last executing test programs:

3m6.601676513s ago: executing program 0 (id=4188):
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000224e0000", 0x58}], 0x1)
mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x3000002, 0x1012, r1, 0xd6416000) (async)
mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x3000002, 0x1012, r1, 0xd6416000)
socket$inet_icmp(0x2, 0x2, 0x1) (async)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000001c0)={'lo\x00', {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x36}}})
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
recvmmsg(r2, &(0x7f0000003740)=[{{&(0x7f0000000080)=@ethernet={0x0, @multicast}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)=""/132, 0x84}], 0x1, &(0x7f0000000200)=""/117, 0x75}, 0x5}, {{&(0x7f0000000280)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000003c0)=""/101, 0x65}, {&(0x7f0000000440)=""/49, 0x31}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000540)=""/65, 0x41}], 0x5, &(0x7f0000000640)=""/255, 0xff}}, {{&(0x7f0000000740)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000800)=[{&(0x7f00000004c0)=""/55, 0x37}, {&(0x7f00000007c0)=""/20, 0x14}], 0x2, &(0x7f0000002180)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000000840)=@phonet, 0x80, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/58, 0x3a}, {&(0x7f0000000900)=""/107, 0x6b}, {&(0x7f0000000980)=""/224, 0xe0}], 0x3}, 0xfffffffa}, {{&(0x7f0000000ac0)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000b40)=""/249, 0xf9}, {&(0x7f0000000c40)=""/92, 0x5c}, {&(0x7f0000000cc0)=""/159, 0x9f}, {&(0x7f0000000d80)=""/53, 0x35}, {&(0x7f0000000dc0)=""/228, 0xe4}, {&(0x7f0000000ec0)=""/68, 0x44}], 0x6, &(0x7f0000000fc0)}, 0x1}, {{&(0x7f0000001000)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000003640)=[{&(0x7f0000001080)=""/147, 0x93}, {&(0x7f0000003180)=""/150, 0x96}, {&(0x7f0000003240)=""/219, 0xdb}, {&(0x7f0000003340)=""/220, 0xdc}, {&(0x7f0000003440)=""/114, 0x72}, {&(0x7f00000034c0)=""/166, 0xa6}, {&(0x7f0000003580)=""/158, 0x9e}], 0x7, &(0x7f00000036c0)=""/105, 0x69}, 0x9}], 0x6, 0x2000, &(0x7f00000038c0)={0x77359400})
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'lo\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}})
read(r0, 0x0, 0x0)

3m6.531612924s ago: executing program 0 (id=4189):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040))
r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x1, 0x42)
faccessat(r1, &(0x7f0000000040)='./file0\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7ffffdbf}]})
chown(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)

3m6.352456485s ago: executing program 0 (id=4191):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0)
read$FUSE(r0, 0x0, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/reserved_size', 0x80802, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='\v\x00'], 0x1c7)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCFLSH(r2, 0x80045438, 0x300000000000000)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
writev(r3, &(0x7f0000000380)=[{&(0x7f0000000280)="dccfc8cc49a4c31a24e7bcafc62a7cd5cfa389fdac090f1b9ccd939d77bf6b7323491d77f05359646f3eefea60db2daba920ee95be8fe95055d1dee0cb7073c4be37062d1e20adf1d2c206953ab0e226d4f9a54ca6a2623befff1a9da97879297ab3cf8f1104f6518333c28474a94b35d0811fffadf1eece065f0d884f43627b3c68724e7959c66865eac8f6aeb41cee9e76a4f09dcb900bc884854867ae49f9cb56d4b256583a6b9a842e0450c423aa771c6dd20e31d2be33dc0a8d00bc13d1f20c3d4c0256dd25642f03", 0xcb}], 0x1)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000200)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/72, 0x48, 0x2, 0x3c}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

3m6.325078115s ago: executing program 0 (id=4192):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="500100001000130700000000fcdbdf252001000000000000000000000000000120010000000000000000000000000001000000004e210002020000003b000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
open(&(0x7f00000002c0)='./file0/file0\x00', 0x141840, 0x0)
mount$incfs(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000440), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="02030003100000002cbd7000fddbdf2505000900000100001cdc0dca1d9f688c68b516dff165714f95a5b398bbc41c846960e56de42944af030006003c00000002004e22e0000002000000000000000002000100000000000000070c00000000030005003c00000002004e20640101000000000000200000010014"], 0x80}, 0x1, 0x7}, 0x0)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193df163e75963f86ddf06712e9001c2f8db0049d90491c3248040000f858dbb8a1", 0x2a}, {&(0x7f0000000200)="c082b44eb5", 0x5}, {&(0x7f0000000240)="a43b2eaab4000000000000", 0xb}], 0x3)
lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100))
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x103, 0x3})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3}, 0x20)
setsockopt$inet6_int(r7, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0xffff, 0x380000, @loopback}, 0x1c)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000001c0)={@local, 0x1000, 0x1, 0x0, 0x2}, 0x20)
ioctl$sock_inet_SIOCSIFPFLAGS(r7, 0x8934, 0x0)
syz_clone3(&(0x7f0000000600)={0x22000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r6], 0x1}, 0x58)
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0)
syz_io_uring_setup(0x3b48, &(0x7f0000000000)={0x0, 0x200f8f5, 0x1, 0x1, 0xc2}, 0x0, 0x0)

3m6.234329116s ago: executing program 0 (id=4194):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8})
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x34, r2, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x4b}}}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "3a2ab59930a79579"}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) (async)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d) (async)
setuid(0xee01) (async)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000080))

