last executing test programs:

25m45.921846546s ago: executing program 32 (id=2619):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000) (async)
r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0xffffffffffffffff, 0x0, 0x80000004000000, 0xc], 0x80a0000, 0x2010d3})
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
ioctl$KVM_SET_GUEST_DEBUG_x86(r3, 0x4048ae9b, &(0x7f0000000080)={0xa0000, 0x0, {[0x1a3f, 0x2, 0x9b, 0x1000, 0x1, 0x2, 0x3, 0x6]}}) (async)
capset(&(0x7f0000000c00)={0x20071026}, &(0x7f0000000140))
r4 = signalfd(r3, &(0x7f0000000100)={[0x8d44]}, 0x8)
ioctl$TUNGETVNETHDRSZ(r4, 0x800454d7, &(0x7f00000001c0)) (async)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r5, 0x8982, &(0x7f0000000040)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x6}) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
readv(r7, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000500)={'syztnl1\x00', &(0x7f00000003c0)={'gretap0\x00', <r8=>0x0, 0x40, 0x7800, 0x5, 0xfffffffb, {{0x45, 0x4, 0x3, 0x27, 0x114, 0x68, 0x0, 0x0, 0x4, 0x0, @private=0xa010100, @remote, {[@noop, @lsrr={0x83, 0xb, 0x62, [@multicast1, @dev={0xac, 0x14, 0x14, 0x28}]}, @rr={0x7, 0x1b, 0x86, [@broadcast, @private=0xa010101, @loopback, @rand_addr=0x64010102, @empty, @dev={0xac, 0x14, 0x14, 0x16}]}, @lsrr={0x83, 0x7, 0x57, [@empty]}, @cipso={0x86, 0x53, 0x0, [{0x5, 0x6, "5e8b9ac8"}, {0x5, 0x8, "cb09d76da2d7"}, {0x4, 0x7, "f630f04fec"}, {0x1, 0x10, "d6efc17ed4989d301d1fe02a28c9"}, {0x5, 0x10, "9808432df9f1c2855d23ef98fc28"}, {0x2, 0x5, "b9e3d4"}, {0x6, 0xb, "0db7260bb3b7c45278"}, {0x2, 0x5, "01e864"}, {0x1, 0x3, "a1"}]}, @ssrr={0x89, 0x2b, 0xf9, [@local, @multicast1, @broadcast, @rand_addr=0x64010101, @broadcast, @multicast1, @remote, @remote, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x10, 0xd1, 0x0, 0x8, [0x6, 0x2, 0x88]}, @timestamp={0x44, 0xc, 0xb6, 0x0, 0x8, [0x4, 0x4f2]}, @timestamp_addr={0x44, 0x1c, 0xca, 0x1, 0x6, [{@broadcast, 0x80000000}, {@remote, 0xffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3c370aa7}]}, @timestamp={0x44, 0x1c, 0x96, 0x0, 0xd, [0x2, 0x6, 0x0, 0x4, 0xe, 0x623]}]}}}}})
sendto$packet(r4, &(0x7f00000002c0)="33fa0f2f63d909a0de935f00f7a981de8edacade4ca592e48739a70995a0cf770818d50ef7f4f7c176e9434fc60e8dc533f0f43e9cdc47a7cfba5b081a72f1f098d02c4b4bfe4becd92f87073936b0c2932299baef95fb557cacfbfe7c5eacde65760d6259c513d068bd3b71a013c2f49b09704a13b66b98cb0aaddba7818c4af232f621fc8934a39cf79d9b1757b3639ab31492bb9ccba9ef824559549c4a4f882192d61388762bd9ad0294d05adf96e3e49e6fb8faa5b1e4b8d0bdd1a4522dd9482b07fae4469dc238f589e0a936d3964113f6dde671291185c405d9738369c0", 0xe1, 0x4008004, &(0x7f0000000540)={0x11, 0xd, r8, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14)

21m24.358882819s ago: executing program 33 (id=6997):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ftruncate(r1, 0x8008976)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
fstat(r1, &(0x7f00000000c0)) (async)
fstat(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
quotactl_fd$Q_GETINFO(r1, 0xffffffff80000501, r2, &(0x7f00000001c0)) (async)
quotactl_fd$Q_GETINFO(r1, 0xffffffff80000501, r2, &(0x7f00000001c0))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})

20m54.058193873s ago: executing program 2 (id=7332):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10)
sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r5, 0x0)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0xffffffffffffffff, 0x9, 0x7, 0x0, 0x1, 0x0, 0x3, 0xfffffffffffff801, 0x3, 0x1, 0x0, 0xfffffffffffffffc, 0x3, 0x1, 0x1, 0x9], 0xeeef0000, 0x49340})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000440)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/183, 0x0, 0x2, 0x16}, @flat=@weak_handle={0x77682a85, 0x100}, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000080)}}], 0xac, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205dad1d02a2a4524d5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f6282e980021d25789ea8edc9"})

20m53.925102565s ago: executing program 2 (id=7346):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1000008, 0x31, 0xffffffffffffffff, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x90, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xffffffff7fffffff, 0xfffffffffffffffe, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}], 0x0, 0x0, 0x0})

20m53.780767258s ago: executing program 2 (id=7349):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0xc6225a99193a0f6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x46, 0x0, 0x0})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wake_unlock', 0x80004, 0x6)
process_madvise(r1, 0x0, 0x0, 0x17, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x25, &(0x7f0000000180)=0x400000001, 0x4)
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000100)={0x80100, 0x11d, 0x9f3c855a202854be}, 0x0)
openat$incfs(r3, &(0x7f0000000140)='.pending_reads\x00', 0x440080, 0xa)

20m53.66390706s ago: executing program 2 (id=7355):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x6a)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@verity_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = socket(0x5, 0xa, 0x800)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/217, 0xd9}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000004500)=""/4101, 0x1005}, {&(0x7f0000003500)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/158, 0x9e}, {&(0x7f0000000480)=""/138, 0x8a}, {&(0x7f0000000840)=""/176, 0xb0}, {&(0x7f0000000780)=""/132, 0x84}, {&(0x7f0000000000)=""/260, 0x104}], 0x9}, 0x1000000d}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0xfd}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x3ff}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x810}], 0x8, 0x40000100, 0x0)
mknod(&(0x7f0000001980)='./file0\x00', 0x8, 0x10000)
r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x20c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x3})
read$FUSE(r1, &(0x7f00000039c0)={0x2020}, 0x2020)

20m53.614177721s ago: executing program 2 (id=7358):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0xc, &(0x7f0000000100)=0x3e60, 0x48) (async)
sendmsg$netlink(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="240000001e00290700000000000000000c000000000000000000", @ANYRES32=r0], 0x24}], 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000180)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) (async)
close_range(r1, 0xffffffffffffffff, 0x0)

20m53.491112664s ago: executing program 2 (id=7363):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$selinux_user(r1, 0x0, 0x0)
r2 = socket(0x8000000010, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = gettid()
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000200)=r4)
write(r2, &(0x7f0000000600)="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", 0xfd)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet6(0xa, 0x3, 0x8a)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000100)={{{@in=@rand_addr=0x64010102, @in=@remote, 0x4e24, 0x0, 0x4e63, 0x3, 0xa}, {0x0, 0x4, 0x8, 0x0, 0xfffffffbfffffffd, 0x9, 0x0, 0x8}, {0xcb29, 0x1000000000, 0x53e5, 0x5}, 0x0, 0x1, 0x1, 0x0, 0x2, 0x3}, {{@in=@private=0xa010102, 0x0, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1502, 0x1, 0x2, 0x0, 0x5, 0xfffffffd, 0x6}}, 0xe8)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=<r7=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000000c0)=r7)
read(r3, &(0x7f0000000340)=""/87, 0x57)
r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000002240), 0x100, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r8, 0x401870cc, &(0x7f0000002280)={0x0, 0xe4, 0x0, 0x72})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=<r9=>0x0)
r10 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f00000001c0)={{0x3, 0x0, 0x80, {0xffffffffffffffff, 0x1}}, "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", "8f9bea13d6c1793efefda669a3bfc1a1f2d2afea1c14a5b35aac4a522cce409cb88f5802ab78a0dc4ad9e13501a073e6fc60f1778eecc8a6f5299ba9f7dcdab9079dc269bb0d7bb287afa53a930cfb99ca80b3c23dd58d7a4d8ceadf2787fc4f8c638dcd55f8e962ef362db8ae2d407ea8f04c151b89947d52c901335b5ca070883017289368b02ae4676286906bf2f984ae3b2f4ce4d345ea814a725ef388f09b6b6dcc519515885e6e5062d9cd7e801d8a14b1c5b86c404a3bcfb968a48710eb7c451630b0e3895739f51e1379f25a9848fd01021cc53ab10691091090b2cad44133a51465c16c2257cdde467cdae5616e809ad2f3ca71a0b4ae46b5b62142b1d6f782c4286dbea20f02bae71821c1c956172806c55069c3e33f8811a31a44856a1d0521c3e81c12b6dcae2b0e5f006a9468614031c6ad977aa589e4076f55a5528d7b408fd429da83d78bc7dbb794b4117379334fb9167b872d0459a457ae425f768052a583f23ff60a29f11659756f40240b1939fb8b72c3fbe3963680fdcc09900ab387757c9146d223ccdfd5aa26682d39aee3e4b327748d02f82964c117fd480804952654de00db09934cd5c1786b35453f18515ec8f28ee9aee0bfd367eafdfccb54ed29fd08bbea75ed8b6a93c23cb337ae900ba89dcbb3d87191e1e56de67175572aa09f2eaa4fc1f31055b08ce99c30dadc63c743de7fc3e5e0511c98d6b37132f66f09577f6a5f9d113865830876d2f33887136d976525d195790184b7eeaf82169128911c37856b5e75db9999269b252f12d07c62236fac6835a3c13261c527d03d33df946ddfa40c85548ddb9179cf5d963246e215fa0f76472f9f24493aad8db71422f1d1c31a454980f2499294f858de9e8a4937f832b21104c843d084ba15466453f9fd830a1d7d5dbe801ef67c2d6ba52cefcaffa798dd47e9d1e94729956b62ccaf200ff3c32e41cabf86de920f74e1c9e00391909b622505388a3d297b4095f5aa3c17ef5e68c4b3ff18855fd13ff2fe3b1746155d149baaead01ce8d975730b235b1fca6a158f219d3256489d1421e9a008434ae4acc01e583a3145633bd217a6b74d4165fddc31499b6bde7341aad811e80ee6aefdb5aa993926b57d90c0098babdf172c2ec2fe85ba0b75bdc898ba9a2dc7383533b70f3eae8c5c91526a9d5aa99f4a91c9a4235b05558f9871f1e2254a2300e7bd5b4c0fa0bae78e00a53400ca2d1bd03f9d47c82a0e8a17519b53ab0274dd5fcab49ef76a567c156b947b38744657321da66d2983024a67adc00adcde04f35fc2cfeb39c0adcaa508ee7cb8b7a6b73b4deeba620538003f11f390d108c466a2058db84b122b62844f6aebf2d119ea050ba34a1152c439b4ee0491d9417398ec2b7154bdb39ffadb6385c52108f61cc0847cc8e499b3009b00ea000d1c84848c8213d82aa2c87d9c7b15fdf23454190b5c18f563985383a42c2d600155970c15cde8da2d14ef5908704966c286d59a5141bff15ed1e8b7c1252d8cbd641c70f8129ca870fa1235155cf642095b20d88de5c0a0ac6e8969c05996481d1e8e7f9cae627ad6cd374bffa2c8714c84e735384c4064c2e194f26ea16d3d99259cc394d2c4553578ad251c3fe2b88b316dd3533b644ec59390868fe5e7f79fa721ae8dd5ded8ceefaad3879b8c5577bb831079b44fab7db38f0b61d74ed192b2c61cfe6bed13049db2c6b85434e46194230ab022f7d74be00a844023b0e33cbf1d2b4d0ad3e61b950cd9801941fd8e5d4b90154ae9f173b42fcd658190758f21af8ff9086d4eb12bc3496bfecd99211c1048b3ce4dd25f0934d7f17d45f50084c4ef7c31625080a1c1cec43922d89d1945f675d980e8f2b374c198fb6e857d099c33aeececaac17ab9c12c343051e7dd2f8786883339dbc643af493745974a4da505844e0419dbddb4eca492713d006a5ff47d78dfac1642acab8caa7bda595b6b9532edf6da9ee99711822fabf8e8783dc8f156d1490f40ed6aedb4f97ce55269a2070b4aa3fc51ef22d9fa8342a03ef1b27831f83ade237f4344797eb29f9bbc6aced4005f4b379a1e0b060b4f9cbfce975b9bb2b53e1228c91753a7dfe6d67282d565c1ef42a15c1ff0d49f1128694336eaa277fd691de0748740241edb9250ab53e53523b2217fd4d554fe482c35d8ebdce8c2d053ea2b035a5e8f9ea2e683b24e418698e48b6bb8275c6938c61a6fcafb1f7c73a344db76bdc8cafb1a07000000e62e3d9b92ad50241ec0908d73255cb72ab5d144757a55c116343e6e6c61bb0999615ddca343e02a5e3438cc9f66b1619c4467b12e615918d2f27392977775c165530dc0059bb41bd6103e612ef5bcd7f2df54ab86a05836b0bb685c05e935da8dfe4144217603c6e4f703d8062af788c7acf61285baaf7c7043a0602fbe8d61daabcf07156f7ee60debca3787d1f4b60f39c341df2908bf7944a5753883626920f1e82eeb374409fa0b331053a9c6bd3ab48682d228ec04d7cb3eb94917d00bc97b46ec14f1681013969cda5ea2c95fa390b3d6422ce0ac242690fbf352d757c9fbc66d06b0e4578e43f032c5f033d54618d178ef0fabdb00108d23cae66bd4ce059709b01e5b8ffec5595865a1c77c0bd8a1f2cb5f13d2b49450b23d021f64247966fd07bee6538fb0565b7eb41489566bc066107a345d705335bc918fe2e3c4edc52872fd25933aaa908cd78eec4e414d46c035c734af8a5b8d47fe62a4a9c49da0cf6547cc8d6702a2468c8d6fbe0ec7d90888d0bf3a0c7c42507d0baf458ce087d4c7725f42edad430abf233b064186c111b4c1fc2861e74426a31d04e2ade9d7acd8f0ac376b712d1eb20175b93b6900291b5625f90276f0857af6b0d108ddb0d772f501e687196c7caafc90010403596a6b5735e28ec6363896c8719e6002dcea716038e7b773c250c98aae730a7f39d995d0c737ff6e29c7a548c69896355b73d50eff7f7a1238f66601d10e4ccc6fb5e924a59bb41da1eba811f5acb22e8bc3719f3568d0fdc0868b29df0727f5cd50290a1845e22d523cde3002560fef504bd2c9a291c7a81a4f2b5b8a015f379009e3e8baed5d35c4a03e09afd37d7fe9d86e86eb53701ae8016d5a19ce5e96e11549ba09e3c2a6700ea84796091f6ca47d4c68fb1e6f4448e1b72f6d4b8af491b635208b31356140db8134e5a1594e47c7ad68dcd2399f49731c60f5f6c101955d4c31275df3d4ce3207e8dc03b87cae229f1f1d09f0064ef7b0727f787efef0369222717129287a9b3a375e6aadd40b6fdaea3d43cd59febe098b7f80d72343bb147a20b22b5de8fbd32bf4ce64f3ad2510dad9c243327e7c706b06004d1cb82edcc113d74bb9cb820e360c9a8992b884a65234b93250f7ff8e7271983c6505cdf0524b5a8e60f8b3d86281a903ee62d3010d62a788d360182c1106486ee1673f5b7da5a2a154cbe53697305907f64140283f78b9b3b78d2a420586bbac1f72b4388258a0e7c1cc26048cbf3e47c593e9d3300e98931801efc3bdd0ed74e0d3b4f881c66b71a401d9719a1231394ffd04b35bb3c5dcc5ee18696e8327ef9f0f7d8ee218662ec6e747d5c009ba9462d0fba519be8f5f951a5bc077a6eaca928536f35e5929863357cc025fb80c5806d3b7a9f2645e1f6d3239bf763e9ff16fe6bf30d6139f2a117fa1db0d6d2c6aaecf1cacc1b28b24587c9bfd48e52f37651cc97c35d3dc3834b7f973213d0edefdf42a239da89bf1b735767f9e38119de3fd24dbdb34c38068888dc8ff11d19b1950772e283903ce51b1c13e86d58b283dc8f8a3c9456115b19a0561f3aa9c7eca553c4e5bfc20b5da4b32e607a57c2577ab2a65cedb2dd754a2363b37b138ea37e2e3546eea289da7475850e393e7331416bcf4ec75f0c6e654df1fc513e0dcc52ba57e9a128d148cf42d35fb9c7168c959e1ed6e4811fba1662c22194101a6d8787e037a35888117c854a2ef8f605076771ab5aefc8135cfa4c2a25680c6566e0fd19eee7cc86ece140efb6fab4200eabc09d834239abf5f48b46ea51797ee393693270da94c3e73859c01d1042e2eff0b1c4ed41ea560f38b8483d94b9dace687bbe8993fc4e2872b686bf299bb0dce34874d940fd2c36b5270aedd09e5e5a952d70f191e011c7e269219477fe8f5ded564f14fda6461b64d84ec32543a7ed663d8d27d8b8893942e0b7167f3f7b936f8f1fe623248d9815c5969f3a22f0fdefb527d9a870d7ece5430a9adcfee9eef05d235a0c87989965b20bad18c96d696e817c95693fec426ff81f1250e81c244058722243cb3e2df722ac46554a368a90a81206628fcc889cca832a8d4ed20188db0005b1b1c494e3dcce0622dd72ee35f4b4ac447909937bf67807344f5a629230752645aee6c70a885a80ea0e491fdef70648bfa0060ad78b122f2cc0637feb6c5754073d71326bb5a5c0b8c9890fffab1360d647d3a7b4e4bfb29c3162f311d7a1a41c3c5f739542ec723fff2c1e086dd79b1f22f3ff5a512e7ec7dfa54cc6883ae22b949139b1f029f8674ea97c5fb8125a3dafebddd524acdd1618c9f9b9fdf0ea659c4bd4b8da12cae75d1f5ae611b8fa7fd23ff0ff7dcf8a10540120d03d72db15d0775075c1c30ba7e6a07ee6633fa6fa396ca3a5799a7905db5d49e8e8ce00eb7a9af5f2c60749bc28c4b188054e21f44f28d2d1258326ae27a1b14d4704ffb93ff506bbf07e0e4e1bf2502fce11eeb83b9c491a68db0744a61ec449f5338c0b40d77ed16de2d935320bbd2cea2a164f26e7b619ddd81448009adeadfdcdead9df5a1c6da9aca64f373dfaf7cb940aac9f5eedb7a5d49eb74dc0e0819b05f328e9a4ddf3ef0a27cf01a853e02bc69970a32930c48509d726600dc7ee95e119d4cb28f87aa13b7ff846c338b5f9090586ff7bd983721d4a4b5a2e9a3e1495644483bf14861d524196f0d73265688794d6b3b4ce8b3f994c56a82a02a35aeaf9f79c08f5280a6ba0187eae965e412f14cb379869c997564b0a37349dc535882d5d4054d18bf44cbfccbdb8b377761096c974b3dde6a9dc767937bc3430a7fb614671e73ea867b4cd499f2581766510ad70811cda49b69b5afd380ae2ad43281e6640d4f20b2615f3c0b20f7d45c69a9cbbe7933776e07043b141664c059f1c6de17d44eed8b6242d6e8e8b3b86cff4306a9657e6d6f0c429f52138c6c5f7d155bc713432ca75bbf77c3a2c06e546474a7c327d10c46be64e6729643a9455420c48677a23c92f05e3e56f70100000000000000600739cd068305bb6aea50d5d1042f821e78f2942d603c46a1e4541756bac183b640935dffe8309e3e90a170ca3d126375a0177b1d94b72b622607af60a2cfb9b63464689237fcdbb752e89335aa96c615a59e39fcd89a3a39445e78fb5dd4912b16850863305496ca80974c3d39892a255f9a26b438662e6bc67e1d5115acff5bee940368df7e182ac1cc24331adb6e155ecfa1257d2f47a6b959f2bcf2dfbf86613c7761746ed85fd7e2a3c7c8602ee5143b100bd0a5026146becd255004fd8728bcfad605fad03e754ff1245e7716884e7e6898158ca4e9ba58cf09d8afe65fc18c2529b43a14e7eb7451b8072d68124be7b9133301d840191435de4704e2dda8ccfa87013f733aa10431faf7e46be7a391809af91e5e98d63c80a13c4b4fbb95b44ae5540f62f43036daef02b5dd404c0b08d46fa66fbdf0b4ed839494aa4c85194dac555e4061481c6717a3306700"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r10, 0x0)
syz_usb_connect(0x3, 0x8c6, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
ptrace$ARCH_GET_UNTAG_MASK(0x1e, r9, &(0x7f00000002c0), 0x4001)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000000010102000000000000004002000000060001801400018008000100a1c329ce08025b8de00000010c0002800500010000000000"], 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x40000)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)

20m53.473481844s ago: executing program 34 (id=7363):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$selinux_user(r1, 0x0, 0x0)
r2 = socket(0x8000000010, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = gettid()
ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000200)=r4)
write(r2, &(0x7f0000000600)="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", 0xfd)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet6(0xa, 0x3, 0x8a)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000100)={{{@in=@rand_addr=0x64010102, @in=@remote, 0x4e24, 0x0, 0x4e63, 0x3, 0xa}, {0x0, 0x4, 0x8, 0x0, 0xfffffffbfffffffd, 0x9, 0x0, 0x8}, {0xcb29, 0x1000000000, 0x53e5, 0x5}, 0x0, 0x1, 0x1, 0x0, 0x2, 0x3}, {{@in=@private=0xa010102, 0x0, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1502, 0x1, 0x2, 0x0, 0x5, 0xfffffffd, 0x6}}, 0xe8)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=<r7=>0x0)
ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000000c0)=r7)
read(r3, &(0x7f0000000340)=""/87, 0x57)
r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000002240), 0x100, 0x0)
ioctl$IOC_PR_PREEMPT_ABORT(r8, 0x401870cc, &(0x7f0000002280)={0x0, 0xe4, 0x0, 0x72})
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000280)=<r9=>0x0)
r10 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f00000001c0)={{0x3, 0x0, 0x80, {0xffffffffffffffff, 0x1}}, "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", "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"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r10, 0x0)
syz_usb_connect(0x3, 0x8c6, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
ptrace$ARCH_GET_UNTAG_MASK(0x1e, r9, &(0x7f00000002c0), 0x4001)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000000010102000000000000004002000000060001801400018008000100a1c329ce08025b8de00000010c0002800500010000000000"], 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x40000)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)

18m11.844056344s ago: executing program 4 (id=9833):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0xffffffffffffff08)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000002e00)="2210942272ce9a37c0fb001f95548ca7", 0x10)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x0)
r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
signalfd4(r3, &(0x7f0000000000), 0x8, 0x800)
fchmod(r3, 0x1cc)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x50, 0x0, &(0x7f00000000c0)="70d07134252032b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8edc11615cb9fab16"})
prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000ffe000/0x2000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="c7"})
mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r5 = openat$incfs(r4, &(0x7f00000001c0)='.pending_reads\x00', 0x80, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r5, 0xc058671e, &(0x7f00000000c0))

18m10.929989402s ago: executing program 4 (id=9835):
keyctl$session_to_parent(0x12)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$getregset(0x4204, r1, 0x202, &(0x7f00000001c0)={&(0x7f0000000140)=""/88, 0x58})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x0, 0x5004)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
recvmmsg(r4, &(0x7f0000004140)=[{{&(0x7f0000000640)=@ieee802154, 0x80, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/39, 0x27}, {&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000800)=""/46, 0x2e}, {&(0x7f0000000840)=""/237, 0xed}, {&(0x7f0000000940)=""/248, 0xf8}, {&(0x7f0000000a40)=""/72, 0x48}, {&(0x7f0000000ac0)=""/9, 0x9}], 0x7}, 0x6}, {{&(0x7f0000000b80)=@isdn, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000c00)=""/192, 0xc0}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/98, 0x62}, {&(0x7f0000001d40)=""/166, 0xa6}, {&(0x7f0000001e00)=""/154, 0x9a}, {&(0x7f0000001ec0)=""/51, 0x33}], 0x6}, 0x1}, {{&(0x7f0000001f80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003200)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/25, 0x19}, {&(0x7f0000003040)=""/173, 0xad}, {&(0x7f0000003100)=""/196, 0xc4}], 0x4, &(0x7f0000003240)=""/57, 0x39}, 0x6}, {{&(0x7f0000003280)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000003780)=[{&(0x7f0000003300)=""/173, 0xad}, {&(0x7f00000033c0)=""/195, 0xc3}, {&(0x7f00000034c0)=""/63, 0x3f}, {&(0x7f0000003500)=""/240, 0xf0}, {&(0x7f0000003600)=""/81, 0x51}, {&(0x7f0000003680)=""/202, 0xca}], 0x6}, 0xfffffff0}, {{&(0x7f0000003800)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000003880)=""/131, 0x83}, {&(0x7f0000003940)=""/112, 0x70}, {&(0x7f00000039c0)=""/245, 0xf5}, {&(0x7f0000003ac0)=""/216, 0xd8}, {&(0x7f0000003bc0)=""/201, 0xc9}, {&(0x7f0000003cc0)=""/94, 0x5e}, {&(0x7f0000003d40)=""/251, 0xfb}], 0x7, &(0x7f0000003ec0)=""/13, 0xd}, 0x6}, {{&(0x7f0000003f00)=@ax25={{0x3, @default}, [@bcast, @netrom, @remote, @bcast, @rose, @remote, @rose, @default]}, 0x80, &(0x7f0000004000)=[{&(0x7f0000003f80)=""/81, 0x51}], 0x1, &(0x7f0000004040)=""/209, 0xd1}, 0x9}], 0x6, 0x2102, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc})
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
r6 = socket$inet6(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000040)="1700000021002551241c0165ff00fc0202000000db73de", 0x17)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x11, 0x0, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x1f8, 0xe8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000140), {[{{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0xff000000, 0x9, 0xf, {@mac=@broadcast, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, 0x66, 0xfffc, 0x81, 0x6, 0xffff, 0x4, 'pimreg\x00', 'caif0\x00', {0xff}, {}, 0x0, 0x98}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @empty, @local, 0x8, 0xffffffff}}}, {{@arp={@remote, @remote, 0xff, 0xffffffff, 0xd, 0x2, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, {[0xff, 0xff, 0x0, 0xff]}}, 0x3, 0x4, 0x2, 0x8, 0xffff, 0xa80, 'bridge0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @empty, @multicast1, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000024d564b000000000b"])
close_range(r0, 0xffffffffffffffff, 0x0)
keyctl$session_to_parent(0x12) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
ptrace(0x10, r1) (async)
ptrace$getregset(0x4204, r1, 0x202, &(0x7f00000001c0)={&(0x7f0000000140)=""/88, 0x58}) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
ptrace$ARCH_SHSTK_UNLOCK(0x1e, r1, 0x0, 0x5004) (async)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
recvmmsg(r4, &(0x7f0000004140)=[{{&(0x7f0000000640)=@ieee802154, 0x80, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/39, 0x27}, {&(0x7f0000000700)=""/203, 0xcb}, {&(0x7f0000000800)=""/46, 0x2e}, {&(0x7f0000000840)=""/237, 0xed}, {&(0x7f0000000940)=""/248, 0xf8}, {&(0x7f0000000a40)=""/72, 0x48}, {&(0x7f0000000ac0)=""/9, 0x9}], 0x7}, 0x6}, {{&(0x7f0000000b80)=@isdn, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000c00)=""/192, 0xc0}, {&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001cc0)=""/98, 0x62}, {&(0x7f0000001d40)=""/166, 0xa6}, {&(0x7f0000001e00)=""/154, 0x9a}, {&(0x7f0000001ec0)=""/51, 0x33}], 0x6}, 0x1}, {{&(0x7f0000001f80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000003200)=[{&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000003000)=""/25, 0x19}, {&(0x7f0000003040)=""/173, 0xad}, {&(0x7f0000003100)=""/196, 0xc4}], 0x4, &(0x7f0000003240)=""/57, 0x39}, 0x6}, {{&(0x7f0000003280)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000003780)=[{&(0x7f0000003300)=""/173, 0xad}, {&(0x7f00000033c0)=""/195, 0xc3}, {&(0x7f00000034c0)=""/63, 0x3f}, {&(0x7f0000003500)=""/240, 0xf0}, {&(0x7f0000003600)=""/81, 0x51}, {&(0x7f0000003680)=""/202, 0xca}], 0x6}, 0xfffffff0}, {{&(0x7f0000003800)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000003880)=""/131, 0x83}, {&(0x7f0000003940)=""/112, 0x70}, {&(0x7f00000039c0)=""/245, 0xf5}, {&(0x7f0000003ac0)=""/216, 0xd8}, {&(0x7f0000003bc0)=""/201, 0xc9}, {&(0x7f0000003cc0)=""/94, 0x5e}, {&(0x7f0000003d40)=""/251, 0xfb}], 0x7, &(0x7f0000003ec0)=""/13, 0xd}, 0x6}, {{&(0x7f0000003f00)=@ax25={{0x3, @default}, [@bcast, @netrom, @remote, @bcast, @rose, @remote, @rose, @default]}, 0x80, &(0x7f0000004000)=[{&(0x7f0000003f80)=""/81, 0x51}], 0x1, &(0x7f0000004040)=""/209, 0xd1}, 0x9}], 0x6, 0x2102, 0x0) (async)
ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) (async)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
socket$inet6(0x10, 0x3, 0x0) (async)
write(r6, &(0x7f0000000040)="1700000021002551241c0165ff00fc0202000000db73de", 0x17) (async)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x11, 0x0, 0x0) (async)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000200)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x1f8, 0xe8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000140), {[{{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x20}, 0x0, 0xff000000, 0x9, 0xf, {@mac=@broadcast, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff]}}, 0x66, 0xfffc, 0x81, 0x6, 0xffff, 0x4, 'pimreg\x00', 'caif0\x00', {0xff}, {}, 0x0, 0x98}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @empty, @local, 0x8, 0xffffffff}}}, {{@arp={@remote, @remote, 0xff, 0xffffffff, 0xd, 0x2, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}, {[0xff, 0xff, 0x0, 0xff]}}, 0x3, 0x4, 0x2, 0x8, 0xffff, 0xa80, 'bridge0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @empty, @multicast1, 0x8, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000024d564b000000000b"]) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)

