, 0x3, 0x9) (async)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_coalesce={0xe, 0x3, 0x9, 0x0, 0x2, 0x800, 0x2, 0x6, 0xd5d, 0x8, 0x9, 0x0, 0x0, 0x3, 0x9, 0x3, 0x1, 0x1, 0x69cf, 0xfff, 0x28001, 0x101, 0x7fff}}) (async)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_coalesce={0xe, 0x3, 0x9, 0x0, 0x2, 0x800, 0x2, 0x6, 0xd5d, 0x8, 0x9, 0x0, 0x0, 0x3, 0x9, 0x3, 0x1, 0x1, 0x69cf, 0xfff, 0x28001, 0x101, 0x7fff}})
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0) (async)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r0, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x80000008, 0x10003})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r3}, @flat=@binder={0x73622a85, 0x10b, 0x2}, @flat=@binder={0x73622a85, 0x101, 0x1}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r6)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYRES8=0x0], 0x4c}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYRES8=0x0], 0x4c}}, 0x0)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r6)

848.937844ms ago: executing program 9 (id=6196):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$bpf(0x0, 0x0, 0x0, 0x958028, &(0x7f00000001c0)) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400001000001fe) (async)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) (async)
mmap(&(0x7f0000019000/0x2000)=nil, 0x2000, 0x3000001, 0x12, r0, 0xca639000) (async)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000000))
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00')

821.065695ms ago: executing program 9 (id=6197):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc0046209, &(0x7f0000001340))
r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001f7, 0x82)
r2 = dup(r1)
ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x23, 0x1, 0x11, 0x8, 0x0, 0x2, 0x0})
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0xe5441000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
mlock(&(0x7f0000339000/0x3000)=nil, 0x3000)

769.949175ms ago: executing program 9 (id=6198):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x80000002})
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff)
syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000080)='memory.current\x00', 0x0, 0x0)

769.657275ms ago: executing program 9 (id=6199):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000180)=0x3, 0x8)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@remote, 0x0, 0x0, 0x4e22, 0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffffffffffff}, {@in6=@private0, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40}, [@algo_comp={0x48, 0x3, {{'lzjh\x00'}}}]}, 0x138}}, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0)

769.392156ms ago: executing program 9 (id=6200):
r0 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0)
connect$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_to_batadv\x00'})
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
close_range(r1, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
accept4$vsock_stream(r2, 0x0, 0x0, 0x800)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$snapshot(0xffffffffffffff9c, 0x0, 0x1a1341, 0x0)
write(r3, &(0x7f0000000400)="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"/4089, 0xffffff4c)

740.710886ms ago: executing program 9 (id=6201):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa381, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2)
prlimit64(0x0, 0xa, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8c001}, 0x4000054)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
write$selinux_attr(r7, &(0x7f0000000000)='system_u:object_r:fuse_device_t:s0\x00', 0x11)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000700000000000200000a140000001100010000000000000000000700000a"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x20000080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r1)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

491.964441ms ago: executing program 7 (id=6202):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x80086601, &(0x7f0000000280)={'lo\x00', @link_local={0x2, 0x80, 0xc2, 0xc}})
ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000000180)={0x2, 0x3, 0xffffffff})
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x11)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x94}, 0x8000)
ioctl$TIOCCONS(r0, 0x541d)
socket$inet_udp(0x2, 0x2, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
close_range(r1, 0xffffffffffffffff, 0x0)

425.836222ms ago: executing program 2 (id=6203):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
pipe2$watch_queue(0x0, 0x80)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x42, 0x2}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
r5 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000f4000040"])
recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2)
socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000080)=0x1, 0x4)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r7, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x8000000008})
fcntl$lock(r7, 0x26, &(0x7f00000000c0)={0x0, 0x2, 0x9, 0xe71})
fcntl$lock(r7, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x40, 0x3})
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x40000)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)
mprotect(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1000001)
r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x2, 0xf000, 0x2000, &(0x7f0000ffa000/0x2000)=nil})
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil)
r9 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
ioctl$UDMABUF_CREATE(r9, 0x40187542, 0x0)
readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x2)

425.427752ms ago: executing program 2 (id=6204):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x11)
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$uac1(0x0, 0xa1, &(0x7f0000000340)=ANY=[@ANYBLOB="12010100000000106b1d010140000102030109028f0003"], 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setuid(0xee01)
setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000080)={0x3, [0x9, 0x4], 0x6}, 0x10)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

423.945632ms ago: executing program 7 (id=6205):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
write$tun(r1, &(0x7f0000000340)={@val={0x0, 0x18}, @val={0x3, 0x1, 0x3, 0x4, 0xc4, 0x10}, @ipv4=@gre={{0x5, 0x4, 0x0, 0x26, 0xd8, 0x68, 0x0, 0x4d, 0x2f, 0x0, @multicast1, @broadcast}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x19, 0x0, [], "1c794c5fcd565649050022835ac3ac97cb9fb274d4d9998212"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "7fb5875c8cb1e5103810f3514c5859085f8bcd044121d872d527be9db6ccba47166b45027b4ebb9222f071ff96f3443ec4461c325c516f1698e1f011fa3bfab0dedf7bd62f68af"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9, 0xfff9]}, {0x8, 0x88be, 0x3, {{0xa, 0x1, 0x3, 0x3, 0x1, 0x2, 0x0, 0x4}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x3, {{0x9, 0x2, 0xe, 0x3, 0x1, 0x3, 0x7, 0x3}, 0x2, {0x8, 0x8, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "a33ce789860dc984c201b1e28a9fe3cd0d2bcc93a01e37ac14a0f11b"}}}}, 0xe6)
wait4(r0, 0x0, 0x2, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
mlockall(0x1)
mlockall(0x7)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@handle={0x73682a85, 0x100, 0x1}, @fda={0x66646185, 0x1, 0x0, 0x11}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0})
fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:getty_var_run_t:s0\x00', 0x25, 0x0)

380.022713ms ago: executing program 41 (id=6205):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002})
write$tun(r1, &(0x7f0000000340)={@val={0x0, 0x18}, @val={0x3, 0x1, 0x3, 0x4, 0xc4, 0x10}, @ipv4=@gre={{0x5, 0x4, 0x0, 0x26, 0xd8, 0x68, 0x0, 0x4d, 0x2f, 0x0, @multicast1, @broadcast}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x19, 0x0, [], "1c794c5fcd565649050022835ac3ac97cb9fb274d4d9998212"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [], "7fb5875c8cb1e5103810f3514c5859085f8bcd044121d872d527be9db6ccba47166b45027b4ebb9222f071ff96f3443ec4461c325c516f1698e1f011fa3bfab0dedf7bd62f68af"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x9, 0xfff9]}, {0x8, 0x88be, 0x3, {{0xa, 0x1, 0x3, 0x3, 0x1, 0x2, 0x0, 0x4}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x3, {{0x9, 0x2, 0xe, 0x3, 0x1, 0x3, 0x7, 0x3}, 0x2, {0x8, 0x8, 0x0, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "a33ce789860dc984c201b1e28a9fe3cd0d2bcc93a01e37ac14a0f11b"}}}}, 0xe6)
wait4(r0, 0x0, 0x2, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0)
mlockall(0x1)
mlockall(0x7)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@handle={0x73682a85, 0x100, 0x1}, @fda={0x66646185, 0x1, 0x0, 0x11}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x18, 0x38}}, 0x1000}], 0x0, 0x0, 0x0})
fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:getty_var_run_t:s0\x00', 0x25, 0x0)

7.98552ms ago: executing program 3 (id=6206):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x5, 0x0, [{0x2b0, 0x0, 0x2}, {0x9d5, 0x0, 0x40}, {0xadc, 0x0, 0xa34}, {0x230, 0x0, 0x7}, {0x9a5, 0x0, 0x4}]})
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs2\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000040)={[], [{@flag='nolazytime'}]})
mount$9p_tcp(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2011000, &(0x7f0000000180)={'trans=tcp,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@version_u}, {@cache_none}], [{@fsuuid={'fsuuid', 0x3d, {[0x35, 0x61, 0x64, 0x36, 0x35, 0x69, 0x30, 0x61], 0x2d, [0x35, 0x37, 0x30, 0x35], 0x2d, [0x65, 0x61, 0x30, 0x35], 0x2d, [0x32, 0x33, 0x37, 0x55], 0x2d, [0x39, 0x66, 0x66, 0x33, 0x5a, 0x52, 0x32, 0x37]}}}, {@smackfsdef={'smackfsdef', 0x3d, '.\xd2/'}}]}})

0s ago: executing program 3 (id=6207):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=@updsa={0x188, 0x1a, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x35}, @in6=@empty}, {@in=@local, 0xfffffffe, 0x33}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4309(aegis256-aesni)\x00'}}}, @algo_auth_trunc={0x4c, 0x14, {{'crc32c-generic\x00'}, 0x0, 0x60}}]}, 0x188}}, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, <r1=>0x0}, &(0x7f0000000140)=0xc)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='-', @ANYRESDEC, @ANYRESHEX], 0x27)
setsockopt$inet_buf(r2, 0x0, 0x10, &(0x7f0000000000)="17000000020001000003be8c5e687a8a6a003c00020100ecff3f000000030000240001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880a00243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3dac0000d3aa7c4733bf79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085d024f0298e9e90554062a", 0xb8)
quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f00000000c0)=@filename='./cgroup\x00', r1, &(0x7f0000000200))

0s ago: executing program 3 (id=6209):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=<r1=>0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1010040, &(0x7f0000000280)=ANY=[@ANYBLOB='rlog_pages=1844632,\x00'])
timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
clock_gettime(0x6, &(0x7f0000000100))
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = eventfd(0x8c66)
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000240)={0x278100003e7, 0x0, 0x1, r5, 0x1})
ioctl$KVM_IOEVENTFD(r4, 0x4040ae79, &(0x7f0000000040)={0x278000003e7, 0x0, 0x1, r5, 0x1})
clock_gettime(0x0, &(0x7f0000000140))
clock_gettime(0x0, &(0x7f00000001c0)={<r6=>0x0, <r7=>0x0})
timer_create(0x3, &(0x7f000049efa0)={0x0, 0x12, 0x1}, &(0x7f0000044000)=<r8=>0x0)
timer_gettime(r8, 0x0)
timer_settime(r8, 0x1, &(0x7f0000000200)={{r6, r7+60000000}, {0x0, 0x9}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x38, r10, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffffffb}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x4040100)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x7ffff000)
clock_gettime(0x0, &(0x7f0000000180)={<r11=>0x0, <r12=>0x0})
timer_settime(r1, 0x0, &(0x7f0000000240)={{0x77359400}, {r11, r12+10000000}}, &(0x7f0000000280))

kernel console output (not intermixed with test programs):