3m6.189963786s ago: executing program 0 (id=4195):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000001c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
mknodat$loop(0xffffffffffffffff, 0x0, 0x40, 0x1)
chdir(&(0x7f00000003c0)='./bus\x00')
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @loopback}}}, 0x108)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x45e, 0xe3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x80, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x2, 0xd, {0x9, 0x21, 0x9, 0x8, 0x1, {0x22, 0x93f}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x79, 0x4, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x1, 0x72, 0x4c}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x8, 0x4, 0x10, 0x40, 0x8}, 0x33, &(0x7f0000000140)={0x5, 0xf, 0x33, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x6, 0x0, 0x6}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x101, 0xf000, 0x5, [0xc000, 0xc0c0, 0x3fc0, 0x30, 0xffc000]}]}, 0x4, [{0x81, &(0x7f0000000240)=@string={0x81, 0x3, "1e7ba5beecd18f3dd9cb7ed09927361b2cb2d31e3a7cfea63965186f930b69077745b5ec40def20927ba035b52cfc695ea8bdf784d9b65c4b5c3a04c45c304a7386fb05815c4a84c272198382e6138a2fafb0f30d269cf3b54ff5aba0ad74979dbfd0845e36ed7376493ff31056869d3789be4312ddff839e5035f6b809bf1"}}, {0x3c, &(0x7f0000000300)=@string={0x3c, 0x3, "2f67c949f2352eaa369e4a0ffe88080a5b83bbfb5f0c7a62d066171437c172cc0d524e27480c52426beb4d142e8546de5f51afec5ed86e33f7c7"}}, {0x1f, &(0x7f00000005c0)=@string={0x1f, 0x3, "fb65b737b002bbc1936c16fbfe15d0c4b3ba47fae9e4537bc42dfb9b69"}}, {0x2b, &(0x7f0000000600)=@string={0x2b, 0x3, "09520064e58747501a8e9605f7812bfd46fdafd7dfee9c045f6fc066772e5e3d6c0a279a5ef41b6c8e"}}]})
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = socket$inet(0x2, 0x4, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000200)={@multicast1, @local}, 0xc)
setsockopt$inet_mreqn(r3, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r4)
socket$netlink(0x10, 0x3, 0xe)
tkill(r4, 0x12)
ptrace(0x4208, r4)
ptrace(0x4208, r4)
close_range(r2, 0xffffffffffffffff, 0x0)

3m4.471031467s ago: executing program 3 (id=4214):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x8880, 0x85) (async)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) (async)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x10240, 0x0)
syz_usb_connect(0x3, 0x2d, 0x0, 0x0) (async)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) (async)
ioctl$TCFLSH(r1, 0x400455c8, 0x4)
ioctl$TIOCVHANGUP(r1, 0x5437, 0x0)

3m3.899876171s ago: executing program 3 (id=4215):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_out(r1, 0x5460, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCGICOUNT(r2, 0x545d, 0xff4f370c567f0000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@request_death], 0x4d, 0x0, 0x0})