18m10.840440064s ago: executing program 4 (id=9836):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x201)
writev(r0, &(0x7f0000001440)=[{&(0x7f0000000040)="b1f970bcfd6ed45c8b9547fb4924f3d8c7f4974a82e1de78b65cfe0ec898b9f6b2b3295a46040005858f75bdc79e72006d2580a472d1b6dcf4899e69da6d97f661ed8ae2128223310defd9115391ea7e83a5168d164aa552161ade5fbcb0506693fdc0a822f03c0dc214d876ba94b7bcd0bb6ea7239a1287142cb7a539e5a30b7e909ea882a5e2c77762d4eae5a5af114255aab47111b6a05d0f1a2a68b950cd37667592f1520916a22f76896ac981852447b7d873f9928388b54d0206670579569df090a49877e632d09c9f447e7509e85f06d240af3a82a71cb47c", 0xdc}, {&(0x7f0000000140)="09798ea7924e7870cdb2eff614eddaba7899d449b08f07d7e98768cf6a5f94b0a9469aadb4b602a330b86983dc5f4299652d24d2308c97b39b7808ebe03d42827d889fc389e7902eed56dd11180371bf651555e043fd54de038450d7349c526250727910af4cfd80f50906478482f21e0839147a8c0afe2f11a0228faabe452693f7b8f4214502a8ea04ba919fa0e05adee9a09151b867271da4cc0bbaf6d4f099acc904d53f2e8cf310d5176a8bfc698bdc859f94cc77501e58b18b86f304309924f72fe3f8672ecb0fcd3db863ef6da01e79353df8fe406687a0eb84409f", 0xdf}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="af850277c642ec887f3d924b46463eb4dd5fa3800331916c3e2920c1e20e69dd1666295debe3b40c95dce8cf5edf6655609cf79e2117f2a355c3ed16c5b766f28ae8c8efee4f102682a470dd99fa63a97967e515bb2ed3c4fb27874747b063f1e14a201b604dbe902561018e02c777ef7a783a2cfe4a6e358dd108c098f394002dcfedf7db4596dd5b5a92a995b4f746297ca32e74f98c49c7b2d33583aa18707ba7db1c356c17d6c48c", 0xaa}, {&(0x7f0000001300)="cb10fbc64bd8b45e20c73ca7e4b696e5887fa32458295853104862f866042c6d6e25e55e33a95c349f32c557d71dddb82a0c47f72437b0dbc08870360e602bf6de19abcd1336c7d0bd0f71de6f4b8b3d935d5fc19b690a7fcf033b04811645307de9074c9b32934db25580f28302c34d6808927d0d", 0x75}, {&(0x7f0000001380)="f25228992635707d7dd56645ddcb76197d7d04b8080231113ac98bd8a19ca746b4018346addd2db077d6efb13e095caacc7358390275dafa5880f233be28b834789d3a5440d105e6ff3aa7b676a851ba132dba35e281d3b7cf2d4e6034765f3f2baecc562f768c632f5f17541c74c894361a49863663962c99355c4b11b4d7b9df1cb4d4542daa94642483d44d2081016880bae358cfe6d4bdde305af21e4a4cff3d7a73d0c0281ab1ef8a747d089262dcade164a0c048fde571b9e48b8eb9", 0xbf}], 0x6) (async)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f00000014c0))
r1 = creat(&(0x7f0000001540)='./file0\x00', 0x2)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000015c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x1c, r2, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x1c}}, 0x20004892) (async)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000016c0), 0x80, 0x0)
ioctl$TIOCNOTTY(r3, 0x5422) (async)
openat$cgroup_type(r1, &(0x7f0000001700), 0x2, 0x0) (async, rerun: 64)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001740)={{0x2, 0x1, 0x3, 0xcebe38f837dac78, 0x4}}) (rerun: 64)
r4 = signalfd4(r0, &(0x7f00000017c0)={[0x7]}, 0x8, 0x80000)
symlinkat(&(0x7f0000001780)='./file0\x00', r4, &(0x7f0000001800)='./file0\x00')
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001880), r1)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000001a00)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000019c0)={&(0x7f00000018c0)={0xd0, r5, 0x10, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xc6dd}, {0xc}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x900}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x4040)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000001a40)=0x1, 0x4) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2e) (async)
setxattr$trusted_overlay_redirect(&(0x7f0000001a80)='./file0\x00', &(0x7f0000001ac0), &(0x7f0000001b00)='./file0\x00', 0x8, 0x1) (async)
ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) (async, rerun: 32)
ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000001b40)="472494fc792e889eb89ea1db9a0d8c1ff45e4843878bf9c109f4887ac5063acd2a091bf242403e9f8d77ef325177acea5f73e2cfb19f24b9fcd7be7eb0a1579a8db9ce1bba7bcaecb5c7e7674caaa9cb1b55e34a20db00778c88a32f3f425907cb205b52f052015adae3e46dc6b0d1091033d62f4095") (rerun: 32)
r7 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001bc0), 0x101002, 0x0)
write$binfmt_format(r7, &(0x7f0000001c00)='1\x00', 0x2) (async)
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) (async)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000001c40))
sendmmsg$sock(r4, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001c80)="c834e9d91aff7d2bbd922f25f7702605e1dcb5402ac8b7ea10e85db2141ca5cc4d108b05e1b4c2", 0x27}], 0x1}}, {{&(0x7f0000001d00)=@nfc_llcp={0x27, 0x0, 0x1, 0x4, 0x0, 0xa7, "616ed54eab19d222cd7f2c6d5b6175d352e6aded520a7c93b4c00f4d397e6bbcc669856660b66b90164817cf3ffd4dbfa964c524463043af788e3038529d1d", 0x33}, 0x80, &(0x7f0000003040)=[{&(0x7f0000001d80)="2e57cf15857e96c11b5c79c7c1d65fb0be631295c0f53fc7e8b01018146c5791d0a837554c99a4ceeca318155b2d494cb0d7d81008fc388b0cc331a100cce74ddc44c34544c766544cc73eee4de52bf0949589da160cade2a36087e6b15f3ce008de2b6e6e66a998726c6682edf50a97680777d56b7062979754e26b23736d69f6c77ba82a749085bb25a7bf21962a177498c69971494f5f060df0cf6758f9cb7bbc75214472a514c4ff49b63aaa98d0c86be1ab42c2d6cde2590e66cbf42df1", 0xc0}, {&(0x7f0000001e40)="13eada5e0fa9380e124b82c653db925f8a74148643401b2e078d8ca89efc", 0x1e}, {&(0x7f0000001e80)="c3990d667903e4452bfa834036b0687a7d8ccd9ffc60cfad0e2d920a61f22e8aaa4e018f2f4307c87f3f3a5b43a4ed6f2302f5dde5af58f2f64974184e5f3eaca24d14332631f498a30e2e60865822fd5c8666cfd807955b5699cdd6c39f0a2a87b4e797ff", 0x65}, {&(0x7f0000001f00)="402586e4259bc274e79c61f30e1ae3f96917d1e1b87cfdd585c0d7c83786aba8c2b2d6c869ac0d6bb0c76e75b8cdbf56d4ee50e47a4c753e853d7a72cb6e8422012ef557ff6f01c903c65bbcc411016f1c1e003585fdf725754c09a341858f98a6d96e98401b4fdd911f666d6c598ba42fec15a43ad191d6b6160504483680d79ab4cd48f0046edba51a00557fcf3df0ee00c2f01c937d6f72d2c69b5fe6e87c1819918a52bf6690d84653ea894345b5617a9fb07484850aa9046aa5b94ae44d427019b1fea8539d5ff8f91a62521086f4ed9b9bd116f6d31c1054ff5a7964190244", 0xe2}, {&(0x7f0000002000)="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", 0x1000}, {&(0x7f0000003000)="517231bba0c899a8e7cfecd840", 0xd}], 0x6, &(0x7f00000030c0)=[@txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff9}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000003140)="2641839f1d0ad4cdc51b96d0dbd33cb124b33ca09fed9a9a04b193b71b47d19e99755a4d0e8ef48b57ced5a63dec6675c5210f51f09a5ca3c6ff756674c5129e196c53038d2298a02f2b77c0861b28d8282ba9bf79e0574b06388564fd795ecfc644419b85bcd83e4ab5b92b367783ef00b76f7e2291a874bc2be5774dee97ce11e126eda1376b90b1622efdbd5d40bb43395d63d93dd5b3ff02305ac6823857be7a451476daea0974ea070c1d5776250d1a30d84357dbf7428204e646931415a4c43e3fb2d0b3e965219cfcfdbaae21cdd1dec6d4967c99b5f62a8ed416e8a7edc6", 0xe2}, {&(0x7f0000003240)="59fd6280150feef031f6c62f8f401b2134c0b89a54a40c0fd0da768aec6ea7c580efbc95a2de24d6caaebcd713a661cc37b6d82ed027036848dc0ee90fdac014fe7b0f65c8193527ee2caa3e75f4f2c21dfbddb11a9cff687a5d030e01141a51ae320b61e3d848809aa35030d184eecf1fc04916bbe8aa85ce7e312d906b6f4e1005358087", 0x85}, {&(0x7f0000003300)="3567d42859f7f54a53ab81bf7d49f88ca9f1880deb4e66bdda6a2bab9155a591ee1505214f90df431217ef523dd15cab3752458c112d4477d5fac3ae672c85b803d91f55231d5febd95091a81a8035a20f30e0a5e3388eed57a842cd45df3aa187fb2951fe39b827eb6574683ea8634d26d60510defc3e91d49c7a21221670a20df6ae", 0x83}, {&(0x7f00000033c0)="de140d0792c9da8eb216d391eb9a865ba6e357e3753a09c40cc01761a196a804c52053a3ea9a187361b008b308196ec6e97ada4746af2fa75288f87ccd386880e812873037af2e62c11df7da05ea8e709c4cdfc32ee91ed233f08486e686500240963fa51efd258d6471157cc992b370a1f8a3ed8665ad8cc37ec27fa2e569310a5ce8ab09e6133e8e4455d4014a82a606", 0x91}], 0x4}}], 0x3, 0x2000c010)
write$binfmt_script(r1, &(0x7f0000003580)={'#! ', './file0', [{0x20, '1\x00'}, {0x20, ']'}, {0x20, '!'}, {0x20, 'trusted.overlay.redirect\x00'}, {0x20, 'trusted.overlay.redirect\x00'}], 0xa, "2aff17d2a06496bea31cc3189b476145b6ad25ff319714615b2096cc656eb3bd2c2838560c0b77ebdaef927b16d6963c66c08ee21a3e6e42d67b67889c7c517ddcf2db64b4284ffa07b9fe167b7cd1e7ab098cf89f06cb5f9ffebe4f26f73eef0ba0d52c0666d4e8b696d43c080b3715711b5f2980d9f8349b80f774fc3ddabd7c6870a0699376e7054110e9b04dbf1c52f313bd09942aaa91d00d975e838d2ae103cbfa10d2f5f7c7c186fc3ac0dc4a642f20d154dd38153cd9af7b1b568cb0f40c5bd169b1c0294509d8"}, 0x111) (async)
open_tree(r4, &(0x7f00000036c0)='./file0/file0\x00', 0x80800)
ioctl$TIOCMGET(r7, 0x5415, &(0x7f0000003700))
r8 = syz_genetlink_get_family_id$fou(&(0x7f0000003780), r7)
sendmsg$FOU_CMD_GET(r4, &(0x7f0000003840)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003800)={&(0x7f00000037c0)={0x2c, r8, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x800)

18m10.763973365s ago: executing program 4 (id=9837):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x55c, 0x20100)
ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0})
ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"})
r2 = openat$kvm(0x0, &(0x7f0000000080), 0x80002, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0x2000})
unshare(0x62040200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe880000000000000000000000000101ac1414bb00000000000000000000000000000000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff000000000000000000000008000000000002000000000000000000000000000002000000000000000000000002"], 0x1a0}}, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb500a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
pread64(r5, &(0x7f0000000200)=""/4087, 0xff7, 0xd37)
ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000000c0))
close_range(r0, 0xffffffffffffffff, 0x0)

18m10.677432047s ago: executing program 4 (id=9838):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20340, 0x0) (async)
setpriority(0x1, 0x0, 0xe) (async, rerun: 32)
r1 = getpgid(0xffffffffffffffff) (rerun: 32)
syz_open_procfs(r1, &(0x7f0000000040)='sessionid\x00')
ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0)

18m10.50514335s ago: executing program 4 (id=9839):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000180), 0x4) (async)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="19002dbd7000fcffffff1b000000180001801400020064756d6d7930"], 0x2c}}, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)={0x40, 0x14, 0x1, 0x0, 0x0, {0xa}, [@nested={0x18, 0x95, 0x0, 0x1, [@typed={0x14, 0xb, 0x0, 0x0, @ipv6=@empty}]}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x40}}, 0x20000000) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async)
r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x43501)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x17, 0xff}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

18m10.440692741s ago: executing program 35 (id=9839):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000180), 0x4) (async)
sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="19002dbd7000fcffffff1b000000180001801400020064756d6d7930"], 0x2c}}, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)={0x40, 0x14, 0x1, 0x0, 0x0, {0xa}, [@nested={0x18, 0x95, 0x0, 0x1, [@typed={0x14, 0xb, 0x0, 0x0, @ipv6=@empty}]}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}]}, 0x40}}, 0x20000000) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) (async)
r5 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x43501)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x17, 0xff}, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

17m53.483709508s ago: executing program 1 (id=10032):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = inotify_init1(0x0)
read(r1, 0x0, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1dc, r4, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1c0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/rnullb0\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x66, 0x4, "222684973f2bdf72a40274235c2458c26744c8c38c9f31acbb7d638765e13c28f9fdc0be79351d124fb1a71ed442a2f368055be624bde708d9b9fdc093886ef437f3600f394c5fc73e1b43d1e1aa2419648fbbaaca5b195cdfdc8a2c8469aeb4a813"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x86, 0x5, "e057772e615d86c37277ec7e33ec2e56cc3b90afeaed7a8f2f715f4ba2113ab911c1ab9bf585e9481bf5e76a524787d652b5daba44dda436d1c026ec19cff5bc77c1b72247027033385f52f3d6fc9bad6198781d412f75a9b03cef3c33b32a7a3e4b5e4a01f9aeee5fc50f5692443f09dd87247b213505145a414907c4f304a1da4e"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_BITS={0x7c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0xfffffffffffffd1a, 0x1, 0xfffffffb}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\x00\x00\x04\xe2Wol\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vlan0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'vlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x849}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2a80b1d2839efda1}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r5 = eventfd(0x2)
fchmod(r5, 0xa0ffff)
ioctl$F2FS_IOC_DEFRAGMENT(r2, 0xc010f508, &(0x7f0000000000)={0x1, 0xddc7})
readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}, {0x0}], 0x2)

17m52.507975507s ago: executing program 1 (id=10037):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000200)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x3, 0x80000001, 0xda6, 0x1ff, 0x4}}, 0x118)
fallocate(r1, 0x0, 0x5, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r2, 0xbe7)
r3 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000080)="4d01000000000000002100e50414090b00920000", 0x14, 0x81, &(0x7f0000000340)={0x11, 0x0, r5, 0x1, 0xe, 0x6, @random="645bcc77540e"}, 0x14)
sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4a0000001200d83a95ad394bb3e02f3579c5fb583ace247c00002abb7155183773fe6e3c564672769ce644000000008000400200810000460000000000ee00"/72, @ANYRES32=r5, @ANYBLOB="00000000000000000004000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x28011, r0, 0xffffb000)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)

17m52.496511627s ago: executing program 1 (id=10038):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x0)
r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000100)=[@wr_crn={0x46, 0x20, {0x0, 0xffff}}, @cpuid={0x14, 0x18, {0x6, 0x3}}, @wr_drn={0x6e, 0x20, {0x7, 0x3}}, @wr_crn={0x46, 0x20, {0x8, 0x6c}}, @wr_crn={0x46, 0x20, {0x3, 0x1000}}, @code={0xa, 0x6d, {"c4a1dd73f629b805000000b9132e02940f01c1b9070b0000b8b8000000ba000000000f30b9db0900000f3266bad10466ed4623986c1e8b1d0f076536360f01cac744240068000000c744240203000000ff1c24c4e130599a2eea7ebf"}}, @wrmsr={0x1e, 0x20, {0x482}}, @rdmsr={0x32, 0x18, {0x92e}}, @in_dx={0x82, 0x20, {0x8c24, 0x6}}, @uexit={0x0, 0x18, 0x5}, @wr_crn={0x46, 0x20, {0x8, 0x3}}, @out_dx={0xaa, 0x28, {0x8766, 0x0, 0x3}}, @code={0xa, 0x72, {"673e26470f01cac4c1d5e2750f4c0fc7aa9300000026f3470f09b8010000000f01c1c443c5ce2688f2ab262665460f01cfc7442400b83083f9c744240208000000c7442406000000000f01142466baf80cb864f06389ef66bafc0c66b8620066ef"}}, @wr_drn={0x6e, 0x20, {0x2, 0x40}}, @uexit={0x0, 0x18, 0x7ff}, @in_dx={0x82, 0x20, {0x9565, 0x4}}, @in_dx={0x82, 0x20, {0xccdc, 0x1}}, @in_dx={0x82, 0x20, {0x329a}}, @wr_crn={0x46, 0x20, {0x8, 0xf}}, @code={0xa, 0x66, {"48b8a9000000000000000f23c00f21f835030009000f23f80fc7be4cd777b348b800300000000000000f23c00f21f835000007000f23f8420f32400f01c5f243aa3e470f01cf2e0f380bd30fc7ab00000000f341a7"}}, @cpuid={0x14, 0x18, {0x2a, 0x2}}, @out_dx={0xaa, 0x28, {0xd07d, 0x1, 0xaf7f}}, @in_dx={0x82, 0x20, {0x997c, 0x1}}, @cpuid={0x14, 0x18, {0x7fff, 0x4}}], 0x3c5})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x541c, &(0x7f0000000680))
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c)
r4 = fcntl$dupfd(r3, 0x406, r3)
write$cgroup_pid(r4, 0x0, 0x0)
read$FUSE(r4, &(0x7f0000002540)={0x2020}, 0xfdef)
ioctl$KVM_GET_SREGS2(r2, 0x8140aecc, &(0x7f0000000500))
syz_usb_connect(0x0, 0x4a, 0x0, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz1\x00', 0x1ff)
ioctl$FS_IOC_GETFSMAP(r5, 0x4c09, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000640)={0x1000, 0x8, 0x2c, 0x80000000, 0x16, "36352ad7b225f399b2844945aa7f2f52df333d"})
close_range(r0, 0xffffffffffffffff, 0x0)

17m49.7414619s ago: executing program 1 (id=10056):
mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000000)="c7"})
mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x80, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0))
sched_setattr(0x0, 0x0, 0x0)
r2 = socket(0x22, 0x2, 0x0)
connect$packet(r2, &(0x7f0000000280)={0x28, 0x15, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)
unshare(0x2a020480)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000540))
connect$packet(r2, &(0x7f0000000000)={0x28, 0x4, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r5 = openat$incfs(r4, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r5, 0xc058671e, &(0x7f00000000c0))
r6 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$ASHMEM_SET_SIZE(r6, 0x40087703, 0x400001000001fe)
ioctl$ASHMEM_SET_PROT_MASK(r6, 0x40087705, 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x13, r6, 0x66053000)

17m49.479219335s ago: executing program 1 (id=10061):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
prlimit64(0x0, 0x4, &(0x7f0000000040)={0xa5, 0x100}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f00000005c0)={'nat\x00', 0x2, [{}, {}]}, 0x48)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
write$uinput_user_dev(r7, &(0x7f0000000e00)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x400003ff, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x200, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffff, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x10003, 0x10000001, 0x0, 0x0, 0x0, 0x0, 0xf730, 0xedc0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x800, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x0, 0xc0800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36bf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4000, 0x6, 0x4, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x10000004, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x10, 0x5, 0xfffffffd, 0xfffffffd, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x100, 0x4, 0x0, 0x0, 0x0, 0xffffffff]}, 0x45c)
ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x5)
ioctl$UI_SET_SWBIT(r7, 0x4004556d, 0x0)
ioctl$UI_DEV_CREATE(r7, 0x5501)
write$uinput_user_dev(r7, &(0x7f0000000980)={'syz1\x00', {0x10, 0x0, 0x7, 0x200}, 0x11, [0x7, 0x8, 0x0, 0x28, 0x6, 0x7, 0x1, 0xf, 0x1, 0x9173, 0x208a, 0x7, 0x9, 0x43b, 0x7fffffff, 0x5, 0xfffffff3, 0x3, 0x6, 0x1, 0x7fffffff, 0xbe0, 0x9, 0xa9, 0xfffffff7, 0x57, 0x4, 0xfffeffff, 0x2, 0xc, 0x200, 0x80000001, 0x6, 0x0, 0x5, 0x10, 0x4, 0xa, 0x6, 0x0, 0x1, 0xfffffe2e, 0x80000000, 0xb6, 0x1, 0x0, 0x6, 0xffff98e0, 0x5, 0x9, 0x0, 0x0, 0x8, 0x3, 0x1000, 0x101, 0x25e, 0x40, 0x2, 0x7a, 0x3, 0xffff, 0x7c, 0x7], [0xfffffff9, 0x7fff, 0x4, 0x3, 0x8, 0xb, 0x7, 0x4, 0x100, 0x9633, 0x7, 0x200005, 0xb, 0x6, 0x5, 0x5, 0x5, 0xdf2, 0x4, 0x2000000, 0x4, 0x2e7f, 0x200, 0x7f, 0x10001, 0x397e, 0x7, 0x401, 0x8000, 0x6, 0x4dc1, 0x7fffffff, 0x4, 0x7, 0x800, 0x6, 0x9, 0x6, 0x2, 0xd9e8, 0x7fff, 0x8, 0x0, 0x8, 0x101, 0x80000000, 0xc6, 0x0, 0x10001, 0x4000005, 0x7ffffffc, 0x5, 0xf449, 0x6, 0xb, 0x7, 0x4, 0x1, 0x9, 0x6, 0x1, 0x5, 0x1, 0x101], [0x7, 0x7, 0x1, 0x5, 0xffffffff, 0x12, 0xfffffffc, 0x6, 0x7f, 0x0, 0x3, 0x6, 0x9, 0x0, 0x200, 0x0, 0x7, 0x4, 0x2, 0x80000000, 0x6, 0x9, 0xfffffff8, 0x1, 0xe10, 0x22d7, 0x9, 0x5, 0x1e74, 0x3, 0x3, 0x7fff, 0x5, 0x5, 0xfffffffb, 0x1, 0x1, 0x10, 0x9fd9, 0x0, 0x2924, 0x7, 0x2, 0x9, 0x4, 0x0, 0x8, 0x3, 0x40, 0x6da, 0x1, 0x1000, 0x10, 0x8001, 0x8, 0x8001, 0x2, 0x4, 0xfffffe01, 0x3, 0x8, 0x5, 0x211, 0x7], [0x0, 0x2, 0x8c, 0x8, 0x26f, 0x8, 0xfffffff8, 0xca, 0x5e, 0x4, 0x8, 0x200, 0x5, 0x5, 0x9, 0x600000, 0x2b09, 0x9, 0xff, 0x10000, 0x3, 0xffffffff, 0xfffffffe, 0x10, 0x9, 0x5fa, 0x8, 0x200, 0x10001, 0x6, 0xb, 0xb, 0x7ff, 0x9, 0x4, 0x0, 0x3, 0x7f, 0x0, 0x0, 0x1, 0x8, 0x6cc20712, 0x9, 0x5, 0x1000, 0x3, 0x7, 0x214, 0xb, 0x7, 0xabe5, 0xfffffffa, 0x0, 0x4, 0x200, 0x0, 0xe1, 0x2, 0x5, 0xffffffd9, 0xc, 0xe, 0x3]}, 0x45c)
sendmmsg$inet(r6, &(0x7f0000002780)=[{{&(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000000000000000000007000000860d"], 0x20}}], 0x1, 0x4)
sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000002900000043000000090000000000000014000000000000002900000004000000ffffff7f00000000580000000000000029000000040000003c080000000000000105000000000005020003c910fe88000000000000ceaf8e0222eb8610c20400000002c910fe8000000000000000000000000000400401090106000120000000140000000000000029000000430000000500000000000000180000000000000029000000390000002e0002070000000014"], 0xd0}}], 0x1, 0xc8000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0xffffc000)

17m49.406214776s ago: executing program 1 (id=10063):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x1802, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
r2 = socket$pptp(0x18, 0x1, 0x2)
flistxattr(r2, &(0x7f0000000380)=""/155, 0x9b)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="200000001100010000000000000000002100000006"], 0x20}], 0x1}, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0xc2802, 0x0)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x7, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3f409ff2176ff7be455cd4a5d83cd4a524bd3ffe70c0b2f7b6aa54cc50a1fcad31e831fa79a00", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}})
ioctl$LOOP_CLR_FD(r5, 0x4c01)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0)
mkdir(0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458002, 0x55)
close_range(r4, 0xffffffffffffffff, 0x0)
r7 = open(&(0x7f00000000c0)='./file0\x00', 0xa85, 0x4)
syz_usb_connect(0x0, 0x4a, 0x0, 0x0)
fsopen(&(0x7f0000000040)='sysfs\x00', 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
eventfd2(0x1, 0x80000)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
setsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x5, &(0x7f0000000200), 0x4)
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000800)=""/102)
syz_usb_connect(0x6, 0x612, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000a00)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x27, 0x2, 0x6, 0x10, 0x8}, 0x1fd, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x3, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="3e03ef0600000000e0489b3d92421bec4d3f000000cc1c0e9028a2c66dbf12ac3f48b042c09ddb182b5cf55fc8c618cf364ebc9dbd17e3e5430b1a3bfdffffffb1"]}]})
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(r7, 0x4b66, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{}, {}]})

17m49.21051603s ago: executing program 36 (id=10063):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x1802, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
r2 = socket$pptp(0x18, 0x1, 0x2)
flistxattr(r2, &(0x7f0000000380)=""/155, 0x9b)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r1, 0x400455c8, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="200000001100010000000000000000002100000006"], 0x20}], 0x1}, 0x0)
mknod(&(0x7f0000000180)='./file0\x00', 0x1000, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x180862)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout', 0xc2802, 0x0)
ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x7, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3f409ff2176ff7be455cd4a5d83cd4a524bd3ffe70c0b2f7b6aa54cc50a1fcad31e831fa79a00", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0xa]}})
ioctl$LOOP_CLR_FD(r5, 0x4c01)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0)
mkdir(0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458002, 0x55)
close_range(r4, 0xffffffffffffffff, 0x0)
r7 = open(&(0x7f00000000c0)='./file0\x00', 0xa85, 0x4)
syz_usb_connect(0x0, 0x4a, 0x0, 0x0)
fsopen(&(0x7f0000000040)='sysfs\x00', 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
eventfd2(0x1, 0x80000)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4)
setsockopt$CAN_RAW_FD_FRAMES(r8, 0x65, 0x5, &(0x7f0000000200), 0x4)
ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000800)=""/102)
syz_usb_connect(0x6, 0x612, &(0x7f0000000c80)=ANY=[@ANYBLOB="12010002acbcbb0899117b906bdd0102030109020006020706a00709040a100bdf5431ff090500d9200006b5021107bf483338a3295dd2b6c93dd52fd02109050104ff07be07030725018090040017246e940dbb9a30ab35506346a08be651817c8c2b27f3090589002000010107090501000800020d000f0ac57c9a534dfaa2e817d1ade9e0072501010454cb09050308ff030f80060905800400040302040905ee30150a3a01fb0905051c40000670ff090508101000100440d9004c591a69eb924681676b26f0f415ee7d7f9f617da32abf1204ed3f09a785f7a5cb1163883ecf025e86da69442fb0b2a7c94537911af732413eb4ddd7be34c7b67c0d9fe19b9834c08bc4b77c9acb1d231c8d3c631dd41c4bd414020ef30deddfd7311459a3c2f4160f3e735a48c4c13e18bb1e6e20dceac8a24283ac86360f2e9c0a9c74f6fd7cc5fac4965d06bc7baf5191647dbf8f74003d8f75abb16ab58b96616ba5e77d57736a97944853fd15864cef7fc17437e1425f53ec5028962f492b175ce8dbad532ee34e09aaabd5bc439f0f356956fe59072501800103000905070008000503020725010204b100090504001000080f02090400030c9f5389012b0dedfc2253fc33c425db2033766c96cc8fabb0124ede132a2d5fd113816e8080e4e4ea6e309265cee19e0724010502010007240102040210072401f203021009050d02400001dc050905040340000803ac0725010075be0e0725018304100009050010100001d780090507021000000f09850d5d32e9f614084919cfd6feeafc05d4c055ec3d90b607640f72488cde8ec7b279f8d301f27fa0c601cb5db38cab03fcd294726ec0ed8b7066d55d773269dde945c2035845d009775ae930ef8d7b83ff816ef162d2856ee77ca0cc72e7f1ec117b0b3096118ce50c2e6bcf9e3b7d7f3d23a851b302c9ee45b42211360bd80982abc5fb8f3600cd363011b14929acbd47839c44fa9fbbe0d34f4ff9f9d1df4425bac0bafb094523434bff3d085ccbf93ff67adbee1cf698af11bd0905050340000e003de73172af318ebb32c3fa711597ea3a90b1274bbe6742d61936df4f17426b6e75750ec70edd4fd3fccad776d49ed791cdf09e866fa94e250fc96b1a748f6c54005d222b4435ec3a919e508129a3e89622c0dbf9ffc017587d7405460a0857aa1491dcdbbe5ec5808566d9ff0b6bb25bec546ca14f0e0c732e96e0a29fe90e57fdc8564fcea7c1e4af65f14d0725627e11d7bf42c29f34ea4295fdfe0d9001aba3283698ec381ed819f0f3d5251b6dff29a187682d8da1799969b79f3860defcd8a16bf637512f490303f023c896439ea3395470fbd202ae1a443ca5b4069985fbcab4392e401d28090500004000040600072501820705000725010100060009054800200001630e07250102fb060009050200400074058409050b000002024001dd0f13ca3ee288a00048f522a8010962961e12e924235c9ff43590225cb20e61300289f6322337e14ded3a74f0641ecdd01576eae10fda114fce3a4ae05507006d7db97fb925f12941d6afcc7e2874f53f3958f9ef1e551f6b07ae21b3fb520b83affd8e7d2e3c43397cc371c9c2f228a550938da6281cbb2f7d9b7e59f4ab460d83b06544b5f15a2d9f2806fa2dbd41c8dbd3d10ce5115c6085e2c60aef248fee91bb88c0b588de37f1ba488f2d4a2f771d65ff0bfc4a4ba2f20fdb11da73fe57d41e3e602958444d8084569a38386b9b17d5373c11111b762b01e0a23d4aa3ec3258002c5c09050c02000225080407250181020e0009050e034000fc584609050c1000044a7fff0330eded03e8b9a81bf13c2ca940b6563c6cba5f68d10b792bf7596051bf561a4a4f7656f85462353b4ae563b6f3e8a3808b1d7c1c537e07265e06564cfd377bda41475a251f38401717baefb6749422f54c82c2668b498b4ea2d36b721996275e8bff2d5d01d625bf097b905b66c429ca0bbb4ad4a157b308be40fa03c5ae21b3eda12e6d98fd79f21599f8101c7ba32c6ed15313240f4ae0675491161d0e2b77e0ccadccf7fe025f82dbd706998048ac3c6aa66add3914ff87ffa7ebd014a5ce5375f823cff0cdce8d596242a267d30ac595d3186e51e275505a30b97a87d9aba5cca937f1cd5f95208a3b382523b964446c27c534e590805c"], &(0x7f0000000a00)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x27, 0x2, 0x6, 0x10, 0x8}, 0x1fd, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x3, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000100)=@lang_id={0x4}}, {0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="3e03ef0600000000e0489b3d92421bec4d3f000000cc1c0e9028a2c66dbf12ac3f48b042c09ddb182b5cf55fc8c618cf364ebc9dbd17e3e5430b1a3bfdffffffb1"]}]})
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$GIO_UNIMAP(r7, 0x4b66, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{}, {}]})

13m21.463966582s ago: executing program 7 (id=13340):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0)
write$selinux_attr(r1, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfaf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0})

13m21.196068387s ago: executing program 7 (id=13345):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$sock_int(r1, 0x1, 0x27, 0x0, &(0x7f0000000300))
setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000000)={{0x3a, @private=0xa010100, 0x4e24, 0x0, 'ovf\x00', 0x2, 0x1, 0x4f}, {@multicast1, 0x4e23, 0x3, 0x1, 0x8, 0xc6d}}, 0x44)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="140016001e00010025bd7000fbdbdf251a000000"], 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x4)
ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f00000003c0)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000240)=0x10001})
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003})
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x300000e, 0x810, r2, 0x14cbc000)
syz_io_uring_setup(0x232, &(0x7f0000000080)={0x0, 0x2, 0x10100, 0xfffffffe, 0x3d9}, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'gre0\x00', {0x2, 0x4e26, @loopback}})
socket$inet_udplite(0x2, 0x2, 0x88)
socket$inet_tcp(0x2, 0x1, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={<r7=>0xffffffffffffffff})
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bind$packet(r6, &(0x7f00000000c0)={0x11, 0x18, r8, 0x1, 0x81}, 0x14)
setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
r9 = socket(0xa, 0x2, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000680)=0xfeab)
setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req={0x5694, 0x4, 0x2, 0x8}, 0x10)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/193, 0xc1, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0})

13m20.904033843s ago: executing program 7 (id=13351):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0xb0, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfcf, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @fda={0x66646185, 0xfffffffffffffffd, 0x0, 0x35}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000180)={0x0, 0x28, 0x48}}, 0x400}], 0x50, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df"})