_cfi_generic_file_write_iter+0x10/0x10
[  371.719821][T15733]  __kernel_write_iter+0x395/0x830
[  371.719840][T15733]  ? __cfi_generic_file_write_iter+0x10/0x10
[  371.719866][T15733]  ? __cfi___kernel_write_iter+0x10/0x10
[  371.719884][T15733]  ? get_dump_page+0x160/0x220
[  371.719907][T15733]  ? __asan_memset+0x39/0x50
[  371.719933][T15733]  ? iov_iter_bvec+0xc0/0x180
[  371.719957][T15733]  dump_user_range+0xb06/0xdf0
[  371.719976][T15733]  ? __cfi_dump_emit+0x10/0x10
[  371.719994][T15733]  ? __cfi_dump_user_range+0x10/0x10
[  371.720013][T15733]  ? elf_coredump_extra_notes_write+0x42f/0x4c0
[  371.720041][T15733]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[  371.720070][T15733]  elf_core_dump+0x2cd9/0x3810
[  371.720097][T15733]  ? __cfi_elf_core_dump+0x10/0x10
[  371.720125][T15733]  ? dump_interrupted+0xf0/0xf0
[  371.720152][T15733]  ? filp_open+0x182/0x1d0
[  371.720176][T15733]  ? 0xffffffffff600000
[  371.720193][T15733]  do_coredump+0x1bfa/0x2bd0
[  371.720223][T15733]  ? __cfi_do_coredump+0x10/0x10
[  371.720249][T15733]  ? asm_exc_page_fault+0x2b/0x30
[  371.720280][T15733]  ? __kasan_slab_free+0x6a/0x80
[  371.720300][T15733]  ? kmem_cache_free+0x1c1/0x510
[  371.720318][T15733]  ? get_signal+0xa75/0x14f0
[  371.720342][T15733]  get_signal+0x11fd/0x14f0
[  371.720367][T15733]  arch_do_signal_or_restart+0x96/0x720
[  371.720396][T15733]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  371.720428][T15733]  irqentry_exit_to_user_mode+0x4e/0xb0
[  371.720454][T15733]  irqentry_exit+0x16/0x60
[  371.720478][T15733]  exc_page_fault+0x66/0xc0
[  371.720503][T15733]  asm_exc_page_fault+0x2b/0x30
[  371.720525][T15733] RIP: 0033:0x7f10f6c4f927
[  371.720547][T15733] Code: 88 15 d2 5d eb 00 88 05 cf 5d eb 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[  371.720565][T15733] RSP: 002b:00007f10f7b9c120 EFLAGS: 00010202
[  371.720584][T15733] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f10f6d8eba9
[  371.720598][T15733] RDX: 00007f10f7b9c140 RSI: 00007f10f7b9c270 RDI: 000000000000000b
[  371.720613][T15733] RBP: 00007f10f6e11e19 R08: 0000000000000000 R09: 0000000000000000
[  371.720624][T15733] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  371.720636][T15733] R13: 00007f10f6fd6128 R14: 00007f10f6fd6090 R15: 00007fffc1f37438
[  371.720653][T15733]  </TASK>
[  371.720662][T15733] memory: usage 302132kB, limit 307200kB, failcnt 8896
[  371.829325][T15984] netlink: 'syz.1.4861': attribute type 21 has an invalid length.
[  371.832939][T15733] memory+swap: usage 303140kB, limit 9007199254740988kB, failcnt 0
[  371.838725][T15984] netlink: 388 bytes leftover after parsing attributes in process `syz.1.4861'.
[  371.843691][T15733] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  372.195694][T15733] Memory cgroup stats for /syz7:
[  372.195826][T15733] cache 308088832
[  372.206858][T15733] rss 0
[  372.209631][T15733] rss_huge 0
[  372.211970][   T36] audit: type=1400 audit(1758245253.315:31187): avc:  denied  { write } for  pid=15987 comm="syz.1.4863" name="file0" dev="tmpfs" ino=2483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  372.212851][T15733] shmem 0
[  372.238417][T15733] mapped_file 0
[  372.241872][T15733] dirty 0
[  372.244843][T15733] writeback 0
[  372.247526][   T36] audit: type=1400 audit(1758245253.315:31188): avc:  denied  { open } for  pid=15987 comm="syz.1.4863" path="/455/file0" dev="tmpfs" ino=2483 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  372.249787][T15733] workingset_refault_anon 5084
[  372.275930][T15733] workingset_refault_file 0
[  372.288410][T15733] swap 2326528
[  372.292188][T15733] swapcached 0
[  372.295564][T15733] pgpgin 476888
[  372.299062][T15733] pgpgout 402693
[  372.302589][T15733] pgfault 269714
[  372.306141][T15733] pgmajfault 732
[  372.309720][T15733] inactive_anon 0
[  372.313374][T15733] active_anon 0
[  372.316864][T15733] inactive_file 0
[  372.320536][T15733] active_file 0
[  372.324002][T15733] unevictable 308088832
[  372.328148][T15733] hierarchical_memory_limit 314572800
[  372.333688][T15733] hierarchical_memsw_limit 9223372036854771712
[  372.339879][T15733] total_cache 308088832
[  372.344029][T15733] total_rss 0
[  372.347312][T15733] total_rss_huge 0
[  372.351069][T15733] total_shmem 0
[  372.354510][T15733] total_mapped_file 0
[  372.358458][T15733] total_dirty 0
[  372.361925][T15733] total_writeback 0
[  372.365726][T15733] total_workingset_refault_anon 5084
[  372.371004][T15733] total_workingset_refault_file 0
[  372.376296][T15733] total_swap 2326528
[  372.380342][T15733] total_swapcached 0
[  372.389155][T15733] total_pgpgin 476888
[  372.397435][T15733] total_pgpgout 402693
[  372.401937][T15733] total_pgfault 269714
[  372.406059][T15733] total_pgmajfault 732
[  372.410110][T15733] total_inactive_anon 0
[  372.414450][T15733] total_active_anon 0
[  372.418582][T15733] total_inactive_file 0
[  372.423682][T15733] total_active_file 0
[  372.427865][T15733] total_unevictable 308088832
[  372.433018][T15733] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.4793,pid=15725,uid=0
[  372.448329][T15733] Memory cgroup out of memory: Killed process 15725 (syz.7.4793) total-vm:90100kB, anon-rss:1204kB, file-rss:60080kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0
[  372.554416][T15736] syz.7.4793 invoked oom-killer: gfp_mask=0x100cc2(GFP_HIGHUSER), order=0, oom_score_adj=0
[  372.595847][T15736] CPU: 0 UID: 0 PID: 15736 Comm: syz.7.4793 Not tainted syzkaller #0 f314b4a7c60d1499390e62a22e4d37ca5a327e54
[  372.595884][T15736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  372.595896][T15736] Call Trace:
[  372.595904][T15736]  <TASK>
[  372.595912][T15736]  __dump_stack+0x21/0x30
[  372.595942][T15736]  dump_stack_lvl+0x10c/0x190
[  372.595968][T15736]  ? __cfi_dump_stack_lvl+0x10/0x10
[  372.595993][T15736]  ? ___ratelimit+0x3f7/0x5a0
[  372.596016][T15736]  dump_stack+0x19/0x20
[  372.596040][T15736]  dump_header+0xd7/0x490
[  372.596061][T15736]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  372.596087][T15736]  oom_kill_process+0x35d/0x640
[  372.596110][T15736]  ? sched_clock_cpu+0x75/0x400
[  372.596137][T15736]  out_of_memory+0x659/0xa80
[  372.596159][T15736]  ? __cfi_out_of_memory+0x10/0x10
[  372.596182][T15736]  ? mutex_lock_killable+0x92/0x1c0
[  372.596213][T15736]  ? __cfi_mutex_lock_killable+0x10/0x10
[  372.596239][T15736]  mem_cgroup_out_of_memory+0x279/0x350
[  372.596260][T15736]  ? drain_obj_stock+0xed0/0xed0
[  372.596278][T15736]  ? memcg1_oom_prepare+0x2c6/0x3a0
[  372.596295][T15736]  try_charge_memcg+0x8f7/0xde0
[  372.596316][T15736]  ? gfp_to_alloc_flags_cma+0x90/0x1c0
[  372.596342][T15736]  ? __cfi_try_charge_memcg+0x10/0x10
[  372.596365][T15736]  ? __alloc_pages_noprof+0x31f/0x7b0
[  372.596391][T15736]  __mem_cgroup_charge+0xf6/0x410
[  372.596418][T15736]  ? filemap_get_entry+0x3fb/0x460
[  372.596442][T15736]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  372.596471][T15736]  ? _raw_spin_lock+0x8c/0x120
[  372.596491][T15736]  filemap_add_folio+0x57/0x2d0
[  372.596512][T15736]  __filemap_get_folio+0x597/0x9d0
[  372.596538][T15736]  ? __cfi___filemap_get_folio+0x10/0x10
[  372.596562][T15736]  ? inode_to_bdi+0x6d/0x100
[  372.596589][T15736]  simple_write_begin+0x60/0x390
[  372.596614][T15736]  generic_perform_write+0x32d/0x960
[  372.596642][T15736]  ? __cfi_generic_perform_write+0x10/0x10
[  372.596669][T15736]  ? mnt_get_write_access_file+0x1af/0x3b0
[  372.596695][T15736]  ? generic_write_checks_count+0x429/0x540
[  372.596720][T15736]  ? file_update_time+0x1ef/0x220
[  372.596756][T15736]  __generic_file_write_iter+0xcf/0x180
[  372.596783][T15736]  generic_file_write_iter+0xb1/0x310
[  372.596810][T15736]  ? __cfi_generic_file_write_iter+0x10/0x10
[  372.596837][T15736]  __kernel_write_iter+0x395/0x830
[  372.596855][T15736]  ? __cfi_generic_file_write_iter+0x10/0x10
[  372.596883][T15736]  ? __cfi___kernel_write_iter+0x10/0x10
[  372.596902][T15736]  ? get_dump_page+0x160/0x220
[  372.596926][T15736]  ? __asan_memset+0x39/0x50
[  372.596954][T15736]  ? iov_iter_bvec+0xc0/0x180
[  372.596978][T15736]  dump_user_range+0xb06/0xdf0
[  372.596999][T15736]  ? __cfi_dump_emit+0x10/0x10
[  372.597017][T15736]  ? __cfi_dump_user_range+0x10/0x10
[  372.597037][T15736]  ? elf_coredump_extra_notes_write+0x42f/0x4c0
[  372.597066][T15736]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[  372.597096][T15736]  elf_core_dump+0x2cd9/0x3810
[  372.597123][T15736]  ? __cfi_elf_core_dump+0x10/0x10
[  372.597152][T15736]  ? dump_interrupted+0xf0/0xf0
[  372.597180][T15736]  ? filp_open+0x182/0x1d0
[  372.597205][T15736]  ? 0xffffffffff600000
[  372.597222][T15736]  do_coredump+0x1bfa/0x2bd0
[  372.597253][T15736]  ? __cfi_do_coredump+0x10/0x10
[  372.597280][T15736]  ? asm_exc_page_fault+0x2b/0x30
[  372.597311][T15736]  ? __kasan_slab_free+0x6a/0x80
[  372.597332][T15736]  ? kmem_cache_free+0x1c1/0x510
[  372.597350][T15736]  ? get_signal+0xa75/0x14f0
[  372.597372][T15736]  get_signal+0x11fd/0x14f0
[  372.597394][T15736]  arch_do_signal_or_restart+0x96/0x720
[  372.597421][T15736]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  372.597453][T15736]  irqentry_exit_to_user_mode+0x4e/0xb0
[  372.597480][T15736]  irqentry_exit+0x16/0x60
[  372.597504][T15736]  exc_page_fault+0x66/0xc0
[  372.597529][T15736]  asm_exc_page_fault+0x2b/0x30
[  372.597553][T15736] RIP: 0033:0x7f10f6c4f927
[  372.597570][T15736] Code: 88 15 d2 5d eb 00 88 05 cf 5d eb 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[  372.597588][T15736] RSP: 002b:00007f10f7b9c120 EFLAGS: 00010202
[  372.597606][T15736] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f10f6d8eba9
[  372.597621][T15736] RDX: 00007f10f7b9c140 RSI: 00007f10f7b9c270 RDI: 000000000000000b
[  372.597636][T15736] RBP: 00007f10f6e11e19 R08: 0000000000000000 R09: 0000000000000000
[  372.597650][T15736] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  372.597663][T15736] R13: 00007f10f6fd6128 R14: 00007f10f6fd6090 R15: 00007fffc1f37438
[  372.597681][T15736]  </TASK>
[  372.597689][T15736] memory: usage 301496kB, limit 307200kB, failcnt 10318
[  372.649307][   T31] usb 10-1: new high-speed USB device number 46 using dummy_hcd
[  372.756798][T15736] memory+swap: usage 309024kB, limit 9007199254740988kB, failcnt 0
[  372.991543][   T31] usb 10-1: Using ep0 maxpacket: 32
[  372.993766][T15736] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  373.014090][   T31] usb 10-1: config index 0 descriptor too short (expected 29220, got 36)
[  373.017622][T15736] Memory cgroup stats for 
[  373.077115][   T31] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  373.080122][T15736] /syz7
[  373.092667][   T31] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81
[  373.112836][T15736] :
[  373.112967][T15736] cache 218959872
[  373.121301][T15736] rss 8192
[  373.127764][T15736] rss_huge 0
[  373.130597][   T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  373.134554][T15736] shmem 0
[  373.154073][T15736] mapped_file 0
[  373.162150][T15736] dirty 0
[  373.162340][   T31] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  373.171921][T15736] writeback 0
[  373.184051][   T31] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  373.184062][T15736] workingset_refault_anon 5253
[  373.184076][T15736] workingset_refault_file 0
[  373.184085][T15736] swap 1503232
[  373.184092][T15736] swapcached 114688
[  373.209982][   T31] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  373.236206][   T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.252889][T15736] pgpgin 486455
[  373.254751][   T31] usb 10-1: config 0 descriptor??
[  373.256358][T15736] pgpgout 433992
[  373.256368][T15736] pgfault 270082
[  373.256376][T15736] pgmajfault 804
[  373.256384][T15736] inactive_anon 4096
[  373.256391][T15736] active_anon 110592
[  373.291063][T15736] inactive_file 0
[  373.294825][T15736] active_file 0
[  373.298328][T15736] unevictable 218882048
[  373.302809][T15736] hierarchical_memory_limit 314572800
[  373.308280][T15736] hierarchical_memsw_limit 9223372036854771712
[  373.314481][T15736] total_cache 218959872
[  373.318645][T15736] total_rss 8192
[  373.322197][T15736] total_rss_huge 0
[  373.325940][T15736] total_shmem 0
[  373.329403][T15736] total_mapped_file 0
[  373.333534][T15736] total_dirty 0
[  373.337011][T15736] total_writeback 0
[  373.340811][T15736] total_workingset_refault_anon 5253
[  373.346099][T15736] total_workingset_refault_file 0
[  373.351111][T15736] total_swap 1503232
[  373.354990][T15736] total_swapcached 114688
[  373.359523][T15736] total_pgpgin 486455
[  373.363506][T15736] total_pgpgout 433992
[  373.367579][T15736] total_pgfault 270082
[  373.371647][T15736] total_pgmajfault 804
[  373.375707][T15736] total_inactive_anon 4096
[  373.380145][T15736] total_active_anon 110592
[  373.384558][T15736] total_inactive_file 0
[  373.388762][T15736] total_active_file 0
[  373.392742][T15736] total_unevictable 218882048
[  373.397554][T15736] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz7,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.4793,pid=15729,uid=0
[  373.412598][T15736] Memory cgroup out of memory: Killed process 15729 (syz.7.4793) total-vm:90100kB, anon-rss:1076kB, file-rss:59008kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0
[  373.460910][   T36] audit: type=1400 audit(1758245254.493:31189): avc:  denied  { create } for  pid=15902 comm="syz.7.4836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  373.507457][   T31] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  373.573039][   T31] usb 10-1: USB disconnect, device number 46
[  373.595445][   T31] usblp0: removed
[  373.783019][  T586] Bluetooth: hci0: command 0x1003 tx timeout
[  373.789039][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  374.082463][  T965] usb 1-1: new high-speed USB device number 76 using dummy_hcd
[  374.242903][  T965] usb 1-1: Using ep0 maxpacket: 32
[  374.249891][  T965] usb 1-1: config 2 has an invalid interface number: 177 but max is 3
[  374.258298][  T965] usb 1-1: config 2 has an invalid interface number: 183 but max is 3
[  374.266533][  T965] usb 1-1: config 2 has an invalid interface number: 172 but max is 3
[  374.274715][  T965] usb 1-1: config 2 has an invalid interface number: 184 but max is 3
[  374.282922][  T965] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  374.293011][  T965] usb 1-1: config 2 has no interface number 0
[  374.299151][  T965] usb 1-1: config 2 has no interface number 1
[  374.305212][  T965] usb 1-1: config 2 has no interface number 2
[  374.311290][  T965] usb 1-1: config 2 has no interface number 3
[  374.317379][  T965] usb 1-1: config 2 interface 177 altsetting 250 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  374.328519][  T965] usb 1-1: config 2 interface 177 altsetting 250 has an invalid descriptor for endpoint zero, skipping
[  374.339653][  T965] usb 1-1: config 2 interface 177 altsetting 250 endpoint 0xC has an invalid bInterval 252, changing to 11
[  374.351043][  T965] usb 1-1: config 2 interface 177 altsetting 250 has a duplicate endpoint with address 0x5, skipping
[  374.361919][  T965] usb 1-1: config 2 interface 177 altsetting 250 endpoint 0xD has invalid wMaxPacketSize 0
[  374.371932][  T965] usb 1-1: config 2 interface 177 altsetting 250 endpoint 0x9 has an invalid bInterval 127, changing to 10
[  374.383332][  T965] usb 1-1: config 2 interface 177 altsetting 250 has 7 endpoint descriptors, different from the interface descriptor's value: 15
[  374.396621][  T965] usb 1-1: too many endpoints for config 2 interface 183 altsetting 74: 177, using maximum allowed: 30
[  374.407671][  T965] usb 1-1: config 2 interface 183 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 177
[  374.421026][  T965] usb 1-1: too many endpoints for config 2 interface 172 altsetting 236: 251, using maximum allowed: 30
[  374.432434][  T965] usb 1-1: config 2 interface 172 altsetting 236 has an invalid descriptor for endpoint zero, skipping
[  374.443539][  T965] usb 1-1: config 2 interface 172 altsetting 236 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  374.454758][  T965] usb 1-1: config 2 interface 172 altsetting 236 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  374.465906][  T965] usb 1-1: config 2 interface 172 altsetting 236 has a duplicate endpoint with address 0x5, skipping
[  374.476812][  T965] usb 1-1: config 2 interface 172 altsetting 236 has a duplicate endpoint with address 0xC, skipping
[  374.487891][  T965] usb 1-1: config 2 interface 172 altsetting 236 has 8 endpoint descriptors, different from the interface descriptor's value: 251
[  374.501567][  T965] usb 1-1: config 2 interface 184 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  374.516191][  T965] usb 1-1: config 2 interface 177 has no altsetting 0
[  374.523931][  T965] usb 1-1: config 2 interface 183 has no altsetting 0