3m3.898934791s ago: executing program 3 (id=4216):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) (async)
ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000))
r1 = dup(r0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="f135b50c9a69aa6636f2715f6379add2e232c817fd0dc5db947cb8c4fb15b23f211d24ae64f8064f7610bb29dc8278dfd386bc31775366abf50ab21d3cb4aafb57c268e2b2e7331af9a94e3ca51b5a993634e347a3e701d1db2ff0b3ed6b8d6f3e16bbaf1cab5034a8fe5793ad85b1a9c070326667fd19e8b0650e7044da1d879522758be80cf4aeeb12d900d16d339cd49c2757575debbb0e30300c70d253dce8d1ddde4d067f23d733a48ddb21212c9b4333e1e5f6f83b", 0xb8}], 0x1, &(0x7f0000000140)=[@mark={{0x14, 0x1, 0x24, 0xb8d7}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x48}}, {{0x0, 0x0, &(0x7f0000002640)=[{&(0x7f00000001c0)="a21f3e048cab931f88076bb2c10d03b7b6f9664f709bc52d36d6d37817bffa875185832d4f1e0b214723914c10bf25ef91ae62540b79aff84354df901937e0ca6452a47866c97f8f4835757f22680571e39e720508ffa8b15e5f4427b202a888e5144c78a8e3fb82e393db33680976a52e8ee0197dc0c8afdba7d1f877a143cca3ed5fdec848985a1763e9892d20de08dd7d919eb9aeee7d45d5e3cc35e25a42296a64fd8c60a5239ccbe0cf4b967542cbe891e779afdbc9342de559c33c07208e2ab515516d2b176f", 0xc9}, {&(0x7f00000002c0)="293de3e777a69619cfcc51d2257f9b3a4de831934c417c1348f5f3921f843afba167126652711ca4f9bc6e3b78b9399e24a7af9970027bb1a46fd0936a38e6550556c4e4f99a6a78e4e16fccd63729d3ce7e0d5c3059e07e8ab8ca90a2a65f2ee3ce8fdeaf4634862a8fb9dc55a5c672e1b366db3cf2b132e9c91fdcad9736493f336dcc30e5f6580e5baa1cfb829fd5e35cd6e8a5dd4226b35c272d554bd386d9b33bf037604893be4545cbba", 0xad}, {&(0x7f0000000380)="965666845e9a3377e23670727c6360c32e2daede35", 0x15}, {&(0x7f00000003c0)="d03aa7fcd3c435ccbcf638db16a358261b7273e992f81405e95a91bf3a2fb9da0e488982a615abb35507c8ec96329486f12ccd187dde293c1b2b1fba08c244aebea0a9d033cad653e10d8487ce78787148c0803f3db2efd95009984d3e9c752412a089a118d02dfb6cd4cd7a646b5acd09082db3169540cfc1993298a564b167c37d6fa2019dd4bbf22dad1c41e45578a915ede09f", 0x95}, {&(0x7f0000000480)="a5ab5d5b63b07db7b12f46a6b1c4d2fa7117", 0x12}, {&(0x7f00000004c0)="a881ef328f21c45264f6be56a76204d653cf348113e272770f48e23ea0fc0fec6fe98303a17a3223673561e2e7138de10b2db3c179895d0328c4ea45d33a8d76ba8d98b2ca668cef4bcd24d5bc46f732c0ee3ef0912fb4c65bf37afa0ff81330dac6bb5e50caef3149445835c1681b7a88a86125c424d149d71fc70792e377d387a862bd0aca6d16824813bcccacf67a774c1247badba8c04fd7a0de5ff7c2a867a10df757fac1331d540373bf1661045f17311f373ec514207f25bcab4bc1b8a39a0285b8c4256df8a07892e1179962f553d47de5d161e0fbef030cc9bac1c25b7a03d4ee95dfe01d4bfef8d51425c3d7fd2545fae713603b6461fad63ea99ce0c3c6aca4c2662aecc07462837d02e6f14c7baba0cb9a7d8c031a660641d307520473a452a74caa5e644d380384f5aa56e7ce64736e51694c3a03dff04344e7c189b76b8c092c036356a8b9d5b1ead3ab41b8276ba6bc32b6beaed73c9883e9e4f3d807106ddc4bfda533ad67dc28f92732d416086cc672d11f28b40baa0df8bcae5cbe4df2791d1c5ef87b43821ad71c1a66a703d585ee2998df6a23500b90adef2e48b72c570b201306cd8c3d2d10fcfc72479e53ce8569e910faab9b2d045d8633a49221d1bd292569804e6a86f1717da84a0e3b6a3a18acf57f5acdaeccf77b44004afe4f4009380a2f2c83c283060a39a37ebfc9a9b6712d0c7c5de29e3b4846e6c63924c64f15b56b92247d451205d5673546da3657e82c4830fee26e41bf5683d953e22fbe5cc4b4989ee738b8bac8f114f4a8ea7f1a577ae620c5da00cf90e352530e7b7e5ee0af3c4ca7f465793be6b132bbf1d65ec7bf694a8692559a7348492ff920287515563a406ed6b91875ecea82e5ec93dfe3d3aa77c898e3aa3675913b8f2da732010fc7998b18257070d548aaf5a1e107a4ccb6d0f9d465b5cd300e90c5d0bc4e6d9bb01a83cc7fecdfbf776bf2b3ff9b0d15c5a06e08d6b75ac2128e8417cac11fd262c715b5adbeabf7c8646aa8ddf02dfb63c63e0d99d43bb2157c51ec832b69c22c5047251809c3ffdcf3be9f17aa166a27ee2b29251401909d3ff3e6fdbae4ed22de6142b56d687e248c4e454575d261b654dc20df148a8d2b5bb3d3d6cf7a0d5fca60d7c1153c3b553a34de1fc1688e6e596142b2bc8fb686f3d4c5367d122d8e0be39dd826158bcb65b349dfdf59b6eee5e987b72b26e0a8175ca7b14bc14b3c6c3178dfd1461413e3ad852343db1b970e48c1db2dbcc793372d4350e117e758a0211f7fb10eaae4e2a4db67ab12f2530c804da2dddbfcdf74ae59f889c0797da1a4a4161ddc38d7cac27b8f6b25aa34330467c057f4f02d54b7f058334875f2ee99953babce632ed8015636f2752a7c6fc0d2640a7cf8e941818606d66c717e7d9d5b28ff7b3e889a6b7b8462968c1238e0f51447527b2b34ffdfb21e77a3a854ff2826975c9fe36bc55cd00db490884fe3bec8e912fb9ff54a776baef520cb3c454e9e885f99c99596cb80cc4fd4db0d9758530616873aa47b3e162af0951131dd684ceb5f0d764f9c8b3763898f8a71a91fe51f0cdcc5ef2b035f954becdb6b2afb8d8d925c26834eb390dd93f2491eda733735551f68f6136be1e8f873ba7e46007ba31ed1bb3b21ad5da75cfe071d7a22ef109561fef25d223a485a4e3efa00e5c7dec38d2e9a6585b7c0482ac40433fa3e8a652568d0ebebf1a4c160eba20abd803543de7212404bcf3c06f3ecba867d3f72215f9ebd05a88838013dc40788e543d4e0c4a3dfe3638daaa2224177520310f5308ace4e6a27c9f2fe47a7960460e1f406c9e71ee7ff7abf333d43165dd6e0815a6e2e68838f1eefdf16589e05917d74e0da5f099e276899aa58e70949de22d93b74151a821af7e98f7c242333b0611605f27af94393e82d9417843d5a037c4d7bfd4d69369a461c50ac6eebb35f8d4d9d30681335717831f60141b78c0a10171bbeb7d95725830aebf2bcaaf69b887371aa5a9dd5322d4a7766cd1bc0f9bd0a5aa5c49001572a70d5eb09ebbb5348059c60c6b23b3d0294fe48332782b811edbe6ca58a4216d0790b8596f67c13cb859e790916560f2eccc0596e3364e5ea3dfcd715a056912de7245f930eda062e4e1c054243996d549a