13m20.719999956s ago: executing program 7 (id=13355):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async)
inotify_init()
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x1c1800, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x18, 0x1, 0x1, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40090}, 0x50)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) (async)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) (async, rerun: 32)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x3) (rerun: 32)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000200)={'#! ', '', [], 0xa, "2897c5f8c3a447f8fe1f8807c880"}, 0x12) (async)
prctl$PR_SET_MM_EXE_FILE(0x36, 0xd, 0xffffffffffffffff) (async)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x304}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", '\x00', "21be0dd9f7f3c312"}, 0x28) (async)
sendfile(r4, r5, &(0x7f0000000100)=0x10, 0x10001) (async, rerun: 32)
ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x20, 0x106, &(0x7f0000000200)="d704ec40"}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x2, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x60cf6ba5a5e3603a, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7ffffffe, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) (async, rerun: 32)
ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

13m20.418710102s ago: executing program 7 (id=13357):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x2, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f0000000040)=0x40004000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x14, 0x52, 0x1, 0x70bd25, 0x4, {0x2}}, 0x14}}, 0x800)
r3 = gettid()
syz_pidfd_open(r3, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000080)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000200)=""/123, 0x7b, 0xfffffffffffffffd, 0x26}, @fda={0x66646185, 0x2, 0x1, 0x25}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

13m20.080029099s ago: executing program 7 (id=13359):
unshare(0x62040200) (async)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0803d938fd27fa00000005004ef564918000be0e1c2074ed27c1c6", 0x1d)
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000280)) (async)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000008, 0x31, 0xffffffffffffffff, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r1, 0x0) (async)
mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140))
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8ae02, 0x0)
write(r2, &(0x7f0000000400)="547bbe", 0x3) (async)
r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f0000000040)=0x44903bf5) (async)
ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f0000000100)=0x5) (async)
r4 = syz_pidfd_open(0xffffffffffffffff, 0x0)
ioctl$VHOST_VDPA_SET_GROUP_ASID(0xffffffffffffffff, 0x4008af7c, 0x0) (async)
pidfd_send_signal(r4, 0x10, &(0x7f0000000080)={0x32, 0x3, 0xf}, 0x0) (async)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
readv(r5, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x2)

13m4.108026446s ago: executing program 37 (id=13359):
unshare(0x62040200) (async)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0803d938fd27fa00000005004ef564918000be0e1c2074ed27c1c6", 0x1d)
getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, &(0x7f0000000280)) (async)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000008, 0x31, 0xffffffffffffffff, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r1, 0x0) (async)
mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140))
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8ae02, 0x0)
write(r2, &(0x7f0000000400)="547bbe", 0x3) (async)
r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341)
ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f0000000040)=0x44903bf5) (async)
ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f0000000100)=0x5) (async)
r4 = syz_pidfd_open(0xffffffffffffffff, 0x0)
ioctl$VHOST_VDPA_SET_GROUP_ASID(0xffffffffffffffff, 0x4008af7c, 0x0) (async)
pidfd_send_signal(r4, 0x10, &(0x7f0000000080)={0x32, 0x3, 0xf}, 0x0) (async)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
readv(r5, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x2)

4m56.587202948s ago: executing program 5 (id=19603):
mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='exofs\x00', 0x240004, &(0x7f00000000c0)='\x00') (async)
r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4cfc42ca755768d1, 0x88)
r1 = open_tree(r0, &(0x7f0000000140)='./file0\x00', 0x9101)
read$FUSE(r1, &(0x7f00000001c0)={0x2020, 0x0, 0x0, <r2=>0x0}, 0x2020)
r3 = getegid()
chown(&(0x7f0000000180)='./file0\x00', r2, r3)
renameat2(r0, &(0x7f0000002200)='./file1\x00', r0, &(0x7f0000002240)='./file0\x00', 0x4) (async)
lstat(&(0x7f0000002280)='./file1\x00', &(0x7f00000022c0)={0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0})
r6 = open(&(0x7f0000002340)='./file0\x00', 0x8001, 0x19)
move_mount(r6, &(0x7f0000002380)='./file0\x00', r1, &(0x7f00000023c0)='./file1/file0\x00', 0x0)
umount2(&(0x7f0000002400)='./file1\x00', 0x8) (async)
statx(r6, &(0x7f00000024c0)='./file1/file0\x00', 0x4000, 0x40, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
setxattr$system_posix_acl(&(0x7f0000002440)='./file1/file0\x00', &(0x7f0000002480)='system.posix_acl_access\x00', &(0x7f0000002600)={{}, {0x1, 0x1}, [{0x2, 0x2, r4}], {}, [{0x8, 0x5, r7}, {0x8, 0x6, r5}], {}, {0x20, 0x3}}, 0x3c, 0x1) (async, rerun: 32)
getpid() (async, rerun: 32)
r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000002640), 0x10c00, 0x0)
fdatasync(r8)
fspick(r0, &(0x7f0000002680)='./file1/file0\x00', 0x1)
read$FUSE(r1, &(0x7f00000026c0)={0x2020, 0x0, 0x0, <r9=>0x0}, 0x2020) (async)
ioctl$SIOCGETSGCNT(r6, 0x89e1, &(0x7f0000004700)={@rand_addr=0x64010101, @remote})
r10 = openat(r0, &(0x7f0000004740)='./file0\x00', 0x280100, 0x50)
mount$overlay(0x0, &(0x7f0000004780)='./file0\x00', &(0x7f00000047c0), 0x8, &(0x7f0000004800)={[{@metacopy_off}], [{@fowner_gt={'fowner>', r2}}, {@subj_type={'subj_type', 0x3d, '!'}}, {@euid_lt={'euid<', r2}}, {@hash}, {@subj_type={'subj_type', 0x3d, 'exofs\x00'}}, {@smackfshat={'smackfshat', 0x3d, '.-!-^'}}, {@uid_eq={'uid', 0x3d, r9}}, {@subj_user={'subj_user', 0x3d, '\x00'}}]}) (async, rerun: 64)
gettid() (rerun: 64)
lchown(&(0x7f00000048c0)='./file0\x00', r4, r7)
r11 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000004900))
ioctl$BTRFS_IOC_SET_FEATURES(r11, 0x40309439, &(0x7f0000004940)={0x3, 0x2, 0x9}) (async, rerun: 32)
memfd_secret(0x80000) (rerun: 32)
recvfrom$inet_nvme(r10, &(0x7f0000004980)=""/17, 0x11, 0x100, &(0x7f00000049c0)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80)
readv(r10, &(0x7f0000004cc0)=[{&(0x7f0000004a40)=""/37, 0x25}, {&(0x7f0000004a80)=""/204, 0xcc}, {&(0x7f0000004b80)=""/233, 0xe9}, {&(0x7f0000004c80)=""/26, 0x1a}], 0x4) (async)
r12 = memfd_secret(0x80000)
close_range(r12, r8, 0x2)

4m56.46389842s ago: executing program 5 (id=19606):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x81280, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3)
mmap(&(0x7f0000700000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x3e0b000)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000340)={{0x0, 0xfb95, 0x1, 0x3, 0x5, 0x6, 0x9, 0x0, 0x4, 0x2b, 0x4, 0x8001, 0x0, 0x7, 0x4}, 0x10, [0x0, 0x0]})
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2<Z l\xdfDh\xa1\x99Bj<\r\x87\xa3\xd1?$\x8b\x02\x00\x00\x00h\x1b\x01\x00\x00\x00\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[<Y4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v<H\x8cmD\x8e\x9e\x18\xf7\xac\xa5\x17\x89\xc6\x88\x86\xe9\x15\x87WV\xfbF\xb1\x1fo\x85t\xf1\r\x8a\x9c\xe8\xac^\x19cp\xcceJ\xa6\x0e_\aE\bZ\x9f\xfa\xdf$\xad\xf0\xa5E\xeb\xd6\x80\xb7 \rd\xcc\x92\b\x01\x1bG\xb4su\x90\xcfs\x18LQ\x81^\x17\x80\xca\xdc\xe2\xb3\x01\x85\xa4r\x87G\xb8\x92\xdaJt\xa2g\xb7Azy+\x8f\xee\xb9\xa9\xa6\x04\xd1a\xca1~\x03\xbc\x87\xd1\xbaY\xf3\x8ai\xff[\xde\xde\xc6\xb1\xb9T{\xe2>\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9')
ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0)
mremap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x3000, 0x7, &(0x7f0000700000/0x3000)=nil)
ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00')

4m56.351979932s ago: executing program 5 (id=19609):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001400010000000000000000000a000000040000001400010000000000000000000000000000000001"], 0x2c}}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/custom1\x00', 0x800, 0x0)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r0)
sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x101}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xdb2b}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1055}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc1}, 0x800)
r3 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0)
r4 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x64, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xb0, 0x8, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x9, {0x9, 0x21, 0xa, 0x3, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x0, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x9, 0x4, 0x9}}]}}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

4m55.217297124s ago: executing program 5 (id=19620):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0xc, 0x0, &(0x7f0000000100)=[@enter_looper, @increfs={0x40046304, 0x3}], 0x0, 0x0, 0x0})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000240)={0x2, {{0x2, 0x0, @broadcast}}}, 0x88)
setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108)
unshare(0x62040200)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb500a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
pread64(r3, &(0x7f0000000200)=""/4087, 0xff7, 0xd37)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x8, <r4=>r1, 'id0\x00'})
openat$incfs(r4, &(0x7f0000000080)='.pending_reads\x00', 0x400, 0x100)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000400)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)

4m54.887962751s ago: executing program 5 (id=19621):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x0)
lchown(&(0x7f00000006c0)='./file0\x00', r1, 0xee01)
setxattr$system_posix_acl(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x6}, [{0x2, 0x7, r1}], {}, [], {0x10, 0x3}}, 0x2c, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r4=>0x0})
connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10)
sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=r2, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bind$bt_sco(r0, &(0x7f0000000040), 0x8)
listen(r0, 0x1)
sigaltstack(&(0x7f0000001b40)={&(0x7f0000000b40)=""/4096, 0x80000000, 0x1000}, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x3, 0x81, 0x3}, {0x61, 0xf}, {0x6, 0x0, 0x0, 0x5}]})
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0)
r5 = open(&(0x7f00000003c0)='./file2\x00', 0x81, 0x0)
prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0)
timer_create(0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_DEFRAG(r5, 0x1267, 0x3)
ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x1, 0x4, 0x70, 0x6}, {0xf3f3, 0x1, 0x15, 0x1000}]})
mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', 0x0, 0x2803961, &(0x7f0000000200)=ANY=[])

4m54.798143572s ago: executing program 5 (id=19622):
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r3 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r4, 0x0, 0x40000000, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r0, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x5})
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x8, 0x0, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r6, 0x4068aea3, &(0x7f0000000140))
ioctl$TCFLSH(r2, 0x400455c8, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async)
fsopen(&(0x7f0000000080)='ext3\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
wait4(r4, 0x0, 0x40000000, 0x0) (async)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) (async)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r0, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x5}) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
setsockopt$inet6_int(r5, 0x29, 0x8, 0x0, 0x0) (async)
pipe(&(0x7f0000000000)) (async)
ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r6, 0x4068aea3, &(0x7f0000000140)) (async)
ioctl$TCFLSH(r2, 0x400455c8, 0x0) (async)

4m54.767829512s ago: executing program 38 (id=19622):
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r3 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
wait4(r4, 0x0, 0x40000000, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r0, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x5})
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x8, 0x0, 0x0)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r6, 0x4068aea3, &(0x7f0000000140))
ioctl$TCFLSH(r2, 0x400455c8, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async)
fsopen(&(0x7f0000000080)='ext3\x00', 0x0) (async)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) (async)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
wait4(r4, 0x0, 0x40000000, 0x0) (async)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) (async)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r0, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x5}) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
setsockopt$inet6_int(r5, 0x29, 0x8, 0x0, 0x0) (async)
pipe(&(0x7f0000000000)) (async)
ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r6, 0x4068aea3, &(0x7f0000000140)) (async)
ioctl$TCFLSH(r2, 0x400455c8, 0x0) (async)

4m19.447810902s ago: executing program 8 (id=19837):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0)
openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x2040, 0xa440bbc8e621c4f7}, 0x18)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3)
mmap(&(0x7f0000877000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000001180)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2<Z l\xdfDh\xa1\x99Bj<\r\x87\xa3\xd1?$\x8b\x02\x00\x00\x00h\x1b\x01\x00\x00\x00\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v<H\x8cmD\x8e\x9e\x18\xf7\xac\xa5\x17\x89\xc6\x88\x86\xe9\x15\x87WV\xfbF\xb1\x1fo\x85t\xf1\r\x8a\x9c\xe8\xac^\x19cp\xcceJ\xa6\x0e_\aE\bZ\x9f\xfa\xdf$\xad\xf0\xa5E\xeb\xd6\x80\xb7 \rd\xcc\x92\b\x01\x1bG\xb4su\x90\xcfs\x18LQ\x81^\x17\x80\xca\xdc\xe2\xb3\x01\x87G\xb8\x92\xdaJt\xa2g\xb7Azy+\x8f\xee\xb9\xa9\xa6\x04\xd1a\xca1~\x03\xbc\x87\xd1\xbaY\xf3\x8ai\xff[\xde\xde\xc6\xb1\xb9T{\xe2>\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>')
ioctl$ASHMEM_SET_NAME(r0, 0x40087707, &(0x7f0000000040)='\x00\x00\x03\x06\x00\x00\x00\x05\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xf0:\xfd$\xad\xbb\x9a|c\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b7\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Xd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84x\x00\x00X\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~~\x84\\\xe4\x00')
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

4m19.447287982s ago: executing program 8 (id=19838):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x541083, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x9, &(0x7f0000000040)=[{0x7fff, 0x1, 0x4, 0xa}, {0xfca3, 0x7, 0x4, 0x8001}, {0x7, 0x5, 0x4, 0x6}, {0x8, 0x2, 0x1, 0x2}, {0x4, 0x1, 0x7, 0xb}, {0xbbe, 0xd5, 0x3, 0x3}, {0x8, 0xf, 0x4, 0xdc6e}, {0x6, 0x7, 0x8, 0x7}, {0x1, 0x9, 0x0, 0x1000}]})
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0xd628cc5b8f9785a0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x10)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)
umount2(&(0x7f0000000180)='./file0\x00', 0xb)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f00000000c0))
write(r0, &(0x7f0000000400)="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", 0xfffffee5)

4m19.345164514s ago: executing program 8 (id=19840):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) (async)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) (async)
syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
dup2(r4, r1)
flock(r1, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=@updsa={0x104, 0x1a, 0x100, 0x70bd27, 0x25dfdbfc, {{@in6=@mcast2, @in6=@mcast1, 0x4e21, 0xfff8, 0x4e22, 0x8, 0x2, 0x0, 0x0, 0x1, 0x0, r3}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0x4d2, 0x32}, @in6=@empty, {0x4c7f, 0x7fff, 0x1, 0x7, 0xc8, 0x8, 0x0, 0x4}, {0xa, 0x9, 0x100000001, 0x3}, {0x7, 0xef68, 0x69}, 0x70bd28, 0x3501, 0xa, 0x3, 0x6, 0x14}, [@tfcpad={0x8, 0x16, 0x29fd7837}, @lastused={0xc, 0xf, 0x6}]}, 0x104}, 0x1, 0x0, 0x0, 0x40000}, 0x40081) (async)
close_range(r0, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0)

4m19.253175646s ago: executing program 8 (id=19842):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) (async)
r0 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
wait4(r0, 0x0, 0x80000000, 0x0) (async)
wait4(r0, 0x0, 0x80000000, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101442, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x5c}], 0x1, 0xc, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x41, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x41, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ptrace(0x10, r0)
r4 = syz_pidfd_open(r0, 0x0)
waitid$P_PIDFD(0x3, r4, 0x0, 0xa000000c, 0x0)
r5 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80800)
bind$bt_l2cap(r5, &(0x7f0000000200)={0x1f, 0x2, @any, 0xe, 0x1}, 0xe)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f00000000c0))
pwritev(r6, &(0x7f0000000180)=[{&(0x7f0000000040)="c021", 0x2}], 0x1, 0x8, 0x1)
r7 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
ioctl$FICLONE(r7, 0x40049409, r7)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f00000002c0), 0x30ca214, &(0x7f0000000280)=ANY=[@ANYBLOB='fscontext?}']) (async)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f00000002c0), 0x30ca214, &(0x7f0000000280)=ANY=[@ANYBLOB='fscontext?}'])

4m18.899129993s ago: executing program 8 (id=19848):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe)
r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r3 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040), 0x10)
listen(r3, 0x0)
r4 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r4, &(0x7f0000000080), 0x10)
setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
fcntl$setlease(r2, 0x400, 0x0)
fcntl$setlease(r1, 0x400, 0x0)
execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x2004000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
chdir(&(0x7f00000001c0)='./file0\x00')
socket$netlink(0x10, 0x3, 0x2)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x1e8682, 0x145)
close_range(r0, 0xffffffffffffffff, 0x0)
getdents64(r5, &(0x7f0000000000)=""/8, 0x8)
r6 = socket$inet6(0xa, 0x1, 0x2)
bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4e21, 0x2a, @mcast1, 0x8}, 0x1c)
munlockall()

4m18.723249336s ago: executing program 8 (id=19850):
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"])
r0 = syz_usb_connect$cdc_ncm(0x0, 0x16c, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x15a, 0x2, 0x1, 0x18, 0x30, 0xfe, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x9f, 0x4, 0xf7}, {0x6, 0x24, 0x1a, 0xe3a0, 0x2}, [@acm={0x4, 0x24, 0x2, 0xa}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x5}, @mdlm_detail={0xf5, 0x24, 0x13, 0x9, "b38de50bb995ea1660b3fb05a7d2278a5af1111d379fe89b1bf10bc7bddb869f380197bbba9f560cb4aab2e28a585c0c59f36cc2eb183696b2868747ac09e520cbc34e7856dd12023e0d5e5fcdf128f96248a450252662e4489dc0a98d621803f68af786a9b98b584203a02dce5d512fdc545519cee637f1f4d92403fb344a0605acba736ef2cba23a19b1ccd981c6e7e3d540c9e4fe304c7d0de20adfbacaa3b035908bc5502520bdd36106156e1143ff14b3ba206b7cb2b2938db711b8233d69770e8f5671b2eb9ca6856e74d03d8f3166244aa2e98541db9ade2899510c89f4be8e232426e3e3fcc8b4996b394a3924"}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x40, 0x6e}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x13, 0xc, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xff, 0x22, 0x4}}}}}}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x80, 0x5, 0x9, 0x8, 0x6}, 0x10, &(0x7f0000000040)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0xaa, 0x0, 0x3, 0x3}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x5068}}]})
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000003c0)={0x14, &(0x7f0000000140)={0x40, 0x9, 0x67, {0x67, 0x31, "d5ab1a0b0086beaf470bee1dccb9c2b8119fe08a60119a55006dc9f8d6ca052438cde5526a356e275be2a14e86837a092fba5c42cebda995be519e70ef22be3278c9d8a789c40b9faf5fc67fb5ae4635974dcf6c7e9698f6005eb0301ae80d9f90398f05ce"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x44, &(0x7f0000000400)={0x0, 0x13, 0x17, "85bc8ca9e71b83e333f1d005a6e5af9671513355629c9d"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000004c0)={0x20, 0x80, 0x1c, {0x3, 0x1, 0x80, 0x6, 0xedc5, 0x1, 0x4, 0x2, 0x0, 0x8001, 0xdd1, 0x5}}, &(0x7f0000000500)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000540)={0x20, 0x83, 0x2}, &(0x7f0000000580)={0x20, 0x87, 0x2, 0x8001}, &(0x7f00000005c0)={0x20, 0x89, 0x2}})

4m18.595923989s ago: executing program 39 (id=19850):
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"])
r0 = syz_usb_connect$cdc_ncm(0x0, 0x16c, &(0x7f0000000240)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x15a, 0x2, 0x1, 0x18, 0x30, 0xfe, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x9f, 0x4, 0xf7}, {0x6, 0x24, 0x1a, 0xe3a0, 0x2}, [@acm={0x4, 0x24, 0x2, 0xa}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x5}, @mdlm_detail={0xf5, 0x24, 0x13, 0x9, "b38de50bb995ea1660b3fb05a7d2278a5af1111d379fe89b1bf10bc7bddb869f380197bbba9f560cb4aab2e28a585c0c59f36cc2eb183696b2868747ac09e520cbc34e7856dd12023e0d5e5fcdf128f96248a450252662e4489dc0a98d621803f68af786a9b98b584203a02dce5d512fdc545519cee637f1f4d92403fb344a0605acba736ef2cba23a19b1ccd981c6e7e3d540c9e4fe304c7d0de20adfbacaa3b035908bc5502520bdd36106156e1143ff14b3ba206b7cb2b2938db711b8233d69770e8f5671b2eb9ca6856e74d03d8f3166244aa2e98541db9ade2899510c89f4be8e232426e3e3fcc8b4996b394a3924"}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x40, 0x6e}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x13, 0xc, 0xa}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xff, 0x22, 0x4}}}}}}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x80, 0x5, 0x9, 0x8, 0x6}, 0x10, &(0x7f0000000040)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0x0, 0xaa, 0x0, 0x3, 0x3}]}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x5068}}]})
syz_usb_control_io$cdc_ncm(r0, &(0x7f00000003c0)={0x14, &(0x7f0000000140)={0x40, 0x9, 0x67, {0x67, 0x31, "d5ab1a0b0086beaf470bee1dccb9c2b8119fe08a60119a55006dc9f8d6ca052438cde5526a356e275be2a14e86837a092fba5c42cebda995be519e70ef22be3278c9d8a789c40b9faf5fc67fb5ae4635974dcf6c7e9698f6005eb0301ae80d9f90398f05ce"}}, &(0x7f00000001c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x44, &(0x7f0000000400)={0x0, 0x13, 0x17, "85bc8ca9e71b83e333f1d005a6e5af9671513355629c9d"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000004c0)={0x20, 0x80, 0x1c, {0x3, 0x1, 0x80, 0x6, 0xedc5, 0x1, 0x4, 0x2, 0x0, 0x8001, 0xdd1, 0x5}}, &(0x7f0000000500)={0x20, 0x85, 0x4, 0x2}, &(0x7f0000000540)={0x20, 0x83, 0x2}, &(0x7f0000000580)={0x20, 0x87, 0x2, 0x8001}, &(0x7f00000005c0)={0x20, 0x89, 0x2}})

2.930130006s ago: executing program 9 (id=22956):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = socket$inet(0x2, 0x1, 0x1)
bind$inet(r0, 0x0, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2c, 0x0, 0x0)
readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2)
r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1c)
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r2, 0x4068aea3, &(0x7f0000000040)={0xed, 0x0, 0x9})

2.557335083s ago: executing program 9 (id=22959):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
add_key$fscrypt_provisioning(&(0x7f0000001f40), 0x0, &(0x7f0000001fc0)={0x3, 0x0, @a}, 0x48, 0xfffffffffffffffb) (async)
add_key$fscrypt_provisioning(&(0x7f0000001f40), 0x0, &(0x7f0000001fc0)={0x3, 0x0, @a}, 0x48, 0xfffffffffffffffb)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3)
syz_io_uring_setup(0x48ce, &(0x7f0000000140)={0x0, 0x5e99, 0x3000, 0x3, 0x19a}, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000028060001"], 0x1c}}, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0xffff, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x6, 0xfffffffffffffffe, 0x10000000003a, 0x4, 0x9], 0x0, 0x2280})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

2.365250337s ago: executing program 9 (id=22962):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x3, 0x0, {[0x6, 0x1, 0x1, 0x8, 0x1, 0x8, 0x6, 0x9]}})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x14, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000780)='./binderfs/binder0\x00', 0x802, 0x0)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c)
r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000406d0422c200000000000109022400010000000009040000010300010009210010060122070009058103"], 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

1.516310482s ago: executing program 9 (id=22982):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
madvise(&(0x7f0000234000/0x800000)=nil, 0x800000, 0xe)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40})
close_range(r1, 0xffffffffffffffff, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38)
sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0x8}}], 0x18}, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000440)='map_files\x00')
r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r5, 0x0, 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x147, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x135, 0x2, 0x1, 0x0, 0xe0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x10}, {0xd, 0x24, 0xf, 0x1, 0xe, 0x3, 0x8, 0xe6}, {0x6, 0x24, 0x1a, 0x200, 0x5}, [@mbim={0xc, 0x24, 0x1b, 0xfd1, 0xed, 0x2, 0xb, 0xc4de, 0xff}, @obex={0x5, 0x24, 0x15, 0x2}, @mdlm_detail={0x48, 0x24, 0x13, 0x7b, "8fafb500ee46c78a6b7c489573ece2492275665d670a5b55d75a9f26d867bc24b6a776525837ad17becb23f24da0fbc9fa3af8132abe723687a515b750fe2f5966f2ec03"}, @mdlm_detail={0x5f, 0x24, 0x13, 0x20, "2aaa17257de13837dcb6ab7c49f7a42d88171da13a537809001c5e77b77995fbe2a9ce6172a5edf53366323294e68b65b849c2370dfbee1c137a3a18a3233dd2c262f5d865b4ffb5fbbbea8a826cbfb386ae1bbf53e8c8f9c43aa7"}, @mbim={0xc, 0x24, 0x1b, 0x7f, 0x7, 0x7, 0x1, 0x0, 0x4}, @mdlm={0x15, 0x24, 0x12, 0xaee7}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x6, 0x80}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x9, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x7f, 0x2, 0x9}}}}}}}]}}, 0x0)
syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)
getdents64(r4, &(0x7f0000000040)=""/27, 0x1b)
getdents(r4, &(0x7f0000001f80)=""/4093, 0xffd)
ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda')
ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000280)='/dev/ashmem\x00')

1.430620894s ago: executing program 3 (id=22984):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0)
unshare(0x22020600) (async)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1b)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
unshare(0x2000200)
r2 = eventfd(0x5) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00')
exit(0xfe) (async)
getdents64(r4, 0x0, 0x0) (async)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x7, 0x2, r2})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0)
r6 = userfaultfd(0x80001)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r7, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000600)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x21, 0x0, 0x10f32d5a, 0xffff, 0x2, 0x4, 0x80, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
llistxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) (async)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x80000000003})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
r8 = userfaultfd(0x801)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r5, 0x80047213, &(0x7f0000000380)) (async)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) (async)
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async)
ioctl$UFFDIO_WRITEPROTECT(r8, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) (async)
r9 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080))
ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f00000003c0)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x9, 0x0, 0x0, 0x0, 0x10, 0x2, 0x0, 0x2})

1.387451754s ago: executing program 3 (id=22985):
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="000200000000741b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
setpriority(0x2, 0xff, 0x0)
mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f0000000080)='./cgroup/file0\x00', &(0x7f0000000240)='vfat\x00', 0x80, 0x0)