[  374.530781][  T965] usb 1-1: config 2 interface 172 has no altsetting 0
[  374.537784][  T965] usb 1-1: config 2 interface 184 has no altsetting 0
[  374.552807][  T965] usb 1-1: Dual-Role OTG device on HNP port
[  374.561137][  T965] usb 1-1: New USB device found, idVendor=4113, idProduct=0211, bcdDevice=4d.bc
[  374.574232][  T965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.583092][  T965] usb 1-1: Product: syz
[  374.587475][  T965] usb 1-1: Manufacturer: syz
[  374.592154][  T965] usb 1-1: SerialNumber: syz
[  374.636866][T16105] overlayfs: failed to clone upperpath
[  374.833951][  T965] usb 1-1: USB disconnect, device number 76
[  375.098508][   T31] usb 10-1: new high-speed USB device number 47 using dummy_hcd
[  375.258930][   T31] usb 10-1: Using ep0 maxpacket: 32
[  375.265334][   T31] usb 10-1: config index 0 descriptor too short (expected 29220, got 36)
[  375.273930][   T31] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  375.282638][   T31] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81
[  375.291702][   T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  375.301415][   T31] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  375.311265][   T31] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  375.324342][   T31] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  375.333454][   T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.342176][   T31] usb 10-1: config 0 descriptor??
[  375.388708][T16133] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  375.388884][T16133] rust_binder: Error while translating object.
[  375.395420][T16133] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  375.401656][T16133] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:570
[  375.408197][T16137] netlink: 'syz.1.4908': attribute type 27 has an invalid length.
[  375.485047][T16159] rust_binder: Got transaction with invalid offset.
[  375.485090][T16159] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  375.491716][T16159] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:585
[  375.522028][T16163] rust_binder: 589: no such ref 3
[  375.536271][T16163] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:589
[  375.536551][T16163] rust_binder: Write failure EINVAL in pid:589
[  375.563482][   T31] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  375.583563][   T31] usb 10-1: USB disconnect, device number 47
[  375.590253][   T31] usblp0: removed
[  376.028994][   T31] usb 10-1: new high-speed USB device number 48 using dummy_hcd
[  376.189412][   T31] usb 10-1: Using ep0 maxpacket: 32
[  376.202106][   T31] usb 10-1: config index 0 descriptor too short (expected 29220, got 36)
[  376.211735][   T31] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  376.220403][   T31] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81
[  376.229518][   T31] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  376.239386][   T31] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  376.249155][   T31] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  376.262287][   T31] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  376.271756][   T31] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.280596][   T31] usb 10-1: config 0 descriptor??
[  376.323097][T16194] fuseblk: Bad value for 'max_read'
[  376.346301][   T36] kauditd_printk_skb: 11 callbacks suppressed
[  376.346319][   T36] audit: type=1400 audit(1758245257.186:31201): avc:  denied  { bind } for  pid=16197 comm="syz.7.4932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  376.372160][   T36] audit: type=1400 audit(1758245257.195:31202): avc:  denied  { listen } for  pid=16197 comm="syz.7.4932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  376.392011][   T36] audit: type=1400 audit(1758245257.195:31203): avc:  denied  { connect } for  pid=16197 comm="syz.7.4932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  376.411875][   T36] audit: type=1400 audit(1758245257.195:31204): avc:  denied  { read } for  pid=16197 comm="syz.7.4932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  376.431540][   T36] audit: type=1400 audit(1758245257.223:31205): avc:  denied  { write } for  pid=16197 comm="syz.7.4932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  376.504529][   T31] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 48 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  376.551146][   T36] audit: type=1400 audit(1758245257.382:31206): avc:  denied  { mounton } for  pid=16199 comm="syz.0.4933" path="/proc/595/task" dev="proc" ino=82336 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  376.608261][T16217] veth0_virt_wifi: entered allmulticast mode
[  376.608774][T16219] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  376.614563][T16216] veth0_virt_wifi: left allmulticast mode
[  376.671025][   T36] audit: type=1400 audit(1758245257.504:31207): avc:  denied  { shutdown } for  pid=16232 comm="syz.1.4943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  376.720014][T16129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  376.728552][T16129] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  376.740146][   T36] audit: type=1400 audit(1758245257.560:31208): avc:  denied  { getopt } for  pid=16128 comm="syz.9.4905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  376.927745][T16242] netlink: 'syz.7.4945': attribute type 4 has an invalid length.
[  376.935470][T16242] netlink: 17 bytes leftover after parsing attributes in process `syz.7.4945'.
[  376.944913][T16242] netlink: 'syz.7.4945': attribute type 1 has an invalid length.
[  376.952890][T16242] netlink: 'syz.7.4945': attribute type 2 has an invalid length.
[  376.975566][T16248] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=16248 comm=syz.7.4947
[  377.313733][T16267] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  377.323435][T16267] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4953'.
[  377.341536][   T36] audit: type=1400 audit(1758245258.121:31209): avc:  denied  { append } for  pid=16268 comm="syz.0.4954" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  377.370387][T16272] 9pnet_fd: Insufficient options for proto=fd
[  377.398835][T16276] warn_alloc: 2 callbacks suppressed
[  377.398855][T16276] syz.1.4957: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0
[  377.419858][T16276] CPU: 1 UID: 0 PID: 16276 Comm: syz.1.4957 Not tainted syzkaller #0 f314b4a7c60d1499390e62a22e4d37ca5a327e54
[  377.419892][T16276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  377.419907][T16276] Call Trace:
[  377.419914][T16276]  <TASK>
[  377.419923][T16276]  __dump_stack+0x21/0x30
[  377.419957][T16276]  dump_stack_lvl+0x10c/0x190
[  377.419984][T16276]  ? __cfi_dump_stack_lvl+0x10/0x10
[  377.420011][T16276]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  377.420033][T16276]  dump_stack+0x19/0x20
[  377.420057][T16276]  warn_alloc+0x1bc/0x2a0
[  377.420084][T16276]  ? stack_depot_save_flags+0x38/0x800
[  377.420107][T16276]  ? __cfi_warn_alloc+0x10/0x10
[  377.420133][T16276]  ? kasan_save_track+0x4f/0x80
[  377.420156][T16276]  ? __kmalloc_cache_noprof+0x1a5/0x3c0
[  377.420190][T16276]  ? xskq_create+0x68/0x2a0
[  377.420215][T16276]  ? xsk_init_queue+0xb6/0x120
[  377.420239][T16276]  ? xsk_setsockopt+0x43f/0x6f0
[  377.420261][T16276]  ? do_sock_setsockopt+0x26a/0x400
[  377.420284][T16276]  ? __x64_sys_setsockopt+0x1b8/0x250
[  377.420306][T16276]  ? x64_sys_call+0x2adc/0x2ee0
[  377.420335][T16276]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  377.420370][T16276]  __vmalloc_node_range_noprof+0x135/0x1420
[  377.420404][T16276]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  377.420433][T16276]  ? avc_has_perm+0x144/0x220
[  377.420463][T16276]  ? kasan_save_alloc_info+0x40/0x50
[  377.420491][T16276]  ? __kasan_kmalloc+0x96/0xb0
[  377.420515][T16276]  vmalloc_user_noprof+0x77/0x90
[  377.420543][T16276]  ? xskq_create+0xdb/0x2a0
[  377.420566][T16276]  xskq_create+0xdb/0x2a0
[  377.420590][T16276]  xsk_init_queue+0xb6/0x120
[  377.420612][T16276]  xsk_setsockopt+0x43f/0x6f0
[  377.420634][T16276]  ? __cfi_xsk_setsockopt+0x10/0x10
[  377.420654][T16276]  ? do_futex+0x309/0x500
[  377.420675][T16276]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[  377.420701][T16276]  ? security_socket_setsockopt+0x33/0xd0
[  377.420723][T16276]  ? __cfi_xsk_setsockopt+0x10/0x10
[  377.420743][T16276]  do_sock_setsockopt+0x26a/0x400
[  377.420767][T16276]  ? __cfi_do_sock_setsockopt+0x10/0x10
[  377.420792][T16276]  __x64_sys_setsockopt+0x1b8/0x250
[  377.420816][T16276]  x64_sys_call+0x2adc/0x2ee0
[  377.420845][T16276]  do_syscall_64+0x58/0xf0
[  377.420863][T16276]  ? clear_bhb_loop+0x50/0xa0
[  377.420890][T16276]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  377.420918][T16276] RIP: 0033:0x7f511518eba9
[  377.420937][T16276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  377.420956][T16276] RSP: 002b:00007f5115ffc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  377.420979][T16276] RAX: ffffffffffffffda RBX: 00007f51153d5fa0 RCX: 00007f511518eba9
[  377.420993][T16276] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  377.421006][T16276] RBP: 00007f5115211e19 R08: 0000000000000004 R09: 0000000000000000
[  377.421021][T16276] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  377.421036][T16276] R13: 00007f51153d6038 R14: 00007f51153d5fa0 R15: 00007ffe144fd938
[  377.421054][T16276]  </TASK>
[  377.421062][T16276] Mem-Info:
[  377.436474][T16281] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  377.442852][T16276] active_anon:34442 inactive_anon:22 isolated_anon:0
[  377.442852][T16276]  active_file:12306 inactive_file:14698 isolated_file:0
[  377.442852][T16276]  unevictable:15401 dirty:37 writeback:0
[  377.442852][T16276]  slab_reclaimable:6095 slab_unreclaimable:75826
[  377.442852][T16276]  mapped:24652 shmem:15607 pagetables:1311
[  377.442852][T16276]  sec_pagetables:0 bounce:0
[  377.442852][T16276]  kernel_misc_reclaimable:0
[  377.442852][T16276]  free:1382750 free_pcp:3768 free_cma:0
[  377.453499][T16282] 9pnet_fd: Insufficient options for proto=fd
[  377.462137][T16276] Node 0 active_anon:137956kB inactive_anon:88kB active_file:49224kB inactive_file:58792kB unevictable:61604kB isolated(anon):0kB isolated(file):0kB mapped:98572kB dirty:148kB writeback:0kB shmem:62428kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6712kB pagetables:5244kB sec_pagetables:0kB all_unreclaimable? no
[  377.814489][T16276] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965952kB mlocked:0kB bounce:0kB free_pcp:5740kB local_pcp:0kB free_cma:0kB
[  377.834176][T16293] fuse: Bad value for 'fd'
[  377.844443][   T36] audit: type=1400 audit(1758245258.570:31210): avc:  denied  { mounton } for  pid=16292 comm="syz.7.4963" path="/426/file0" dev="tmpfs" ino=2354 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  377.849629][T16276] lowmem_reserve[]: 0 3921 3921
[  377.889856][T16276] Normal free:2575784kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:137692kB inactive_anon:88kB active_file:49224kB inactive_file:58792kB unevictable:61604kB writepending:148kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:4696kB local_pcp:2648kB free_cma:0kB
[  377.924674][T16276] lowmem_reserve[]: 0 0 0
[  377.929112][T16276] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[  377.944874][T16276] Normal: 167*4kB (UM) 694*8kB (UME) 996*16kB (UME) 1422*32kB (UM) 696*64kB (UME) 357*128kB (UME) 225*256kB (UME) 155*512kB (UME) 101*1024kB (UME) 38*2048kB (UME) 513*4096kB (UM) = 2577356kB
[  377.965454][T16276] 58061 total pagecache pages
[  377.970873][T16276] 53 pages in swap cache
[  377.975407][T16276] Free swap  = 123604kB
[  377.981624][T16276] Total swap = 124996kB
[  377.985900][T16276] 2097051 pages RAM
[  377.991365][T16276] 0 pages HighMem/MovableOnly
[  377.997513][T16276] 351533 pages reserved
[  378.002301][T16276] 0 pages cma reserved
[  378.019289][T16276] Memory allocations:
[  378.023377][T16276]          0 B        0 init/main.c:1370 func:do_initcalls
[  378.031076][T16276]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  378.039358][T16276]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  378.047117][T16276]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  378.055106][T16276]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  378.064521][T16276]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  378.081074][T16276]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  378.089164][T16276]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  378.099511][T16328] VFS: Mount too revealing
[  378.105076][T16276]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  378.113045][T16276]          0 B        0 init/initramfs.c:101 func:find_link
[  378.171181][T16340] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  378.226934][ T4784] usb 10-1: USB disconnect, device number 48
[  378.239026][ T4784] usblp0: removed
[  378.271679][T16363] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  378.271836][T16363] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false
[  378.284649][T16363] rust_binder: Read failure Err(EAGAIN) in pid:641
[  378.296101][T16363] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false
[  378.303558][T16363] netlink: 'syz.0.4983': attribute type 27 has an invalid length.
[  378.433450][  T329] Bluetooth: hci0: Frame reassembly failed (-84)
[  378.642191][T16407] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4999'.
[  378.687658][T16411] overlayfs: failed to clone upperpath
[  379.150430][T16447] 9pnet_fd: Insufficient options for proto=fd
[  379.451457][  T332] usb 1-1: new high-speed USB device number 77 using dummy_hcd
[  379.612844][  T332] usb 1-1: config index 0 descriptor too short (expected 45, got 36)
[  379.620928][  T332] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  379.632447][  T332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  379.643344][  T332] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  379.654540][  T332] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  379.659546][T16453] 9pnet_fd: Insufficient options for proto=fd
[  379.667433][  T332] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  379.682542][  T332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  379.691339][  T332] usb 1-1: config 0 descriptor??
[  379.696600][T16449] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  380.140789][  T332] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0
[  380.148409][  T332] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0
[  380.155912][  T332] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0
[  380.163425][  T332] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0
[  380.170921][  T332] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0
[  380.178406][  T332] plantronics 0003:047F:FFFF.0025: unknown main item tag 0x0
[  380.186089][  T332] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving
[  380.202581][  T332] plantronics 0003:047F:FFFF.0025: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  380.362729][T16449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  380.371331][T16449] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  380.435921][T16449] rust_binder: pid 16449 performed invalid decrement on ref
[  380.443691][T16473] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  380.444266][T16474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  380.459227][T16474] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  380.463563][T16477] overlayfs: failed to clone upperpath
[  380.472495][   T31] usb 1-1: USB disconnect, device number 77
[  380.489312][T16485] overlayfs: cannot append lower layer
[  380.627937][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  380.629632][T16516] can0: slcan on ttyS3.
[  380.636892][T16515] overlay: ./file0 is not a directory
[  380.667793][T16522] 9pnet_fd: Insufficient options for proto=fd
[  380.970173][   T31] usb 1-1: new high-speed USB device number 78 using dummy_hcd
[  381.130596][   T31] usb 1-1: Using ep0 maxpacket: 16
[  381.136791][   T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  381.146941][   T31] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 3
[  381.157215][   T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  381.166274][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  381.174272][   T31] usb 1-1: Product: syz
[  381.178415][   T31] usb 1-1: Manufacturer: syz
[  381.182986][   T31] usb 1-1: SerialNumber: syz
[  381.188235][   T31] usb 1-1: config 0 descriptor??
[  381.287417][T16552] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  381.408823][T16516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5033'.
[  381.528702][  T332] usb 1-1: USB disconnect, device number 78
[  381.592406][T16516] can0 (unregistered): slcan off ttyS3.
[  381.733748][T16587] overlay: filesystem on ./bus not supported as upperdir