2a544944552ac31fd1bf395239dced4e2420c3e61c6921ed2d075491caf992ef9d327aacfec4b7d5e4341e9e0e4032c334252bddab9881aee488462fbeba81941a5b8618716a9bfa6dca1ce090a5fed40a28d6856471de9d17c40e8095067d8d75a1b4051848f7b39130277ad8f5b160d03c6c8366809ad8ed5f6813c606a8fbacd9fc52aa7c489f483d26b28ba1206e52c13e86052a926fb0e4534ea5d7f2d2dec600540249a29ffaab4ed5dbec5c1edf8898ab830de41c18d0f5611b38bbb3005f5cb20ba07254e16250f2b59bd24e81d9b45e230f45a449e4f0f43ed2f4646b55a47169b34821a407701c8237f8273f7ad8b534df88090eb712374db33989e52b7d0e30c917c4af1bf7a066d3b5afe9694f4a2a1c0887acff5a9fd7f09c3678e924f7e05af3871296d83f7cbb9e544f89d585697ef9fbb457475eeade7d39b720e0b25aeb0aa20e83464cd847f283d1de630efeb43f7bbf10aaff431e50a0f64b9f298875670e28e61279a85ff97cd41d38b965fa3cfe7d794e0f7953b5e59d1453c9594601f4461bc7eca2e4f58712057702e327f0297aa847c4daf33acac639cb87652804cde3c5ffd6689dc0814f03ea33046460a79275a49168c419f03663c6f2ae005a6019663a2bfb61540b606e4a101298ee1085497685642eccc84fc29141683326616201be471ac1dce05728009b0df226bacbfea4454eaf826f8e0d9699aef1eae3aed347148f78230e74ef17386178ceb32476cd33dd6968b4f81d91d1023c0ac7f3528a9cb6a86aa8bb0fdfa00aacdf92011bac2e4fab875eadbebc396b54bbf5d2c9f89df017c5a1984a2fbbb8893927a751c6dfb92ce11dd71b23b939c1d3103bf863e3dc316c74c1ba31bb92a96294167c77dc723b4e97af4fc9367d1dcf21329b175d50ac17e90bc9f1ff62daf5e67d8d4b86a624780fe3981de96c7f215df39688d76ad9c844f29dbe30f943c61b91f24694dce62b36230309027bfb18f2d7b9ef7d871924e92da3e72c7348d847c082790031a35d01e45cc0f48c5a38374eabfc0126849c1e8a8d49976bfba3d746b650641e0c94bba7577c02e4af91216519d38031aace61f826b819a6930e03b3a334634c4a2c236dd0a222d8d4ccaf15746983ceb0b7e98eac7bb4e148e053abe347c96faa0cd5fe6081485353cd849a71382e6647d2c7d88573f119f45ecaade501465029a0abcd15595f84d04de9439ff12db36edccb8726654ed64248801095973bd47867e55ee5b112168631752beebcf39811909e2084d533b47718837979fa023bcde5ce0aeb7c4cea6d7d0469c3d923cd99a74aee47a61b9dacfbe06e9e96ccf5ba7abf9092c647a56052ee02a46beff3d66200535bbc6efdb8f9956b26c869d13cfec2fd816d4073753d1f63876e1be5272b6f065c5ea31c7d83b2df9570d7f5614e63575615aebf70c8879d458cb901df8ee4bf918b8067445623960aab3c444b9b05c5be18661900f42769edce30c5a1568c92b8e0b4bbc7e551f98cfacdb19a7907ab1fede4e808a943556a2b618b4c8b63fdfefb8e3a7a0d98823fb786dee8b660d46e1e22e304d70c9df5f990be7438149ae44dbbd75383715f10d2ce961b23d4e819f8688ae0093cd39b324de33e2123f53d85bcbff6183291d71d0b9e1f6f3d5cddbe4088706ceb4d7217ea19016e7e1939a735d52495255530a39250afb77f661101dfdd71bd36d8d18172fd622f3b79c24e59f008f5696a7981de2b426d114f1c913a8bccda2c3183841815e9260a8cef80cf1b695bbbadae0d15405e370f072345cb223ddb7749686ddab0bda5410016860ef2858c5a79e3d9699f2c16b2e8c894077c80372edc868733556935c9a8aceb8caff248b4a9e2ed00d322a33ae952ad6d0ef4fe33fdf68d21524eb90395f4b659df8cdff0f9a5ce4a6e200732bb7900e03ecc9b72b256bfe931ad4aae868d88c4b5f1078aafd15946daeb97a5e53d07268fa40399e6c993a17e4e05b18064cedab06a34b5201a64a1f8f0131f837686d90f8c7bb2a3c906835271e748c3d0ced834e63a1ad14eb86714baad3c9373992b05230dd8c4475d56012c7a3fa6cc5fd72125f1cdcc700c56eb65478d202bd464df227d2057276d19efbbe08e96255046b1a45053a62c85bfe6fbb830f6083b6a3d996ec57e86d2dbafe7a92557ad3fe3781e1d4915df3562942b7c36d3c75d2c6f44738efee4d3cd40012c690da53691bf7615a255a5ef596f542c334a15ed5f02ed12ab3c18fdd227ff91a99748f6c9ea92a6dec86dcd8282a1b1115aaaa376caa8137c35865fcf2afd04c7c346fa682594ef327d5e920434cdb20f6d9ff4a2c5a91870787e011ee830772a5ec6f1c3ed75f6fd25e096453cf756b1d16e48b6e35aae8a1f4b7befed8353111d7f05c1531d25fef15a50e46b09d1bcb7e1f3b1dc0bf2d80fcbde77dc4dcf4821e12e717f89956de99716f472250162589f34e9b82b61c469febef0940c883ccaa6e7935bf8540ef775330c395ff83d6b5465d8b61e909ec5bd179fc15579d16a9d3d118ed2bec4f52119238a67670f36588d1c543554f61b975233c5c366f5f821214e3464adde0780c3fe10ae127c869fdfc25e99a24725d9be0542955eb822cae508c95da8bf594a2e3e315f0f98cddd131907c509f04635477e4027e2b227e0b995fb56028c600feffefc40afec8f584d76e85cc3ccb90591e86e69965abb592ba4940d5ec252667fd5418b6b607c0b3300b7eca8f3f3b301e994f5fbeba688c82842c24aa730ee95ea0ff5b60e8a1e60438def90d854b1438192b5b8574a3fa6a8a2e396a2a96912b96274f2b4852807be1582227b367c38944377d681c62679e554ede082dfce9fb7e0a82c0bb3517ff720d6aaf7d7fef8867d21a7bc0d392c9abef13961ec7e252b596e910c4403c842349cab820b53781b5004a60ddc9630ae424603206728ee3d980c518721cd860070b18405057599b3b9f03ca9a1d6e69166aeec4973ab99a400fac654c15e3522a1372327452c25de26da8466460dc08c37240f1fd07c98dcaabc5db67a850d28d96fe4017134dd2f0028aabd91c6e90cedfeff1871a95e003d9a9ce170a8b92d92a6b89adb5039a7d5d23403a973d51e925eca7161c136848a4606559549fe92d1563f802d8fbec0e714bc7955858685d87d220d36e7b5784f44c425f63ee26c52bb530e21ab87faeada9e517a76ebf5330b7f485bcdc2748c9929a7f00fdd5c400277ffcd5abd8c3b34b9498bb812d21546d59c5228e3638f4edd5e9d00eb09a6b1c9482dcbf5017828b6b2ee737448cbc909941a2148ea405167ffac117fe9d9a40b6c1f2518824a20491c2d0960e2f8c4c07c7a3981d312b22da7fd07ae9daff74db2078a4a5af979cc30f1fe6fc3f460fb19495f4faf458de9babfd32915c18c1b2ab722af5da010b256d89bd3418d874dec813532eddd13a4305d718947a6904624f230aea1969c53bfab55b1828b3b6512e40a8e6a06e46b02e0bd8cdce49c4e11a7a94076ac6df82e364fdff9e8d4e3a08f1d8eba0096004cd1a2fc6fe29b49db12c7d023e1e59e807e22e37679b17da674a081c885563b1a5dae77a2e1dc", 