808.796435ms ago: executing program 3 (id=22991):
pipe2$watch_queue(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x13)
r2 = openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8443, 0x100}, 0x18)
syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) (async)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) (async)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
ioctl$PTP_SYS_OFFSET_PRECISE(r2, 0xc0403d08, &(0x7f0000000200))
symlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00') (async)
symlink(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00')
r4 = openat2(r1, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x2000, 0x8, 0x2a}, 0x18)
ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304) (async)
ioctl$SNAPSHOT_ATOMIC_RESTORE(r4, 0x3304)
timerfd_settime(r1, 0x3, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, &(0x7f0000000380))
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000003c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f00000003c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
gettid() (async)
r5 = gettid()
r6 = syz_open_procfs(r5, &(0x7f00000007c0)='net/sockstat\x00')
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000840)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x62}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4895}, 0x6800) (async)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000800}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x8, 0x62}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4895}, 0x6800)
ioctl$HIDIOCSUSAGES(r1, 0x501c4814, &(0x7f0000000940)={{0x1, 0x1, 0x1ff, 0x7, 0x8, 0x4}, 0x1f, [0x4, 0x3, 0x1, 0x5, 0x8, 0xfffffff9, 0x8, 0xffffff67, 0xfffffff7, 0x5, 0x8001, 0x2, 0x6, 0x2, 0x8, 0x8, 0x6, 0xfb9, 0x20d5, 0x9, 0x8, 0x2be7, 0xc9, 0xff, 0x1, 0xc8, 0x4, 0x3537bb02, 0x9cff, 0x0, 0x3, 0x9, 0xcf0, 0x3, 0x4, 0x80000001, 0xa, 0x7fffffff, 0x10000, 0x6, 0xcf, 0x40000000, 0xf369807, 0x10001, 0xc, 0x1, 0x6, 0x3, 0x8, 0x8, 0xb, 0x7, 0x2b, 0xc4dc, 0x0, 0x0, 0x0, 0x1, 0x1, 0x842, 0x3, 0x80, 0x100, 0x6, 0x2, 0x3, 0x4, 0x3ff, 0x9a45, 0x1ff, 0xb35, 0x4, 0x6, 0x4, 0xfffffffc, 0x81, 0x2, 0x1000, 0x5, 0x7, 0x2, 0x85, 0x4, 0x35, 0x0, 0x2, 0x9d, 0x336, 0x12b4, 0x9, 0x3, 0x32d6, 0xc, 0x5, 0x8, 0x3, 0x7, 0x10001, 0x4b74, 0x10000, 0x0, 0xaa55, 0x8, 0x10001, 0x1862a08b, 0x0, 0x8, 0xfffffff7, 0x9, 0x10, 0x7fff, 0x0, 0xc, 0x7, 0x6, 0xc, 0x9, 0x1, 0x8000, 0x8, 0x627, 0x17, 0xfff, 0x8, 0x8, 0x0, 0x8, 0x8, 0x3ff, 0x6, 0x0, 0xfffffffa, 0xffffffff, 0x0, 0x100, 0x75a94183, 0x18dac242, 0x3c3, 0x7, 0x3, 0x4, 0xc, 0x4, 0x6, 0x4, 0x7, 0x3e92, 0x1, 0x5, 0x0, 0xbea, 0x4, 0x3, 0x5, 0xd, 0x6, 0xc5c5, 0xe, 0x40, 0x9, 0x4, 0xc0000000, 0xd8e0, 0x0, 0xfffffffb, 0xffff337b, 0x7, 0x10001, 0x0, 0x4c7f, 0xd2, 0xfffffffe, 0x60000000, 0x5102, 0x4, 0x9, 0x0, 0x6, 0x3ff, 0x4, 0x101, 0xa, 0x4, 0x5, 0x800, 0x8, 0x23dd, 0x5, 0x0, 0x4, 0x1, 0x3, 0x0, 0x7ff, 0x172, 0x2, 0x9, 0xf6, 0x81, 0x3ff, 0x3, 0x5, 0xa34c, 0x0, 0x2, 0x7, 0x18, 0x7, 0x26, 0x5, 0x3, 0xb3c0, 0x0, 0x6, 0xffff7fff, 0x40, 0x1, 0x4, 0x1, 0x0, 0x93f, 0x9, 0x6, 0x0, 0xf9, 0x8000, 0x4, 0x9, 0xfffffffa, 0x0, 0xff, 0xfe7, 0x5b, 0x5, 0x8, 0x3, 0xc, 0x9, 0xfffffff7, 0x4, 0x10, 0xe, 0x8001, 0x7, 0x6, 0x2, 0x40, 0x53f, 0x6, 0x1, 0xccad, 0x5, 0x0, 0x3, 0x8, 0x81, 0x3, 0x2, 0x8, 0x6, 0x101, 0x1, 0x0, 0x3, 0x8, 0x1000, 0x61ea, 0x5, 0x9, 0xfffffff7, 0x2, 0x4, 0x2, 0x56f, 0x7, 0xfffffffb, 0x6, 0x64d0, 0x0, 0x4, 0x3, 0x6, 0xfffffffe, 0xfffffffa, 0x2, 0x7, 0x3, 0x3b3, 0x2, 0x0, 0x7, 0x0, 0x80000000, 0x6, 0xc, 0x1ab, 0x5, 0x9, 0x5, 0x81, 0x7, 0x2, 0x3, 0x75400000, 0xfe000000, 0x6, 0x7, 0x3, 0x155, 0x2e, 0xfff, 0x5, 0x4, 0x5, 0x9, 0x0, 0x15, 0xac35, 0x7, 0x8, 0x6, 0x6, 0x1, 0x81, 0x81, 0x685f, 0x83, 0x2, 0x5, 0x9, 0x7c6b, 0x8, 0xdfe3, 0x9, 0xc46d, 0x6, 0xeb20, 0x2, 0x3, 0x40, 0xa, 0x3, 0xa, 0xa, 0x1, 0x101, 0x6, 0x4, 0x3, 0x3c, 0x40, 0x9, 0x8, 0xe9, 0x9, 0x4, 0x1, 0x7, 0x1, 0x5, 0x5, 0x7fffffff, 0x2, 0xfffffff7, 0x7, 0x2, 0x1, 0xffffff7f, 0x8401, 0x2, 0xe, 0x10001, 0xffffffff, 0x2, 0x80, 0x1ff, 0x2, 0x8, 0x5, 0x1, 0x8, 0xfffffabe, 0x7fff, 0xf, 0x2deb3f16, 0x7, 0x5, 0x8, 0x3, 0x0, 0x2bd, 0x3, 0x6, 0x40, 0x3, 0x8, 0x91, 0x7, 0x7, 0x7, 0x1a1999ed, 0x1, 0x6, 0x200, 0x401, 0x9, 0x5, 0x9, 0x6, 0x8, 0x9f9, 0x42b4, 0x6a7, 0x80, 0x3, 0x8, 0xfffffe00, 0x7fff, 0x100, 0x3, 0x100, 0x0, 0x6, 0x80, 0xffff0001, 0xfff, 0x7ff, 0xd68, 0x7, 0x8, 0x800, 0x1, 0x1ff, 0x0, 0x10001, 0x9, 0x2, 0x1e7, 0x7fffffff, 0x7, 0x101, 0x6, 0x380, 0x9, 0xfffffffc, 0x3, 0x9, 0xd667, 0x0, 0x4, 0x8, 0xe, 0x400, 0x8001, 0x2, 0x9, 0x6, 0x5, 0xbc2, 0xdb, 0x7, 0x91c, 0x4, 0xfffffffa, 0xc8, 0x6, 0x8, 0x400, 0x21, 0x0, 0x4, 0x3, 0xb, 0x6, 0x100, 0x3, 0x5089ccfe, 0x3, 0x5, 0x38000000, 0xfffffff9, 0x7, 0x8, 0x401, 0x6, 0x9, 0x3ff, 0x9, 0x8001, 0xfff, 0x8, 0x8, 0x3, 0x9, 0x2d66, 0x9bf0, 0x8, 0x9b5f, 0x8, 0x27359836, 0x7, 0x6, 0x10, 0x80000001, 0x5, 0xfffffb27, 0x9, 0x9, 0x401, 0x8, 0x5, 0x7, 0x2, 0x2, 0x0, 0x3ff, 0x101, 0x400, 0x6, 0xc3, 0xfffffff4, 0x65f, 0x6, 0x3, 0x81, 0x80, 0xcbf, 0x0, 0x10000, 0x0, 0x7ff, 0xfffffffb, 0x9, 0x5, 0x5, 0x10000, 0x6, 0x8, 0xff, 0x6, 0x1, 0x5, 0xfffffffe, 0xfffffff9, 0x80000000, 0xff, 0x5, 0x3, 0x4, 0x3, 0x1, 0x8f46, 0x4, 0x2a, 0x58, 0x6, 0x374700a, 0x0, 0x42, 0x1, 0x3, 0x6, 0x9, 0x81, 0xfffffffc, 0x1, 0x1, 0xf8, 0x9, 0x400, 0x1, 0x8, 0xe6, 0x4, 0x9, 0x0, 0x5, 0x4, 0x7, 0x81, 0x1, 0x1000, 0xfffff001, 0x5, 0x9, 0xd77, 0x101, 0x3, 0x80, 0x1, 0x9, 0x9, 0xd, 0x6, 0x9, 0xddd, 0x8, 0x9, 0x2, 0x8, 0x3, 0x35, 0x0, 0x723fbde8, 0x4, 0x34, 0x8, 0x2, 0x9, 0x2, 0x81, 0x3, 0x0, 0x7, 0x8, 0x3, 0x7, 0x9, 0x9, 0x800, 0xac08, 0x9, 0x7, 0x6, 0x0, 0x6, 0x6, 0x7, 0x3, 0xf, 0x4, 0x7, 0x3, 0x4, 0x3, 0x5, 0xf, 0x5, 0x6, 0x6, 0x7, 0x1, 0x2d, 0x2, 0x8, 0x72fa, 0x28, 0x1, 0x100, 0x101, 0x3, 0xdcf, 0xfff, 0x8, 0x8001, 0x3, 0x3, 0x1, 0x401, 0x9, 0x1, 0x3, 0x0, 0x1, 0x5, 0x7, 0xf36, 0xffffffff, 0x7, 0x511, 0x5b, 0x8, 0x7, 0x3, 0x1, 0x2, 0x3, 0x0, 0x4, 0x7, 0x7, 0x401, 0x9, 0xb, 0x0, 0x0, 0x400, 0x18a1, 0x1, 0xbb1, 0xf36, 0x800, 0xc, 0x6, 0x7, 0x8, 0x6, 0x5118, 0x7, 0x9, 0x44e, 0x101, 0x9243, 0x9, 0x7f, 0x6, 0x4, 0x1, 0x8, 0x80000000, 0xb, 0x1, 0x3, 0x9, 0x0, 0x7, 0x5, 0x60, 0x8, 0x8, 0x297, 0x1, 0x9, 0x136e, 0x0, 0x0, 0x5, 0x9, 0x0, 0x6, 0x0, 0x7fffffff, 0x8, 0x370d, 0xfff, 0x0, 0x9, 0xfffffff3, 0x8, 0x6, 0x1, 0xde, 0x3, 0x1, 0x401, 0xfffffff7, 0xd1, 0x8, 0x0, 0x8, 0xe942, 0x6, 0x5, 0xa, 0x8001, 0x15f0, 0x5, 0x4f, 0x2, 0x6, 0xd, 0x1, 0x3, 0x7, 0x7ff, 0xe, 0x9, 0x7, 0x9, 0xf, 0x7, 0x3, 0xffff23e0, 0x2f53270d, 0x4, 0x5, 0x8, 0x0, 0x8, 0x0, 0x1, 0x8, 0xb, 0x9, 0xd, 0x101, 0xc1d7, 0x3, 0x200, 0xa7, 0x6, 0x7, 0x2, 0x1, 0x3, 0xaf46, 0x6, 0x0, 0x6, 0x10, 0xffffffa9, 0x9f, 0x800, 0xbf87, 0xf87, 0x7, 0x0, 0xfffffffd, 0x5, 0x400, 0x9, 0x1, 0x6, 0x4, 0x400, 0x6, 0xfb, 0x10000, 0x7, 0x1000, 0xb, 0x0, 0x81, 0xb, 0x2, 0x200, 0x101, 0x6, 0x2, 0xb38, 0x8, 0x3, 0x0, 0x7, 0x1, 0x9, 0x1d, 0x80000000, 0x9, 0x7, 0x8, 0x8, 0x542c, 0x8, 0x2, 0x5a52, 0x4, 0x3, 0x7, 0xfffffff9, 0x5, 0x1, 0xfffffffb, 0x10, 0x7, 0x8, 0x7, 0x8, 0x3, 0x1, 0x401, 0x0, 0x8, 0x4, 0x0, 0xf2a, 0x5, 0x8, 0x5, 0x0, 0x3, 0x4, 0x2, 0x7fff, 0x2, 0x1, 0x10, 0x8, 0xd5, 0x7fffffff, 0xa23, 0x4, 0x8, 0x1, 0x40, 0x7, 0x6, 0x80000001, 0x8, 0x2, 0x0, 0x8, 0x3, 0x4, 0xe, 0x7ff, 0x3, 0x900000, 0x1, 0xfff, 0x9, 0x1, 0x9, 0x1, 0x6, 0x8f, 0x200, 0x9, 0xf, 0x935, 0xffffff31, 0xffffff81, 0x5, 0x1, 0x8, 0x6, 0x3, 0x7, 0x2, 0x1, 0x1, 0x6, 0x3, 0xe, 0x9, 0x6, 0x5, 0x6, 0x8, 0x0, 0x3, 0x30a14dcb, 0xbd5, 0x1, 0x1ff, 0x6, 0x7, 0xc9, 0xd8, 0xfa2, 0x4, 0x5, 0xd, 0x101, 0x4, 0x2, 0x3, 0x5, 0x67, 0xf, 0x9, 0xd2bd, 0x3, 0xffffffc0, 0x322, 0x2, 0x401, 0xfffffeff, 0x1, 0x9, 0x80000001, 0x6, 0x6, 0x1, 0x2, 0xa, 0x2, 0x1, 0x7, 0x3, 0x9, 0x1, 0x5, 0xfffffff8, 0x46c6aadf, 0x18000, 0x8, 0x6, 0x800, 0x8, 0x7, 0x9, 0x12c, 0x9, 0x7, 0x9, 0x8, 0x9, 0x5, 0x2, 0x0, 0x6, 0x10000, 0x4, 0x1000, 0x2, 0xff, 0xcf73, 0x2, 0x8, 0xb7f, 0xfffffff8, 0x0, 0x1, 0x3, 0x101, 0x5, 0x7, 0x8, 0x7f, 0x2, 0x6, 0xa449, 0x8, 0xc, 0x4, 0x4, 0x4, 0x1ff, 0x8, 0x9, 0x2, 0x8, 0x1]})
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001980)={<r8=>0x0}, &(0x7f00000019c0)=0xc)
capset(&(0x7f0000001a00)={0x20071026, r8}, &(0x7f0000001a40)={0x9, 0x3ff, 0x200, 0x1ff, 0x6, 0x7})
r9 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000001a80)="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")
symlink(&(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)='./file0\x00') (async)
symlink(&(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)='./file0\x00')
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000001c00), &(0x7f0000001c40)=0x30) (async)
getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000001c00), &(0x7f0000001c40)=0x30)
write$snapshot(r4, &(0x7f0000001c80)="dd68cf429d48e45bf6b4dd6a9aa71705a9c4dfd84bfb6ac01383bd4c8629a684c53bb650b3e2fcc18c5f4b9c7e74c347f2c55888e2bbdfadbe7920b04eb0fc18cd944d0165b571b55e8d468cba749dc6906c55224fd1d76d55b6c70c348a2a", 0x5f)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001d00)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001d00)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), r4)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000002200)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x1080}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x34, r10, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa85c}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4080)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002280), r2)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000002340)={'ip6gre0\x00', &(0x7f00000022c0)={'ip6tnl0\x00', <r12=>0x0, 0x4, 0x30, 0x1, 0x400, 0x64, @mcast2, @ipv4={'\x00', '\xff\xff', @local}, 0x80, 0x700, 0x4, 0x6bdb}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000002380)={'batadv0\x00', <r13=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000002980)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002940)={&(0x7f00000023c0)={0x580, r11, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x320, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'net/sockstat\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '.#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '[]/\xf0])\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '^{\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3c}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x13$\\\xdf%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x76, 0x5, "01b3cc7a6a18c5971fbd98d82ccb915cce06857c7b49fec33f5a15c8f7953cf1d2f4e6086129dfe0cba3581f8d52c708a899cef53a71bd8c8384ca38c9b0428089cab04846525bc4cb4209e8d6467fba04dec819478d65208abfa4c4a36a3b389d78f1325039f0724a248d3be9cdc077ff8c"}, @ETHTOOL_A_BITSET_MASK={0xfa, 0x5, "f2f5d653e648b9dfe95a86e5e7503ba430f4aaeafa60ee96da122c8f631de2ccc53a84618da7e8502aa5e668bcfc6012de2305c43e4e52140c515569ae16bc0b14e6b3a13e3198ed2551bb06aed18813a596c0dd87227ac70a511ddcc27a488e396b88d12b26d5b96381d2a9da8b6ce506855f428324526777728b65a76f6e2679cc2416efe77fb910d5b5a85b71c5c063a491a618912150d0a6e8ee630a7c68743ea27c2c4fe9dd135274cf9b17680912d5cb136c32a868e55e97657fba580c2b2cf6c2be66ea2c43493fc9197aad09dc1742acb2ff6cfe09d87a8eac24c603417bf21ae34cb6a8d7b01774cf2671c981754c9f597d"}, @ETHTOOL_A_BITSET_MASK={0xd2, 0x5, "15c6447f48ac6558d94bf094093e7630a9c769dd61df210921a48a92cada19f685cc6ebe33f81aa2b9b84cffcba657544012f143e243513427287ed0d507d4d08757d82ee953ff9efa8b138f8bd8524e658d2b768ad9a9fce8f365db71bd96a9a8ffed70f858a5757a5da8901caa5445dd11518b82904abb57f11ed5eacf19cf837d1e840bc5188d462c44fb322be2a347fb1fb69b07a813adad50d62f0813aaef6589c79d71c01010def98d691d94eb1808ba43ed6098e1820a2632c8aead70f0fa9fc98cc3eadae9802039e59d"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x58, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'batadv\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '},+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}, @ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x198, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd}, @ETHTOOL_A_BITSET_MASK={0xd2, 0x5, "97e26da14d2b50703004a4d8cbea26612eecd709ce840fe5d3b5f357c33d9ee14b01f5088ec65370b4f14f276272d6e9bbe14a954eec4ff712ceb8cf68345c4f0c51912e50525f28e6fd8d694e33cf339d294fef294a68a1d7157f45fc582368bf28fa9d7bcb5503c05a173b1a00e11017504fa1bf2ca3127850a7ae84e2ef28cd29a0d6fa1ee47b900d464c91daaa210c33be94b7c169e8718702d4c9a5da1bc2ae33ccd768b7ec1985f83189b4262dad59ce69db041ae1eb6b66794c9b43381ac28e144ac8452cda1b6635f470"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_VALUE={0xac, 0x4, "85ddbfa966c791bd45d88a95011a6b84941dc349ee62c072c9942b9617e3f18dc9ad66b841fd021099db0c31ac1482e57ec173cd127edfe24c35ec5c9413043fbbaf4040f5a6ad0a133c38e62390a72e87c55cb004944a2f935df8e1df64fbb0ad8d43935f1ab29aab790a88f57ce48542d1b7a64c8912157923b258e390184bb0370bdba3a214f66f2e34cc744653e89a7f21fdd10748620cda7d61fd5ade8975ac36f6c665efdf"}]}]}, 0x580}, 0x1, 0x0, 0x0, 0x40000}, 0x90)

763.203356ms ago: executing program 3 (id=22992):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x64, 0x0, &(0x7f0000000380)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fef0ead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df5215b75a482436e231f28e370fafd3b4afd276d2"})

697.753987ms ago: executing program 9 (id=22994):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
gettid()
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f00000003c0)={0x0, 0x12, 0x1, 'T'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

615.988789ms ago: executing program 3 (id=22996):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
syz_usb_connect(0x3, 0x8c6, &(0x7f0000000300)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a240101008002010208130505"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0})
keyctl$search(0xa, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000000)=0x7f)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@request_death], 0x4d, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
syz_usb_connect(0x3, 0x8c6, &(0x7f0000000300)=ANY=[@ANYBLOB="1201500236e47e2082055c2955d4010203010902b408048006a00309047f0e01ff2dde700a240101008002010208130505"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) (async)
keyctl$search(0xa, 0x0, 0x0, 0x0, 0xfffffffffffffffc) (async)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000000)=0x7f) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@request_death], 0x4d, 0x0, 0x0}) (async)

557.66733ms ago: executing program 6 (id=22999):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = accept$inet6(r1, &(0x7f0000000000), &(0x7f0000000040)=0x1c)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0xffffff19)
close_range(r0, 0xffffffffffffffff, 0x0)

499.948501ms ago: executing program 0 (id=23000):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x1)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001fc0), 0x2, 0x0)
ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000002040)=&(0x7f0000002000))
ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000014c0)={<r2=>0x0, 0x4, 0x1})
r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501)
ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x4, 0x81, &(0x7f00000001c0)={0x20, 0x18, 0x17, 0x2}, 0x8, 0x100020, 0x1000003, 0x0, 0x4bf, 0x404, 0x0})
ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f00000000c0)={<r4=>r2, "3d1fd7117445890066c95b4096b7cd34"})
ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f00000010c0)={r4, 0x55, 0x8001})
io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x1}])
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f00000007c0)={0x0, 0x4d, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="6c00000066001f03"], 0x6c}], 0x1}, 0x0)
r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c83, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001a00010000000000000000000200fc003a2a5e247b0000fb0c001b8006"], 0x28}], 0x1}, 0x0)
ioctl$BLKRRPART(r6, 0x125f, 0x0)
syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00')
r8 = syz_create_resource$binfmt(&(0x7f0000001f80)='./file0\x00')
r9 = openat$binfmt(0xffffffffffffff9c, r8, 0x41, 0x1ff)
write$binfmt_aout(r9, &(0x7f00000018c0)={{0x107, 0x3, 0x9, 0x2e1, 0x1ed, 0x0, 0x1db, 0x10000}, "94fcc751133104cfbe2beebecc1b86bf130e1a4dbdb20025d77fa7c341492cd688bb7ac9b2b59d0e0f344e2ce5209ea26e0bfeaa268222da3eb49db2ded0821fdbb9023820fdcef156b489a20b47c1abb0802e90297aada6ae2e2d98c87a0ae5b7418108022bd34ad610e161abb4910e59", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x691)
r10 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "34e9309cbb8a092288d72ddcebea6c1f416164517cb8e76702eae32ba7ca3d6dbff379c7e1a234ed86f0789eb41f306d2159bd0d69bd5a345ab991343d39c89e", 0x2e}, 0x48, 0xfffffffffffffffe)
keyctl$setperm(0x5, r10, 0x10200c04)
keyctl$get_security(0x11, r10, 0x0, 0x0)
ioctl$BLKRRPART(r6, 0x125f, 0x0)

499.616341ms ago: executing program 6 (id=23001):
r0 = socket$tipc(0x1e, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000200)=@req3={0x0, 0x7, 0x52, 0x10000002, 0x1, 0x108, 0x4}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r4=>0x0})
sendto$packet(r2, &(0x7f0000000180)="0b0312002e0064000200475400f6a1", 0xf, 0x11, &(0x7f0000000140)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @link_local}, 0x14)
r5 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x14b040, 0x0)
ioctl$ASHMEM_SET_SIZE(r5, 0x40087703, 0xfffffff3)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r5, 0x0)
ioctl$ASHMEM_SET_NAME(r5, 0x40087708, &(0x7f0000001180)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2<Z l\xdfDh\xa1\x99Bj<\r\x87\xa3\xd1?$\x8b\x02\x00\x00\x00h\x1b\x01\x00\x00\x00\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6X\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v<H\x8cmD\x8e\x9e\x18\xf7\xac\xa5\x17\x89\xc6\x88\x86\xe9\x15\x87WV\xfbF\xb1\x1fo\x85t\xf1\r\x8a\x9c\xe8\xac^\x19cp\xcceJ\xa6\x0e_\aE\bZ\x9f\xfa\xdf$\xad\xf0\xa5E\xeb\xd6\x80\xb7 \rd\xcc\x92\b\x01\x1bG\xb4su\x90\xcfs\x18LQ\x81^\x17\x80\xca\xdc\xe2\xb3\x01\x87G\xb8\x92\xdaJt\xa2g\xb7Azy+\x8f\xee\xb9\xa9\xa6\x04\xd1a\xca1~\x03\xbc\x87\xd1\xbaY\xf3\x8ai\xff[\xde\xde\xc6\xb1\xb9T{\xe2>\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdf\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9\x00\x00\x00\xb6u\xbb\n{\x90\xfd>')
ioctl$ASHMEM_SET_NAME(r5, 0x40087708, &(0x7f00000007c0)='\x00\x80\x03\x06\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xaf\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda(\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8\x0f\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00')
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r6, 0x1}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_LOOPBACK(r8, 0x65, 0x3, 0x0, 0x0)
timer_settime(0x0, 0x1, 0x0, 0x0)
r9 = socket$packet(0x11, 0x2, 0x300)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r10)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES16=r8, @ANYRESOCT, @ANYRESHEX=r3, @ANYRES64=r0, @ANYRES16=r6, @ANYRESOCT=r7, @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x80)
mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r9, 0x0)
unshare(0x2c020400)
r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000140)=0x2)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r7, 0xc018620c, &(0x7f0000000000))

456.983102ms ago: executing program 6 (id=23002):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', <r2=>0x0})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40021}, 0x80)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001200)={0x24, 0x0, &(0x7f00000001c0)=[@dead_binder_done, @increfs={0x40046304, 0x3}, @clear_death], 0x1000, 0x0, &(0x7f0000000200)="9264ae9e41ea018ff2dde29bae88df15eb3d49c18684214c468465bf1d070088a342f308c7b4df827095c4e0133f105a051fae4df11ce88480cb5875defe1c39b1c6fe0311d6629f1568851057584ba35abc7cb2d62b4e18308da965b43dbd7fae150e8453c2d8eb48e3aa0f51fbe4f4cd05717830333bd2e75f5ec72e5e4db323fc10029d9c5d4bc8345e1d380ca1c01c3106f2ba21ccdad17bbf180997d8b37d13838bc91d8885730f83dc2e739256ae69c5d7cad097bf1efdd15b5c8596a75f592e8a13692322360b6111b918597b3ac5a13e7d442ae35526ce1886c1cafcc82f2c964e0cba17b0db21af6c3e29a18b147e286132d907b5d1d1633123384cff41bafb86ed83055c6369636225ff28fe6eb07dfcfa6126d69740f86a5c70d947d14a04f395367715dbe33a9218fd6191a3af3c00380bd364166aa7c521ee12a1a1a8b1bd6ce2821d02e299d698f9bcc367553e919b193b6d412ef4ad29d72371729c5b54530887a1607411a4e9853b009e1f4626b8179acd0ca220eb0b7b0b748a0a3c66ae4ff8e701be78931b2e5e635d8f8cc82c74f24a93b442d3eb41730f6409f484daf7d2786052a60765a32b958cd1cb9191779877a87644c24d38c2b7e41bc78ad88855accbcdd7e00a9fa68a93fc619cc0f7aa86b7ee4281548447a98db6c1349657bb238127d9e550b9427fc6755dac805d911b21259142b22fddab0d120cbbbff7ca1b5de87da7a47dfb2044a76a58ede69a65e00f264f502b0750638041bf5391c244a596cef511879d40e534d94c3c0c47c11f844c178dac695239f67557b92c19bee9aa25747110951de3c25f2020d68930bd0876d575c18b2072069729922b0c1850dddd7c8d3fc260bb3423e0759f4f0b06209219a572297ef3a7e7fa053a873091edb660fb65812a23d7fb584f33cfc43f779d76af54df246161a0622bcb895acfa40b9a1f8e9b2f8b17e020d2f2286021c506e3c4e55140a310248d697dbf7c21b7c840a64206c8285d4cfbc5ab6fb50a93fc352ebdc2a29b9699fdf90cc0dee5d5274f2215a079af8071e300702837e29a3070be03365603513e7a3505d0a09efe5305d408dd4771e5dddd537e16c8ecb844033d4bdc554fcebad37b0f1ca5c7f1c93fa8cc65cdf2a1fe86e937e7e913be1c90c00d4fcd6d7b82e50754bc22e3cff18b402e377ed16158a830c0e2ea904cdc48acbe10d6d7de484ca32632ed99206b9cd49ec0fad1ef02918ab902a458484739ec668793aabf27b917edb52aef41b2ab160604cc2d30a81f06d99f9e9a39b3d74e0d0722d3d595673bd150d1a6d94e366f6c18477a9ff23b7c6638ca88c451357142000dcce76c33295a9489d4336af06900e5f060e936dda4044acb1f42a2d3bbb2b790d265c3fb4abe927174822617638c202031275ec571ec56539227a8129096240582a4054cdad3e9898988a19614ea98c227cee3d0f2cd7d7817e2c0a13d97c0c263386fb565a82ae196c3994ea3e4d67051b16a7bca2596d39409731dc4f075f384b3d694dea55a6810eda46d49028d1542ca270343986fde477412a3ba1eda4590de1d18a0fbdb40d30ef480c6a8df547e413635333e8b13fdbf70bcc8dbef237a13ae56234dfda73a263e58c18aa76cc7840c64c55faed5ae3c58405780583dc3a287614c20988848c0ad24e8e42beae432f5b53dc5010eda1daec4f7fa8d8a4d11c88466897e89a76540df7434a3bb41efc8e2d378659aa9674c0f63937ed99747e43c182c34dbb8d5a29e383dddda68cdbe122e1982d2e911f9d66b43b18281d18a8990fb4626f79ec1c8a12bc6b01d63c5d73f02330a4f906c667b652a3cd34b5c4c4db14a9e30df2267e3435fe920af343561d55e357492f9c70b65867106ebae64888a047ba8bb59953265692574f696d60507dc3d03415e63708058906781455d0814390ddc9b7ae6ac98654b2a6dbb7096b6c4c8f8171131cca2fe2f223814b24550e35304c6ff19892ea9e1c57899988d0a36106657b6fe66105715e74a6a14b9818192a49fc7996f8efe299f1b4bb7212e0b28d524085ae3f8bb02c92c7f99dc70b29a2e46b98263b7f45e794fa2533d682dd7d1ef9f2d45fcc74e7b69a8e0cf88a255db5c126315675fab094067eb15b7cacf146badf0ac405fb0b0fd35fae47fea28ab37486842848a2b21730d07efc9c6cfea49d3330ba13893978996ee31d38b083dba80d56661558b260a280151977d69e0d3b3de199ad3314ee4ab7ef3f347d2b89ba95d542c86b79964b12050dfdd97a351cde92c576aecca794271aaee9066c5a4d8724d0943805f4a52372a868d51f09d3cb77d6c5bc98499232019c1985a8b9265b415a31250e08db4ded8db24775d77e4c309ff222e959b0d773de87347fe0bc40001f3269adf0f4daeac285fc907b64382b749d38e07bd33ebb3fd6ede36c9a5cf03c24c39440062b3d76783af5a9f02825e52db6f7128a5c5a03b1068fd0f4760b8ed688fd288ce6e3f7e5d5091349c69e36ea5234e90a1b40bad3f128fc29095d5d72a44e3a6b373bfe68dc44559fb4063cf0ed83ceaf874916e526d342b284867af5d7a825f6c6966976d356f8ac9e368e43aedd30a46412d8673353e8272ec1bf6753cff0cf7d99875c630e4b17115a105ae078924ee411b9705d535651a6f14f207884f8f518273ddf9e0f6310a54d7784516ccbb979fe87524be3113041ffbdd557b78b8ce84f577f70dec855a711a9c15183b8ef23c69dd57cd32b60d1728732596242c72127f1a2576895c6e35805a848d1c246c56c2e6363c64819def1a1d95fefcc32dcaa177c567f547fb727101f26f7258b2a803bbbb88755ab88cb00734a0e70bc033d0d74c77c0b40eae71100250d93d9c87efc11002f058cd0bf8e198443e9948c3e316d61537981d748d90daf37063408fe47181bc0affdc5ef7582d8827df3d36ddbf45245dd4596e442ffdd9e42b403bf209ed499182eddf4bc88f442d3bf55cf8f75587a1ec731f2c7ba725393507db59839d71672c1ab3992b31d07b972cde0be166f01e099826114d859f12e67e8355ffe5369a760771b52d036b20f4bce83665de0592e4f21ebacf0fa4602436c2783c49afa896e2ae9da054ae7decae421b4774fb1e009f396e935fef0f679d1c000f80eb1b61cebc3fc4dae3d86e5b97dc503726d9a1391b5c75e6199720e3478c3ad251fa5bfc11158452d2fc26378b8327331800591dc18bd236c93bf483fe1c441f4a8285b50fa197abe26026eb49b04f8a17b933da8455cc70a0027285fbc051f50cdedd672037dac91ef3d31618f76721db5b0d823ab1d3c79fb0cda5de71ee284333a535125badbed061b39a7fb9505a7e7d2eecd04df0ebded4ceef010a370ae54a328148f656bf8acceda8c6c1e748e3cb636c7e82a8046dba730cbd4c5d4f9b1c465100d56ec808ff7e50e51ac23455c1645a7055f01ad6766736e96ea99b1d8804d10d142f0b0fb157fecf373e6d2e6119ab83b44ba8ded36c2ecada211caa60396fb42c761caf7f60e911f9f9f0761d26b5a63485daa69e6f0d440d000e6839ddc134f9b2f15fd266a4d9be8347bed654cc17ad2a9d8d61ef63a169dbf466cf0e704535b1685af5ad06021842baa8a6f0bb35692524c706cd7cae2fe68bef995723f5a1eaca6c632f3c277286b9eb54da4fd92229493b77a67b1ad3b3f09736139a3342e573afab710175b5bd65e8f74253a6225efd980dfe3a8a40ca524ad74a3ae4b2e6352a771c92d218e04d427d67a60fd8d14a30ee0c7d8c3843a353e3a7c264d6b0302b4df8a9e97d9181ac6f75b49530d248ad343fba42ee070cc6d8ae43a539e53447116cc32ee1c4313d09fb23fd89bc554544b8325752d5afd45a7ccc44afe61b2375ff4a39ac40113bb3f95f8002b2152e96fde33f10df308aec25976bd338f0fb9b5b5844aaeb06a04d2bfb7b030856518308281d160833ef54b9036ab702d91b7a0f327ee8ded613666f48dfd994a078c293c90712982dd60a75acfaf94409fd35626559fe670d6591d2727f6b8804628c4777c96145d7b34650eb655d74fb4661af32ff4107cbf1f153d5260578afafa32e6f1db9d408e76eac51f53dce405ebff947ead9cbe10c7eb1cf8fb12286379cfd1752240ded2b20e588dee9a2ef3d04052574f45a1eff6066e273389e50e1f9f2d61bd7a5d4b551a4881042efa3aa60cebe7392488689f5c47f919524c30816016ece66eca97b708b441a5448472132ec7ef43e9ab97b38c7fb4fedb354d69781bd9697fbdb2e8105f935efcabb14ade6e3fe014535f1ee4795ec5bee0e6762d145c7ee45098ea51e3910aa0e1707a881d8605b83369409003db7b560e0ac87a9da0ca00588364dd6237555f54420d9aca4c301020e4afcbf1ce17fd4eaa86c43a6725a0cd0464252066b315ce7d6c93120364ca803ae0812689990fa025c35c5509bdb366d9bff62990bd76ed3a55caa30875f747caed829e2bb1b6295472b3ca777d165ba7b63a1a6717a7b8fe967d9248ad9ddf941056fbeaa0732dd67e47f1ff828e5f15513fb992459ab4dfb52fb688bd93c8eccf7a44bab6f4087b1a89a58fe3de5935dd42fa93177cb4f3b25a8d386aeb32f27e3179a1ceb9e78352eaf79b737e2ed9d23fa2cd2001ddfa1ce416a3a2819a84aa3369a2a073877f0536728d1060e0c0da032ecced2903520d425ff278b20831389c81cc3ccff535bc0dbd92a350b589111d645ec9dd18455acd1e3864cb2403c30ac5725276a24da1dbcebb5a3318dfb6f932af01970cf8603c588505e60ad1d723ecd097488ae6adff24e373e7f9858680b7c209b69157d6c67443879b149d30a4741729f77e7953826b2421f8d4a86248423dcff245fcbaa9095a5dedeca4c4dd62012f97fdd1b31dea385d0b1913f92f1d51b1f02783f16167f6100f4d6e2a8e9219e9c085af129c2182160e123fc79499a8879b09e46aaf08532c91ff1110fa3bf5a54fd02eb383dfbf7949bdf4f0c6bf583bedbdc7c3b53246d1156e14e03056e647051ffd993a55d42e0fdcff9ef2b47dd19abe2d7be11dbbb1a8d9701d11fc382f396994b2142f36613359cf39fcde3700b132085483fd017c4ef8690590c2632a0f2a81cd76a687b8127e0c2412ae247f0e37fd1c000bbedfad8237c42058086de27d73158488c769667ee523cac4e77178c9057ecb752a9bb7514a259a5c232807b169d264673e43d02e897aa2ebd9767e497c041ddeab3452ed747464065a3b1eacccc0f5003efb2ae250d9e5442526ee056a74d5214ef2ed35f9952fa8a6516215fad0466b15a986d8fd54541f4f80d6fadb79c5a497896dd90fc265c04b5ea0ff8c98352685798849b54b2b6143ad6e3e76ac55cc8d4d58ddde4bfca15fcb59c42c0fc5b4c4c5202abf4499c29c710be4c52d4fb31367e6fcac79e3ad6b61ea15c8b72171019a0aeea6b317b513a4d42d2bef4f5c8a219425c7f0a39eace0e84494f35c1f608fab28caa8b86de26507f93775d42a590942a7284f8dc54e97f67d3d239e9d2c2fb07e5c3ae2ed352171448ab57586f1897197b771b58701b776be75033c5e288b5130626789e91600404d1c36e0acdbf967e3f18430154e4028bbeb57d2c928de5d22947da71317e138171cf9197a1614f5fcc984c6b5db6da1d4b35999b89536fc72cc7a4cf1a26ce2c9ecc14489f2b0ce2409a1d86b39470f405e6de4f9d6905e164b4804a3904d94adba25a18f7473562d0e82ad3c80ebab4ff"})
getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000001240), &(0x7f0000001280)=0x8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001340)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_LEAVE_IBSS(r3, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, r4, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7, 0x6}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20008001}, 0x44040)
r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0)
r7 = openat(r6, &(0x7f0000001480)='./file0\x00', 0x0, 0x48)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f00000014c0))
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'wpan0\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001580)={'wpan3\x00', <r10=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f0000001640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x38, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x38}}, 0x80)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001a00)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000019c0)={&(0x7f00000016c0)={0x2d4, r1, 0xb92de8e5de1556d9, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x2a4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xe7\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xf3, 0x4, "970a218837a65144b5cd61b5b65be02abca7fdcf73fa58cfaae224fec8069f73a838d0e047c45a6c0ebded1cbf20a637bd32745556e7b5c124031c2665016c6075a88294bf570ac2f3bcdb9a2200533a46f4e8f4b1c8d898ada5ef8487c828f42af0295eb2e437fa6a1cb14966d33d3b63019c6fc86b95d35c1fdcda19c7f83b02e183502b854530bd10457732e6618739035c4a5d4928b88bb4e51934faa12145817a9c3ae8aaf05eaeb4679e9067be3ab71940df09a6609c3bfb60d75e95f6f869a9f4cf67d65b330e2c09dae64e37c66b434c142cd058139d1611d877c102fc8981208e6ab359939529d1603d71"}, @ETHTOOL_A_BITSET_MASK={0x5c, 0x5, "f67e9dbdab781704a42aeb2c38ab0d764aa89d02b06f4be797c0845a8556df0b85d95e5ffacc2a31e5f3d25a4babdb76eb36fd2fdd80f5301bb3c01cd50f552f2f3b9bed51e3366187a103b6746b8ee2bbf0042e715f1436"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7fff}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_MASK={0x3d, 0x5, "794c411e1a0cf11f29adf2ba3d78573be0d9b1e533f7cf64dedbf38226c99e526048be7e5206cac5086c0f25f53f8bfb21e0b69ff97c6aae21"}, @ETHTOOL_A_BITSET_MASK={0xb9, 0x5, "5bc92e29d8f515de158b597d02050852f1f4b8a81af48017b0d40d890b0c157ff54eb045f33d50e90e37be1b61504df9d72f3cbccde33259b66306082b2e30070eff48aea9469d12841e646c00db7828a1987584a3c06deacd6e011337308d2b734d4ea9605a3270ef1296179dd62dda521284a7d935e51c49f0522fd9b93c44b7d2308c76b32a9901315ddaf94bd2b6b3cfef1c2d15ee4616e201d63f07a87770a98a37d34ae8f3fe0d22f59a1ffe66a37707bd02"}]}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x20008000}, 0x1)
openat$kvm(0xffffffffffffff9c, &(0x7f0000001a40), 0xc0279c2965cf701b, 0x0)
sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001ac0)={0x4c, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xc5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xab}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x10c}, @NL80211_ATTR_WIPHY_FREQ={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8185)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r6, 0x40049366, &(0x7f0000001bc0)=0x3)
socket$inet(0x2, 0xa, 0xfffffff8)
r12 = openat$incfs(r6, &(0x7f0000001c00)='.log\x00', 0x2080, 0x0)
r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000001c80), r3)
sendmsg$DEVLINK_CMD_GET(r12, &(0x7f0000001dc0)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001cc0)={0xac, r13, 0x400, 0x9, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xac}, 0x1, 0x0, 0x0, 0x44010}, 0x800)
r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001e40), r11)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r11, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x30, r14, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000000}, 0x884)
sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000002200)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000021c0)={&(0x7f0000001f80)={0x240, 0x0, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xd4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x93f0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ad}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x400}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8b0c}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbd}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}]}, 0x240}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044090)
sendmsg$NL802154_CMD_SET_LBT_MODE(r11, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10008040}, 0x4040800)