[  382.635230][   T36] kauditd_printk_skb: 15 callbacks suppressed
[  382.635248][   T36] audit: type=1400 audit(1758245263.067:31226): avc:  denied  { append } for  pid=16614 comm="syz.0.5055" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  382.664606][   T36] audit: type=1400 audit(1758245263.067:31227): avc:  denied  { mounton } for  pid=16614 comm="syz.0.5055" path="/215/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[  382.756261][T16622] fuse: Bad value for 'rootmode'
[  384.568018][T16659] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  384.604220][   T36] audit: type=1400 audit(1758245264.909:31228): avc:  denied  { accept } for  pid=16662 comm="syz.0.5070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  384.695327][   T36] audit: type=1400 audit(1758245265.003:31229): avc:  denied  { name_bind } for  pid=16667 comm="syz.9.5072" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[  384.746353][   T36] audit: type=1400 audit(1758245265.049:31230): avc:  denied  { write } for  pid=16669 comm="syz.9.5073" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  384.797399][T16676] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5074'.
[  384.806367][T16676] erspan0: entered promiscuous mode
[  384.853963][   T36] audit: type=1326 audit(1758245265.152:31231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16686 comm="syz.0.5078" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd2c58eba9 code=0x0
[  384.909951][   T36] audit: type=1400 audit(1758245265.199:31232): avc:  denied  { remount } for  pid=16686 comm="syz.0.5078" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  385.743358][T16706] rust_binder: Write failure EFAULT in pid:557
[  385.747817][   T36] audit: type=1400 audit(1758245265.975:31233): avc:  denied  { unmount } for  pid=13000 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  385.802979][   T36] audit: type=1400 audit(1758245266.031:31234): avc:  denied  { read write } for  pid=16711 comm="syz.0.5087" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  385.846955][   T36] audit: type=1400 audit(1758245266.031:31235): avc:  denied  { open } for  pid=16711 comm="syz.0.5087" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  385.950605][T16728] incfs: Backing dir is not set, filesystem can't be mounted.
[  385.961105][T16728] incfs: mount failed -2
[  386.010215][T16735] Invalid ELF header magic: != ELF
[  386.040837][T16740] /dev/loop0: Can't lookup blockdev
[  386.341371][T16771] fuse: Bad value for 'fd'
[  386.351916][T16771] rust_binder: Error while translating object.
[  386.351955][T16771] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  386.365147][T16771] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:748
[  386.384416][T16771] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  386.403354][T16771] rust_binder: Read failure Err(EFAULT) in pid:748
[  386.597422][  T329] bridge_slave_1: left allmulticast mode
[  386.609912][  T329] bridge_slave_1: left promiscuous mode
[  386.615533][  T329] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.658527][  T329] bridge_slave_0: left allmulticast mode
[  386.670678][  T329] bridge_slave_0: left promiscuous mode
[  386.681630][  T329] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.815982][T16785] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5113'.
[  386.846689][  T329] tipc: Disabling bearer <udp:syz2>
[  386.861175][  T329] tipc: Left network mode
[  386.868603][T16789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2577 sclass=netlink_route_socket pid=16789 comm=syz.1.5114
[  386.873912][T16790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2577 sclass=netlink_route_socket pid=16790 comm=syz.1.5114
[  386.898320][  T329] veth1_macvtap: left promiscuous mode
[  386.903891][  T329] veth0_vlan: left promiscuous mode
[  387.023910][T16782] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.046570][T16782] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.053656][T16782] bridge_slave_0: entered allmulticast mode
[  387.060056][T16782] bridge_slave_0: entered promiscuous mode
[  387.061309][T16804] /dev/rnullb0: Can't lookup blockdev
[  387.066655][T16782] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.078593][T16782] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.085928][T16782] bridge_slave_1: entered allmulticast mode
[  387.092355][T16782] bridge_slave_1: entered promiscuous mode
[  387.195764][T16782] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.202822][T16782] bridge0: port 2(bridge_slave_1) entered forwarding state
[  387.210141][T16782] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.217296][T16782] bridge0: port 1(bridge_slave_0) entered forwarding state
[  387.245423][  T329] bridge0: port 1(bridge_slave_0) entered disabled state
[  387.255964][  T329] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.267757][  T329] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.274820][  T329] bridge0: port 1(bridge_slave_0) entered forwarding state
[  387.287555][  T981] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.294600][  T981] bridge0: port 2(bridge_slave_1) entered forwarding state
[  387.324028][T16782] veth0_vlan: entered promiscuous mode
[  387.337132][T16782] veth1_macvtap: entered promiscuous mode
[  387.440798][  T332] usb 10-1: new high-speed USB device number 49 using dummy_hcd
[  387.601183][  T332] usb 10-1: Using ep0 maxpacket: 16
[  387.607512][  T332] usb 10-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  387.616518][  T332] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  387.626781][   T31] usb 3-1: new low-speed USB device number 5 using dummy_hcd
[  387.634222][  T332] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[  387.644781][  T332] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  387.653900][  T332] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  387.661991][  T332] usb 10-1: Product: ї
[  387.666222][  T332] usb 10-1: Manufacturer: Ᾱ蚷荣጑﵋譠尲क़⹠簨鉘孡ԁ䥳ቸ㶭杲덓䟡ꡄ굋쑥煲尧㪹⃮歍⛜蓎Ո唱꯽ᥠᑠ㠹꫑ˊ컧鎁ᰗึ䘂堸埼瞡탩忥囃풩편㿄ி၍㸮毷ꀳ릂螳퐃썯罵ïቻ괧煡൲‼狗罇ꯂˊ
[  387.691376][  T332] usb 10-1: SerialNumber: 備䄠쎆줪⌱䦏ჩ孨؁캂ꓙሹ瑯숰憗꜃ﺺᔃ⡋갂횷ꠊꔖ썭̥䣇─싏찡㈭譞㞿҂㇛敓彪庬諉㼩ꭸ⤳⚴晝砖隌ﳵ㻺嚬炻〦狥肭㹡ﵖꆱ䈲⑼⚟褤ꍉ鱱ꐚ頯ꎳ簟⃰렖짪ടᥕ㽊⇝Љ灗졖准䩏屑긭颜䛂轃냎ﯫ꿠磷ꎎ㹞ꮃ磑濂谈瑱閄툅㾛꽞䓑챊絊䲃跄Ȇ䶳旡䉏ἵ
[  387.804446][   T31] usb 3-1: Invalid ep0 maxpacket: 16
[  387.943771][   T31] usb 3-1: new low-speed USB device number 6 using dummy_hcd
[  387.955016][  T332] usb 10-1: 0:2 : does not exist
[  387.963483][  T332] usb 10-1: USB disconnect, device number 49
[  388.059730][T16870] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5138'.
[  388.068833][T16870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5138'.
[  388.092820][   T36] kauditd_printk_skb: 25 callbacks suppressed
[  388.092836][   T36] audit: type=1400 audit(1758245268.172:31261): avc:  denied  { shutdown } for  pid=16872 comm="syz.1.5139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  388.118875][   T31] usb 3-1: Invalid ep0 maxpacket: 16
[  388.124269][   T31] usb usb3-port1: attempt power cycle
[  388.488921][   T31] usb 3-1: new low-speed USB device number 7 using dummy_hcd
[  388.510666][   T31] usb 3-1: Invalid ep0 maxpacket: 16
[  388.535960][T16885] rust_binder: Failed to allocate buffer. len:224, is_oneway:true
[  388.618714][T16889] rust_binder: Write failure EFAULT in pid:584
[  388.649668][   T31] usb 3-1: new low-speed USB device number 8 using dummy_hcd
[  388.654144][T16894] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  388.672775][T16894] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[  388.682012][   T36] audit: type=1400 audit(1758245268.724:31262): avc:  denied  { remount } for  pid=16893 comm="syz.9.5146" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  388.702716][   T31] usb 3-1: Invalid ep0 maxpacket: 16
[  388.708750][   T31] usb usb3-port1: unable to enumerate USB device
[  388.746210][T16901] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  388.746252][T16901] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  388.752698][T16901] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  388.759234][T16901] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  388.765731][T16901] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  388.789872][   T36] audit: type=1400 audit(1758245268.827:31263): avc:  denied  { ioctl } for  pid=16905 comm="syz.9.5149" path="/191/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  388.822700][   T36] audit: type=1400 audit(1758245268.827:31264): avc:  denied  { write } for  pid=16905 comm="syz.9.5149" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  388.875026][T16915] binder: Bad value for 'max'
[  388.947888][   T36] audit: type=1400 audit(1758245268.967:31265): avc:  denied  { wake_alarm } for  pid=16931 comm="syz.7.5156" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  389.147754][   T36] audit: type=1400 audit(1758245269.163:31266): avc:  denied  { mount } for  pid=16947 comm="syz.1.5163" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  389.171258][T16948] overlayfs: failed to clone upperpath
[  389.258966][   T31] usb 10-1: new high-speed USB device number 50 using dummy_hcd
[  389.419389][   T31] usb 10-1: Using ep0 maxpacket: 8
[  389.425915][   T31] usb 10-1: unable to get BOS descriptor or descriptor too short
[  389.434549][   T31] usb 10-1: config 6 has an invalid interface number: 248 but max is 0
[  389.442846][   T31] usb 10-1: config 6 has no interface number 0
[  389.449044][   T31] usb 10-1: config 6 interface 248 has no altsetting 0
[  389.457335][   T31] usb 10-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  389.466571][   T31] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.474670][   T31] usb 10-1: Product: syz
[  389.478912][   T31] usb 10-1: Manufacturer: syz
[  389.483599][   T31] usb 10-1: SerialNumber: syz
[  389.705510][   T31] ums-karma 10-1:6.248: USB Mass Storage device detected
[  389.763292][   T31] usb 10-1: USB disconnect, device number 50
[  389.939424][T16965] netlink: 80 bytes leftover after parsing attributes in process `syz.7.5168'.
[  389.949082][T16965] overlayfs: failed to clone upperpath
[  390.249971][T16979] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  390.282757][T16983] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5175'.
[  390.291704][T16983] erspan0: default FDB implementation only supports local addresses
[  390.479084][T16987] netlink: 72 bytes leftover after parsing attributes in process `syz.9.5177'.
[  390.497374][T16990] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  390.498016][   T36] audit: type=1400 audit(1758245270.416:31267): avc:  denied  { read } for  pid=16988 comm="syz.9.5178" name="usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  390.528832][   T36] audit: type=1400 audit(1758245270.416:31268): avc:  denied  { open } for  pid=16988 comm="syz.9.5178" path="/dev/usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  390.553688][T16993] binder: Unknown parameter 'defcontext01777777777777777777777'
[  390.644120][T17002] rust_binder: 17001 RLIMIT_NICE not set
[  390.724956][T17011] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  390.724982][T17011] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  390.732266][T17011] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  390.738011][T17011] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  390.744444][T17011] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  390.744468][T17011] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  390.762806][T17011] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  390.763879][T17011] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  390.770368][T17011] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  390.776741][T17011] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  390.783922][T17011] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  390.789742][T17011] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  390.831048][   T36] audit: type=1400 audit(1758245270.725:31269): avc:  denied  { append } for  pid=17020 comm="syz.9.5190" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  390.843906][T17023] overlayfs: failed to clone upperpath
[  390.872142][T17023] overlayfs: failed to clone upperpath
[  391.013016][   T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  391.098509][  T965] usb 10-1: new high-speed USB device number 51 using dummy_hcd
[  391.173402][   T10] usb 3-1: Using ep0 maxpacket: 32
[  391.179621][   T10] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  391.188003][   T10] usb 3-1: config 0 has no interface number 0
[  391.194667][   T10] usb 3-1: config 0 interface 184 has no altsetting 0
[  391.203055][   T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  391.212126][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  391.220178][   T10] usb 3-1: Product: syz
[  391.224336][   T10] usb 3-1: Manufacturer: syz
[  391.229026][   T10] usb 3-1: SerialNumber: syz
[  391.234098][   T10] usb 3-1: config 0 descriptor??
[  391.239928][   T10] smsc75xx v1.0.0
[  391.270745][  T965] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  391.281818][  T965] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  391.291680][  T965] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  391.300845][  T965] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.309659][  T965] usb 10-1: config 0 descriptor??
[  391.672805][T17001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  391.681832][T17001] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  391.745647][  T965] kone 0003:1E7D:2CED.0026: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.9-1/input0
[  391.904720][   T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  391.915603][   T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  391.959211][    T9] usb 10-1: USB disconnect, device number 51
[  392.139625][   T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71
[  392.150482][   T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71
[  392.160457][   T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  392.169945][   T10] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[  392.179312][   T10] usb 3-1: USB disconnect, device number 9
[  392.615409][T17074] overlayfs: failed to clone upperpath
[  392.689373][  T965] rust_binder: 17000: removing orphan mapping 0:4248
[  392.714012][T17092] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5212'.
[  392.723437][T17092] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:655
[  392.723774][T17093] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  392.781191][T17098] rust_binder: 17098 RLIMIT_NICE not set
[  392.787798][T17098] rust_binder: Read failure Err(EFAULT) in pid:660
[  392.854483][T17103] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:663
[  392.963725][T17120] binder: Bad value for 'max'
[  393.021429][T17123] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  393.035727][T17130] tipc: Started in network mode
[  393.141032][T17130] tipc: Node identity 02957f00fb48, cluster identity 4711
[  393.151443][T17130] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  393.162709][  T965] usb 10-1: new high-speed USB device number 52 using dummy_hcd
[  393.171296][T17130] tipc: Disabling bearer <eth:syzkaller0>
[  393.323185][  T965] usb 10-1: Using ep0 maxpacket: 32
[  393.323970][   T36] audit: type=1326 audit(1758245273.072:31270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17161 comm="syz.2.5237" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7fc2c8f8eba9 code=0x0
[  393.329639][  T965] usb 10-1: config 0 has an invalid interface number: 67 but max is 0
[  393.351804][T17163] rust_binder: Write failure EFAULT in pid:30
[  393.359602][  T965] usb 10-1: config 0 has no interface number 0
[  393.373297][  T965] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  393.382964][  T965] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.391413][  T965] usb 10-1: Product: syz
[  393.395757][  T965] usb 10-1: Manufacturer: syz
[  393.400466][  T965] usb 10-1: SerialNumber: syz
[  393.405651][  T965] usb 10-1: config 0 descriptor??
[  393.411502][  T965] smsc95xx v2.0.0
[  394.037884][T17176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17176 comm=syz.7.5241
[  394.198632][   T36] audit: type=1400 audit(1758245273.876:31271): avc:  denied  { bind } for  pid=17202 comm="syz.7.5250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  394.246076][   T36] audit: type=1400 audit(1758245273.932:31272): avc:  denied  { bind } for  pid=17206 comm="syz.7.5252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  394.268609][  T965] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  394.277220][   T36] audit: type=1400 audit(1758245273.951:31273): avc:  denied  { relabelfrom } for  pid=17207 comm="syz.2.5253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  394.280679][  T965] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  394.305765][   T36] audit: type=1400 audit(1758245273.951:31274): avc:  denied  { relabelto } for  pid=17207 comm="syz.2.5253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1