0x1000}, {&(0x7f00000014c0)="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", 0xfc}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="608658147570433c18c2a176e724d3546c9e13efb234835b9b904034662cc0d8a54d6e53823d4e370554381d39ecabf67a2ef4c26b1126125403094076fa95916f185f1344876b14b8cd3d97fbcb6119d6919d7102fad3413088a6bbe01f9bf99a482d531d16ba06", 0x68}], 0x9, &(0x7f0000002700)=[@txtime={{0x18, 0x1, 0x3d, 0xff}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffa}}], 0x30}}, {{&(0x7f0000002740)=@tipc=@nameseq={0x1e, 0x1, 0x1bfccf6f766da573, {0x43, 0x3}}, 0x80, &(0x7f0000002800)=[{&(0x7f00000027c0)='v', 0x1}], 0x1, &(0x7f0000002840)=[@timestamping={{0x14, 0x1, 0x25, 0x5e}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0xef}}, @mark={{0x14, 0x1, 0x24, 0x10}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x100}}], 0xf0}}], 0x3, 0x488c4)
setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000002a00), 0x4)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002ac0)={0xa, &(0x7f0000002a40)=[{0x52db, 0x1, 0xf, 0x1}, {0x5, 0x0, 0xc}, {0x5, 0x6, 0x0, 0xce}, {0x9, 0x5, 0x9, 0x28eb}, {0xc, 0x64, 0x0, 0x1}, {0x71, 0x4, 0x6, 0x200}, {0x4, 0x8, 0xf8, 0x1000}, {0xfff, 0xd, 0x5, 0x401}, {0x5, 0x35, 0x7}, {0x5, 0x3, 0x3, 0xc0e}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000002b00)={<r3=>0x0, <r4=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000002b80)={r3, 0xffffffffffffffff, 0x7})
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000002bc0)) (async)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000002bc0))
write$P9_RLOPEN(r1, &(0x7f0000002c00)={0x18, 0xd, 0x1, {{0x4}, 0x2}}, 0x18)
ioctl$TIOCGICOUNT(0xffffffffffffffff, 0x545d, 0x0)
ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0) (async)
ioctl$F2FS_IOC_COMPRESS_FILE(r1, 0xf518, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002cc0)={0xa, &(0x7f0000002c40)=[{0x20d4, 0x2b, 0x7, 0xe}, {0x3ce, 0xdb, 0xb, 0x5e7}, {0x6, 0x9a, 0x4, 0x9}, {0xc30a, 0xe, 0x10, 0x7}, {0xfcf0, 0x81, 0x9, 0x7fffffff}, {0x7, 0x4, 0x9, 0x7}, {0xf3c5, 0x2, 0x28, 0x4}, {0x2, 0x7c, 0x7, 0xfff}, {0xff, 0x2, 0x0, 0x43f}, {0x100, 0xf, 0x4, 0x4}]}, 0x10) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002cc0)={0xa, &(0x7f0000002c40)=[{0x20d4, 0x2b, 0x7, 0xe}, {0x3ce, 0xdb, 0xb, 0x5e7}, {0x6, 0x9a, 0x4, 0x9}, {0xc30a, 0xe, 0x10, 0x7}, {0xfcf0, 0x81, 0x9, 0x7fffffff}, {0x7, 0x4, 0x9, 0x7}, {0xf3c5, 0x2, 0x28, 0x4}, {0x2, 0x7c, 0x7, 0xfff}, {0xff, 0x2, 0x0, 0x43f}, {0x100, 0xf, 0x4, 0x4}]}, 0x10)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002d00), 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000002d40)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000002d40))
getpeername(r1, &(0x7f0000002d80)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000002e00)=0x80) (async)
getpeername(r1, &(0x7f0000002d80)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000002e00)=0x80)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f0000002e40)=0xfffffffffffffff7, 0x8)
ioctl$KDGKBLED(r5, 0x4b64, &(0x7f0000002e80)) (async)
ioctl$KDGKBLED(r5, 0x4b64, &(0x7f0000002e80))
r6 = accept4$inet(r0, &(0x7f0000002ec0)={0x2, 0x0, @dev}, &(0x7f0000002f00)=0x10, 0x800)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000002f40))
openat$pidfd(0xffffffffffffff9c, &(0x7f0000002f80), 0x200000, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000002fc0)=0x8000, 0x4)
setsockopt$inet6_tcp_TLS_RX(r1, 0x11a, 0x2, &(0x7f0000003000)=@gcm_256={{0x304}, "180be31ef1fe9b33", "cc44fd8b5166dfd09895b5273d6ff60d49e3f942af170bd548669fb410918a44", "aff4cecf", "72f8f8e22f28bc2d"}, 0x38)
syz_open_procfs(r4, &(0x7f0000003040)='net/netfilter\x00') (async)
r7 = syz_open_procfs(r4, &(0x7f0000003040)='net/netfilter\x00')
syz_genetlink_get_family_id$ipvs(&(0x7f00000030c0), r1) (async)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000030c0), r1)
sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f0000003180)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x771b897ddf2d300a}, 0xc, &(0x7f0000003140)={&(0x7f0000003100)={0x1c, r8, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) (async)
sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f0000003180)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x771b897ddf2d300a}, 0xc, &(0x7f0000003140)={&(0x7f0000003100)={0x1c, r8, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20004000)
pipe2(&(0x7f00000031c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff}, 0x4080)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000003240), r7)
sendmsg$DEVLINK_CMD_GET(r9, &(0x7f0000003380)={&(0x7f0000003200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003340)={&(0x7f0000003280)={0x8c, r11, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2000}, 0x80)
recvmsg$can_bcm(r10, &(0x7f0000003980)={&(0x7f00000033c0)=@can, 0x80, &(0x7f0000003880)=[{&(0x7f0000003440)=""/106, 0x6a}, {&(0x7f00000034c0)=""/143, 0x8f}, {&(0x7f0000003580)=""/92, 0x5c}, {&(0x7f0000003600)=""/214, 0xd6}, {&(0x7f0000003700)=""/1, 0x1}, {&(0x7f0000003740)=""/80, 0x50}, {&(0x7f00000037c0)=""/152, 0x98}], 0x7, &(0x7f0000003900)=""/112, 0x70}, 0x120)