425.342352ms ago: executing program 0 (id=23003):
mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext2\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x21300c0, 0x0)

327.972754ms ago: executing program 0 (id=23004):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0)
splice(r1, 0x0, r4, 0x0, 0x25a5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})

327.711034ms ago: executing program 6 (id=23005):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
pselect6(0xfffffeb1, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6)
r2 = getpid()
syz_open_procfs$userns(r2, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1)
r3 = syz_pidfd_open(r2, 0x0)
r4 = pidfd_getfd(r3, r3, 0x0)
setns(r4, 0x66020000)
umount2(&(0x7f0000000040)='.\x00', 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000), 0x6a, 0x0, &(0x7f0000000040)="324aa272629af478c112c756e06dec692a399d4c4e4648d0846227607516be4c03a43b7385cede543946163f4345ba8c4123aa347690e534640dfedad460072bb02ba86976881a376bcb8f8dbdcc719fc8ff299fdab6c978a8212b6fd05209f20d55ee104c9bcb4234ea"})
close_range(r0, 0xffffffffffffffff, 0x0)

307.747594ms ago: executing program 6 (id=23006):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
r1 = creat(&(0x7f0000000240)='./file0\x00', 0x1f)
quotactl_fd$Q_SYNC(r1, 0xffffffff80000102, 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x80)
ioctl$HIDIOCGUCODE(r2, 0xc018480d, &(0x7f0000000040)={0x1, 0x2, 0x80000000, 0x0, 0x9, 0x100})
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x5, 0x6c6, [0x200000001940, 0x0, 0x0, 0x200000001c9c, 0x200000001daa], 0x0, &(0x7f0000000080), &(0x7f0000001940)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x3, 0x8, 0xa01, 'macvtap0\x00', 'sit0\x00', 'bond0\x00', 'ip6_vti0\x00', @broadcast, [0x6d7dc56a7bd74eb9, 0xff, 0xff, 0xff, 0xff], @empty, [0xff, 0xff, 0xff, 0xff], 0x6e, 0x1d6, 0x21e, [], [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x1, 'system_u:object_r:getty_etc_t:s0\x00'}}}, @arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}], @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3, 0x2, {0x22}}}}}, {0x5, 0x5, 0x7, 'caif0\x00', 'pimreg1\x00', 'netdevsim0\x00', 'bond_slave_1\x00', @random="8e42f2dcebe2", [0xff, 0x0, 0xff, 0x0, 0xbfc643c121a2f3b4, 0xff], @multicast, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0xde, 0xde, 0x10e, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x3eb3, 0x80, 0xfffffffe, 0x1}}}, @mac={{'mac\x00', 0x0, 0x10}, {{@remote, 0x1}}}], [], @common=@STANDARD={'\x00', 0x8, {0xffffffffffffffff}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x1, [{0x5, 0x0, 0x88f7, 'veth0_virt_wifi\x00', 'sit0\x00', 'geneve1\x00', 'erspan0\x00', @local, [0xff, 0xff, 0xff, 0xdeca8466ef4bac1b, 0xff, 0xff], @empty, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0x6e, 0xa6, 0xde, [], [@snat={'snat\x00', 0x10, {{@local, 0x10}}}], @arpreply={'arpreply\x00', 0x10, {{@broadcast}}}}]}, {0x0, '\x00', 0x3, 0x3, 0x2, [{0x11, 0x0, 0x6003, 'ipvlan0\x00', 'batadv_slave_1\x00', 'macvlan1\x00', 'erspan0\x00', @random="4525a346fa07", [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x9e, 0xd6, 0x10e, [@m802_3={{'802_3\x00', 0x0, 0x8}, {{0xbc, 0x9, 0x7, 0x708a372a6d4caa05}}}], [@snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffc}}}], @snat={'snat\x00', 0x10, {{@dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xfffffffffffffffe}}}}, {0x3, 0x3b, 0x8808, 'lo\x00', 'veth0_to_hsr\x00', 'veth0_vlan\x00', 'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0x6e, 0xa6, 0x11e, [], [@arpreply={'arpreply\x00', 0x10, {{@random="094482a490e2", 0xffffffffffffffff}}}], @common=@nflog={'nflog\x00', 0x50, {{0x8, 0x3, 0x8, 0x0, 0x0, "c3275a502836164256ff3ca646c337adf044836c908302a4608af78d60c1a29de35d9d8e00c3e79bae2d22531f6486b01d698ce1b4d077ff281f2e0efe450d0b"}}}}]}]}, 0x73e)
r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[], 0x119)
prctl$PR_SET_MM_MAP(0x21, 0xe, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
write$UHID_INPUT(r3, &(0x7f0000000900)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x62, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0})

276.074635ms ago: executing program 0 (id=23007):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6gre0\x00', 0x10)
r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x5, 0x4})
write(r2, &(0x7f0000001c80)="b1", 0x1)
r3 = fcntl$dupfd(r1, 0x0, r0)
sendto$inet6(r3, &(0x7f00000008c0)="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", 0x125, 0x80, 0x0, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x800c)
chdir(&(0x7f00000001c0)='./bus\x00')
mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, 0x0)

135.982927ms ago: executing program 0 (id=23008):
close(0x3)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
fcntl$setstatus(r0, 0x4, 0x42000)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x64)
fcntl$setstatus(r1, 0x4, 0x42000)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000180))
r3 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000540)=0x2, 0x4)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f00000000c0)={'macsec0\x00', 0x8})
close(0x3)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x320c00a, 0x0)
read$FUSE(r4, &(0x7f00000042c0)={0x2020}, 0x2020)
getpid()

135.268478ms ago: executing program 6 (id=23009):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r2)
syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x8, 0x60, 0x6, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x7, 0x1, 0x1, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0xf, 0x80, 0xff}}}}}]}}]}}, 0x0)
ioctl$EVIOCRMFF(r2, 0x5509, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, 0x0)
ioctl$TCFLSH(r1, 0x400455c8, 0x4)
syz_usb_connect(0x0, 0x4a, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

88.074939ms ago: executing program 9 (id=23010):
r0 = syz_usb_connect$uac1(0x0, 0x83, &(0x7f0000000740)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6f, 0x2, 0x0, 0x1, "8b7e", "8e"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000140)={@my=0x1})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000001a80)={@my=0x1})
syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']}, 0x0)
syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
write$FUSE_INIT(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x2001, 0x58, 0x3c}, 0x18)
r4 = dup3(r2, r1, 0x80000)
renameat2(r3, 0x0, r4, &(0x7f0000000300)='./file0\x00', 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="1201000000000040de28021100000000000109022400010000d00009040004010300000009210100f90122050009058103"], 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000004300010000000000000000000a004000140001"], 0x28}}, 0x0)
mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil)
syz_usb_control_io(r6, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[], 0x44}}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r2, 0x4004e502, &(0x7f0000000180))
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs2\x00', 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYBLOB="c73b5f8d82de3ce092abc599925fcf0795d2612967a2461b0c2d85e785495f621db6ddec43f7ea903ad45d3f0fcb1f1e652517c5eaca586413485da696cfa584579a241db6f31a1ed90543a420ecbe894bc43c462ccf810a12dbdf4fda51777e7396f2da38448ed1f0415e568e77385c453b489c09ae976d0ad2d4e9311e3917218cf2796cc32de1142dd6dc78ac95f3f570085455868c9bd521a02700496f7be22c6584061eddb766e31c39feb15e833b825f5225e4795a8cbadbec6be909d111"])

80.862948ms ago: executing program 0 (id=23011):
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='cpuset\x00', 0x228016, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454da, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454da, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3d)
ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000600)) (async)
ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000600))
ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000380)={{0x2, 0x4e23, @remote}, {0x306, @remote}, 0x6, {0x2, 0x4e22, @broadcast}, 'dvmrp0\x00'})
setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/165, 0xa5}, 0x48}], 0x1, 0x0, 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0) (async)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2800000, 0x0) (async)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2800000, 0x0)
chdir(&(0x7f0000000000)='./file0\x00')
read$FUSE(0xffffffffffffffff, &(0x7f0000000dc0)={0x2020, 0x0, 0x0, <r4=>0x0}, 0x2020)
read$FUSE(0xffffffffffffffff, &(0x7f0000003080)={0x2020}, 0x2020) (async)
read$FUSE(0xffffffffffffffff, &(0x7f0000003080)={0x2020, 0x0, 0x0, <r5=>0x0}, 0x2020)
mount$bpf(0x0, &(0x7f0000000180)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000240), 0x80, &(0x7f0000000680)=ANY=[@ANYBLOB='mode=00000000000000000000005,uid=', @ANYRESHEX=r4, @ANYBLOB=',dont_hash,dont_measure,appraise_type=imasig,mask=MAY_EXEC,fsmagic=0xffffffffffffffff,fowner<', @ANYRESDEC=r5, @ANYBLOB="2c004d911fe085d0e5f68554c4a392824920dbd3ae12200564b398f05a7eca3ce41ce411"])
socket$unix(0x1, 0x1, 0x0) (async)
r6 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r6, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async)
bind$unix(r6, &(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e)
bind$unix(r6, &(0x7f0000003000)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
rename(&(0x7f0000000200)='./bus\x00', &(0x7f0000000280)='./file0\x00')
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 3 (id=23012):
r0 = socket$igmp6(0xa, 0x3, 0x2)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f000000bec0)={0x0, 0x0, &(0x7f000000be80)={&(0x7f0000000400)=ANY=[@ANYBLOB="c800000028000100"], 0xc8}, 0x1, 0x0, 0x0, 0x48090}, 0x4)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
readv(r2, &(0x7f0000000300)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1)

kernel console output (not intermixed with test programs):