[  394.308924][T17106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  394.347181][T17106] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  394.462626][   T36] audit: type=1326 audit(1758245274.128:31275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17238 comm="syz.7.5264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f6d8eba9 code=0x7ffc0000
[  394.517499][   T36] audit: type=1326 audit(1758245274.175:31276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17238 comm="syz.7.5264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f10f6d8eba9 code=0x7ffc0000
[  394.544416][T17243] audit: audit_backlog=65 > audit_backlog_limit=64
[  394.544644][   T36] audit: type=1326 audit(1758245274.194:31277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17241 comm="syz.7.5264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f10f6dc1465 code=0x7ffc0000
[  394.550949][T17243] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64
[  394.575031][   T36] audit: type=1326 audit(1758245274.194:31278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17238 comm="syz.7.5264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f6d8eba9 code=0x7ffc0000
[  394.821401][  T965] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  394.835440][  T965] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71
[  394.858434][  T965] usb 10-1: USB disconnect, device number 52
[  394.927402][ T4784] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  395.087808][ T4784] usb 3-1: Using ep0 maxpacket: 32
[  395.094006][ T4784] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  395.102569][ T4784] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  395.111299][ T4784] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  395.120386][ T4784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  395.130034][ T4784] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  395.139860][ T4784] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  395.152948][ T4784] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  395.161992][ T4784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.173804][ T4784] usb 3-1: config 0 descriptor??
[  395.394263][ T4784] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  395.411158][ T4784] usb 3-1: USB disconnect, device number 10
[  395.418371][ T4784] usblp0: removed
[  395.504682][T17275] rust_binder: Fixups oob 165 172 361 173
[  395.504710][T17275] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL }
[  395.521340][T17275] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  395.536989][T17275] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:670
[  395.633237][T17258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5270'.
[  395.669935][T17258] bridge_slave_1: left allmulticast mode
[  395.686941][T17258] bridge_slave_1: left promiscuous mode
[  395.693202][T17258] bridge0: port 2(bridge_slave_1) entered disabled state
[  395.708668][T17258] bridge_slave_0: left allmulticast mode
[  395.718286][T17258] bridge_slave_0: left promiscuous mode
[  395.728889][T17258] bridge0: port 1(bridge_slave_0) entered disabled state
[  395.944058][  T965] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  396.082494][  T965] usb 3-1: device descriptor read/64, error -71
[  396.339150][  T965] usb 3-1: device descriptor read/64, error -71
[  396.457152][T17319] netlink: 'syz.9.5289': attribute type 4 has an invalid length.
[  396.595922][  T965] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  396.735030][  T965] usb 3-1: device descriptor read/64, error -71
[  396.772497][T17343] rust_binder: Error while translating object.
[  396.772524][T17343] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  396.778798][T17343] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:699
[  396.794697][T17346] fuse: Unknown parameter 'ootmode'
[  396.864285][T17366] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  396.874946][T17369] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5307'.
[  396.897570][T17372] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5308'.
[  396.908997][T17375] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  396.917928][T17375] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  396.928048][T17375] overlayfs: failed to clone upperpath
[  396.991673][  T965] usb 3-1: device descriptor read/64, error -71
[  397.002357][T17385] overlayfs: failed to clone upperpath
[  397.109332][  T965] usb usb3-port1: attempt power cycle
[  397.472853][  T965] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  397.518567][  T965] usb 3-1: device descriptor read/8, error -71
[  397.659320][  T965] usb 3-1: device descriptor read/8, error -71
[  397.670074][T17422] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.677282][T17422] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.684453][T17422] bridge_slave_0: entered allmulticast mode
[  397.690968][T17422] bridge_slave_0: entered promiscuous mode
[  397.697687][T17422] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.704725][T17422] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.712125][T17422] bridge_slave_1: entered allmulticast mode
[  397.718457][T17422] bridge_slave_1: entered promiscuous mode
[  397.797410][T17422] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.804538][T17422] bridge0: port 2(bridge_slave_1) entered forwarding state
[  397.811827][T17422] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.818870][T17422] bridge0: port 1(bridge_slave_0) entered forwarding state
[  397.839165][  T593] bridge0: port 1(bridge_slave_0) entered disabled state
[  397.846481][  T593] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.856003][  T981] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.863067][  T981] bridge0: port 1(bridge_slave_0) entered forwarding state
[  397.876868][  T981] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.883926][  T981] bridge0: port 2(bridge_slave_1) entered forwarding state
[  397.921801][T17422] veth0_vlan: entered promiscuous mode
[  397.932856][  T965] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  397.943242][T17422] veth1_macvtap: entered promiscuous mode
[  397.973193][T17460] fuse: Bad value for 'fd'
[  397.979811][T17460] tmpfs: Bad value for 'nr_blocks'
[  397.996180][T17464] fuse: Bad value for 'fd'
[  398.216840][T17475] rust_binder: Write failure EFAULT in pid:56
[  398.323287][T17488] overlayfs: failed to clone upperpath
[  398.339487][T17493] rust_binder: Error while translating object.
[  398.339528][T17493] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  398.345811][T17493] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62
[  398.355887][T17494] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  398.392669][  T965] usb 3-1: device not accepting address 14, error -71
[  398.406817][  T965] usb usb3-port1: unable to enumerate USB device
[  398.407045][T17502] /dev/rnullb0: Can't lookup blockdev
[  398.906718][T17546] overlayfs: disabling nfs_export due to verity=require
[  398.914449][T17546] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  398.927217][T17546] rust_binder: 17546 RLIMIT_NICE not set
[  398.942607][    T9] rust_binder: 17545: removing orphan mapping 0:1048
[  398.960425][T17548] netlink: 188 bytes leftover after parsing attributes in process `syz.1.5365'.
[  399.154438][T17551] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10
[  399.230729][T17557] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5369'.
[  399.354733][T17565] rust_binder: Error while translating object.
[  399.354789][T17565] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  399.361073][T17565] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:73
[  399.371101][T17566] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  399.702870][T17612] fuse: Unknown parameter 'rootmmde'
[  399.999624][T17617] can0: slcan on ttyS3.
[  400.040427][T17617] can0 (unregistered): slcan off ttyS3.
[  400.167064][T17648] rust_binder: 20: no such ref 0
[  400.176659][T17648] rust_binder: 20: no such ref 3
[  400.194488][   T36] kauditd_printk_skb: 6071 callbacks suppressed
[  400.194509][   T36] audit: type=1400 audit(1758245536.479:37349): avc:  denied  { append } for  pid=17647 comm="syz.1.5393" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  400.333907][T17648] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  400.341299][T17648] rust_binder: Write failure EINVAL in pid:20
[  400.341472][T17648] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0
[  400.354953][T17648] rust_binder: Write failure EINVAL in pid:20
[  400.369395][T17663] netlink: 'syz.1.5395': attribute type 16 has an invalid length.
[  400.383335][T17663] netlink: 'syz.1.5395': attribute type 2 has an invalid length.
[  400.391145][T17663] netlink: 64086 bytes leftover after parsing attributes in process `syz.1.5395'.
[  400.410495][T17663] syzkaller0: entered promiscuous mode
[  400.416608][T17663] syzkaller0: entered allmulticast mode
[  400.425786][   T36] audit: type=1400 audit(1758245536.713:37350): avc:  denied  { create } for  pid=17662 comm="syz.1.5395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  400.481407][T17665] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5396'.
[  400.615189][   T36] audit: type=1400 audit(1758245536.881:37351): avc:  denied  { create } for  pid=17680 comm="syz.9.5402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  400.852521][    T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  401.012936][    T9] usb 2-1: Using ep0 maxpacket: 32
[  401.020257][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  401.032011][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  401.042014][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  401.051592][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.060516][    T9] usb 2-1: config 0 descriptor??
[  401.072005][    T9] hub 2-1:0.0: USB hub found
[  401.284168][    T9] hub 2-1:0.0: 1 port detected
[  401.285753][T17679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  401.302492][T17679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  401.333559][    T9] hub 2-1:0.0: hub_hub_status failed (err = -71)
[  401.360801][    T9] hub 2-1:0.0: config failed, can't get hub status (err -71)
[  401.390203][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  401.396561][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  401.430704][    T9] usb 2-1: USB disconnect, device number 33
[  401.545314][T17731] rust_binder: Write failure EFAULT in pid:51
[  401.637822][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.651641][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.660079][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.667989][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.676795][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.684979][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.692540][  T329] Bluetooth: hci0: Frame reassembly failed (-84)
[  401.704991][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.712748][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.720467][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.728007][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.735625][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.743187][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.750733][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.758261][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.765877][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.773515][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.781036][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.789680][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.797241][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.804970][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.814256][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.821989][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.829565][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.837108][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.844642][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.852204][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.865190][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.872737][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.880605][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.888116][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.895688][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.903233][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.910735][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.918259][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.925770][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.933303][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.940804][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.948388][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.955923][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.963757][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.971359][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.978902][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.986493][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  401.994584][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.002111][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.009634][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.018710][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.026847][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.034603][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.042219][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.049955][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.057900][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.065500][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.073057][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.080646][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.088220][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.095769][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.103282][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.110827][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.118360][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.125896][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.133422][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.140960][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.148553][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.161895][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.169856][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.177658][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.190812][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.198698][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.206410][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.214106][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.221647][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.229189][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.236772][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.245800][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.254061][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.261622][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.269284][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.269289][T17779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5431'.
[  402.286642][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.294209][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.301852][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.309429][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.316942][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.324479][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.332016][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.339689][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.349063][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.357331][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.364979][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.372597][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.380202][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.380294][T17781] rust_binder: Error while translating object.
[  402.387729][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.388017][T17781] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  402.394063][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.401676][T17781] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:72