3m3.898519561s ago: executing program 3 (id=4217):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300))
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
close(r2)
open$dir(&(0x7f00000002c0)='./file0\x00', 0x80, 0x0)
dup2(r1, r2)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f00000fe000/0x2000)=nil, 0x2000, 0x300000c)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r3)
ptrace(0x4207, r3)
ptrace$PTRACE_SETSIGMASK(0x420b, r3, 0x8, &(0x7f00000000c0)={[0xa]})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r4, 0x40046205, 0x0)
quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x68, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000000c0)={0x30, 0x30, 0x30}}, 0x400}, @increfs_done, @release={0x40046306, 0x2}], 0x5, 0x0, &(0x7f0000000780)="1f4e60867a"})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0x8c, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x10000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x9}, {0x0, 0x0, 0x3c, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
fcntl$setlease(r4, 0x400, 0x1)

3m3.657150853s ago: executing program 3 (id=4222):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000140)='tracefs\x00', 0x22008dc, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r1, &(0x7f0000002780)={0x2020}, 0x5ecfb203)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000002240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x70, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xa2, 0x25}}}}, [@NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x8}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xcc0}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x57}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x366}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x85a}}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x67}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x90}, 0x40)

3m3.504170294s ago: executing program 3 (id=4223):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x800, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x2)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x800, 0x0) (async)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x2) (async)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) (async)
close_range(r1, 0xffffffffffffffff, 0x0) (async)

3m3.392935684s ago: executing program 32 (id=4223):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x800, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x2)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x800, 0x0) (async)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x2) (async)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) (async)
close_range(r1, 0xffffffffffffffff, 0x0) (async)

2m51.188570654s ago: executing program 33 (id=4195):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000001c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
mknodat$loop(0xffffffffffffffff, 0x0, 0x40, 0x1)
chdir(&(0x7f00000003c0)='./bus\x00')
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r1, 0x40086602, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @loopback}}}, 0x108)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x45e, 0xe3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x80, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x2, 0xd, {0x9, 0x21, 0x9, 0x8, 0x1, {0x22, 0x93f}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x79, 0x4, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x1, 0x72, 0x4c}}]}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x8, 0x4, 0x10, 0x40, 0x8}, 0x33, &(0x7f0000000140)={0x5, 0xf, 0x33, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x6, 0x0, 0x6}, @ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x101, 0xf000, 0x5, [0xc000, 0xc0c0, 0x3fc0, 0x30, 0xffc000]}]}, 0x4, [{0x81, &(0x7f0000000240)=@string={0x81, 0x3, "1e7ba5beecd18f3dd9cb7ed09927361b2cb2d31e3a7cfea63965186f930b69077745b5ec40def20927ba035b52cfc695ea8bdf784d9b65c4b5c3a04c45c304a7386fb05815c4a84c272198382e6138a2fafb0f30d269cf3b54ff5aba0ad74979dbfd0845e36ed7376493ff31056869d3789be4312ddff839e5035f6b809bf1"}}, {0x3c, &(0x7f0000000300)=@string={0x3c, 0x3, "2f67c949f2352eaa369e4a0ffe88080a5b83bbfb5f0c7a62d066171437c172cc0d524e27480c52426beb4d142e8546de5f51afec5ed86e33f7c7"}}, {0x1f, &(0x7f00000005c0)=@string={0x1f, 0x3, "fb65b737b002bbc1936c16fbfe15d0c4b3ba47fae9e4537bc42dfb9b69"}}, {0x2b, &(0x7f0000000600)=@string={0x2b, 0x3, "09520064e58747501a8e9605f7812bfd46fdafd7dfee9c045f6fc066772e5e3d6c0a279a5ef41b6c8e"}}]})
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = socket$inet(0x2, 0x4, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000200)={@multicast1, @local}, 0xc)
setsockopt$inet_mreqn(r3, 0x0, 0x28, &(0x7f0000000080)={@multicast1, @local}, 0xc)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r4)
socket$netlink(0x10, 0x3, 0xe)
tkill(r4, 0x12)
ptrace(0x4208, r4)
ptrace(0x4208, r4)
close_range(r2, 0xffffffffffffffff, 0x0)