an: entered promiscuous mode
[ 1628.010198][  T538] veth1_macvtap: entered promiscuous mode
[ 1628.352846][  T579] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[ 1628.360081][  T579] rust_binder: 8: no such ref 2
[ 1628.364972][  T579] rust_binder: 8: no such ref 1
[ 1628.369895][  T579] rust_binder: Read failure Err(EAGAIN) in pid:8
[ 1628.370547][  T579] rust_binder: 8: no such ref 0
[ 1628.378792][  T581] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=24082 sclass=netlink_xfrm_socket pid=581 comm=syz.9.21338
[ 1628.382038][  T579] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:8
[ 1628.934088][  T330] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[ 1629.098505][  T330] usb 4-1: device descriptor read/64, error -71
[ 1629.359779][  T330] usb 4-1: device descriptor read/64, error -71
[ 1629.615945][  T330] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[ 1629.712810][ T9288] usb 1-1: 0:2 : does not exist
[ 1629.721815][ T9288] usb 1-1: USB disconnect, device number 114
[ 1629.764900][  T330] usb 4-1: device descriptor read/64, error -71
[ 1629.806652][   T36] kauditd_printk_skb: 558 callbacks suppressed
[ 1629.806673][   T36] audit: type=1400 audit(2000000504.814:140430): avc:  denied  { create } for  pid=657 comm="syz.6.21362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1629.849017][   T36] audit: type=1400 audit(2000000504.851:140431): avc:  denied  { setopt } for  pid=657 comm="syz.6.21362" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1629.885566][T29852] udevd[29852]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 1629.898630][   T36] audit: type=1400 audit(2000000504.851:140432): avc:  denied  { setattr } for  pid=657 comm="syz.6.21362" path="socket:[268220]" dev="sockfs" ino=268220 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1629.926511][   T36] audit: type=1400 audit(2000000504.889:140433): avc:  denied  { ioctl } for  pid=606 comm="syz.3.21346" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1629.954142][  T662] 9pnet_fd: Insufficient options for proto=fd
[ 1629.984882][   T36] audit: type=1400 audit(2000000504.889:140434): avc:  denied  { ioctl } for  pid=606 comm="syz.3.21346" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1630.010275][   T36] audit: type=1400 audit(2000000504.889:140435): avc:  denied  { ioctl } for  pid=606 comm="syz.3.21346" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1630.035735][   T36] audit: type=1400 audit(2000000504.889:140436): avc:  denied  { ioctl } for  pid=606 comm="syz.3.21346" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1630.042280][  T330] usb 4-1: device descriptor read/64, error -71
[ 1630.061757][   T36] audit: type=1400 audit(2000000504.889:140437): avc:  denied  { ioctl } for  pid=606 comm="syz.3.21346" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1630.092508][   T36] audit: type=1400 audit(2000000504.889:140438): avc:  denied  { ioctl } for  pid=606 comm="syz.3.21346" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1630.117888][   T36] audit: type=1400 audit(2000000504.889:140439): avc:  denied  { ioctl } for  pid=606 comm="syz.3.21346" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1630.143226][ T9288] usb 1-1: new high-speed USB device number 115 using dummy_hcd
[ 1630.181033][  T330] usb usb4-port1: attempt power cycle
[ 1630.308367][ T9288] usb 1-1: Using ep0 maxpacket: 16
[ 1630.316288][ T9288] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1630.327438][ T9288] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1630.340344][ T9288] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1630.346975][ T9288] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00
[ 1630.356078][ T9288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1630.366876][ T9288] usb 1-1: config 0 descriptor??
[ 1630.543751][  T330] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[ 1630.567718][  T330] usb 4-1: device descriptor read/8, error -71
[ 1630.655116][  T684] netlink: 104 bytes leftover after parsing attributes in process `syz.9.21373'.
[ 1630.716797][  T330] usb 4-1: device descriptor read/8, error -71
[ 1630.813197][ T9288] hid-generic 0003:1B1C:1B34.0052: unknown main item tag 0x0
[ 1630.820710][ T9288] hid-generic 0003:1B1C:1B34.0052: unknown main item tag 0x0
[ 1630.828174][ T9288] hid-generic 0003:1B1C:1B34.0052: unknown main item tag 0x0
[ 1630.835962][ T9288] hid-generic 0003:1B1C:1B34.0052: unknown main item tag 0x0
[ 1630.843429][ T9288] hid-generic 0003:1B1C:1B34.0052: unknown main item tag 0x0
[ 1630.851797][ T9288] hid-generic 0003:1B1C:1B34.0052: hidraw0: USB HID v0.05 Device [HID 1b1c:1b34] on usb-dummy_hcd.0-1/input0
[ 1630.969276][  T330] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[ 1630.993131][  T330] usb 4-1: device descriptor read/8, error -71
[ 1631.133163][  T330] usb 4-1: device descriptor read/8, error -71
[ 1631.246445][  T330] usb usb4-port1: unable to enumerate USB device
[ 1631.377244][  T702] netlink: 152 bytes leftover after parsing attributes in process `syz.6.21381'.
[ 1631.843453][  T710] netlink: 44 bytes leftover after parsing attributes in process `syz.9.21383'.
[ 1631.950053][  T717] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[ 1631.950085][  T717] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:17
[ 1632.245526][  T759] batadv_slave_1: entered promiscuous mode
[ 1632.273401][  T759] batadv_slave_1: left promiscuous mode
[ 1632.355372][  T774] overlayfs: failed to clone lowerpath
[ 1632.578675][ T9288] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[ 1632.742018][ T9288] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[ 1632.755437][ T9288] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1632.766798][ T9288] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 1632.782976][ T9288] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[ 1632.793022][ T9288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1632.803874][ T9288] usb 4-1: config 0 descriptor??
[ 1632.817897][ T9288] usb-storage 4-1:0.0: USB Mass Storage device detected
[ 1632.847084][ T9288] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[ 1632.965549][ T9288] usb 1-1: USB disconnect, device number 115
[ 1633.061603][  T496] usb 4-1: USB disconnect, device number 40
[ 1633.213501][  T802] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3
[ 1633.220914][  T802] rust_binder: 784: no such ref 1
[ 1633.763965][  T838] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1633.832062][  T840] rust_binder: 838 RLIMIT_NICE not set
[ 1633.921742][ T9288] usb 1-1: new high-speed USB device number 116 using dummy_hcd
[ 1634.092202][ T9288] usb 1-1: Using ep0 maxpacket: 8
[ 1634.099879][ T9288] usb 1-1: too many configurations: 90, using maximum allowed: 8
[ 1634.110343][ T9288] usb 1-1: unable to read config index 0 descriptor/start: -61
[ 1634.118193][ T9288] usb 1-1: can't read configurations, error -61
[ 1634.262786][ T9288] usb 1-1: new high-speed USB device number 117 using dummy_hcd
[ 1634.422650][ T9288] usb 1-1: Using ep0 maxpacket: 8
[ 1634.430717][ T9288] usb 1-1: too many configurations: 90, using maximum allowed: 8
[ 1634.445129][ T9288] usb 1-1: unable to read config index 0 descriptor/start: -61
[ 1634.452814][ T9288] usb 1-1: can't read configurations, error -61
[ 1634.460658][ T9288] usb usb1-port1: attempt power cycle
[ 1634.827705][ T9288] usb 1-1: new high-speed USB device number 118 using dummy_hcd
[ 1634.850183][ T9288] usb 1-1: Using ep0 maxpacket: 8
[ 1634.858341][ T9288] usb 1-1: too many configurations: 90, using maximum allowed: 8
[ 1634.871394][ T9288] usb 1-1: unable to read config index 0 descriptor/start: -61
[ 1634.879547][ T9288] usb 1-1: can't read configurations, error -61
[ 1635.019556][ T9288] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[ 1635.041671][ T9288] usb 1-1: Using ep0 maxpacket: 8
[ 1635.050278][ T9288] usb 1-1: too many configurations: 90, using maximum allowed: 8
[ 1635.061825][ T9288] usb 1-1: unable to read config index 0 descriptor/start: -61
[ 1635.070136][ T9288] usb 1-1: can't read configurations, error -61
[ 1635.077386][ T9288] usb usb1-port1: unable to enumerate USB device
[ 1635.137212][   T36] kauditd_printk_skb: 664 callbacks suppressed
[ 1635.137233][   T36] audit: type=1400 audit(2000000509.824:141104): avc:  denied  { create } for  pid=879 comm="syz.6.21436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1635.184904][   T36] audit: type=1400 audit(2000000509.824:141105): avc:  denied  { write } for  pid=879 comm="syz.6.21436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1635.197854][  T884] netlink: 'syz.9.21438': attribute type 5 has an invalid length.
[ 1635.208976][   T36] audit: type=1400 audit(2000000509.824:141106): avc:  denied  { read } for  pid=879 comm="syz.6.21436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1635.236798][  T887] loop7: detected capacity change from 0 to 7
[ 1635.238365][   T36] audit: type=1400 audit(2000000509.824:141107): avc:  denied  { read write } for  pid=881 comm="syz.3.21437" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1635.267647][   T36] audit: type=1400 audit(2000000509.824:141108): avc:  denied  { read write open } for  pid=881 comm="syz.3.21437" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1635.292787][   T36] audit: type=1400 audit(2000000509.824:141109): avc:  denied  { map } for  pid=881 comm="syz.3.21437" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1635.316797][   T64] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1635.319247][   T36] audit: type=1400 audit(2000000509.824:141110): avc:  denied  { read execute } for  pid=881 comm="syz.3.21437" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1635.326064][   T64] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1635.351435][   T36] audit: type=1400 audit(2000000509.852:141111): avc:  denied  { read write } for  pid=538 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1635.357825][  T887] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1635.385007][   T36] audit: type=1400 audit(2000000509.852:141112): avc:  denied  { read write open } for  pid=538 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1635.393284][  T887] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1635.417852][   T36] audit: type=1400 audit(2000000509.852:141113): avc:  denied  { ioctl } for  pid=538 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=52 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1635.424207][  T887]  loop7: unable to read partition table
[ 1635.457161][  T887] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü�¾CêjÌ–ã¢P=ý?ã}X‹ºÐ	œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö�˜Èµ4FLQkÝŠ) failed (rc=-5)
[ 1635.915075][  T914] netlink: 'syz.6.21449': attribute type 33 has an invalid length.
[ 1635.923195][  T914] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21449'.
[ 1636.472870][  T945] rust_binder: 68: no such ref 0
[ 1636.477883][  T945] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[ 1636.485055][  T945] rust_binder: 68: no such ref 2
[ 1636.490477][  T945] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false
[ 1636.520645][  T947] /dev/rnullb0: Can't open blockdev
[ 1636.535881][  T947] /dev/rnullb0: Can't open blockdev
[ 1636.553174][  T949] overlayfs: failed to clone lowerpath
[ 1636.593771][  T951] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:74
[ 1637.087752][  T975] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1637.104687][  T975] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[ 1637.113014][  T975] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[ 1637.121009][  T975] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[ 1637.270767][  T984] netlink: 'syz.9.21474': attribute type 33 has an invalid length.
[ 1637.279070][  T984] netlink: 4 bytes leftover after parsing attributes in process `syz.9.21474'.
[ 1637.464856][  T989] netlink: 104 bytes leftover after parsing attributes in process `syz.0.21476'.
[ 1637.476030][  T989] KVM: debugfs: duplicate directory 989-7
[ 1637.848238][ T1000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21481'.
[ 1637.857302][ T1000] bridge_slave_1: left allmulticast mode
[ 1637.862957][ T1000] bridge_slave_1: left promiscuous mode
[ 1637.869242][ T1000] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1637.877374][ T1000] bridge_slave_0: left allmulticast mode
[ 1637.883077][ T1000] bridge_slave_0: left promiscuous mode
[ 1637.890113][ T1000] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1637.897370][ T1505] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[ 1638.046579][ T1505] usb 1-1: device descriptor read/64, error -71
[ 1638.098815][ T1014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=1014 comm=syz.9.21485
[ 1638.112080][ T1014] netlink: 19 bytes leftover after parsing attributes in process `syz.9.21485'.
[ 1638.122141][ T1016] netlink: 'syz.6.21484': attribute type 13 has an invalid length.
[ 1638.122989][ T1014] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=1014 comm=syz.9.21485
[ 1638.143243][ T1014] netlink: 19 bytes leftover after parsing attributes in process `syz.9.21485'.
[ 1638.145967][ T1016] fuse: Unknown parameter 'ÿ0x0000000000000004'
[ 1638.313073][ T1505] usb 1-1: device descriptor read/64, error -71
[ 1638.527137][ T1036] netlink: 'syz.6.21492': attribute type 4 has an invalid length.
[ 1638.535124][ T1036] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.21492'.
[ 1638.546735][ T1036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1036 comm=syz.6.21492
[ 1638.568880][ T1505] usb 1-1: new high-speed USB device number 121 using dummy_hcd
[ 1638.707448][ T1505] usb 1-1: device descriptor read/64, error -71
[ 1638.963261][ T1505] usb 1-1: device descriptor read/64, error -71
[ 1638.986228][ T1043] overlayfs: failed to resolve './file1': -2
[ 1639.062391][ T1051] incfs: Can't find or create .index dir in ./bus
[ 1639.068982][ T1051] incfs: mount failed -1
[ 1639.075200][ T1051] incfs: Can't find or create .index dir in ./bus
[ 1639.081717][ T1051] incfs: mount failed -1
[ 1639.090651][ T1051] rust_binder: Error while translating object.
[ 1639.090687][ T1051] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[ 1639.097072][ T1505] usb usb1-port1: attempt power cycle
[ 1639.111833][ T1051] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:104
[ 1639.474923][ T1505] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[ 1639.510197][ T1505] usb 1-1: device descriptor read/8, error -71
[ 1639.647818][ T1505] usb 1-1: device descriptor read/8, error -71
[ 1639.903303][ T1505] usb 1-1: new high-speed USB device number 123 using dummy_hcd
[ 1639.925552][ T1505] usb 1-1: device descriptor read/8, error -71
[ 1640.064133][ T1505] usb 1-1: device descriptor read/8, error -71
[ 1640.103304][ T1092] tipc: Cannot configure node identity twice
[ 1640.179879][ T1505] usb usb1-port1: unable to enumerate USB device
[ 1640.279232][ T1106] netlink: 8 bytes leftover after parsing attributes in process `syz.9.21518'.
[ 1640.825440][   T36] kauditd_printk_skb: 727 callbacks suppressed
[ 1640.825461][   T36] audit: type=1400 audit(2000000515.153:141841): avc:  denied  { read write } for  pid=28293 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1640.878403][   T36] audit: type=1400 audit(2000000515.153:141842): avc:  denied  { read write open } for  pid=28293 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1640.905153][ T1110] rust_binder: Error while translating object.
[ 1640.905295][ T1110] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[ 1640.905417][   T36] audit: type=1400 audit(2000000515.153:141843): avc:  denied  { ioctl } for  pid=28293 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1597 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1640.919283][ T1110] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:815
[ 1640.942499][   T36] audit: type=1400 audit(2000000515.218:141844): avc:  denied  { read } for  pid=1109 comm="syz.0.21519" name="binder1" dev="binder" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1641.003417][   T36] audit: type=1400 audit(2000000515.218:141845): avc:  denied  { read open } for  pid=1109 comm="syz.0.21519" path="/dev/binderfs/binder1" dev="binder" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1641.056451][   T36] audit: type=1400 audit(2000000515.218:141846): avc:  denied  { create } for  pid=1109 comm="syz.0.21519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1641.077418][ T1116] rust_binder: Error while translating object.
[ 1641.077470][ T1116] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[ 1641.083680][ T1116] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:817
[ 1641.116281][   T36] audit: type=1400 audit(2000000515.218:141847): avc:  denied  { write } for  pid=1109 comm="syz.0.21519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1641.158000][   T36] audit: type=1400 audit(2000000515.218:141848): avc:  denied  { ioctl } for  pid=1109 comm="syz.0.21519" path="/dev/binderfs/binder1" dev="binder" ino=54 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1641.234615][   T36] audit: type=1400 audit(2000000515.218:141849): avc:  denied  { set_context_mgr } for  pid=1109 comm="syz.0.21519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[ 1641.262791][   T36] audit: type=1400 audit(2000000515.218:141850): avc:  denied  { map } for  pid=1109 comm="syz.0.21519" path="/dev/binderfs/binder1" dev="binder" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1641.636039][ T1157] netlink: 8568 bytes leftover after parsing attributes in process `syz.9.21533'.
[ 1641.737920][ T1162] 9pnet_fd: Insufficient options for proto=fd
[ 1642.203999][ T1184] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[ 1642.313302][ T1190] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1642.941068][ T1233] overlayfs: failed to clone lowerpath
[ 1643.077506][ T9288] usb 1-1: new full-speed USB device number 124 using dummy_hcd
[ 1643.226712][ T9288] usb 1-1: device descriptor read/64, error -71
[ 1643.482517][ T9288] usb 1-1: device descriptor read/64, error -71
[ 1643.738345][ T9288] usb 1-1: new full-speed USB device number 125 using dummy_hcd
[ 1643.844297][ T1287] sock: sock_set_timeout: `syz.3.21582' (pid 1287) tries to set negative timeout
[ 1643.888452][ T9288] usb 1-1: device descriptor read/64, error -71
[ 1644.129071][ T1314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21591'.
[ 1644.143369][ T9288] usb 1-1: device descriptor read/64, error -71
[ 1644.262282][ T9288] usb usb1-port1: attempt power cycle
[ 1644.428479][ T1331] overlayfs: failed to clone lowerpath
[ 1644.633682][ T9288] usb 1-1: new full-speed USB device number 126 using dummy_hcd
[ 1644.657977][ T9288] usb 1-1: device descriptor read/8, error -71
[ 1644.796276][ T9288] usb 1-1: device descriptor read/8, error -71
[ 1645.060016][ T9288] usb 1-1: new full-speed USB device number 127 using dummy_hcd
[ 1645.097787][ T9288] usb 1-1: device descriptor read/8, error -71
[ 1645.256154][ T9288] usb 1-1: device descriptor read/8, error -71
[ 1645.390973][ T9288] usb usb1-port1: unable to enumerate USB device
[ 1645.432724][ T1361] overlayfs: failed to clone upperpath
[ 1646.188101][   T36] kauditd_printk_skb: 1649 callbacks suppressed
[ 1646.188122][   T36] audit: type=1400 audit(2000000520.181:143500): avc:  denied  { create } for  pid=1367 comm="syz.6.21607" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1646.252175][   T36] audit: type=1400 audit(2000000520.191:143501): avc:  denied  { create } for  pid=1369 comm="syz.9.21608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1646.294123][   T36] audit: type=1400 audit(2000000520.191:143502): avc:  denied  { create } for  pid=1369 comm="syz.9.21608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1646.332964][   T36] audit: type=1400 audit(2000000520.191:143503): avc:  denied  { setopt } for  pid=1369 comm="syz.9.21608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1646.375788][   T36] audit: type=1400 audit(2000000520.191:143504): avc:  denied  { setopt } for  pid=1369 comm="syz.9.21608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1646.402401][   T36] audit: type=1400 audit(2000000520.219:143505): avc:  denied  { create } for  pid=1367 comm="syz.6.21607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[ 1646.416416][ T1374] rust_binder: Write failure EFAULT in pid:847
[ 1646.423839][   T36] audit: type=1400 audit(2000000520.219:143506): avc:  denied  { ioctl } for  pid=1367 comm="syz.6.21607" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=270155 ioctlcmd=0x4b61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1646.465209][   T36] audit: type=1400 audit(2000000520.238:143507): avc:  denied  { ioctl } for  pid=1367 comm="syz.6.21607" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=270155 ioctlcmd=0x54ca scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1646.493026][   T36] audit: type=1400 audit(2000000520.238:143508): avc:  denied  { ioctl } for  pid=1367 comm="syz.6.21607" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=270155 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1646.520295][ T1379] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1646.680136][   T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 1646.843291][   T10] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[ 1646.852748][   T10] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[ 1646.882795][   T10] usb 1-1: config 220 has no interface number 2
[ 1646.906951][   T10] usb 1-1: config 220 interface 1 altsetting 5 has an endpoint descriptor with address 0x6F, changing to 0xF
[ 1646.919742][   T10] usb 1-1: config 220 interface 1 altsetting 5 endpoint 0xF has an invalid bInterval 0, changing to 7
[ 1646.931909][   T10] usb 1-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12
[ 1646.947912][   T10] usb 1-1: config 220 interface 0 has no altsetting 0
[ 1646.954790][   T10] usb 1-1: config 220 interface 76 has no altsetting 0
[ 1646.962929][   T10] usb 1-1: config 220 interface 1 has no altsetting 0
[ 1646.974690][   T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[ 1646.989151][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1646.998034][   T10] usb 1-1: Product: syz
[ 1647.005459][   T10] usb 1-1: Manufacturer: syz
[ 1647.010116][   T10] usb 1-1: SerialNumber: syz
[ 1647.033464][ T1412] netlink: 72 bytes leftover after parsing attributes in process `syz.6.21622'.
[ 1647.246047][   T10] usb 1-1: selecting invalid altsetting 0
[ 1647.258116][   T10] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[ 1647.280560][   T10] usb 1-1: No valid video chain found.
[ 1647.289913][   T10] usb 1-1: USB disconnect, device number 2
[ 1647.307677][ T1437] overlayfs: failed to clone lowerpath
[ 1647.816229][ T1447] binder: Bad value for 'max'
[ 1647.865445][ T1449] rust_binder: Write failure EFAULT in pid:852
[ 1648.428890][ T1486] sock: sock_set_timeout: `syz.9.21643' (pid 1486) tries to set negative timeout
[ 1649.451803][ T1525] IPv6: Can't replace route, no match found
[ 1650.410516][ T1574] netlink: 'syz.6.21680': attribute type 4 has an invalid length.
[ 1650.420405][ T1574] netlink: 'syz.6.21680': attribute type 4 has an invalid length.
[ 1651.067678][ T1589] fuse: blksize only supported for fuseblk
[ 1651.587945][   T36] kauditd_printk_skb: 469 callbacks suppressed
[ 1651.587965][   T36] audit: type=1400 audit(2000000525.248:143976): avc:  denied  { read write } for  pid=28293 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1651.625796][   T36] audit: type=1400 audit(2000000525.257:143977): avc:  denied  { read write open } for  pid=28293 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1651.663619][   T36] audit: type=1400 audit(2000000525.257:143978): avc:  denied  { ioctl } for  pid=28293 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1597 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1651.690921][   T36] audit: type=1400 audit(2000000525.323:143979): avc:  denied  { create } for  pid=1608 comm="syz.0.21694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1651.721694][   T36] audit: type=1400 audit(2000000525.323:143980): avc:  denied  { accept } for  pid=1608 comm="syz.0.21694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1651.752882][   T36] audit: type=1400 audit(2000000525.332:143981): avc:  denied  { accept } for  pid=1608 comm="syz.0.21694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[ 1651.772950][   T36] audit: type=1400 audit(2000000525.351:143982): avc:  denied  { read } for  pid=1608 comm="syz.0.21694" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1651.820570][   T36] audit: type=1400 audit(2000000525.351:143983): avc:  denied  { read open } for  pid=1608 comm="syz.0.21694" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1651.856785][   T36] audit: type=1400 audit(2000000525.351:143984): avc:  denied  { read } for  pid=1608 comm="syz.0.21694" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1651.882677][   T36] audit: type=1400 audit(2000000525.351:143985): avc:  denied  { read open } for  pid=1608 comm="syz.0.21694" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1651.988182][ T4864] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 1652.010125][ T1624] 9pnet_fd: Insufficient options for proto=fd
[ 1652.011726][ T1623] 9pnet_fd: Insufficient options for proto=fd
[ 1652.028871][ T1628] x_tables: duplicate underflow at hook 1
[ 1652.148049][ T4864] usb 1-1: Using ep0 maxpacket: 8
[ 1652.156867][ T4864] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[ 1652.165624][ T4864] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[ 1652.175858][ T4864] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1652.188429][ T4864] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1652.197820][ T4864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1652.205861][ T4864] usb 1-1: Product: ꒨蔫抱泋Ⴉ值唻稘ƕ䗇∹攲診ﲉ劋졥ࠪ㯑鴿�秺�潢⨧ʂ㖔垬䫼ꠘ瀠�唛ﳑ귇赨䞕驱撇Ụﵘ궚�৽ﵧ驱䵚ݒ镞�
[ 1652.224045][ T4864] usb 1-1: Manufacturer: 쨛�酱鹢嘯淴�䘨魪圹͗�翼�鄽ꔄ��臒∑﷒賅깞蛄䪋홺ᙘ얣℔�ᎀ�忹龓症䦆嗲觰뼩ꩵ�蠥堩౲휦ﰞ远訴냼ꨶ�三溸ᛒ硹쫂�ժ㩄襑邏ⓡ�㓻뜫�鋸᭵笄则玖醹ꢽ謋꧳︻
[ 1652.248859][ T4864] usb 1-1: SerialNumber: �⌗�龲Ⲻ筨訌鋽첓맪�擢ᬠੋ䶔࿳錥Ԛ㬈륭蠖㪡�뎵齄钕ꡮ㢮潘༈헎핱㸆੦ѩ��清怤ቢ臘䪔맳훋뽼䣃稆戎ﾼ嗙櫎슿꡸醵⹱ஔ�畩腭ྦ줠긳༷�葌㘺◯尞⽞疓�崚ㅘㄌտ
[ 1652.508591][ T4864] usb 1-1: 0:2 : does not exist
[ 1652.521194][ T4864] usb 1-1: USB disconnect, device number 3
[ 1652.571490][ T1371] udevd[1371]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 1652.870957][ T1663] 9pnet_fd: Insufficient options for proto=fd
[ 1653.292631][ T1690] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1653.340846][ T1688] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21718'.
[ 1654.137132][ T1753] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1654.137994][ T1753] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[ 1654.486853][ T1761] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1654.502968][ T1761] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1654.510179][ T1761] bridge_slave_0: entered allmulticast mode
[ 1654.516694][ T1761] bridge_slave_0: entered promiscuous mode
[ 1654.524550][ T1761] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1654.531669][ T1761] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1654.538857][ T1761] bridge_slave_1: entered allmulticast mode
[ 1654.545301][ T1761] bridge_slave_1: entered promiscuous mode
[ 1654.703363][ T1777] SELinux: security_context_str_to_sid () failed with errno=-22
[ 1654.772574][ T1761] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1654.779667][ T1761] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1654.787042][ T1761] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1654.794305][ T1761] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1654.863135][T17761] bridge_slave_1: left allmulticast mode
[ 1654.871903][T17761] bridge_slave_1: left promiscuous mode
[ 1654.887789][T17761] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1654.909340][T17761] bridge_slave_0: left allmulticast mode
[ 1654.915041][T17761] bridge_slave_0: left promiscuous mode
[ 1654.929304][T17761] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1655.069005][T17760] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1655.078390][T17760] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1655.099340][T17761] tipc: Left network mode
[ 1655.109842][T17761] veth1_macvtap: left promiscuous mode
[ 1655.122353][T17761] veth0_vlan: left promiscuous mode
[ 1655.237937][T17762] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1655.245053][T17762] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1655.283265][T17762] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1655.290385][T17762] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1655.468520][ T1761] veth0_vlan: entered promiscuous mode
[ 1655.593103][ T1834] rust_binder: Failed to allocate buffer. len:4096, is_oneway:true
[ 1655.593132][ T1834] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[ 1655.597206][ T1761] veth1_macvtap: entered promiscuous mode
[ 1655.613859][ T1834] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:923
[ 1656.433845][ T1868] fuse: Unknown parameter 'g_id'
[ 1656.931093][   T36] kauditd_printk_skb: 943 callbacks suppressed
[ 1656.931115][   T36] audit: type=1400 audit(2000000530.258:144929): avc:  denied  { write } for  pid=1903 comm="syz.0.21790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1656.959822][ T1904] netlink: 80 bytes leftover after parsing attributes in process `syz.0.21790'.
[ 1656.970998][   T36] audit: type=1400 audit(2000000530.295:144930): avc:  denied  { nlmsg_write } for  pid=1903 comm="syz.0.21790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1656.992159][   T36] audit: type=1400 audit(2000000530.305:144931): avc:  denied  { ioctl } for  pid=1903 comm="syz.0.21790" path="/dev/binderfs/binder1" dev="binder" ino=54 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1657.019067][   T36] audit: type=1400 audit(2000000530.305:144932): avc:  denied  { set_context_mgr } for  pid=1903 comm="syz.0.21790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[ 1657.040095][   T36] audit: type=1400 audit(2000000530.323:144933): avc:  denied  { create } for  pid=1903 comm="syz.0.21790" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1657.063494][   T36] audit: type=1400 audit(2000000530.352:144934): avc:  denied  { ioctl } for  pid=1903 comm="syz.0.21790" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=272720 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1657.090915][   T36] audit: type=1400 audit(2000000530.352:144935): avc:  denied  { execmem } for  pid=1903 comm="syz.0.21790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1657.095282][ T1904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21790'.
[ 1657.111781][   T36] audit: type=1400 audit(2000000530.370:144936): avc:  denied  { ioctl } for  pid=1903 comm="syz.0.21790" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=272720 ioctlcmd=0xaa05 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[ 1657.123937][ T1904] rust_binder: Write failure EFAULT in pid:949
[ 1657.148184][   T36] audit: type=1400 audit(2000000530.417:144937): avc:  denied  { create } for  pid=1903 comm="syz.0.21790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1657.201432][   T36] audit: type=1400 audit(2000000530.417:144938): avc:  denied  { write } for  pid=1903 comm="syz.0.21790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[ 1657.252940][ T1915] netlink: 'syz.0.21793': attribute type 11 has an invalid length.
[ 1657.345416][ T1917] 9pnet_fd: Insufficient options for proto=fd
[ 1657.661869][ T1945] netlink: 'syz.3.21804': attribute type 4 has an invalid length.
[ 1657.670113][ T1945] netlink: 3581 bytes leftover after parsing attributes in process `syz.3.21804'.
[ 1657.776248][ T1947] rust_binder: Error while translating object.
[ 1657.776324][ T1947] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[ 1657.782797][ T1947] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:19
[ 1658.354180][ T1952] rust_binder: Write failure EFAULT in pid:959
[ 1658.495457][ T1961] rust_binder: 1958 RLIMIT_NICE not set
[ 1658.505356][ T1958] rust_binder: Error while translating object.
[ 1658.511046][ T1958] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[ 1658.517678][ T1958] rust_binder: Failure BR_FAILED_REPLY { source: EPERM } during reply - delivering BR_FAILED_REPLY to sender.
[ 1658.527576][ T1958] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:961
[ 1659.338399][ T1980] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[ 1660.206221][  T330] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 1660.376848][  T330] usb 1-1: Using ep0 maxpacket: 32
[ 1660.384735][  T330] usb 1-1: too many endpoints for config 0 interface 0 altsetting 32: 253, using maximum allowed: 30
[ 1660.395753][  T330] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1660.406813][  T330] usb 1-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1660.419939][  T330] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1660.426575][  T330] usb 1-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00
[ 1660.435718][  T330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1660.445333][  T330] usb 1-1: config 0 descriptor??
[ 1660.647886][ T2048] netlink: 'syz.9.21841': attribute type 1 has an invalid length.
[ 1660.884469][  T330] zeroplus 0003:0C12:0030.0053: item fetching failed at offset 5/7
[ 1660.892752][  T330] zeroplus 0003:0C12:0030.0053: parse failed
[ 1660.898967][  T330] zeroplus 0003:0C12:0030.0053: probe with driver zeroplus failed with error -22
[ 1661.112186][  T330] usb 1-1: USB disconnect, device number 4
[ 1661.199619][ T2057] netlink: 'syz.3.21844': attribute type 46 has an invalid length.
[ 1661.570038][ T2077] netlink: 260 bytes leftover after parsing attributes in process `syz.9.21851'.
[ 1662.154405][ T2082] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1794 sclass=netlink_tcpdiag_socket pid=2082 comm=syz.9.21853
[ 1662.356105][   T36] kauditd_printk_skb: 485 callbacks suppressed
[ 1662.356127][   T36] audit: type=1400 audit(2000000535.352:145424): avc:  denied  { create } for  pid=2095 comm="syz.9.21856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1662.391173][   T36] audit: type=1400 audit(2000000535.352:145425): avc:  denied  { setopt } for  pid=2095 comm="syz.9.21856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1662.416253][   T36] audit: type=1400 audit(2000000535.399:145426): avc:  denied  { create } for  pid=2094 comm="syz.3.21857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1662.438079][   T36] audit: type=1400 audit(2000000535.399:145427): avc:  denied  { create } for  pid=2094 comm="syz.3.21857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1662.443252][ T2096] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1662.460234][   T36] audit: type=1400 audit(2000000535.399:145428): avc:  denied  { create } for  pid=2094 comm="syz.3.21857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1662.465517][ T2096] audit: audit_lost=300 audit_rate_limit=0 audit_backlog_limit=64
[ 1662.487574][   T36] audit: type=1400 audit(2000000535.399:145429): avc:  denied  { create } for  pid=2094 comm="syz.3.21857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1662.494111][ T2096] audit: backlog limit exceeded
[ 1662.519236][   T36] audit: type=1400 audit(2000000535.399:145430): avc:  denied  { create } for  pid=2094 comm="syz.3.21857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1662.869097][ T2125] __vm_enough_memory: pid: 2125, comm: syz.6.21867, bytes: 18014402804453376 not enough memory for the allocation
[ 1662.904459][ T2125] netlink: 'syz.6.21867': attribute type 27 has an invalid length.
[ 1662.983002][ T2131] netlink: 12 bytes leftover after parsing attributes in process `syz.6.21870'.
[ 1663.337254][ T2149] netlink: 'syz.3.21875': attribute type 4 has an invalid length.
[ 1663.349154][ T2149] netlink: 'syz.3.21875': attribute type 4 has an invalid length.
[ 1663.366026][ T2149] 9pnet: p9_errstr2errno: server reported unknown error 1844674407
[ 1663.697328][ T2173] overlayfs: failed to clone upperpath
[ 1663.871235][T30446] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 1663.938856][ T2182] futex_wake_op: syz.9.21885 tries to shift op by -1; fix this program
[ 1664.032867][T30446] usb 1-1: device descriptor read/64, error -71
[ 1664.288314][T30446] usb 1-1: device descriptor read/64, error -71
[ 1664.335566][ T2206] netlink: 44 bytes leftover after parsing attributes in process `syz.6.21894'.
[ 1664.344790][ T2206] netlink: 51 bytes leftover after parsing attributes in process `syz.6.21894'.
[ 1664.355108][ T2206] netlink: 'syz.6.21894': attribute type 4 has an invalid length.
[ 1664.367211][ T2206] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22
[ 1664.544118][T30446] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[ 1664.693386][T30446] usb 1-1: device descriptor read/64, error -71
[ 1665.023762][T30446] usb 1-1: device descriptor read/64, error -71
[ 1665.141547][T30446] usb usb1-port1: attempt power cycle
[ 1665.229088][ T2275] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1665.503425][T30446] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[ 1665.527222][T30446] usb 1-1: device descriptor read/8, error -71
[ 1665.665997][T30446] usb 1-1: device descriptor read/8, error -71
[ 1665.730790][ T2289] overlayfs: failed to clone lowerpath
[ 1665.921173][T30446] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[ 1665.931659][T17760] bridge_slave_1: left allmulticast mode
[ 1665.938304][T17760] bridge_slave_1: left promiscuous mode
[ 1665.944497][T17760] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1665.952596][T17760] bridge_slave_0: left allmulticast mode
[ 1665.955268][T30446] usb 1-1: device descriptor read/8, error -71
[ 1665.958357][T17760] bridge_slave_0: left promiscuous mode
[ 1665.970479][T17760] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1666.114014][T30446] usb 1-1: device descriptor read/8, error -71
[ 1666.176586][ T2312] tipc: Started in network mode
[ 1666.181487][ T2312] tipc: Node identity fe800000000000000000000000000016, cluster identity 4711
[ 1666.190696][ T2312] tipc: Enabled bearer <udp:syz1>, priority 10
[ 1666.240016][T30446] usb usb1-port1: unable to enumerate USB device
[ 1666.763688][ T2323] futex_wake_op: syz.3.21938 tries to shift op by 32; fix this program
[ 1666.772530][ T2323] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=2323 comm=syz.3.21938
[ 1666.788503][ T2325] futex_wake_op: syz.3.21938 tries to shift op by 32; fix this program
[ 1666.853224][ T2332] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1666.899837][T30446] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[ 1667.059627][T30446] usb 1-1: device descriptor read/64, error -71
[ 1667.315683][T30446] usb 1-1: device descriptor read/64, error -71
[ 1667.379544][  T496] tipc: Node number set to 4269801494
[ 1667.554415][ T2373] netlink: 'syz.9.21956': attribute type 1 has an invalid length.
[ 1667.581871][T30446] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[ 1667.691056][   T36] kauditd_printk_skb: 896 callbacks suppressed
[ 1667.691078][   T36] audit: type=1400 audit(2000000540.362:146270): avc:  denied  { name_bind } for  pid=2380 comm="syz.9.21958" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[ 1667.719321][   T36] audit: type=1400 audit(2000000540.362:146271): avc:  denied  { node_bind } for  pid=2380 comm="syz.9.21958" saddr=fc02::2 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 1667.741547][T30446] usb 1-1: device descriptor read/64, error -71