[  402.410796][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.441324][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.441350][T17781] rust_binder: 17781 RLIMIT_NICE not set
[  402.449140][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.464371][T17781] rust_binder: Read failure Err(EAGAIN) in pid:72
[  402.464667][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.472760][  T965] rust_binder: 17780: removing orphan mapping 0:1160
[  402.479058][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.495194][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.504169][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.512949][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.527094][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.534696][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.544716][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.552852][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.566271][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.574481][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.582040][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.589674][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.597265][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.604817][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.612410][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.620153][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.627755][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.635324][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.642957][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.650503][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.659811][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.668082][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.675714][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.683698][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.691311][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.698886][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.709844][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.715594][  T648] rust_binder: 17794: removing orphan mapping 0:4208
[  402.717437][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.731736][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.739689][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.747264][    T9] hid-generic 0000:10000:0007.0027: unknown main item tag 0x0
[  402.755099][T17806] __vm_enough_memory: pid: 17806, comm: syz.1.5439, bytes: 18014402804453376 not enough memory for the allocation
[  402.767401][    T9] hid-generic 0000:10000:0007.0027: hidraw0: <UNKNOWN> HID v9.40 Device [syz1] on syz1
[  402.795164][T17809] fido_id[17809]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  402.822478][T17811] veth0_virt_wifi: entered allmulticast mode
[  402.828766][T17811] veth0_virt_wifi: left allmulticast mode
[  402.829194][   T36] audit: type=1400 audit(1758245538.948:37352): avc:  denied  { ioctl } for  pid=17810 comm="syz.1.5441" path="socket:[90225]" dev="sockfs" ino=90225 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  402.930732][T17816] kvm: kvm [17815]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1
[  402.939459][T17816] kvm: kvm [17815]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1
[  402.950593][T17816] kvm: kvm [17815]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112
[  402.966933][T17816] kvm: kvm [17815]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1
[  402.976371][T17816] kvm: kvm [17815]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1
[  402.987980][T17816] kvm_intel: kvm [17815]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1
[  403.003042][T17820] can0: slcan on ttyS3.
[  403.056306][T17820] can0 (unregistered): slcan off ttyS3.
[  403.216529][T17847] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[  403.246200][   T36] audit: type=1400 audit(1758245539.340:37353): avc:  denied  { bind } for  pid=17852 comm="syz.1.5447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  403.280432][T17853] rust_binder: Error in use_page_slow: ESRCH
[  403.280457][T17853] rust_binder: use_range failure ESRCH
[  403.287614][T17853] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false
[  403.294404][T17853] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  403.306402][T17853] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:99
[  403.380869][   T36] audit: type=1400 audit(1758245539.471:37354): avc:  denied  { getopt } for  pid=17867 comm="syz.7.5449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  403.542594][T17872] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.549662][T17872] bridge0: port 1(bridge_slave_0) entered disabled state
[  403.556686][T17872] bridge_slave_0: entered allmulticast mode
[  403.562923][T17872] bridge_slave_0: entered promiscuous mode
[  403.569367][T17872] bridge0: port 2(bridge_slave_1) entered blocking state
[  403.576418][T17872] bridge0: port 2(bridge_slave_1) entered disabled state
[  403.583520][T17872] bridge_slave_1: entered allmulticast mode
[  403.589663][T17872] bridge_slave_1: entered promiscuous mode
[  403.599561][   T46] bridge_slave_1: left allmulticast mode
[  403.605222][   T46] bridge_slave_1: left promiscuous mode
[  403.610887][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  403.618259][   T46] bridge_slave_0: left allmulticast mode
[  403.624005][   T46] bridge_slave_0: left promiscuous mode
[  403.629578][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  403.743438][   T46] tipc: Left network mode
[  403.749001][   T46] veth1_macvtap: left promiscuous mode
[  403.792175][  T329] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.799235][  T329] bridge0: port 1(bridge_slave_0) entered forwarding state
[  403.808616][  T329] bridge0: port 2(bridge_slave_1) entered blocking state
[  403.815672][  T329] bridge0: port 2(bridge_slave_1) entered forwarding state
[  403.842470][T17872] veth0_vlan: entered promiscuous mode
[  403.856777][T17872] veth1_macvtap: entered promiscuous mode
[  403.887672][T17897] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5456'.
[  403.900841][  T586] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  403.901056][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  403.966229][T17901] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  403.972644][T17902] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  403.989887][T17902] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  404.016243][T17902] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  404.041816][   T36] audit: type=1400 audit(1758245540.079:37355): avc:  denied  { unmount } for  pid=17872 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  404.067265][   T36] audit: type=1326 audit(1758245540.107:37356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17907 comm="syz.1.5460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a7d8eba9 code=0x7ffc0000
[  404.082861][T17909] rust_binder: Write failure EFAULT in pid:8
[  404.091315][   T36] audit: type=1326 audit(1758245540.107:37357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17907 comm="syz.1.5460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a7d8eba9 code=0x7ffc0000
[  404.117645][T17910] fuse: Unknown parameter '%�G�퉆E�SLhూ�Ӣ���!An��{���F':�EI�+�nG|H��9 ~>�x�����>9e�J���.� 
[  404.117645][T17910] �M'
[  404.121600][   T36] audit: type=1326 audit(1758245540.135:37358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17907 comm="syz.1.5460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05a7d8eba9 code=0x7ffc0000
[  404.161247][T17914] can0: slcan on ttyS3.
[  404.174064][T17918] 9pnet_fd: Insufficient options for proto=fd
[  404.207451][T17923] overlayfs: failed to clone upperpath
[  404.283081][T17943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=17943 comm=syz.2.5467
[  404.297198][T17943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=17943 comm=syz.2.5467
[  404.310000][T17943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=17943 comm=syz.2.5467
[  404.326573][T17943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=17943 comm=syz.2.5467
[  404.339480][T17943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=17943 comm=syz.2.5467
[  404.353146][T17943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=17943 comm=syz.2.5467
[  404.353176][T17949] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17949 comm=syz.2.5467
[  404.366127][T17943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=17943 comm=syz.2.5467
[  404.391280][T17943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=17943 comm=syz.2.5467
[  404.404548][T17943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=17943 comm=syz.2.5467
[  404.435409][  T648] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  404.460121][T17943] tipc: Enabled bearer <udp:syz2>, priority 10
[  404.466633][T17943] fuse: Bad value for 'fd'
[  404.472634][T17943] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  404.480918][T17943] tipc: Enabled bearer <udp:syz0>, priority 10
[  404.619886][  T648] usb 2-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd
[  404.629112][  T648] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  404.637077][  T648] usb 2-1: Product: syz
[  404.641246][  T648] usb 2-1: Manufacturer: syz
[  404.645873][  T648] usb 2-1: SerialNumber: syz
[  404.867466][T17910] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  404.867490][T17910] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:105
[  404.884460][  T648] usb 2-1: USB disconnect, device number 34
[  405.093489][T17959] veth0_virt_wifi: entered allmulticast mode
[  405.464544][T17961] tipc: Failed to remove unknown binding: 66,1,1/0:2096363531/2096363533
[  405.550617][T17969] netlink: 'syz.9.5475': attribute type 4 has an invalid length.
[  405.665358][  T648] tipc: Node number set to 4192042752
[  405.696524][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[  406.962109][T18018] fuse: Unknown parameter '�M)��|v'
[  406.977805][   T36] kauditd_printk_skb: 162 callbacks suppressed
[  406.977822][   T36] audit: type=1400 audit(1758245542.828:37521): avc:  denied  { write } for  pid=18019 comm="syz.9.5491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  406.995408][T18022] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  407.004914][   T36] audit: type=1400 audit(1758245542.828:37522): avc:  denied  { ioctl } for  pid=18019 comm="syz.9.5491" path="socket:[90733]" dev="sockfs" ino=90733 ioctlcmd=0x9421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  407.421405][T17913] can0 (unregistered): slcan off ttyS3.
[  407.443165][   T36] audit: type=1400 audit(1758245543.267:37523): avc:  denied  { accept } for  pid=18044 comm="syz.7.5493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  407.606834][T18077] overlayfs: failed to clone upperpath
[  407.612734][T18076] overlayfs: failed to clone upperpath
[  407.618750][T18076] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  407.627635][T18077] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  407.636444][T18077] overlayfs: missing 'lowerdir'
[  407.640550][T18076] overlayfs: missing 'lowerdir'
[  407.836477][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  407.836473][  T586] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  408.114548][    T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  408.208310][T18083] netlink: 108 bytes leftover after parsing attributes in process `syz.9.5500'.
[  408.254430][T17958] veth0_virt_wifi: left allmulticast mode
[  408.271253][T18095] overlay: Bad value for 'verity'
[  408.271937][T18097] netlink: 'syz.9.5505': attribute type 63 has an invalid length.
[  408.277434][    T9] usb 2-1: config index 0 descriptor too short (expected 72, got 16)
[  408.284267][T18097] netlink: 5 bytes leftover after parsing attributes in process `syz.9.5505'.
[  408.292672][    T9] usb 2-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  408.307722][T18097] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  408.325352][    T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  408.350052][   T36] audit: type=1326 audit(1758245544.118:37524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18105 comm="syz.7.5508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98eba9 code=0x7fc00000
[  408.361788][    T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  408.405982][T18120] SELinux: security_context_str_to_sid (system_u) failed with errno=-22
[  408.409539][   T36] audit: type=1400 audit(1758245544.165:37525): avc:  denied  { create } for  pid=18119 comm="syz.7.5511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1
[  408.414454][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  408.461847][T18132] overlayfs: failed to clone upperpath
[  408.467702][T18128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5515'.
[  408.477607][    T9] usb 2-1: Product: syz
[  408.487535][    T9] usb 2-1: Manufacturer: syz
[  408.500102][    T9] usb 2-1: SerialNumber: syz
[  409.028845][T18190] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:56
[  409.389596][T18217] overlayfs: failed to clone upperpath
[  410.741505][T18263] bridge0: port 2(bridge_slave_1) entered disabled state
[  410.748679][T18263] bridge0: port 1(bridge_slave_0) entered disabled state
[  410.756010][T18263] bridge0: entered promiscuous mode
[  410.761260][T18263] bridge0: entered allmulticast mode
[  410.768296][T18263] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.775366][T18263] bridge0: port 2(bridge_slave_1) entered forwarding state
[  410.782713][T18263] bridge0: port 1(bridge_slave_0) entered blocking state
[  410.789771][T18263] bridge0: port 1(bridge_slave_0) entered forwarding state
[  411.069778][  T648] usb 2-1: USB disconnect, device number 35
[  411.090626][T18281] can0: slcan on ttyS3.
[  411.430118][  T648] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  411.444111][T18300] overlayfs: failed to clone upperpath
[  411.590479][  T648] usb 2-1: Using ep0 maxpacket: 16
[  411.596751][  T648] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  411.606913][  T648] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 3
[  411.617506][  T648] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  411.626580][  T648] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  411.634588][  T648] usb 2-1: Product: syz
[  411.638734][  T648] usb 2-1: Manufacturer: syz
[  411.643335][  T648] usb 2-1: SerialNumber: syz
[  411.648682][  T648] usb 2-1: config 0 descriptor??
[  411.870888][  T648] usb 2-1: USB disconnect, device number 36
[  411.923953][T18281] can0 (unregistered): slcan off ttyS3.
[  412.370497][   T36] audit: type=1400 audit(1758245547.867:37526): avc:  denied  { map } for  pid=18335 comm="syz.7.5568" path="socket:[92310]" dev="sockfs" ino=92310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  412.546211][T18348] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993
[  412.615580][T18350] binder: Unknown parameter 'l'
[  412.927399][    T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  413.088932][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  413.098792][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  413.110091][    T9] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  413.119133][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.127288][    T9] usb 2-1: Product: syz
[  413.131856][    T9] usb 2-1: Manufacturer: syz
[  413.136491][    T9] usb 2-1: SerialNumber: syz
[  413.142269][    T9] usb 2-1: config 0 descriptor??
[  413.147561][T18352] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  413.154855][T18352] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  413.357252][T18369] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5577'.
[  413.367545][   T36] audit: type=1400 audit(1758245548.812:37527): avc:  denied  { getattr } for  pid=18368 comm="syz.9.5577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  413.388518][T18352] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  413.397360][T18352] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  413.418097][   T36] audit: type=1400 audit(1758245548.849:37528): avc:  denied  { connect } for  pid=18372 comm="syz.9.5579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  413.438185][  T329] tipc: Subscription rejected, illegal request
[  413.833498][    T9] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  414.060940][T18406] netlink: 'syz.9.5589': attribute type 6 has an invalid length.
[  414.074445][T18406] netlink: 'syz.9.5589': attribute type 4 has an invalid length.
[  414.082244][T18406] netlink: 'syz.9.5589': attribute type 6 has an invalid length.
[  414.090531][T18406] netlink: 'syz.9.5589': attribute type 13 has an invalid length.
[  414.098441][T18406] netlink: 'syz.9.5589': attribute type 15 has an invalid length.
[  414.106401][T18406] netlink: 'syz.9.5589': attribute type 19 has an invalid length.