1.123652493s ago: executing program 5 (id=6892):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r0, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x60)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), r2)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES16=r3, @ANYBLOB="030704707900000000000700040004000180"], 0x18}}, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/igmp\x00')
pread64(r4, &(0x7f0000002280)=""/4096, 0x1000, 0xd33)
r5 = syz_open_dev$mouse(&(0x7f0000000200), 0x2acc, 0x20000)
setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000000)=0x9, 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0)
r6 = syz_open_dev$loop(&(0x7f00000000c0), 0x5, 0x180)
r7 = socket$inet6(0xa, 0x2, 0x3a)
sendto$inet6(r7, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x2004c080, &(0x7f0000000040)={0xa, 0xfffd, 0xc9, @mcast2}, 0x1c)
ioctl$ASHMEM_SET_PROT_MASK(r4, 0x40087705, &(0x7f0000000140)={0x80000001, 0x64})
syz_open_dev$loop(&(0x7f0000001040), 0x5, 0x200)
ioctl$LOOP_SET_BLOCK_SIZE(r6, 0x4c09, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x0, 0x3}, 0x0)
fspick(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000040)=[@request_death], 0x4d, 0x0, 0x0})

1.122857893s ago: executing program 5 (id=6893):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000000e6ffff0100000063e3", @ANYRES16=r0, @ANYRESDEC=r0], 0x190)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={'gre0\x00', {0x2, 0x4e23, @local}})
socket$inet(0x2, 0x3, 0x2)
openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x8040, 0x0)
read$rfkill(r2, 0x0, 0x0)
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f00000000c0)={@multicast2, @empty, @multicast1}, 0xc)
socket$inet(0x2, 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000000000000000000000080009000d000000", 0x24)
close_range(r3, 0xffffffffffffffff, 0x0)
mount$bpf(0x0, 0x0, 0x0, 0x810088, &(0x7f0000000240)=ANY=[@ANYBLOB='u'])
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0)
syz_clone(0x140011, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, 0x0, &(0x7f0000000100))
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000180)='./cgroup/../file0\x00', 0x82)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_pid(r6, &(0x7f0000000080), 0x12)
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, <r7=>0x0}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0xffffffffffffffda, r7, {0x7, 0x2b, 0x0, 0x560e1ce0, 0x0, 0x0, 0x10001, 0xa15, 0x0, 0x0, 0x1}}, 0x50)

1.109122223s ago: executing program 5 (id=6894):
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xc5) (async)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) (async)
r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000002780)={0x2020}, 0x7d4) (async)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000000)=0x2)

1.096836303s ago: executing program 5 (id=6895):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = open_tree(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x20000)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @empty, 0x8}, 0x1c)
r2 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000000000000000005"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYRES32=0x0])
syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"])
r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000000480)={0x2, 0xfffffdfe, 0x400, 0x7, 0xa7, 0x4})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x6c, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b4135592cc9f51ca34fc19caa5d8bcabb64f47a3db15181446bc1a93ee07d37"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x48, 0x0, &(0x7f00000004c0)={@flat=@weak_handle={0x77682a85, 0x1000, 0x2}, @flat=@weak_binder={0x77622a85, 0x1}, @flat=@binder={0x73622a85, 0x2, 0x2}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

627.552456ms ago: executing program 1 (id=6899):
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1800, 0x5, 0x3}, 0x20)
setuid(0xee00)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
readv(r1, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x2)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800000, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2074)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c) (async)
socket$xdp(0x2c, 0x3, 0x0) (async)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0xdfffffff, 0x1800, 0x5, 0x3}, 0x20) (async)
setuid(0xee00) (async)
socketpair$unix(0x1, 0x2, 0x0, 0x0) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0) (async)
readv(r1, &(0x7f0000000140)=[{0x0}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x2) (async)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800000, 0x0) (async)
syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') (async)
read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2074) (async)

569.172717ms ago: executing program 1 (id=6900):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
r6 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x1, 0x0)
r8 = openat$cgroup_procs(r7, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0)
pread64(r8, &(0x7f0000000100)=""/8, 0x8, 0x0)
sendfile(r8, r8, 0x0, 0x1000007fd)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast})
write$tun(r3, &(0x7f0000000380)={@val={0x0, 0x883e}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @val={@void, {0x8100, 0x4, 0x0, 0x1}}, {@generic={0x88fb}}}}, 0x16)
setreuid(0x0, r2)
ioctl$KVM_CREATE_VCPU(r0, 0x8008770b, 0x2)

567.415377ms ago: executing program 1 (id=6901):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x100000, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1]}})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x24, &(0x7f0000000000)={0x0, 0x2, 0xfffffffffffffff9, 0x7fffffff})
r4 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
getpeername$unix(r5, 0x0, &(0x7f0000000300))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r6 = inotify_init()
inotify_add_watch(r6, &(0x7f0000000000)='.\x00', 0x400017e)
r7 = socket$nl_route(0x10, 0x3, 0x0)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca)
inotify_add_watch(r6, &(0x7f0000000240)='./file0\x00', 0x480)
unlink(&(0x7f0000000000)='./file0\x00')
close_range(r7, 0xffffffffffffffff, 0x0)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x0, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/249, 0xf9, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x12}, @fda={0x66646185, 0x4, 0x0, 0x25}}, 0x0}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
ioctl$TUNSETGROUP(r8, 0x400454ce, 0xee01)