[ 1667.742044][   T36] audit: type=1400 audit(2000000540.362:146272): avc:  denied  { mounton } for  pid=2380 comm="syz.9.21958" path="/598/file0" dev="tmpfs" ino=3199 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1667.859682][   T36] audit: type=1400 audit(2000000540.522:146273): avc:  denied  { ioctl } for  pid=2317 comm="syz.0.21936" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1667.884996][   T36] audit: type=1400 audit(2000000540.522:146274): avc:  denied  { ioctl } for  pid=2317 comm="syz.0.21936" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1667.910262][   T36] audit: type=1400 audit(2000000540.522:146275): avc:  denied  { ioctl } for  pid=2317 comm="syz.0.21936" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1667.938438][   T36] audit: type=1400 audit(2000000540.522:146276): avc:  denied  { ioctl } for  pid=2317 comm="syz.0.21936" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1667.966760][   T36] audit: type=1400 audit(2000000540.522:146277): avc:  denied  { ioctl } for  pid=2317 comm="syz.0.21936" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1667.994189][   T36] audit: type=1400 audit(2000000540.522:146278): avc:  denied  { ioctl } for  pid=2317 comm="syz.0.21936" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1667.997855][T30446] usb 1-1: device descriptor read/64, error -71
[ 1668.021648][   T36] audit: type=1400 audit(2000000540.522:146279): avc:  denied  { ioctl } for  pid=2317 comm="syz.0.21936" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1668.147329][T30446] usb usb1-port1: attempt power cycle
[ 1668.435759][T29578] batadv_slave_1: left promiscuous mode
[ 1668.509170][T30446] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 1668.532343][ T2391] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1668.534025][T30446] usb 1-1: device descriptor read/8, error -71
[ 1668.539536][ T2391] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1668.553128][ T2391] bridge_slave_0: entered allmulticast mode
[ 1668.559448][ T2391] bridge_slave_0: entered promiscuous mode
[ 1668.567147][ T2391] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1668.574354][ T2391] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1668.581560][ T2391] bridge_slave_1: entered allmulticast mode
[ 1668.588005][ T2391] bridge_slave_1: entered promiscuous mode
[ 1668.644815][T17760] veth0_to_team: left allmulticast mode
[ 1668.651346][T17760] veth0_to_team: left promiscuous mode
[ 1668.657007][T17760] bridge0: port 3(veth0_to_team) entered disabled state
[ 1668.664806][T17760] bridge_slave_1: left allmulticast mode
[ 1668.670549][T17760] bridge_slave_1: left promiscuous mode
[ 1668.676285][T17760] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1668.685096][T17760] bridge_slave_0: left allmulticast mode
[ 1668.686542][T30446] usb 1-1: device descriptor read/8, error -71
[ 1668.690913][T17760] bridge_slave_0: left promiscuous mode
[ 1668.702738][T17760] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1668.710670][T17760] tipc: Resetting bearer <eth:xfrm0>
[ 1668.726425][T17760] tipc: Disabling bearer <eth:xfrm0>
[ 1668.875571][T17760] tipc: Left network mode
[ 1668.881682][T17760] veth0_vlan: left promiscuous mode
[ 1668.946170][T30446] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 1668.986497][ T2391] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1668.993635][ T2391] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1669.001058][ T2391] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1669.008173][ T2391] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1669.042439][T30446] usb 1-1: device descriptor read/8, error -71
[ 1669.136590][T17754] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1669.146059][T17754] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1669.178598][T17762] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1669.183876][T30446] usb 1-1: device descriptor read/8, error -71
[ 1669.185725][T17762] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1669.237086][T17754] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1669.244216][T17754] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1669.308767][T30446] usb usb1-port1: unable to enumerate USB device
[ 1669.381864][ T2425] netlink: 'syz.3.21971': attribute type 4 has an invalid length.
[ 1669.450042][ T2425] netlink: 16 bytes leftover after parsing attributes in process `syz.3.21971'.
[ 1669.565603][ T2391] veth0_vlan: entered promiscuous mode
[ 1669.728035][ T2391] veth1_macvtap: entered promiscuous mode
[ 1669.752778][ T2440] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21975'.
[ 1670.468383][T17754] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1670.513027][ T2476] tmpfs: Bad value for 'nr_blocks'
[ 1670.586110][ T2481] SELinux: security_context_str_to_sid (sytem_uÝGй‰:ÿß) failed with errno=-22
[ 1670.691009][ T2488] rust_binder: Write failure EFAULT in pid:1020
[ 1671.332463][ T2513] cgroup: fork rejected by pids controller in /syz3
[ 1671.867108][ T2554] 8021q: VLANs not supported on lo
[ 1672.077224][ T2565] batadv_slave_1: entered promiscuous mode
[ 1672.092271][ T2564] batadv_slave_1: left promiscuous mode
[ 1672.135868][ T2567] overlayfs: failed to clone upperpath
[ 1672.300979][ T2572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22008'.
[ 1672.317241][ T2572] rust_binder: 1031: no such ref 0
[ 1672.322545][ T2572] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[ 1672.329709][ T2572] rust_binder: 1031: no such ref 2
[ 1672.388030][ T2582] netlink: 44 bytes leftover after parsing attributes in process `syz.0.22011'.
[ 1672.655485][  T505] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1672.673762][ T2587] netlink: 'syz.0.22013': attribute type 12 has an invalid length.
[ 1673.028714][   T36] kauditd_printk_skb: 1186 callbacks suppressed
[ 1673.028736][   T36] audit: type=1400 audit(2000000545.372:147466): avc:  denied  { write } for  pid=2586 comm="syz.0.22013" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1673.061709][   T36] audit: type=1400 audit(2000000545.372:147467): avc:  denied  { write } for  pid=2586 comm="syz.0.22013" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1673.064402][ T2587] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1673.087220][   T36] audit: type=1400 audit(2000000545.372:147468): avc:  denied  { write } for  pid=2586 comm="syz.0.22013" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1673.095151][ T2587] audit: audit_lost=320 audit_rate_limit=0 audit_backlog_limit=64
[ 1673.118645][   T36] audit: type=1400 audit(2000000545.372:147469): avc:  denied  { write } for  pid=2586 comm="syz.0.22013" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1673.127887][ T2587] audit: backlog limit exceeded
[ 1673.152100][   T36] audit: type=1400 audit(2000000545.372:147470): avc:  denied  { write } for  pid=2586 comm="syz.0.22013" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1673.160682][ T2587] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1673.182579][   T36] audit: type=1400 audit(2000000545.372:147471): avc:  denied  { write } for  pid=2586 comm="syz.0.22013" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1673.400846][ T2592] rust_binder: Write failure EFAULT in pid:1044
[ 1673.498299][ T2598] random: crng reseeded on system resumption
[ 1673.652935][ T2603] rust_binder: Write failure EINVAL in pid:1051
[ 1674.064155][ T2620] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1675.292241][ T2643] 9pnet_fd: p9_fd_create_tcp (2643): problem connecting socket to 127.0.0.1
[ 1675.314548][ T2643] rust_binder: Write failure EFAULT in pid:29
[ 1675.398441][ T2648] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[ 1675.404630][ T2648] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:31
[ 1675.455980][ T2649] overlayfs: failed to clone upperpath
[ 1675.483114][ T2649] overlayfs: failed to clone lowerpath
[ 1675.497411][ T2651] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[ 1675.497444][ T2651] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:33
[ 1675.507603][ T2651] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[ 1675.518133][ T2651] rust_binder: Read failure Err(EFAULT) in pid:33
[ 1675.678964][ T2668] overlayfs: missing 'lowerdir'
[ 1675.881605][ T2680] rust_binder: Write failure EFAULT in pid:1077
[ 1675.951927][ T2684] binder: Unknown parameter 'contextÌðÔð[7’'
[ 1676.126261][ T2693] overlayfs: failed to clone lowerpath
[ 1676.420698][ T2715] fuse: Bad value for 'user_id'
[ 1676.425827][ T2715] fuse: Bad value for 'user_id'
[ 1676.645023][ T2726] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=18 sclass=netlink_audit_socket pid=2726 comm=syz.0.22063
[ 1676.681740][ T2726] /dev/rnullb0: Can't open blockdev
[ 1676.812309][  T496] usb 10-1: new high-speed USB device number 107 using dummy_hcd
[ 1677.013970][  T496] usb 10-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1677.031833][  T496] usb 10-1: config 1 interface 0 has no altsetting 0
[ 1677.044694][  T496] usb 10-1: New USB device found, idVendor=05ac, idProduct=029f, bcdDevice= 0.40
[ 1677.068162][  T496] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1677.081210][  T496] usb 10-1: Product: syz
[ 1677.085603][  T496] usb 10-1: Manufacturer: �
[ 1677.110719][  T496] usb 10-1: SerialNumber: syz
[ 1677.348855][  T496] usbhid 10-1:1.0: can't add hid device: -71
[ 1677.368957][  T496] usbhid 10-1:1.0: probe with driver usbhid failed with error -71
[ 1677.402532][  T496] usb 10-1: USB disconnect, device number 107
[ 1677.940363][ T2810] netlink: 'syz.9.22089': attribute type 2 has an invalid length.
[ 1678.240871][T15299] usb 10-1: new high-speed USB device number 108 using dummy_hcd
[ 1678.384465][   T36] kauditd_printk_skb: 1123 callbacks suppressed
[ 1678.384482][   T36] audit: type=1400 audit(2000000550.391:148449): avc:  denied  { create } for  pid=2837 comm="syz.6.22099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1678.422976][   T36] audit: type=1400 audit(2000000550.429:148450): avc:  denied  { getopt } for  pid=2837 comm="syz.6.22099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1678.453935][T15299] usb 10-1: Using ep0 maxpacket: 32
[ 1678.465260][   T36] audit: type=1400 audit(2000000550.467:148451): avc:  denied  { ioctl } for  pid=2811 comm="syz.9.22090" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1678.497855][T15299] usb 10-1: config 0 has an invalid interface number: 151 but max is 0
[ 1678.505053][   T36] audit: type=1400 audit(2000000550.467:148452): avc:  denied  { ioctl } for  pid=2811 comm="syz.9.22090" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1678.518316][T15299] usb 10-1: config 0 has no interface number 0
[ 1678.532686][   T36] audit: type=1400 audit(2000000550.495:148453): avc:  denied  { ioctl } for  pid=2811 comm="syz.9.22090" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1678.541896][T15299] usb 10-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2
[ 1678.562904][   T36] audit: type=1400 audit(2000000550.495:148454): avc:  denied  { ioctl } for  pid=2811 comm="syz.9.22090" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1678.578252][T15299] usb 10-1: config 0 interface 151 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1678.634913][T15299] usb 10-1: config 0 interface 151 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1678.634920][   T36] audit: type=1400 audit(2000000550.504:148455): avc:  denied  { ioctl } for  pid=2811 comm="syz.9.22090" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1678.634960][   T36] audit: type=1400 audit(2000000550.504:148456): avc:  denied  { ioctl } for  pid=2811 comm="syz.9.22090" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1678.699074][T15299] usb 10-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f
[ 1678.701329][   T36] audit: type=1400 audit(2000000550.598:148457): avc:  denied  { execmem } for  pid=2841 comm="syz.6.22101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1678.708879][T15299] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1678.727977][   T36] audit: type=1400 audit(2000000550.692:148458): avc:  denied  { ioctl } for  pid=2811 comm="syz.9.22090" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1678.747686][T15299] usb 10-1: Product: syz
[ 1678.766136][T15299] usb 10-1: Manufacturer: syz
[ 1678.770882][T15299] usb 10-1: SerialNumber: syz
[ 1678.814413][T15299] usb 10-1: config 0 descriptor??
[ 1678.852005][ T2845] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1102
[ 1678.952237][ T2849] 9pnet_fd: Insufficient options for proto=fd
[ 1679.315535][T15299] usb 10-1: invalid MIDI in EP 0
[ 1679.374219][T15299] snd-usb-audio 10-1:0.151: probe with driver snd-usb-audio failed with error -22
[ 1679.424041][T15299] usb 10-1: USB disconnect, device number 108
[ 1679.477908][ T2878] xt_NFQUEUE: number of total queues is 0
[ 1679.498291][T30446] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 1679.591159][ T1371] udevd[1371]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.151/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 1679.703259][T30446] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1679.710019][T30446] usb 1-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00
[ 1679.720399][T30446] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1679.733035][T30446] usb 1-1: config 0 descriptor??
[ 1679.911142][ T2890] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[ 1679.911193][ T2890] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:48
[ 1680.059227][T30446] usbhid 1-1:0.0: can't add hid device: -71
[ 1680.114753][T30446] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1680.138775][T30446] usb 1-1: USB disconnect, device number 13
[ 1680.189797][ T2900] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1680.288921][ T2905] rust_binder: Write failure EFAULT in pid:52
[ 1680.499593][ T2916] netlink: 'syz.0.22124': attribute type 19 has an invalid length.
[ 1680.523196][ T2916] netlink: 44 bytes leftover after parsing attributes in process `syz.0.22124'.
[ 1680.547425][ T2916] rust_binder: Write failure EFAULT in pid:1118
[ 1680.553645][T15299] usb 10-1: new high-speed USB device number 109 using dummy_hcd
[ 1680.748107][T15299] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1680.760127][T15299] usb 10-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00
[ 1680.769450][T15299] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1680.779975][T15299] usb 10-1: config 0 descriptor??
[ 1681.236883][T15299] logitech 0003:046D:C626.0054: unknown main item tag 0x4
[ 1681.283833][T15299] logitech 0003:046D:C626.0054: hidraw0: USB HID v0.00 Device [HID 046d:c626] on usb-dummy_hcd.9-1/input0
[ 1681.421206][ T2967] rust_binder: Failed to allocate buffer. len:152, is_oneway:false
[ 1681.874637][ T2975] rust_binder: 1147: no such ref 1
[ 1681.887825][ T2975] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1147
[ 1682.284459][ T2998] netlink: 'syz.3.22150': attribute type 4 has an invalid length.
[ 1682.303499][ T2998] netlink: 'syz.3.22150': attribute type 2 has an invalid length.
[ 1682.319788][ T2998] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2998 comm=syz.3.22150
[ 1682.502873][ T3011] netlink: 12 bytes leftover after parsing attributes in process `syz.6.22155'.
[ 1682.799871][ T3024] rust_binder: Failed to allocate buffer. len:152, is_oneway:false
[ 1682.936033][ T3031] overlayfs: failed to clone lowerpath
[ 1682.953806][ T3030] overlayfs: failed to clone lowerpath
[ 1683.069292][ T3047] rust_binder: 3047 RLIMIT_NICE not set
[ 1683.266841][T25400] usb 10-1: USB disconnect, device number 109
[ 1683.615160][ T3069] overlay: ./file0 is not a directory
[ 1683.655553][T25400] usb 10-1: new high-speed USB device number 110 using dummy_hcd
[ 1683.704013][ T3082] overlay: ./file1 is not a directory
[ 1683.757363][   T36] kauditd_printk_skb: 1730 callbacks suppressed
[ 1683.757392][   T36] audit: type=1400 audit(2000000555.430:150189): avc:  denied  { ioctl } for  pid=3048 comm="syz.9.22165" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1683.811388][   T36] audit: type=1400 audit(2000000555.477:150190): avc:  denied  { create } for  pid=3087 comm="syz.6.22176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1683.822437][ T3088] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1683.833374][   T36] audit: type=1400 audit(2000000555.495:150191): avc:  denied  { create } for  pid=3087 comm="syz.6.22176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1683.861749][   T36] audit: type=1400 audit(2000000555.495:150192): avc:  denied  { write } for  pid=3087 comm="syz.6.22176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1683.882382][T25400] usb 10-1: Using ep0 maxpacket: 16
[ 1683.884945][   T36] audit: type=1400 audit(2000000555.495:150193): avc:  denied  { read } for  pid=3087 comm="syz.6.22176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1683.890919][T25400] usb 10-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1683.909656][   T36] audit: type=1400 audit(2000000555.495:150194): avc:  denied  { read } for  pid=3087 comm="syz.6.22176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1683.926990][T15299] rust_binder: 3034: removing orphan mapping 0:1144
[ 1683.964706][T25400] usb 10-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0
[ 1683.974758][T25400] usb 10-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1683.974937][   T36] audit: type=1400 audit(2000000555.495:150195): avc:  denied  { write } for  pid=3087 comm="syz.6.22176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1683.994987][T25400] usb 10-1: config 1 interface 0 has no altsetting 0
[ 1684.028000][   T36] audit: type=1400 audit(2000000555.552:150196): avc:  denied  { ioctl } for  pid=3048 comm="syz.9.22165" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1684.037169][T25400] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[ 1684.068357][T25400] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1684.079630][T25400] usb 10-1: Product: syz
[ 1684.113192][   T36] audit: type=1400 audit(2000000555.552:150197): avc:  denied  { ioctl } for  pid=3048 comm="syz.9.22165" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1684.114175][T25400] usb 10-1: Manufacturer: syz
[ 1684.144515][T25400] usb 10-1: SerialNumber: syz
[ 1684.146420][   T36] audit: type=1400 audit(2000000555.561:150198): avc:  denied  { ioctl } for  pid=3048 comm="syz.9.22165" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1684.246923][ T3105] netlink: 'syz.6.22181': attribute type 11 has an invalid length.
[ 1684.344141][T15299] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 1684.404847][T25400] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 110 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8
[ 1684.459294][ T3118] 9pnet: p9_errstr2errno: server reported unknown error 1844674407
[ 1684.507863][T15299] usb 1-1: Using ep0 maxpacket: 8
[ 1684.533491][T15299] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 252, changing to 11
[ 1684.544795][T15299] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1684.557746][T15299] usb 1-1: config 0 interface 0 has no altsetting 0
[ 1684.564041][ T3123] overlayfs: failed to clone lowerpath
[ 1684.564404][T15299] usb 1-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00
[ 1684.578982][T15299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1684.593290][T15299] usb 1-1: config 0 descriptor??
[ 1684.631206][  T496] usb 10-1: USB disconnect, device number 110
[ 1684.812055][ T3129] overlayfs: failed to clone upperpath
[ 1684.873128][ T3048] usblp0: removed
[ 1685.035795][T15299] wacom 0003:056A:00B3.0055: Unknown device_type for 'HID 056a:00b3'. Assuming pen.
[ 1685.056058][T15299] wacom 0003:056A:00B3.0055: hidraw0: USB HID v0.00 Device [HID 056a:00b3] on usb-dummy_hcd.0-1/input0
[ 1685.073574][T15299] input: Wacom Intuos3 12x12 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:00B3.0055/input/input117
[ 1685.252939][ T3133] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1685.260322][T15299] usb 1-1: USB disconnect, device number 14
[ 1685.777029][ T3148] binder: Bad value for 'defcontext'
[ 1685.832314][ T3150] binder: Unknown parameter 'smackfstransmute'
[ 1686.397531][ T3166] netlink: 'syz.0.22203': attribute type 4 has an invalid length.
[ 1686.469689][ T3166] netlink: 'syz.0.22203': attribute type 4 has an invalid length.
[ 1686.703568][ T9288] usb 10-1: new high-speed USB device number 111 using dummy_hcd
[ 1686.866179][ T9288] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1686.876462][ T9288] usb 10-1: config 0 has no interfaces?
[ 1686.883733][ T9288] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1686.892944][ T9288] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1686.901196][ T9288] usb 10-1: Manufacturer: syz
[ 1686.907824][ T9288] usb 10-1: config 0 descriptor??
[ 1687.135889][ T3175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1687.145613][ T3175] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1687.157355][ T3175] rust_binder: Write failure EFAULT in pid:81
[ 1687.298579][ T1505] usb 10-1: USB disconnect, device number 111
[ 1693.407869][   T36] kauditd_printk_skb: 312 callbacks suppressed
[ 1693.407889][   T36] audit: type=1400 audit(2000000564.483:150511): avc:  denied  { read } for  pid=3188 comm="syz.9.22212" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1 trawcon="system_u:object_r:memory_device_t:s0"
[ 1693.476653][ T3194] /dev/rnullb0: Can't open blockdev
[ 1693.504553][   T36] audit: type=1400 audit(2000000564.493:150512): avc:  denied  { read write } for  pid=28293 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1693.561149][   T36] audit: type=1400 audit(2000000564.493:150513): avc:  denied  { read write open } for  pid=28293 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1693.604994][   T36] audit: type=1400 audit(2000000564.493:150514): avc:  denied  { ioctl } for  pid=28293 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1597 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1693.685533][   T36] audit: type=1400 audit(2000000564.493:150515): avc:  denied  { create } for  pid=3189 comm="syz.6.22211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1693.724187][ T3208] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1693.728312][ T2391] audit: audit_backlog=65 > audit_backlog_limit=64
[ 1693.737316][ T2391] audit: audit_lost=370 audit_rate_limit=0 audit_backlog_limit=64
[ 1693.738326][ T3208] audit: audit_lost=371 audit_rate_limit=0 audit_backlog_limit=64
[ 1693.745338][ T2391] audit: backlog limit exceeded
[ 1693.760270][ T3208] rust_binder: 3208 RLIMIT_NICE not set
[ 1693.769456][T15299] rust_binder: 3207: removing orphan mapping 0:1048
[ 1694.028629][ T3227] rust_binder: Error in use_page_slow: ESRCH
[ 1694.028655][ T3227] rust_binder: use_range failure ESRCH
[ 1694.034693][ T3227] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[ 1694.045615][ T3227] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[ 1694.054562][ T3227] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:1195
[ 1694.064103][ T9288] usb 10-1: new low-speed USB device number 112 using dummy_hcd
[ 1694.215009][ T3245] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1200
[ 1694.242249][ T9288] usb 10-1: No LPM exit latency info found, disabling LPM.
[ 1694.261284][ T9288] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1040, setting to 8
[ 1694.285104][ T9288] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1694.338544][ T9288] usb 10-1: string descriptor 0 read error: -22
[ 1694.365666][ T9288] usb 10-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40
[ 1694.386986][ T9288] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1694.424993][ T3215] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[ 1694.689832][ T3215] rust_binder: Write failure EFAULT in pid:91
[ 1694.733894][ T3262] rust_binder: Write failure EFAULT in pid:91
[ 1694.735020][ T3215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1694.756475][ T3215] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1694.772245][  T496] usb 1-1: new low-speed USB device number 15 using dummy_hcd
[ 1694.797137][ T9288] usbhid 10-1:1.0: can't add hid device: -71
[ 1694.803331][ T9288] usbhid 10-1:1.0: probe with driver usbhid failed with error -71
[ 1694.814940][ T9288] usb 10-1: USB disconnect, device number 112
[ 1694.932083][  T496] usb 1-1: Invalid ep0 maxpacket: 16
[ 1695.070655][  T496] usb 1-1: new low-speed USB device number 16 using dummy_hcd
[ 1695.252394][  T496] usb 1-1: Invalid ep0 maxpacket: 16
[ 1695.263126][ T3277] fuse: Unknown parameter 'K¸9}¨¸uNâÃÁ'
[ 1695.269279][  T496] usb usb1-port1: attempt power cycle
[ 1695.379586][ T3284] fuseblk: Unknown parameter 'max_reaE'
[ 1695.620757][ T3300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3300 comm=syz.6.22247
[ 1695.639681][  T496] usb 1-1: new low-speed USB device number 17 using dummy_hcd
[ 1695.668312][  T496] usb 1-1: Invalid ep0 maxpacket: 16
[ 1695.816758][  T496] usb 1-1: new low-speed USB device number 18 using dummy_hcd
[ 1695.850049][  T496] usb 1-1: Invalid ep0 maxpacket: 16
[ 1695.864676][  T496] usb usb1-port1: unable to enumerate USB device
[ 1696.012787][ T3326] netlink: 'syz.6.22256': attribute type 28 has an invalid length.
[ 1696.139215][ T3342] netlink: 'syz.3.22259': attribute type 19 has an invalid length.
[ 1696.147314][ T3342] netlink: 5 bytes leftover after parsing attributes in process `syz.3.22259'.
[ 1696.989227][T15299] usb 10-1: new high-speed USB device number 113 using dummy_hcd
[ 1697.149090][T15299] usb 10-1: Using ep0 maxpacket: 32
[ 1697.156885][T15299] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1697.167981][T15299] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1697.177911][T15299] usb 10-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00
[ 1697.187135][T15299] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1697.196827][T15299] usb 10-1: config 0 descriptor??
[ 1697.641032][T15299] waltop 0003:172F:0038.0056: hidraw0: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.9-1/input0
[ 1697.801708][ T3389] __vm_enough_memory: pid: 3389, comm: syz.0.22274, bytes: 18014402804453376 not enough memory for the allocation
[ 1697.859274][T25400] usb 10-1: USB disconnect, device number 113
[ 1698.020891][ T3406] rust_binder: Write failure EFAULT in pid:1217
[ 1698.776850][   T36] kauditd_printk_skb: 2208 callbacks suppressed
[ 1698.776872][   T36] audit: type=1400 audit(2000000569.521:152723): avc:  denied  { create } for  pid=3449 comm="syz.6.22294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1698.831212][   T36] audit: type=1400 audit(2000000569.568:152724): avc:  denied  { mounton } for  pid=3453 comm="syz.3.22296" path="/300/file0" dev="tmpfs" ino=1633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1698.856186][   T36] audit: type=1400 audit(2000000569.596:152725): avc:  denied  { create } for  pid=3457 comm="syz.6.22297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 1698.879003][ T3458] netlink: 'syz.6.22297': attribute type 1 has an invalid length.
[ 1698.889307][ T3458] 9pnet_fd: Insufficient options for proto=fd
[ 1698.895476][   T36] audit: type=1400 audit(2000000569.596:152726): avc:  denied  { mounton } for  pid=3453 comm="syz.3.22296" path="/300/file0" dev="tmpfs" ino=1633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1698.937348][   T36] audit: type=1400 audit(2000000569.596:152727): avc:  denied  { mounton } for  pid=3453 comm="syz.3.22296" path="/300/file0" dev="tmpfs" ino=1633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1698.961364][   T36] audit: type=1400 audit(2000000569.596:152728): avc:  denied  { mounton } for  pid=3453 comm="syz.3.22296" path="/300/file0" dev="tmpfs" ino=1633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1698.986257][   T36] audit: type=1400 audit(2000000569.596:152729): avc:  denied  { mounton } for  pid=3453 comm="syz.3.22296" path="/300/file0" dev="tmpfs" ino=1633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1699.010443][   T36] audit: type=1400 audit(2000000569.596:152730): avc:  denied  { mounton } for  pid=3453 comm="syz.3.22296" path="/300/file0" dev="tmpfs" ino=1633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1699.061629][   T36] audit: type=1400 audit(2000000569.596:152731): avc:  denied  { mounton } for  pid=3453 comm="syz.3.22296" path="/300/file0" dev="tmpfs" ino=1633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1699.118495][   T36] audit: type=1400 audit(2000000569.596:152732): avc:  denied  { mounton } for  pid=3453 comm="syz.3.22296" path="/300/file0" dev="tmpfs" ino=1633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[ 1699.427048][ T3498] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1700.005709][ T1505] usb 10-1: new high-speed USB device number 114 using dummy_hcd
[ 1700.177795][ T1505] usb 10-1: config 0 has an invalid interface number: 199 but max is 1
[ 1700.186119][ T1505] usb 10-1: config 0 has no interface number 1
[ 1700.215965][ T1505] usb 10-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[ 1700.243394][ T1505] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1700.273944][ T1505] usb 10-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[ 1700.286288][ T1505] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1700.304130][ T1505] usb 10-1: SerialNumber: syz
[ 1700.317204][ T1505] usb 10-1: config 0 descriptor??
[ 1700.338694][ T1505] usb 10-1: Found UVC 0.00 device <unnamed> (0002:0000)
[ 1700.354080][ T1505] usb 10-1: No valid video chain found.
[ 1700.369082][ T3539] netlink: 5 bytes leftover after parsing attributes in process `syz.6.22323'.
[ 1700.623874][ T3549] rust_binder: 3513 RLIMIT_NICE not set
[ 1700.628492][T25400] usb 10-1: USB disconnect, device number 114
[ 1700.778544][ T3554] overlayfs: lower data-only dirs require metacopy support.
[ 1701.182821][T25400] rust_binder: 3512: removing orphan mapping 0:24
[ 1701.301135][ T3584] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:135
[ 1701.473878][ T3591] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22341'.
[ 1702.024220][ T3617] tc_dump_action: action bad kind
[ 1702.058918][ T3617] rust_binder: Error in use_page_slow: ESRCH
[ 1702.058945][ T3617] rust_binder: use_range failure ESRCH
[ 1702.073500][ T3617] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[ 1702.084094][ T3617] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[ 1702.103012][ T3617] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:150
[ 1702.446512][ T3623] netlink: 12 bytes leftover after parsing attributes in process `syz.6.22351'.
[ 1703.142159][ T3638] __vm_enough_memory: pid: 3638, comm: syz.9.22356, bytes: 18014402804453376 not enough memory for the allocation
[ 1703.470398][ T3656] /dev/nbd0: Can't lookup blockdev
[ 1703.777393][ T3670] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[ 1703.782475][ T3672] netlink: 20 bytes leftover after parsing attributes in process `syz.6.22367'.
[ 1703.870520][ T3676] overlayfs: failed to clone upperpath
[ 1703.943222][ T3679] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22370'.
[ 1704.155629][   T36] kauditd_printk_skb: 673 callbacks suppressed
[ 1704.155649][   T36] audit: type=1400 audit(2000000575.568:153406): avc:  denied  { mounton } for  pid=3693 comm="syz.9.22375" path="/65/file0" dev="tmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[ 1704.156800][ T3695] 9pnet_fd: p9_fd_create_unix (3695): problem connecting socket: ./file0: -111
[ 1704.196712][   T36] audit: type=1400 audit(2000000575.615:153407): avc:  denied  { read } for  pid=3693 comm="syz.9.22375" name="binder0" dev="binder" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1704.219873][   T36] audit: type=1400 audit(2000000575.615:153408): avc:  denied  { read open } for  pid=3693 comm="syz.9.22375" path="/dev/binderfs/binder0" dev="binder" ino=44 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1704.246879][   T36] audit: type=1400 audit(2000000575.615:153409): avc:  denied  { read write } for  pid=3693 comm="syz.9.22375" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1704.271888][   T36] audit: type=1400 audit(2000000575.615:153410): avc:  denied  { read write open } for  pid=3693 comm="syz.9.22375" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[ 1704.306929][   T36] audit: type=1400 audit(2000000575.615:153411): avc:  denied  { read append } for  pid=3693 comm="syz.9.22375" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1704.337829][   T36] audit: type=1400 audit(2000000575.615:153412): avc:  denied  { read open } for  pid=3693 comm="syz.9.22375" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[ 1704.369164][   T36] audit: type=1326 audit(2000000575.615:153413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3693 comm="syz.9.22375" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b90f8eec9 code=0x0
[ 1704.415902][   T36] audit: type=1400 audit(2000000575.727:153414): avc:  denied  { read write } for  pid=28293 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1704.442220][   T36] audit: type=1400 audit(2000000575.727:153415): avc:  denied  { read write open } for  pid=28293 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1704.472430][ T3710] rust_binder: Error while translating object.
[ 1704.472485][ T3710] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[ 1704.479470][ T3710] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1255
[ 1704.616887][ T3729] No source specified
[ 1704.700660][ T3735] 9pnet_fd: Insufficient options for proto=fd
[ 1704.998145][ T3759] overlayfs: failed to clone upperpath
[ 1705.103439][ T3767] /dev/rnullb0: Can't lookup blockdev
[ 1705.277081][ T3784] netlink: 188 bytes leftover after parsing attributes in process `syz.3.22405'.
[ 1705.567956][ T3794] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[ 1705.830842][ T3818] netlink: 'syz.3.22415': attribute type 27 has an invalid length.
[ 1705.838850][ T3819] netlink: 'syz.3.22415': attribute type 27 has an invalid length.
[ 1706.012190][ T3826] netlink: 680 bytes leftover after parsing attributes in process `syz.6.22418'.
[ 1706.157693][ T3840] rust_binder: Write failure EINVAL in pid:1277
[ 1706.807357][ T3865] overlayfs: failed to clone upperpath
[ 1707.386447][ T3883] netlink: 4944 bytes leftover after parsing attributes in process `syz.9.22435'.
[ 1707.590351][ T3887] netlink: 'syz.6.22437': attribute type 16 has an invalid length.
[ 1707.606273][ T3887] netlink: 'syz.6.22437': attribute type 16 has an invalid length.
[ 1708.074414][ T3933] netlink: 6 bytes leftover after parsing attributes in process `syz.9.22450'.
[ 1708.084499][ T3933] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1708.333880][ T3942] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:1301
[ 1708.408174][ T3946] overlayfs: conflicting options: userxattr,verity=require
[ 1708.414436][ T3944] rust_binder: Error while translating object.
[ 1708.438491][ T3946] /dev/rnullb0: Can't lookup blockdev
[ 1708.457066][ T3944] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[ 1708.457106][ T3944] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:208
[ 1708.683005][ T3957] netlink: 12 bytes leftover after parsing attributes in process `syz.6.22459'.
[ 1708.794561][ T3960] rust_binder: Write failure EFAULT in pid:210
[ 1708.875961][ T3959] fuse: root generation should be zero
[ 1708.954619][ T3970] netlink: 36 bytes leftover after parsing attributes in process `syz.3.22464'.
[ 1708.981779][ T3971] netlink: 36 bytes leftover after parsing attributes in process `syz.3.22464'.
[ 1709.205559][ T3987] overlayfs: failed to clone lowerpath
[ 1709.209291][ T3988] overlayfs: failed to clone lowerpath
[ 1709.549613][   T36] kauditd_printk_skb: 559 callbacks suppressed
[ 1709.549633][   T36] audit: type=1400 audit(2000000580.634:153975): avc:  denied  { read write } for  pid=2391 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1709.585543][T17760] tipc: Resetting bearer <eth:gre0>
[ 1709.640471][   T36] audit: type=1400 audit(2000000580.634:153976): avc:  denied  { read write open } for  pid=2391 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1709.675791][   T36] audit: type=1400 audit(2000000580.634:153977): avc:  denied  { ioctl } for  pid=2391 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1709.714753][T17760] tipc: Disabling bearer <eth:gre0>
[ 1709.752203][   T36] audit: type=1400 audit(2000000580.709:153978): avc:  denied  { read } for  pid=3997 comm="syz.9.22473" name="binder1" dev="binder" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1709.780670][   T36] audit: type=1400 audit(2000000580.709:153979): avc:  denied  { read open } for  pid=3997 comm="syz.9.22473" path="/dev/binderfs/binder1" dev="binder" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1709.807728][T17760] tipc: Disabling bearer <udp:syz1>
[ 1709.814009][T17760] tipc: Left network mode
[ 1709.819795][   T36] audit: type=1400 audit(2000000580.784:153980): avc:  denied  { read write } for  pid=3997 comm="syz.9.22473" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[ 1709.827022][ T3998] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1709.855765][T17760] veth1_macvtap: left promiscuous mode
[ 1709.869482][T17760] veth0_vlan: left promiscuous mode
[ 1709.875016][   T36] audit: type=1400 audit(2000000580.784:153981): avc:  denied  { read write open } for  pid=3997 comm="syz.9.22473" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[ 1710.003806][   T36] audit: type=1400 audit(2000000580.793:153982): avc:  denied  { name_bind } for  pid=3997 comm="syz.9.22473" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1
[ 1710.068503][   T36] audit: type=1400 audit(2000000580.793:153983): avc:  denied  { node_bind } for  pid=3997 comm="syz.9.22473" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 1710.120740][   T36] audit: type=1400 audit(2000000580.887:153984): avc:  denied  { ioctl } for  pid=3997 comm="syz.9.22473" path="/dev/binderfs/binder1" dev="binder" ino=45 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1710.255646][ T4013] netlink: 96 bytes leftover after parsing attributes in process `syz.3.22478'.
[ 1710.611347][ T4024] rust_binder: Failed to allocate buffer. len:224, is_oneway:false
[ 1711.145900][ T4028] rust_binder: Error while translating object.
[ 1711.154700][ T4028] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[ 1711.161234][ T4028] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:219
[ 1711.522339][ T4045] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[ 1711.549020][T25400] usb 10-1: new low-speed USB device number 115 using dummy_hcd
[ 1711.674803][ T4048] team_slave_0: mtu greater than device maximum
[ 1711.755412][T25400] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[ 1711.789346][T25400] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1711.819956][T25400] usb 10-1: config 0 descriptor??
[ 1711.854044][T17769] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1711.897899][ T4053] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false
[ 1712.120570][ T4069] netlink: 'syz.3.22496': attribute type 4 has an invalid length.
[ 1712.141701][ T4069] netlink: 'syz.3.22496': attribute type 4 has an invalid length.
[ 1712.381208][ T4076] cgroup: Invalid name
[ 1712.660940][ T4094] netlink: 'syz.6.22504': attribute type 4 has an invalid length.
[ 1713.004858][ T4105] netlink: 'syz.9.22508': attribute type 16 has an invalid length.
[ 1713.014123][ T4105] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:226
[ 1713.977133][ T4132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1713.996588][ T4132] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1714.011159][  T505] Bluetooth: hci0: command 0x1003 tx timeout
[ 1714.011264][T25521] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1715.085468][   T36] kauditd_printk_skb: 1106 callbacks suppressed