[  414.114245][T18406] netlink: 3684 bytes leftover after parsing attributes in process `syz.9.5589'.
[  414.254862][T18411] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5590'.
[  414.506183][    T9] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  414.520268][    T9] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 72:9f:10:b8:ab:59
[  414.535748][    T9] usb 2-1: USB disconnect, device number 37
[  414.544075][    T9] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet
[  414.985155][T18446] /dev/loop0: Can't lookup blockdev
[  415.104861][T18472] incfs: Options parsing error. -22
[  415.110191][T18472] incfs: mount failed -22
[  415.183271][T18493] rust_binder: Error while translating object.
[  415.183316][T18493] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  415.189577][T18493] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142
[  416.339143][    T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  416.510277][    T9] usb 2-1: Using ep0 maxpacket: 8
[  416.516681][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  416.525158][    T9] usb 2-1: config 6 has an invalid interface number: 248 but max is 0
[  416.533380][    T9] usb 2-1: config 6 has no interface number 0
[  416.539472][    T9] usb 2-1: config 6 interface 248 has no altsetting 0
[  416.547634][    T9] usb 2-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  416.556687][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.564902][    T9] usb 2-1: Product: syz
[  416.569046][    T9] usb 2-1: Manufacturer: syz
[  416.573638][    T9] usb 2-1: SerialNumber: syz
[  416.794443][    T9] ums-karma 2-1:6.248: USB Mass Storage device detected
[  416.865236][    T9] usb 2-1: USB disconnect, device number 38
[  417.234707][T18529] 9pnet_fd: Insufficient options for proto=fd
[  417.250666][   T36] audit: type=1326 audit(1758245552.440:37529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18530 comm="syz.2.5622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c8f8eba9 code=0x7ffc0000
[  417.274278][   T36] audit: type=1326 audit(1758245552.440:37530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18530 comm="syz.2.5622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c8f8eba9 code=0x7ffc0000
[  417.297983][   T36] audit: type=1326 audit(1758245552.440:37531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18530 comm="syz.2.5622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc2c8f8eba9 code=0x7ffc0000
[  417.325925][   T36] audit: type=1326 audit(1758245552.440:37532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18530 comm="syz.2.5622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c8f8eba9 code=0x7ffc0000
[  417.350255][   T36] audit: type=1326 audit(1758245552.440:37533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18530 comm="syz.2.5622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c8f8eba9 code=0x7ffc0000
[  417.374115][   T36] audit: type=1326 audit(1758245552.440:37534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18530 comm="syz.2.5622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c8f8eba9 code=0x7ffc0000
[  417.397826][   T36] audit: type=1326 audit(1758245552.440:37535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18530 comm="syz.2.5622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc2c8f8eba9 code=0x7ffc0000
[  417.493498][   T46] Bluetooth: hci0: Frame reassembly failed (-84)
[  418.377722][   T36] kauditd_printk_skb: 13 callbacks suppressed
[  418.377740][   T36] audit: type=1326 audit(1758245553.487:37549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18485 comm="syz.9.5608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55778eba9 code=0x7fc00000
[  418.490592][T18549] overlayfs: failed to clone upperpath
[  418.510177][   T36] audit: type=1400 audit(1758245553.608:37550): avc:  denied  { getopt } for  pid=18550 comm="syz.9.5630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  419.036545][T18557] overlayfs: failed to clone upperpath
[  419.643980][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  419.644001][  T586] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  419.781557][T18577] overlayfs: missing 'workdir'
[  419.794363][   T36] audit: type=1400 audit(1758245554.824:37551): avc:  denied  { remove_name } for  pid=18578 comm="syz.1.5640" name="binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  419.817381][   T36] audit: type=1400 audit(1758245554.824:37552): avc:  denied  { unlink } for  pid=18578 comm="syz.1.5640" name="binder0" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  419.859232][T18581] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:164
[  420.627558][T18624] netlink: 192 bytes leftover after parsing attributes in process `syz.7.5657'.
[  420.652748][   T36] audit: type=1400 audit(1758245555.619:37553): avc:  denied  { append } for  pid=18623 comm="syz.7.5657" name="usbmon8" dev="devtmpfs" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  420.676519][   T36] audit: type=1326 audit(1758245555.619:37554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18631 comm="syz.2.5660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c8f8eba9 code=0x7ffc0000
[  420.700437][   T36] audit: type=1326 audit(1758245555.619:37555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18631 comm="syz.2.5660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c8f8eba9 code=0x7ffc0000
[  420.724523][   T36] audit: type=1326 audit(1758245555.619:37556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18631 comm="syz.2.5660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7fc2c8f8eba9 code=0x7ffc0000
[  420.748267][   T36] audit: type=1326 audit(1758245555.619:37557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18631 comm="syz.2.5660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c8f8eba9 code=0x7ffc0000
[  420.772198][   T36] audit: type=1326 audit(1758245555.619:37558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18631 comm="syz.2.5660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2c8f8eba9 code=0x7ffc0000
[  421.017361][T18639] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5663'.
[  421.099379][T18646] /dev/rnullb0: Can't lookup blockdev
[  421.481252][T18666] fuse: Unknown parameter 'groD�ƣ��U�m[�2�up_yd'
[  421.917425][T18689] binder: Bad value for 'stats'
[  421.951510][T18695] rust_binder: Error while translating object.
[  421.951558][T18695] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  421.957827][T18695] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:128
[  422.017131][    T9] hid (null): unknown global tag 0xd
[  422.031935][    T9] hid (null): unknown global tag 0xd
[  422.037283][    T9] hid (null): unknown global tag 0xc
[  422.042634][    T9] hid (null): invalid report_size 193598328
[  422.048652][    T9] hid (null): unknown global tag 0xc
[  422.055178][    T9] hid-generic 0007:0200:FFFF0001.0028: unknown main item tag 0x0
[  422.062991][    T9] hid-generic 0007:0200:FFFF0001.0028: collection stack underflow
[  422.070808][    T9] hid-generic 0007:0200:FFFF0001.0028: item 0 0 0 12 parsing failed
[  422.080022][    T9] hid-generic 0007:0200:FFFF0001.0028: probe with driver hid-generic failed with error -22
[  422.120039][T18723] rust_binder: 18723 RLIMIT_NICE not set
[  422.120177][T18723] rust_binder: Read failure Err(EFAULT) in pid:143
[  422.318232][T18746] netlink: 'syz.2.5695': attribute type 6 has an invalid length.
[  422.332667][T18746] netlink: 35 bytes leftover after parsing attributes in process `syz.2.5695'.
[  422.346466][T18744] overlay: filesystem on ./file1 not supported as upperdir
[  422.391396][  T329] Bluetooth: hci0: Frame reassembly failed (-84)
[  423.035278][T18782] overlayfs: failed to clone upperpath
[  423.665712][T18790] rust_binder: 196: no such ref 2
[  423.671245][T18791] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  423.738618][T18797] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:203
[  423.921962][   T36] kauditd_printk_skb: 34 callbacks suppressed
[  423.937515][   T36] audit: type=1400 audit(1758245558.667:37593): avc:  denied  { ioctl } for  pid=18812 comm="syz.2.5720" path="socket:[96312]" dev="sockfs" ino=96312 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  423.962349][   T36] audit: type=1400 audit(1758245558.676:37594): avc:  denied  { getopt } for  pid=18812 comm="syz.2.5720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  423.983732][  T329] bridge_slave_1: left allmulticast mode
[  423.990226][  T329] bridge_slave_1: left promiscuous mode
[  423.995857][  T329] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.003662][  T329] bridge_slave_0: left allmulticast mode
[  424.009396][  T329] bridge_slave_0: left promiscuous mode
[  424.014996][  T329] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.126963][T18818] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.133998][T18818] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.141212][T18818] bridge_slave_0: entered allmulticast mode
[  424.147430][T18818] bridge_slave_0: entered promiscuous mode
[  424.154024][T18818] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.161093][T18818] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.168221][T18818] bridge_slave_1: entered allmulticast mode
[  424.174519][T18818] bridge_slave_1: entered promiscuous mode
[  424.181274][  T329] veth1_macvtap: left promiscuous mode
[  424.186773][  T329] veth0_vlan: left promiscuous mode
[  424.256088][T18818] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.263122][T18818] bridge0: port 2(bridge_slave_1) entered forwarding state
[  424.270402][T18818] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.277433][T18818] bridge0: port 1(bridge_slave_0) entered forwarding state
[  424.300405][  T593] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.307844][  T593] bridge0: port 2(bridge_slave_1) entered disabled state
[  424.316891][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  424.323951][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  424.332742][  T593] bridge0: port 2(bridge_slave_1) entered blocking state
[  424.339784][  T593] bridge0: port 2(bridge_slave_1) entered forwarding state
[  424.364732][T18818] veth0_vlan: entered promiscuous mode
[  424.374927][T18818] veth1_macvtap: entered promiscuous mode
[  424.460918][T18847] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  424.598592][T18867] rust_binder: Write failure EFAULT in pid:15
[  424.606377][T18869] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:17
[  424.612584][   T54] Bluetooth: hci0: command 0x1003 tx timeout
[  424.617214][  T586] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  425.409326][T18876] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  425.720367][T18905] rust_binder: Error in use_page_slow: ESRCH
[  425.720388][T18905] rust_binder: use_range failure ESRCH
[  425.726375][T18905] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  425.732033][T18905] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  425.740699][T18905] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:171
[  425.762275][    T9] usb 6-1: new low-speed USB device number 13 using dummy_hcd
[  425.811564][   T36] audit: type=1400 audit(1758245560.443:37595): avc:  denied  { nlmsg_write } for  pid=18910 comm="syz.7.5753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  425.884271][T18913] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5754'.
[  425.933876][    T9] usb 6-1: config 0 has an invalid interface number: 121 but max is 0
[  425.942278][    T9] usb 6-1: config 0 has no interface number 0
[  425.948432][    T9] usb 6-1: too many endpoints for config 0 interface 121 altsetting 53: 162, using maximum allowed: 30
[  425.949238][T18915] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[  425.959509][    T9] usb 6-1: config 0 interface 121 altsetting 53 has 0 endpoint descriptors, different from the interface descriptor's value: 162
[  425.981031][    T9] usb 6-1: config 0 interface 121 has no altsetting 0
[  425.987947][    T9] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  425.997184][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  426.007812][    T9] usb 6-1: config 0 descriptor??
[  426.064293][T18924] fuse: Bad value for 'fd'
[  426.069418][   T36] audit: type=1400 audit(1758245560.677:37596): avc:  denied  { setattr } for  pid=18923 comm="syz.9.5758" name="TIPC" dev="sockfs" ino=96590 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  426.101304][T18928] tipc: Failed to remove unknown binding: 66,1,1/4269801494:4243100790/4243100792
[  426.229898][    T9] usb 6-1: string descriptor 0 read error: -32
[  426.244808][    T9] asix 6-1:0.121 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  426.255170][    T9] asix 6-1:0.121: probe with driver asix failed with error -32
[  426.680280][   T36] audit: type=1400 audit(1758245561.247:37597): avc:  denied  { getopt } for  pid=18894 comm="syz.5.5746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  426.831450][T18967] /dev/rnullb0: Can't lookup blockdev
[  426.848877][T18973] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  426.857463][T18973] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  427.442156][T18976] futex_wake_op: syz.2.5776 tries to shift op by 144; fix this program
[  428.724176][    T9] usb 6-1: USB disconnect, device number 13
[  428.988130][   T36] audit: type=1400 audit(1758245563.407:37598): avc:  denied  { create } for  pid=19039 comm="syz.9.5799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1
[  429.265922][T19062] fuse: Bad value for 'fd'
[  429.296591][T19067] netlink: 5 bytes leftover after parsing attributes in process `syz.9.5805'.
[  429.305506][T19067] 0��{X��: renamed from gretap0
[  429.310839][T19067] 0��{X��: entered allmulticast mode
[  429.316387][T19067] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  429.342797][T19070] 9p: Unknown access argument : -22
[  429.373579][T19070] /dev/rnullb0: Can't lookup blockdev
[  429.674285][T19083] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  429.674315][T19083] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:37
[  429.800984][T19087] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true
[  429.810095][T19087] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  429.818067][T19087] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:43
[  429.968015][T19101] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  429.985957][T19101] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  429.994233][T19101] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  430.003836][T19101] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  430.083061][T19107] /dev/rnullb0: Can't lookup blockdev
[  430.128603][T19106] rust_binder: Failed to allocate buffer. len:4224, is_oneway:false
[  430.229940][T19124] overlayfs: failed to resolve './file0': -2
[  430.230947][   T36] audit: type=1400 audit(1775023009.569:37599): avc:  denied  { rename } for  pid=19123 comm="syz.7.5823" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="incremental-fs" ino=343 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  431.232540][T19144] overlayfs: failed to clone lowerpath
[  431.318028][   T36] audit: type=1400 audit(1775023010.588:37600): avc:  denied  { mount } for  pid=19155 comm="syz.5.5831" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  432.142382][T19171] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5836'.
[  432.151412][T19171] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5836'.
[  432.190724][T19175] overlayfs: conflicting options: userxattr,redirect_dir=on
[  432.455680][T19191] overlayfs: failed to clone upperpath
[  432.469100][T19195] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5845'.
[  432.775258][T19202] fuseblk: Bad value for 'fd'
[  432.789232][T19204] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5848'.
[  432.798260][T19204] tipc: Invalid UDP bearer configuration
[  432.798289][T19204] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  432.869587][T19218] x_tables: duplicate entry at hook 2
[  432.875705][T19218] 9pnet_fd: Insufficient options for proto=fd
[  432.970982][T19242] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5862'.
[  433.128574][   T36] audit: type=1400 audit(1775023012.280:37601): avc:  denied  { mounton } for  pid=19247 comm="syz.7.5865" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  433.158572][T19255] rust_binder: Error in use_page_slow: ESRCH
[  433.158591][T19255] rust_binder: use_range failure ESRCH
[  433.170561][T19255] rust_binder: Failed to allocate buffer. len:24, is_oneway:true
[  433.170581][T19255] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  433.178389][T19255] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:216
[  433.205382][T19260] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  433.214907][T19260] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:223