[ 1715.085488][   T36] audit: type=1400 audit(2000000585.822:155091): avc:  denied  { create } for  pid=4189 comm="syz.3.22537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1715.112640][   T36] audit: type=1400 audit(2000000585.832:155092): avc:  denied  { create } for  pid=4189 comm="syz.3.22537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1715.134546][   T36] audit: type=1400 audit(2000000585.832:155093): avc:  denied  { write } for  pid=4189 comm="syz.3.22537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1715.155224][   T36] audit: type=1400 audit(2000000585.832:155094): avc:  denied  { read } for  pid=4189 comm="syz.3.22537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1715.175777][   T36] audit: type=1400 audit(2000000585.832:155095): avc:  denied  { read } for  pid=4189 comm="syz.3.22537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1715.196349][   T36] audit: type=1400 audit(2000000585.832:155096): avc:  denied  { write } for  pid=4189 comm="syz.3.22537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1715.445169][   T36] audit: type=1400 audit(2000000586.160:155097): avc:  denied  { execmem } for  pid=4192 comm="syz.6.22538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1715.492743][   T36] audit: type=1400 audit(2000000586.179:155098): avc:  denied  { execmem } for  pid=4192 comm="syz.6.22538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1715.512384][   T36] audit: type=1400 audit(2000000586.179:155099): avc:  denied  { execmem } for  pid=4192 comm="syz.6.22538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1715.532272][   T36] audit: type=1400 audit(2000000586.179:155100): avc:  denied  { execmem } for  pid=4192 comm="syz.6.22538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 1715.758766][ T4203] input: syz0 as /devices/virtual/input/input122
[ 1715.954221][ T4212] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[ 1715.954257][ T4212] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1350
[ 1716.374918][ T4246] 9pnet_fd: Insufficient options for proto=fd
[ 1716.732578][ T4259] SELinux:  Context system_u:object_r:wtmp_t:s0 is not valid (left unmapped).
[ 1717.216298][ T4274] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[ 1717.264492][ T4276] overlayfs: "xino" feature enabled using 3 upper inode bits.
[ 1717.492086][T25400] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -110
[ 1717.517861][T25400] asix 10-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffff92
[ 1717.545119][ T4286] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false
[ 1717.545155][ T4286] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[ 1717.565103][ T4286] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:1363
[ 1717.706428][T25400] asix 10-1:0.0: probe with driver asix failed with error -110
[ 1717.809886][ T4296] rust_binder: 4293 RLIMIT_NICE not set
[ 1717.914441][ T4302] overlay: ./file0 is not a directory
[ 1718.000481][ T4301] fuse: blksize only supported for fuseblk
[ 1718.131033][ T4313] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[ 1718.131067][ T4313] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:259
[ 1718.230646][ T4320] fuse: Bad value for 'fd'
[ 1718.479340][ T4322] netlink: 4 bytes leftover after parsing attributes in process `syz.9.22584'.
[ 1718.577493][T25400] rust_binder: 4292: removing orphan mapping 0:4224
[ 1719.043613][ T4344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1719.071875][ T4344] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1719.103917][ T4344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1719.134173][ T4344] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1719.340559][T30446] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[ 1719.502919][T30446] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1719.513217][T30446] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1719.524140][T30446] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[ 1719.533268][T30446] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1719.541353][T30446] usb 1-1: SerialNumber: syz
[ 1719.768438][ T4342] overlayfs: missing 'lowerdir'
[ 1719.777620][T30446] usb 1-1: 0:2 : does not exist
[ 1719.790073][T30446] usb 1-1: USB disconnect, device number 19
[ 1719.816209][ T4361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1719.825499][ T4361] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1719.935818][ T3200] udevd[3200]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[ 1719.991240][ T4373] netlink: 37 bytes leftover after parsing attributes in process `syz.9.22600'.
[ 1720.419032][   T36] kauditd_printk_skb: 568 callbacks suppressed
[ 1720.419054][   T36] audit: type=1400 audit(2000000590.832:155669): avc:  denied  { create } for  pid=4388 comm="syz.3.22605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 1720.531966][   T36] audit: type=1400 audit(2000000590.898:155670): avc:  denied  { read write } for  pid=2391 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1720.585563][ T4405] devtmpfs: Unknown parameter 'fuse'
[ 1720.596501][   T36] audit: type=1400 audit(2000000590.898:155671): avc:  denied  { read write open } for  pid=2391 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1720.638360][   T36] audit: type=1400 audit(2000000590.898:155672): avc:  denied  { ioctl } for  pid=2391 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1720.694178][ T9288] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[ 1720.717572][   T36] audit: type=1400 audit(2000000590.935:155673): avc:  denied  { ioctl } for  pid=4393 comm="syz.0.22608" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1720.745609][   T36] audit: type=1400 audit(2000000590.935:155674): avc:  denied  { create } for  pid=4398 comm="syz.6.22610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1720.767239][   T36] audit: type=1400 audit(2000000590.935:155675): avc:  denied  { setopt } for  pid=4398 comm="syz.6.22610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1720.797156][   T36] audit: type=1400 audit(2000000590.935:155676): avc:  denied  { write } for  pid=4398 comm="syz.6.22610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[ 1720.819391][   T36] audit: type=1400 audit(2000000590.935:155677): avc:  denied  { read write } for  pid=4398 comm="syz.6.22610" name="rnullb0" dev="tmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:wtmp_t:s0"
[ 1720.846783][   T36] audit: type=1400 audit(2000000590.935:155678): avc:  denied  { read write open } for  pid=4398 comm="syz.6.22610" path="/dev/rnullb0" dev="tmpfs" ino=172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:wtmp_t:s0"
[ 1720.889001][ T4427] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[ 1720.971382][ T9288] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1720.987178][ T9288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1720.998134][ T9288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1721.008316][ T9288] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1721.023413][ T9288] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1721.048905][ T9288] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1721.067240][ T9288] usb 1-1: Manufacturer: syz
[ 1721.079017][ T9288] usb 1-1: config 0 descriptor??
[ 1721.107559][ T4432] can0: slcan on ptm0.
[ 1721.239790][ T4431] can0 (unregistered): slcan off ptm0.
[ 1721.357139][ T4439] netlink: 'syz.9.22620': attribute type 28 has an invalid length.
[ 1721.375582][ T4442] 9pnet_fd: Insufficient options for proto=fd
[ 1721.386663][ T4439] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 136, limit: 224, size: 226)
[ 1721.386693][ T4439] rust_binder: Error while translating object.
[ 1721.401680][ T4439] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[ 1721.407944][ T4439] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:317
[ 1721.538234][ T9288] appleir 0003:05AC:8243.0057: unknown main item tag 0x0
[ 1721.579808][ T9288] appleir 0003:05AC:8243.0057: No inputs registered, leaving
[ 1721.627037][ T9288] appleir 0003:05AC:8243.0057: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0
[ 1721.693728][ T4458] netlink: 'syz.6.22625': attribute type 4 has an invalid length.
[ 1721.719226][ T4458] netlink: 17 bytes leftover after parsing attributes in process `syz.6.22625'.
[ 1721.770079][ T4458] netlink: 92 bytes leftover after parsing attributes in process `syz.6.22625'.
[ 1721.831379][ T4458] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4458 comm=syz.6.22625
[ 1721.847408][  T496] usb 1-1: USB disconnect, device number 20
[ 1722.019286][ T4465] rust_binder: Failed to allocate buffer. len:1192, is_oneway:false
[ 1722.031805][ T4462] fido_id[4462]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[ 1723.004146][ T4524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1723.033411][ T4524] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1723.209648][T15299] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[ 1723.385705][T15299] usb 1-1: not running at top speed; connect to a high speed hub
[ 1723.405911][T15299] usb 1-1: config 4 has an invalid interface number: 158 but max is 0
[ 1723.421833][T15299] usb 1-1: config 4 has no interface number 0
[ 1723.428937][T15299] usb 1-1: config 4 interface 158 altsetting 8 endpoint 0xA has invalid maxpacket 1088, setting to 64
[ 1723.440834][T15299] usb 1-1: config 4 interface 158 has no altsetting 0
[ 1723.452598][T15299] usb 1-1: New USB device found, idVendor=a40d, idProduct=548e, bcdDevice=5b.b9
[ 1723.468898][T15299] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1723.484485][T15299] usb 1-1: Product: syz
[ 1723.489547][T15299] usb 1-1: Manufacturer: syz
[ 1723.494233][T15299] usb 1-1: SerialNumber: syz
[ 1723.743941][T15299] usb-storage 1-1:4.158: USB Mass Storage device detected
[ 1723.785279][ T4540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1723.802666][ T4540] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1723.844678][T15299] usb 1-1: USB disconnect, device number 21
[ 1724.397387][ T4583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22659'.
[ 1724.509327][ T4589] 9pnet_fd: Insufficient options for proto=fd
[ 1724.939324][ T4617] netlink: 80 bytes leftover after parsing attributes in process `syz.6.22670'.
[ 1725.530792][ T4661] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[ 1725.530832][ T4661] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:367
[ 1725.703051][  T496] rust_binder: get_current_thread was called from the wrong process.
[ 1725.768347][   T36] kauditd_printk_skb: 1113 callbacks suppressed
[ 1725.768371][   T36] audit: type=1400 audit(2000000595.852:156792): avc:  denied  { create } for  pid=4669 comm="syz.3.22686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[ 1725.844622][ T4673] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:372
[ 1725.844690][   T36] audit: type=1400 audit(2000000595.908:156793): avc:  denied  { read } for  pid=4671 comm="syz.9.22687" name="binder1" dev="binder" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1725.885062][   T36] audit: type=1400 audit(2000000595.908:156794): avc:  denied  { read open } for  pid=4671 comm="syz.9.22687" path="/dev/binderfs/binder1" dev="binder" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1725.910720][   T36] audit: type=1400 audit(2000000595.908:156795): avc:  denied  { ioctl } for  pid=4671 comm="syz.9.22687" path="/dev/binderfs/binder1" dev="binder" ino=45 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1725.962047][   T36] audit: type=1400 audit(2000000595.908:156796): avc:  denied  { set_context_mgr } for  pid=4671 comm="syz.9.22687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1
[ 1725.994654][   T36] audit: type=1400 audit(2000000595.917:156797): avc:  denied  { map } for  pid=4671 comm="syz.9.22687" path="/dev/binderfs/binder1" dev="binder" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1726.051208][   T36] audit: type=1400 audit(2000000595.917:156798): avc:  denied  { ioctl } for  pid=4671 comm="syz.9.22687" path="/dev/binderfs/binder1" dev="binder" ino=45 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1726.087134][ T4684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1726.095817][ T4684] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1726.104730][   T36] audit: type=1400 audit(2000000595.917:156799): avc:  denied  { read } for  pid=4671 comm="syz.9.22687" path="/dev/binderfs/binder1" dev="binder" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1726.138322][   T36] audit: type=1400 audit(2000000595.917:156800): avc:  denied  { map } for  pid=4671 comm="syz.9.22687" path="/dev/binderfs/binder1" dev="binder" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1726.164479][   T36] audit: type=1400 audit(2000000595.917:156801): avc:  denied  { read execute } for  pid=4671 comm="syz.9.22687" path="/dev/binderfs/binder1" dev="binder" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1726.519304][ T4714] virtiofs: Unknown parameter 'always'
[ 1726.528027][ T4714] 9pnet_fd: Insufficient options for proto=fd
[ 1726.861721][ T4738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1541 sclass=netlink_route_socket pid=4738 comm=syz.3.22711
[ 1726.961625][  T496] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[ 1727.121390][  T496] usb 1-1: Using ep0 maxpacket: 8
[ 1727.132063][  T496] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice=ad.1d
[ 1727.141362][  T496] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1727.149640][  T496] usb 1-1: Product: syz
[ 1727.153871][  T496] usb 1-1: Manufacturer: syz
[ 1727.158484][  T496] usb 1-1: SerialNumber: syz
[ 1727.167130][  T496] usb 1-1: config 0 descriptor??
[ 1727.176758][  T496] usb_ehset_test 1-1:0.0: probe with driver usb_ehset_test failed with error -32
[ 1727.393272][ T4727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1727.403170][ T4727] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1727.416527][T15299] usb 1-1: USB disconnect, device number 22
[ 1727.668675][ T4759] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4759 comm=syz.3.22719
[ 1727.718101][ T4763] netlink: 'syz.6.22721': attribute type 11 has an invalid length.
[ 1727.728182][ T4763] 9pnet_fd: Insufficient options for proto=fd
[ 1728.219147][ T4808] netlink: 'syz.3.22740': attribute type 4 has an invalid length.
[ 1728.229463][ T4808] netlink: 17 bytes leftover after parsing attributes in process `syz.3.22740'.
[ 1728.342149][ T4821] netlink: 260 bytes leftover after parsing attributes in process `syz.3.22743'.
[ 1728.379108][ T4864] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[ 1728.528362][ T4864] usb 1-1: device descriptor read/64, error -71
[ 1728.735651][ T4841] veth1: entered allmulticast mode
[ 1728.784126][ T4864] usb 1-1: device descriptor read/64, error -71
[ 1728.797412][ T4841] veth1: left allmulticast mode
[ 1729.039949][ T4864] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[ 1729.189263][ T4864] usb 1-1: device descriptor read/64, error -71
[ 1729.465224][ T4864] usb 1-1: device descriptor read/64, error -71
[ 1729.594265][ T4864] usb usb1-port1: attempt power cycle
[ 1729.967262][ T4864] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[ 1729.990835][ T4864] usb 1-1: device descriptor read/8, error -71
[ 1730.129887][ T4864] usb 1-1: device descriptor read/8, error -71
[ 1730.340323][ T4902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4902 comm=syz.6.22768
[ 1730.366727][ T4906] fuse: Bad value for 'group_id'
[ 1730.379255][ T4906] fuse: Bad value for 'group_id'
[ 1730.393799][ T4864] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[ 1730.444756][ T4864] usb 1-1: device descriptor read/8, error -71
[ 1730.598997][ T4864] usb 1-1: device descriptor read/8, error -71
[ 1730.715917][ T4864] usb usb1-port1: unable to enumerate USB device
[ 1730.730587][ T4930] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[ 1730.879653][T17760] Bluetooth: hci0: Frame reassembly failed (-84)
[ 1731.246937][   T36] kauditd_printk_skb: 855 callbacks suppressed
[ 1731.246959][   T36] audit: type=1400 audit(2000000600.983:157657): avc:  denied  { read write } for  pid=28293 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1731.282888][   T36] audit: type=1400 audit(2000000600.993:157658): avc:  denied  { read write open } for  pid=28293 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1597 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1731.316687][   T36] audit: type=1400 audit(2000000600.993:157659): avc:  denied  { ioctl } for  pid=28293 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=1597 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1731.346094][   T36] audit: type=1400 audit(2000000601.077:157660): avc:  denied  { read } for  pid=4945 comm="syz.0.22782" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1731.370058][   T36] audit: type=1400 audit(2000000601.077:157661): avc:  denied  { read open } for  pid=4945 comm="syz.0.22782" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1731.394654][   T36] audit: type=1400 audit(2000000601.077:157662): avc:  denied  { ioctl } for  pid=4945 comm="syz.0.22782" path="/dev/kvm" dev="devtmpfs" ino=13 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 1731.420186][   T36] audit: type=1400 audit(2000000601.077:157663): avc:  denied  { write } for  pid=4945 comm="syz.0.22782" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 1731.443452][   T36] audit: type=1400 audit(2000000601.077:157664): avc:  denied  { write } for  pid=4945 comm="syz.0.22782" path="/dev/bus/usb/008/001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 1731.468165][   T36] audit: type=1400 audit(2000000601.077:157665): avc:  denied  { read } for  pid=4945 comm="syz.0.22782" dev="nsfs" ino=4026532967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1731.489983][   T36] audit: type=1400 audit(2000000601.077:157666): avc:  denied  { read open } for  pid=4945 comm="syz.0.22782" path="net:[4026532967]" dev="nsfs" ino=4026532967 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[ 1731.643461][ T4951] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22784'.
[ 1732.160000][ T4960] can0: slcan on ptm1.
[ 1732.200484][ T4960] can0 (unregistered): slcan off ptm1.
[ 1732.328000][ T4969] netlink: 12 bytes leftover after parsing attributes in process `syz.6.22791'.
[ 1732.411249][ T4974] binder: Bad value for 'max'
[ 1732.423556][ T4864] hid-generic 0000:0000:0000.0058: unknown main item tag 0x0
[ 1732.438030][ T4864] hid-generic 0000:0000:0000.0058: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1732.592340][ T4978] fido_id[4978]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[ 1733.026283][  T505] Bluetooth: hci0: command 0x1003 tx timeout
[ 1733.036938][T25521] Bluetooth: hci0: Opcode 0x1003 failed: -110
[ 1733.272256][ T5012] netlink: 56 bytes leftover after parsing attributes in process `syz.0.22806'.
[ 1733.302912][ T5012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22806'.
[ 1733.333352][ T5012] netlink: 43 bytes leftover after parsing attributes in process `syz.0.22806'.
[ 1733.366337][ T5012] netlink: 'syz.0.22806': attribute type 3 has an invalid length.
[ 1733.383497][ T5012] netlink: 43 bytes leftover after parsing attributes in process `syz.0.22806'.
[ 1733.384531][ T5018] netlink: 92 bytes leftover after parsing attributes in process `syz.0.22806'.
[ 1733.426675][ T5023] rust_binder: Error while translating object.
[ 1733.426728][ T5023] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[ 1733.440088][ T5023] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:418
[ 1733.698112][ T5042] SELinux:  policydb magic number 0xffffffff does not match expected magic number 0xf97cff8c
[ 1733.740467][ T5042] SELinux: failed to load policy
[ 1733.757001][ T5051] netlink: 80 bytes leftover after parsing attributes in process `syz.9.22817'.
[ 1733.941820][ T5064] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1733.983717][ T5064] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1734.254611][ T5060] tipc: Cannot configure node identity twice
[ 1734.716930][ T5109] erofs: dax options not supported
[ 1735.311874][ T5122] fuse: Unknown parameter 'f'
[ 1735.444943][ T5133] rust_binder: 447: no such ref 1
[ 1735.450083][ T5133] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:447
[ 1735.457459][ T5135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22847'.
[ 1735.658574][ T5140] 9pnet_fd: Insufficient options for proto=fd
[ 1736.266575][T30446] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[ 1736.385418][ T5163] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1736.403317][ T5163] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[ 1736.447735][T30446] usb 1-1: Using ep0 maxpacket: 8
[ 1736.462562][T30446] usb 1-1: config index 0 descriptor too short (expected 5924, got 36)
[ 1736.490370][T30446] usb 1-1: config 250 has an invalid interface number: 0 but max is -1
[ 1736.498686][T30446] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[ 1736.522391][T30446] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0
[ 1736.546331][T30446] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[ 1736.555858][T30446] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[ 1736.564159][T30446] usb 1-1: Product: syz
[ 1736.574225][T30446] usb 1-1: SerialNumber: syz
[ 1736.600132][   T36] kauditd_printk_skb: 614 callbacks suppressed
[ 1736.600153][   T36] audit: type=1400 audit(2000000606.012:158281): avc:  denied  { ioctl } for  pid=5154 comm="syz.0.22853" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1736.601991][T30446] hub 1-1:250.0: bad descriptor, ignoring hub
[ 1736.612184][   T36] audit: type=1400 audit(2000000606.012:158282): avc:  denied  { ioctl } for  pid=5154 comm="syz.0.22853" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1736.682257][   T36] audit: type=1400 audit(2000000606.012:158283): avc:  denied  { ioctl } for  pid=5154 comm="syz.0.22853" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 1736.683982][T30446] hub 1-1:250.0: probe with driver hub failed with error -5
[ 1736.739674][   T36] audit: type=1400 audit(2000000606.144:158284): avc:  denied  { mount } for  pid=5169 comm="syz.9.22860" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 1736.814165][ T5170] VFS: Mount too revealing
[ 1736.853356][   T36] audit: type=1400 audit(2000000606.144:158285): avc:  denied  { create } for  pid=5172 comm="syz.3.22861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1736.925651][   T36] audit: type=1400 audit(2000000606.172:158286): avc:  denied  { mounton } for  pid=5169 comm="syz.9.22860" path="/proc/459/task" dev="proc" ino=285947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[ 1737.007155][   T36] audit: type=1400 audit(2000000606.172:158287): avc:  denied  { mount } for  pid=5169 comm="syz.9.22860" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[ 1737.029359][T30446] usb 1-1: USB disconnect, device number 27
[ 1737.076599][   T36] audit: type=1400 audit(2000000606.172:158288): avc:  denied  { write } for  pid=5172 comm="syz.3.22861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1737.149538][   T36] audit: type=1400 audit(2000000606.172:158289): avc:  denied  { create } for  pid=5169 comm="syz.9.22860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[ 1737.191126][   T36] audit: type=1400 audit(2000000606.181:158290): avc:  denied  { create } for  pid=5172 comm="syz.3.22861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 1737.214855][ T5198] rust_binder: BINDER_SET_CONTEXT_MGR already set
[ 1737.762790][ T5230] overlayfs: failed to clone upperpath
[ 1737.897239][ T5245] 9pnet: p9_errstr2errno: server reported unknown error €
[ 1738.417617][ T5260] input: syz0 as /devices/virtual/input/input123
[ 1738.600854][ T5268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1738.609503][ T5268] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1738.725109][ T5270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1738.738601][ T5270] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1738.749467][ T5270] netlink: 8 bytes leftover after parsing attributes in process `syz.9.22887'.
[ 1738.778805][ T5270] netlink: 20 bytes leftover after parsing attributes in process `syz.9.22887'.
[ 1738.797935][ T5270] netlink: 12 bytes leftover after parsing attributes in process `syz.9.22887'.
[ 1738.855760][ T5284] 9pnet_fd: Insufficient options for proto=fd
[ 1739.591368][ T5306] netlink: 'syz.6.22903': attribute type 63 has an invalid length.
[ 1739.601119][ T5306] netlink: 5 bytes leftover after parsing attributes in process `syz.6.22903'.
[ 1739.610286][ T5306] gretap0: entered allmulticast mode
[ 1739.615854][ T5306] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[ 1741.738597][ T5413] netlink: 12 bytes leftover after parsing attributes in process `syz.6.22941'.
[ 1741.859178][ T5419] rust_binder: Write failure EFAULT in pid:491
[ 1741.900827][ T5422] overlay: Unknown parameter 'gid'
[ 1741.939024][   T36] kauditd_printk_skb: 1074 callbacks suppressed
[ 1741.939044][   T36] audit: type=1400 audit(2000000611.022:159332): avc:  denied  { read write } for  pid=2391 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1741.970435][   T36] audit: type=1400 audit(2000000611.032:159333): avc:  denied  { read write open } for  pid=2391 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1741.995873][   T36] audit: type=1400 audit(2000000611.032:159334): avc:  denied  { ioctl } for  pid=2391 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=58 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1742.032289][   T36] audit: type=1400 audit(2000000611.097:159335): avc:  denied  { read write } for  pid=5424 comm="syz.9.22946" name="binder1" dev="binder" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1742.076400][   T36] audit: type=1400 audit(2000000611.097:159336): avc:  denied  { read write open } for  pid=5424 comm="syz.9.22946" path="/dev/binderfs/binder1" dev="binder" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1742.131225][   T36] audit: type=1400 audit(2000000611.097:159337): avc:  denied  { getattr } for  pid=5424 comm="syz.9.22946" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[ 1742.159080][   T36] audit: type=1400 audit(2000000611.097:159338): avc:  denied  { ioctl } for  pid=5424 comm="syz.9.22946" path="/dev/binderfs/binder1" dev="binder" ino=45 ioctlcmd=0x620b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1742.190210][   T36] audit: type=1400 audit(2000000611.107:159339): avc:  denied  { read write } for  pid=5424 comm="syz.9.22946" name="binder1" dev="binder" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1742.278144][   T36] audit: type=1400 audit(2000000611.107:159340): avc:  denied  { read write open } for  pid=5424 comm="syz.9.22946" path="/dev/binderfs/binder1" dev="binder" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[ 1742.304153][   T36] audit: type=1400 audit(2000000611.154:159341): avc:  denied  { read write } for  pid=2391 comm="syz-executor" name="loop9" dev="devtmpfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 1742.496368][ T5438] netlink: 1323 bytes leftover after parsing attributes in process `syz.0.22949'.
[ 1742.817268][ T5455] netlink: 72 bytes leftover after parsing attributes in process `syz.6.22955'.
[ 1742.896651][ T5458] netlink: 44 bytes leftover after parsing attributes in process `syz.0.22957'.
[ 1742.916619][ T5458] netlink: 35 bytes leftover after parsing attributes in process `syz.0.22957'.
[ 1742.938487][ T5458] netlink: 'syz.0.22957': attribute type 6 has an invalid length.
[ 1742.947665][ T5458] netlink: 'syz.0.22957': attribute type 5 has an invalid length.
[ 1742.956454][ T5458] netlink: 35 bytes leftover after parsing attributes in process `syz.0.22957'.
[ 1743.413632][ T5480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1743.433023][ T5480] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1743.599965][  T496] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[ 1743.666991][ T5501] 9pnet_fd: Insufficient options for proto=fd
[ 1743.785043][  T496] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1743.802978][  T496] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1743.814024][  T496] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[ 1743.823160][  T496] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1743.834829][  T496] usb 1-1: config 0 descriptor??
[ 1744.038277][ T5531] incfs: Error accessing: ./file0.
[ 1744.043465][ T5531] incfs: mount failed -20
[ 1744.227689][ T5535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1744.236561][ T5535] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1744.279244][  T496] lua 0003:1E7D:2C2E.0059: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.0-1/input0
[ 1744.495308][  T496] usb 1-1: USB disconnect, device number 28
[ 1744.914072][ T5568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1744.934608][ T5568] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1744.995155][ T5579] overlayfs: failed to clone lowerpath
[ 1745.103035][ T5585] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1745.122237][ T5585] netlink: 72 bytes leftover after parsing attributes in process `syz.0.23000'.
[ 1745.134050][ T5585] netlink: 'syz.0.23000': attribute type 27 has an invalid length.
[ 1745.199529][ T5591] ./cgroup: Can't lookup blockdev
[ 1745.539647][ T5607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1745.549294][ T5607] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1745.572682][ T5607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1745.596265][ T5607] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1745.615469][ T5612] netlink: 180 bytes leftover after parsing attributes in process `syz.3.23012'.
[ 1745.626896][T28293] ------------[ cut here ]------------
[ 1745.632427][T28293] WARNING: CPU: 1 PID: 28293 at fs/inode.c:340 drop_nlink+0xce/0x110
[ 1745.640589][T28293] Modules linked in:
[ 1745.644506][T28293] CPU: 1 UID: 0 PID: 28293 Comm: syz-executor Not tainted syzkaller #0 414afededa5f841982d3d6a6453e4e110f7dea70
[ 1745.656784][T28293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1745.667145][T28293] RIP: 0010:drop_nlink+0xce/0x110
[ 1745.672287][T28293] Code: 04 00 00 be 08 00 00 00 e8 ff 51 ee ff f0 48 ff 83 b8 04 00 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 18 6c a1 03 cc e8 92 fe 97 ff <0f> 0b eb 81 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 59 ff ff ff 4c
[ 1745.691991][T28293] RSP: 0018:ffffc9000246fc40 EFLAGS: 00010293
[ 1745.698107][T28293] RAX: ffffffff81edff4e RBX: ffff88811bf10340 RCX: ffff88812c214c00
[ 1745.706192][T28293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1745.714245][T28293] RBP: ffffc9000246fc68 R08: 0000000000000003 R09: 0000000000000004
[ 1745.722286][T28293] R10: dffffc0000000000 R11: fffff5200048df80 R12: dffffc0000000000
[ 1745.730305][T28293] R13: 1ffff110237e2071 R14: ffff88811bf10388 R15: 0000000000000000
[ 1745.738456][T28293] FS:  00005555770fc500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 1745.747459][T28293] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1745.754102][T28293] CR2: 0000555577127528 CR3: 000000015f48c000 CR4: 00000000003526b0
[ 1745.762110][T28293] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1745.770157][T28293] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1745.778196][T28293] Call Trace:
[ 1745.781951][T28293]  <TASK>
[ 1745.784922][T28293]  simple_rmdir+0x153/0x260
[ 1745.789457][T28293]  vfs_rmdir+0x3dd/0x560
[ 1745.793741][T28293]  incfs_kill_sb+0x109/0x230
[ 1745.798527][T28293]  deactivate_locked_super+0xd8/0x2a0
[ 1745.803939][T28293]  deactivate_super+0xb8/0xe0
[ 1745.808677][T28293]  cleanup_mnt+0x3f1/0x480
[ 1745.813132][T28293]  __cleanup_mnt+0x1d/0x40
[ 1745.817794][T28293]  task_work_run+0x1e0/0x250
[ 1745.822432][T28293]  ? __cfi_task_work_run+0x10/0x10
[ 1745.827731][T28293]  ? __x64_sys_umount+0x126/0x170
[ 1745.832802][T28293]  ? __cfi___x64_sys_umount+0x10/0x10
[ 1745.838253][T28293]  ? __kasan_check_read+0x15/0x20
[ 1745.843372][T28293]  resume_user_mode_work+0x36/0x50
[ 1745.848554][T28293]  syscall_exit_to_user_mode+0x64/0xb0
[ 1745.854166][T28293]  do_syscall_64+0x64/0xf0
[ 1745.858629][T28293]  ? clear_bhb_loop+0x50/0xa0
[ 1745.863388][T28293]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 1745.869341][T28293] RIP: 0033:0x7fbc287901f7
[ 1745.873821][T28293] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 1745.893486][T28293] RSP: 002b:00007ffd900f2168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1745.901985][T28293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fbc287901f7
[ 1745.909995][T28293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd900f2220
[ 1745.918122][T28293] RBP: 00007ffd900f2220 R08: 0000000000000000 R09: 0000000000000000
[ 1745.926154][T28293] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd900f3310
[ 1745.934206][T28293] R13: 00007fbc28811d7d R14: 0000000000191bcd R15: 00007ffd900f43e0
[ 1745.942219][T28293]  </TASK>
[ 1745.945415][T28293] ---[ end trace 0000000000000000 ]---
[ 1745.951290][T28293] ==================================================================
[ 1745.959388][T28293] BUG: KASAN: null-ptr-deref in ihold+0x24/0x70
[ 1745.965670][T28293] Write of size 4 at addr 0000000000000168 by task syz-executor/28293
[ 1745.973860][T28293] 
[ 1745.976208][T28293] CPU: 1 UID: 0 PID: 28293 Comm: syz-executor Tainted: G        W          syzkaller #0 414afededa5f841982d3d6a6453e4e110f7dea70
[ 1745.976250][T28293] Tainted: [W]=WARN
[ 1745.976259][T28293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1745.976275][T28293] Call Trace:
[ 1745.976284][T28293]  <TASK>
[ 1745.976294][T28293]  __dump_stack+0x21/0x30
[ 1745.976332][T28293]  dump_stack_lvl+0x10c/0x190
[ 1745.976365][T28293]  ? __cfi_dump_stack_lvl+0x10/0x10
[ 1745.976407][T28293]  print_report+0x3d/0x70
[ 1745.976435][T28293]  kasan_report+0x163/0x1a0
[ 1745.976463][T28293]  ? ihold+0x24/0x70
[ 1745.976489][T28293]  ? _raw_spin_unlock+0x45/0x60
[ 1745.976518][T28293]  ? ihold+0x24/0x70
[ 1745.976544][T28293]  kasan_check_range+0x299/0x2a0
[ 1745.976572][T28293]  __kasan_check_write+0x18/0x20
[ 1745.976607][T28293]  ihold+0x24/0x70
[ 1745.976632][T28293]  vfs_rmdir+0x26a/0x560
[ 1745.976663][T28293]  incfs_kill_sb+0x109/0x230
[ 1745.976700][T28293]  deactivate_locked_super+0xd8/0x2a0
[ 1745.976732][T28293]  deactivate_super+0xb8/0xe0
[ 1745.976762][T28293]  cleanup_mnt+0x3f1/0x480
[ 1745.976789][T28293]  __cleanup_mnt+0x1d/0x40
[ 1745.976813][T28293]  task_work_run+0x1e0/0x250
[ 1745.976842][T28293]  ? __cfi_task_work_run+0x10/0x10
[ 1745.976871][T28293]  ? __x64_sys_umount+0x126/0x170
[ 1745.976903][T28293]  ? __cfi___x64_sys_umount+0x10/0x10
[ 1745.976936][T28293]  ? __kasan_check_read+0x15/0x20
[ 1745.976971][T28293]  resume_user_mode_work+0x36/0x50
[ 1745.977000][T28293]  syscall_exit_to_user_mode+0x64/0xb0
[ 1745.977024][T28293]  do_syscall_64+0x64/0xf0
[ 1745.977052][T28293]  ? clear_bhb_loop+0x50/0xa0
[ 1745.977075][T28293]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 1745.977111][T28293] RIP: 0033:0x7fbc287901f7
[ 1745.977131][T28293] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 1745.977152][T28293] RSP: 002b:00007ffd900f2168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1745.977177][T28293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fbc287901f7
[ 1745.977194][T28293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd900f2220
[ 1745.977210][T28293] RBP: 00007ffd900f2220 R08: 0000000000000000 R09: 0000000000000000
[ 1745.977227][T28293] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd900f3310
[ 1745.977244][T28293] R13: 00007fbc28811d7d R14: 0000000000191bcd R15: 00007ffd900f43e0
[ 1745.977266][T28293]  </TASK>
[ 1745.977276][T28293] ==================================================================
[ 1746.222591][T28293] Disabling lock debugging due to kernel taint
[ 1746.228847][T28293] BUG: kernel NULL pointer dereference, address: 0000000000000168
[ 1746.236692][T28293] #PF: supervisor write access in kernel mode
[ 1746.242781][T28293] #PF: error_code(0x0002) - not-present page
[ 1746.248779][T28293] PGD 80000001475aa067 P4D 80000001475aa067 PUD 0 
[ 1746.255415][T28293] Oops: Oops: 0002 [#1] PREEMPT SMP KASAN PTI
[ 1746.261508][T28293] CPU: 1 UID: 0 PID: 28293 Comm: syz-executor Tainted: G    B   W          syzkaller #0 414afededa5f841982d3d6a6453e4e110f7dea70
[ 1746.274800][T28293] Tainted: [B]=BAD_PAGE, [W]=WARN
[ 1746.279821][T28293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025
[ 1746.289879][T28293] RIP: 0010:ihold+0x2a/0x70
[ 1746.294395][T28293] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 7d f5 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 bc 48 ee ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 8d
[ 1746.314023][T28293] RSP: 0018:ffffc9000246fca0 EFLAGS: 00010246
[ 1746.320102][T28293] RAX: ffff88812c214c00 RBX: 0000000000000000 RCX: ffff88812c214c00
[ 1746.328089][T28293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1746.336297][T28293] RBP: ffffc9000246fcb0 R08: ffffffff88971947 R09: 1ffffffff112e328
[ 1746.344315][T28293] R10: dffffc0000000000 R11: fffffbfff112e329 R12: ffff88811bf1034c
[ 1746.352328][T28293] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[ 1746.360324][T28293] FS:  00005555770fc500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 1746.369321][T28293] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1746.375945][T28293] CR2: 0000000000000168 CR3: 000000015f48c000 CR4: 00000000003526b0
[ 1746.383927][T28293] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1746.391905][T28293] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1746.400143][T28293] Call Trace:
[ 1746.403425][T28293]  <TASK>
[ 1746.406364][T28293]  vfs_rmdir+0x26a/0x560
[ 1746.410706][T28293]  incfs_kill_sb+0x109/0x230
[ 1746.415307][T28293]  deactivate_locked_super+0xd8/0x2a0
[ 1746.420779][T28293]  deactivate_super+0xb8/0xe0
[ 1746.425473][T28293]  cleanup_mnt+0x3f1/0x480
[ 1746.429915][T28293]  __cleanup_mnt+0x1d/0x40
[ 1746.434333][T28293]  task_work_run+0x1e0/0x250
[ 1746.438937][T28293]  ? __cfi_task_work_run+0x10/0x10
[ 1746.444076][T28293]  ? __x64_sys_umount+0x126/0x170
[ 1746.449116][T28293]  ? __cfi___x64_sys_umount+0x10/0x10
[ 1746.454501][T28293]  ? __kasan_check_read+0x15/0x20
[ 1746.459561][T28293]  resume_user_mode_work+0x36/0x50
[ 1746.464691][T28293]  syscall_exit_to_user_mode+0x64/0xb0
[ 1746.470172][T28293]  do_syscall_64+0x64/0xf0
[ 1746.474616][T28293]  ? clear_bhb_loop+0x50/0xa0
[ 1746.479398][T28293]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[ 1746.485303][T28293] RIP: 0033:0x7fbc287901f7
[ 1746.489731][T28293] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 1746.509363][T28293] RSP: 002b:00007ffd900f2168 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1746.517797][T28293] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fbc287901f7
[ 1746.525784][T28293] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd900f2220
[ 1746.533772][T28293] RBP: 00007ffd900f2220 R08: 0000000000000000 R09: 0000000000000000
[ 1746.541749][T28293] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd900f3310
[ 1746.549732][T28293] R13: 00007fbc28811d7d R14: 0000000000191bcd R15: 00007ffd900f43e0
[ 1746.557733][T28293]  </TASK>
[ 1746.560772][T28293] Modules linked in:
[ 1746.564672][T28293] CR2: 0000000000000168
[ 1746.568844][T28293] ---[ end trace 0000000000000000 ]---
[ 1746.574301][T28293] RIP: 0010:ihold+0x2a/0x70
[ 1746.578819][T28293] Code: f3 0f 1e fa 55 48 89 e5 41 56 53 48 89 fb e8 7d f5 97 ff 48 8d bb 68 01 00 00 be 04 00 00 00 e8 bc 48 ee ff 41 be 01 00 00 00 <f0> 44 0f c1 b3 68 01 00 00 41 ff c6 bf 02 00 00 00 44 89 f6 e8 8d
[ 1746.598954][T28293] RSP: 0018:ffffc9000246fca0 EFLAGS: 00010246
[ 1746.605039][T28293] RAX: ffff88812c214c00 RBX: 0000000000000000 RCX: ffff88812c214c00
[ 1746.613026][T28293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1746.621103][T28293] RBP: ffffc9000246fcb0 R08: ffffffff88971947 R09: 1ffffffff112e328
[ 1746.629086][T28293] R10: dffffc0000000000 R11: fffffbfff112e329 R12: ffff88811bf1034c
[ 1746.637079][T28293] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000
[ 1746.645078][T28293] FS:  00005555770fc500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 1746.654020][T28293] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1746.660616][T28293] CR2: 0000000000000168 CR3: 000000015f48c000 CR4: 00000000003526b0
[ 1746.668606][T28293] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1746.676694][T28293] DR3: 3a810b1eb6134bdc DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1746.684704][T28293] Kernel panic - not syncing: Fatal exception
[ 1746.691226][T28293] Kernel Offset: disabled
[ 1746.695562][T28293] Rebooting in 86400 seconds..