[  433.541237][T19288] /dev/rnullb0: Can't lookup blockdev
[  433.687893][T19293] 9pnet_fd: Insufficient options for proto=fd
[  433.922885][   T36] audit: type=1400 audit(1775023013.028:37602): avc:  denied  { checkpoint_restore } for  pid=19303 comm="syz.2.5883" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  434.033835][T19324] fuseblk: Bad value for 'source'
[  434.121226][   T36] audit: type=1400 audit(1775023013.206:37603): avc:  denied  { sqpoll } for  pid=19341 comm="syz.9.5895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  434.248441][T19347] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  434.248467][T19347] rust_binder: Read failure Err(EFAULT) in pid:235
[  434.492585][T19351] overlayfs: failed to clone upperpath
[  434.513600][T19354] batadv_slave_1: entered promiscuous mode
[  434.521106][T19353] batadv_slave_1: left promiscuous mode
[  434.658212][T19381] netlink: 'syz.5.5907': attribute type 14 has an invalid length.
[  434.777013][T19406] overlayfs: failed to clone upperpath
[  434.976643][   T36] audit: type=1326 audit(1775023014.001:37604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19329 comm="syz.7.5892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa91b98eba9 code=0x7fc00000
[  435.121468][T19449] overlayfs: failed to clone upperpath
[  435.171223][T19447] overlayfs: failed to clone upperpath
[  435.915315][T19507] rust_binder: Write failure EFAULT in pid:243
[  435.923599][T19511] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  436.425546][   T36] audit: type=1400 audit(1775023015.366:37605): avc:  denied  { listen } for  pid=19544 comm="syz.9.5963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  436.615670][T19571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5974'.
[  436.624654][T19571] erspan0: default FDB implementation only supports local addresses
[  436.700129][   T36] audit: type=1326 audit(1775023271.621:37606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19573 comm="syz.2.5975" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2c8f8eba9 code=0x0
[  437.203783][T19583] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5977'.
[  438.163985][T19607] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  439.158157][T19693] rust_binder: 251: no such ref 3
[  439.164647][T19693] rust_binder: Read failure Err(EAGAIN) in pid:251
[  439.464909][T19718] rust_binder: Write failure EINVAL in pid:268
[  439.498005][T19721] kvm: kvm [19720]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7
[  439.512943][T19721] kvm: kvm [19720]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7
[  439.556212][   T36] audit: type=1400 audit(1775023274.291:37607): avc:  denied  { write } for  pid=19720 comm="syz.7.6022" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  439.609239][T19721] kvm: kvm [19720]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x0
[  439.618418][   T36] audit: type=1400 audit(1775023274.356:37608): avc:  denied  { ioctl } for  pid=19720 comm="syz.7.6022" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  439.972195][   T36] audit: type=1400 audit(1775023274.684:37609): avc:  denied  { create } for  pid=19741 comm="syz.9.6030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  440.125023][T19758] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6035'.
[  440.184870][T19760] tipc: Started in network mode
[  440.189780][T19760] tipc: Node identity ac14140f, cluster identity 4711
[  440.196657][T19760] tipc: New replicast peer: 255.255.255.255
[  440.202810][T19760] tipc: Enabled bearer <udp:syz2>, priority 10
[  440.209381][T19760] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6036'.
[  440.281334][T19773] netlink: 168 bytes leftover after parsing attributes in process `syz.5.6039'.
[  440.936309][   T36] audit: type=1326 audit(1775023275.581:37610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19797 comm="syz.9.6048" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb55778eba9 code=0x0
[  441.397989][  T332] tipc: Node number set to 2886997007
[  441.443230][T19810] netlink: 'syz.5.6053': attribute type 1 has an invalid length.
[  441.853949][T19857] overlayfs: failed to clone upperpath
[  441.875719][T19860] fuse: Bad value for 'group_id'
[  441.880748][T19860] fuse: Bad value for 'group_id'
[  441.917824][T19867] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  442.381096][T19879] fuse: Unknown parameter 'use��{�7LQ��r_id'
[  442.382415][T19881] overlayfs: failed to clone upperpath
[  442.659828][T19907] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  442.757508][   T36] audit: type=1400 audit(1775023277.292:37611): avc:  denied  { accept } for  pid=19921 comm="syz.2.6091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  443.429265][T19959] netlink: 388 bytes leftover after parsing attributes in process `syz.2.6105'.
[  443.440097][T19959] netlink: 'syz.2.6105': attribute type 4 has an invalid length.
[  443.447906][T19959] netlink: 'syz.2.6105': attribute type 5 has an invalid length.
[  443.455787][T19959] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.6105'.
[  443.530679][T19969] overlayfs: failed to clone upperpath
[  444.132422][T19983] /dev/rnullb0: Can't lookup blockdev
[  444.137994][T19983] /dev/rnullb0: Can't lookup blockdev
[  444.143461][T19983] /dev/rnullb0: Can't lookup blockdev
[  444.148986][T19983] /dev/rnullb0: Can't lookup blockdev
[  444.154447][T19983] /dev/rnullb0: Can't lookup blockdev
[  444.159928][T19983] /dev/rnullb0: Can't lookup blockdev
[  444.168094][T19983] /dev/rnullb0: Can't lookup blockdev
[  444.173601][T19983] /dev/rnullb0: Can't lookup blockdev
[  444.182315][T19983] /dev/rnullb0: Can't lookup blockdev
[  444.187942][T19983] /dev/rnullb0: Can't lookup blockdev
[  444.200225][T19983] /dev/rnullb0: Can't lookup blockdev
[  444.205730][T19983] /dev/rnullb0: Can't lookup blockdev
[  444.615397][T19999] netlink: 'syz.5.6119': attribute type 4 has an invalid length.
[  444.780937][T20020] fuse: Bad value for 'rootmode'
[  444.878155][T20044] 9pnet_fd: Insufficient options for proto=fd
[  444.921049][   T36] audit: type=1400 audit(1775023279.312:37612): avc:  denied  { setattr } for  pid=20045 comm="syz.2.6137" name="PPPOL2TP" dev="sockfs" ino=100384 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  445.146160][   T36] audit: type=1400 audit(1775023279.518:37613): avc:  denied  { listen } for  pid=20049 comm="syz.7.6138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  445.167508][   T36] audit: type=1400 audit(1775023279.518:37614): avc:  denied  { accept } for  pid=20049 comm="syz.7.6138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  445.224087][T20050] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  445.278571][T20054] rust_binder: Failed to allocate buffer. len:1152, is_oneway:true
[  445.280557][T20052] tipc: New replicast peer: 255.255.255.255
[  445.285531][T20054] rust_binder: Read failure Err(EFAULT) in pid:298
[  445.293412][T20052] tipc: Enabled bearer <udp:syz2>, priority 10
[  445.317491][T20052] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6139'.
[  445.331472][T20052] tipc: Disabling bearer <udp:syz2>
[  445.337917][   T36] audit: type=1400 audit(1775023279.695:37615): avc:  denied  { append } for  pid=20058 comm="syz.7.6141" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  445.362041][T20059] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  445.362328][T20059] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false
[  445.375343][   T36] audit: type=1400 audit(1775023279.733:37616): avc:  denied  { getopt } for  pid=20060 comm="syz.9.6142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  445.388075][T20064] overlayfs: failed to resolve './file0': -2
[  445.404668][T20065] overlayfs: failed to resolve './file0': -2
[  446.716480][   T36] audit: type=1400 audit(1775023280.985:37617): avc:  denied  { mounton } for  pid=20118 comm="syz.9.6161" path="/file0" dev="ramfs" ino=100179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  446.717057][T20119] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock
[  446.764789][T20122] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6162'.
[  446.814634][T20133] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=258 sclass=netlink_tcpdiag_socket pid=20133 comm=syz.2.6165
[  447.421890][T20171] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6178'.
[  447.431547][   T36] audit: type=1326 audit(1775023281.659:37618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20170 comm="syz.9.6178" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb55778eba9 code=0x0
[  447.489555][T20178] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  447.998343][T20192] 9pnet: Could not find request transport: xen
[  448.007265][T20192] overlayfs: failed to resolve './bus/file0': -2
[  448.014760][T20192] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  448.023519][T20192] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  448.740430][  T329] bridge_slave_1: left allmulticast mode
[  448.746196][  T329] bridge_slave_1: left promiscuous mode
[  448.751934][  T329] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.760248][  T329] bridge_slave_0: left allmulticast mode
[  448.765949][  T329] bridge_slave_0: left promiscuous mode
[  448.771895][  T329] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.879484][T20242] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.886569][T20242] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.893670][T20242] bridge_slave_0: entered allmulticast mode
[  448.899905][T20242] bridge_slave_0: entered promiscuous mode
[  448.906857][T20242] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.914143][T20242] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.921486][T20242] bridge_slave_1: entered allmulticast mode
[  448.927849][T20242] bridge_slave_1: entered promiscuous mode
[  448.934484][  T329] veth1_macvtap: left promiscuous mode
[  448.940113][  T329] veth0_vlan: left promiscuous mode
[  449.017360][T20242] bridge0: port 2(bridge_slave_1) entered blocking state
[  449.024447][T20242] bridge0: port 2(bridge_slave_1) entered forwarding state
[  449.031689][T20242] bridge0: port 1(bridge_slave_0) entered blocking state
[  449.038739][T20242] bridge0: port 1(bridge_slave_0) entered forwarding state
[  449.058805][  T593] bridge0: port 1(bridge_slave_0) entered disabled state
[  449.066144][  T593] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.075539][  T981] bridge0: port 1(bridge_slave_0) entered blocking state
[  449.082617][  T981] bridge0: port 1(bridge_slave_0) entered forwarding state
[  449.091763][  T593] bridge0: port 2(bridge_slave_1) entered blocking state
[  449.098815][  T593] bridge0: port 2(bridge_slave_1) entered forwarding state
[  449.123672][T20242] veth0_vlan: entered promiscuous mode
[  449.134084][T20242] veth1_macvtap: entered promiscuous mode
[  449.168483][T20255] /dev/rnullb0: Can't lookup blockdev
[  449.193179][T20261] ------------[ cut here ]------------
[  449.198702][T20261] WARNING: CPU: 0 PID: 20261 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0
[  449.208199][T20261] Modules linked in:
[  449.212098][T20261] CPU: 0 UID: 0 PID: 20261 Comm: syz.3.6209 Not tainted syzkaller #0 f314b4a7c60d1499390e62a22e4d37ca5a327e54
[  449.223778][T20261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[  449.234082][T20261] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0
[  449.240071][T20261] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 09 44 ee 05 00 0f 85 be 00 00 00 c6 05 fc 43 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24
[  449.250248][   T36] audit: type=1400 audit(1775023283.342:37619): avc:  denied  { setattr } for  pid=20262 comm="syz.5.6210" name="NETLINK" dev="sockfs" ino=101418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  449.260025][T20261] RSP: 0018:ffffc90002b0f880 EFLAGS: 00010246
[  449.290155][T20261] RAX: 0000000000000000 RBX: 0000000000000015 RCX: 0000000000000000
[  449.298239][T20261] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90002b0f938
[  449.306270][T20261] RBP: ffffc90002b0f9a8 R08: ffffc90002b0f937 R09: 0000000000000000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  449.314299][T20261] R10: ffffc90002b0f920 R11: fffff52000561f27 R12: ffffc90002b0f8c0
[  449.322282][T20261] R13: dffffc0000000000 R14: 1ffff92000561f14 R15: 0000000000000000
[  449.330322][T20261] FS:  00007f3dbd6246c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  449.336509][   T36] audit: type=1400 audit(1775023283.351:37620): avc:  denied  { write } for  pid=282 comm="syz-executor" path="pipe:[2935]" dev="pipefs" ino=2935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[  449.339598][T20261] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  449.369076][T20261] CR2: 0000200000000080 CR3: 0000000140f7c000 CR4: 00000000003526b0
[  449.377094][T20261] Call Trace:
[  449.380382][T20261]  <TASK>
[  449.383335][T20261]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  449.389459][T20261]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  449.395241][T20261]  ? incfs_realloc_mount_info+0xa7/0x4d0
[  449.400936][T20261]  ___kmalloc_large_node+0xb5/0x250
[  449.406149][T20261]  ? incfs_realloc_mount_info+0xa7/0x4d0
[  449.411854][T20261]  __kmalloc_large_node_noprof+0x1e/0xe0
[  449.417507][T20261]  ? incfs_realloc_mount_info+0xa7/0x4d0
[  449.423206][T20261]  __kmalloc_noprof+0x26d/0x450
[  449.428080][T20261]  incfs_realloc_mount_info+0xa7/0x4d0
[  449.433600][T20261]  ? incfs_add_sysfs_node+0x118/0x240
[  449.438988][T20261]  incfs_alloc_mount_info+0x479/0x600
[  449.444412][T20261]  incfs_mount_fs+0x3ca/0x960
[  449.449100][T20261]  ? __cfi_incfs_mount_fs+0x10/0x10
[  449.454343][T20261]  ? vfs_parse_fs_string+0x102/0x170
[  449.459634][T20261]  ? selinux_capable+0x38/0x50
[  449.464453][T20261]  legacy_get_tree+0x103/0x1b0
[  449.469226][T20261]  ? __cfi_incfs_mount_fs+0x10/0x10
[  449.474495][T20261]  vfs_get_tree+0x9e/0x290
[  449.478925][T20261]  do_new_mount+0x251/0xb40
[  449.483444][T20261]  ? security_capable+0xcf/0xf0
[  449.488376][T20261]  path_mount+0x688/0x1050
[  449.492798][T20261]  ? putname+0x113/0x150
[  449.497084][T20261]  __se_sys_mount+0x2bd/0x480
[  449.501773][T20261]  ? __x64_sys_mount+0xf0/0xf0
[  449.507184][T20261]  ? __kasan_check_write+0x18/0x20
[  449.512318][T20261]  ? fpregs_restore_userregs+0x11d/0x260
[  449.518207][T20261]  __x64_sys_mount+0xc3/0xf0
[  449.522813][T20261]  x64_sys_call+0x2021/0x2ee0
[  449.527546][T20261]  do_syscall_64+0x58/0xf0
[  449.531978][T20261]  ? clear_bhb_loop+0x50/0xa0
[  449.536680][T20261]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  449.542623][T20261] RIP: 0033:0x7f3dbc78eba9
[  449.547050][T20261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  449.566812][T20261] RSP: 002b:00007f3dbd624038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  449.575273][T20261] RAX: ffffffffffffffda RBX: 00007f3dbc9d5fa0 RCX: 00007f3dbc78eba9
[  449.583351][T20261] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0
[  449.591368][T20261] RBP: 00007f3dbc811e19 R08: 0000200000000280 R09: 0000000000000000
[  449.599357][T20261] R10: 0000000001010040 R11: 0000000000000246 R12: 0000000000000000
[  449.607373][T20261] R13: 00007f3dbc9d6038 R14: 00007f3dbc9d5fa0 R15: 00007ffe16375228
[  449.615468][T20261]  </TASK>
[  449.618496][T20261] ---[ end trace 0000000000000000 ]---
[  449.631641][T20261] incfs: Error allocating mount info. -12
[  449.637448][T20261] incfs: mount failed -12
[  449.810769][  T593] bridge_slave_1: left allmulticast mode
[  449.816480][  T593] bridge_slave_1: left promiscuous mode
[  449.822107][  T593] bridge0: port 2(bridge_slave_1) entered disabled state
[  449.838408][  T593] bridge_slave_0: left allmulticast mode
[  449.844165][  T593] bridge_slave_0: left promiscuous mode
[  449.850186][  T593] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.051930][  T593] tipc: Disabling bearer <udp:syz2>
[  450.057242][  T593] tipc: Left network mode
[  450.062433][  T593] veth1_macvtap: left promiscuous mode
[  450.067921][  T593] veth0_vlan: left promiscuous mode
[  450.287527][  T593] bridge_slave_1: left allmulticast mode
[  450.293211][  T593] bridge_slave_1: left promiscuous mode
[  450.298894][  T593] bridge0: port 2(bridge_slave_1) entered disabled state
[  450.306346][  T593] bridge_slave_0: left allmulticast mode
[  450.312154][  T593] bridge_slave_0: left promiscuous mode
[  450.317812][  T593] bridge0: port 1(bridge_slave_0) entered disabled state
[  450.437674][  T593] tipc: Disabling bearer <udp:syz2>
[  450.442980][  T593] tipc: Disabling bearer <udp:syz0>
[  450.448481][  T593] tipc: Left network mode
[  450.454359][  T593] veth1_macvtap: left promiscuous mode
[  450.459945][  T593] veth0_vlan: left promiscuous mode
[  450.465483][  T593] veth1_macvtap: left promiscuous mode
[  450.471107][  T593] veth0_vlan: left promiscuous mode