566.992367ms ago: executing program 5 (id=6902):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xd)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf0500002100040006805ec865cd2b477e7ace3fc5371a93f9d8ed8bf4de939174a71f5913afec3a8971a0661fa8d121919bb7ca6fffd432657ce92262759139fefd9b4c323a31aa744732d8f3b1a0d2a90fa7af4bd5261ba1192df7efe649c5655b017e06e355014fd98680d630d0e8e67c3739c1c142f254eb6b6581d0689f38eeed3880512ae4c5c1cb57fc4f057b50b49fed52ab9b4ec0d24f9130eadc013c8b088ef745bc691a1a5e0b328a45ae2b114a9fb4efab1dfa17bc5e30c8b71344"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
write(r1, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async)
ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000) (async)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xd) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), 0xffffffffffffffff) (async)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf0500002100040006805ec865cd2b477e7ace3fc5371a93f9d8ed8bf4de939174a71f5913afec3a8971a0661fa8d121919bb7ca6fffd432657ce92262759139fefd9b4c323a31aa744732d8f3b1a0d2a90fa7af4bd5261ba1192df7efe649c5655b017e06e355014fd98680d630d0e8e67c3739c1c142f254eb6b6581d0689f38eeed3880512ae4c5c1cb57fc4f057b50b49fed52ab9b4ec0d24f9130eadc013c8b088ef745bc691a1a5e0b328a45ae2b114a9fb4efab1dfa17bc5e30c8b71344"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async)
write(r1, &(0x7f0000000400)="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", 0x1f000) (async)

566.634677ms ago: executing program 1 (id=6903):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r0=>0x0)
sched_getattr(r0, &(0x7f0000000040)={0x38}, 0x38, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)

510.566887ms ago: executing program 1 (id=6905):
prlimit64(0x0, 0xc, &(0x7f0000000100)={0x0, 0x10000000000008b}, 0x0) (async)
r0 = getpgid(0x0)
prlimit64(r0, 0x5, 0x0, &(0x7f0000000000)) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth1_macvtap\x00', &(0x7f0000000000)=@ethtool_cmd={0x2a, 0x7fffffff, 0x1000, 0x4a78, 0x4, 0x0, 0xf, 0x4, 0x0, 0x6, 0x3, 0x0, 0x5, 0x0, 0x10, 0xf996, [0x2, 0x400]}}) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) (async)
timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r4=>0x0) (async)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xd3283d036ae269b3, 0x8031, 0xffffffffffffffff, 0x99cf0000) (async)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r2, 0x0, r5, 0x0, 0x7, 0x0) (async)
shutdown(r3, 0x1)
sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="18000000760001"], 0x1c}], 0x1, 0x0, 0x0, 0x4004000}, 0x80)
r6 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) (async)
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000400000000000000000d001d000500070012000000050019"], 0x24}}, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002000010002000000000000000a0000"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r9, &(0x7f0000000100)={0x0, 0x32, &(0x7f0000006c40)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000190015000000ffffffffffff02"], 0x1c}], 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
ioprio_set$pid(0x2, 0x0, 0x0) (async)
readv(r8, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}], 0x1) (async)
r10 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (async)
r11 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0)
dup3(r10, r11, 0x0)

508.079337ms ago: executing program 1 (id=6908):
r0 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000140)=[@enter_looper, @dead_binder_done, @dead_binder_done, @exit_looper, @dead_binder_done, @increfs], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80100, 0x51)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56e, 0x10c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x41, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000300)={0x2c, &(0x7f0000000180)=ANY=[@ANYBLOB="b7d6000000000000c0dd2a"], 0x0, 0x0, 0x0, 0x0}, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000000, 0x0, 0x0)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x200000, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendto$inet6(r5, &(0x7f0000000180)="8369b66f85cb1c900a7a23625ba176b048f2ecd3f6015608", 0x18, 0x24000000, 0x0, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
poll(&(0x7f0000000240)=[{r2}, {r1, 0x110}, {r2, 0x8484}], 0x3, 0xc783)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)={0x2})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x334e, 0x4, 0x0, 0xdd3}]}, 0x10)
sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r3, &(0x7f0000004d40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000600)="14", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000780)="040e8f45fffff50e4c7910c171b127963769ef24d84f082556fd1b43f878a65dcc23ad409d4ef51c3fa8622a5a36900c6a5ab314bb2a406d10a6a499793d7a2e03661510116d87dc79356005e01c7474b76cacaf8136be8cda811a39567f643c0612dc5d7cf19330c281bb05c1f040dd51aea0dc4d2afa3e4aaa6c3abce4cfaeb2ba", 0x82}, {&(0x7f00000002c0)="57c4451b3c7c75655c57ffb8dccde119b54a69a485415fd700812b78ca50a3e54c8889a100a7f82a7f53238a20b00bd47bc39e1db1b3e2694f378c94e9184aa53cc6032a2783db559dba2208439229a2bae2e355ebfe4f7563f0579056d94e75e1c33b5b68fe4cf4a85b48558a56b4e4076d56e10087c6ec2b3c50ea02951bbb8d8b36197ed4e2fcb1cf8686dffe5f3f9a3e9f565daa2ea6c783c11ef3f63dc91a0e66add12776e48fab54a2494e4fadc2ef061f489139cd012acdd1edef8410e248ae44436db8eb2eafccc0012ea62dd7fc0191890cba17030b5b6937d45d8ef3d5b440a0d44315d8c862b3d0ad4e23d07ec4f0d5c5745f71c55761", 0xfc}], 0x2}}, {{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f0000000500)="58f426479ece6d126768d8a26cd58a4b95a55290f90a627003824492cf69137f4a492f53714d14be58e3772f02d34bf7195aee98736a9713928c294660b3f7ac742b9b36ea789566376318a700e5376f73205a5b242565ce57dc215a61e88bfde927b61f18411b9eb653187ca4bf38c40f7eac6c25f8bccb62eeec8b765ed3d5a97946cc510e4e466ec57f9c73537f33b22eabe1b055dcb4e17bb5080a0e0ff7b9cb794ce8f72c4b9ad86d259ca0fdd9f8b697c509fb344f3fa54ce39b6117fdc105f3e0fe47dffd40acd9d3d6269ccfff49e2f2e53dfb4d3164bd43cb084aa829d03c", 0xe3}, {&(0x7f00000021c0)="1b3f8c5ee87c60d60d8f9ede3559a9a381803d6dee0eddd4fdb56eaf8c9fd0865c218d81c178a2cdd321213af88efeaed430a90499579e803367edb9d63ea172714cd251da4f4ca71dc2348f7e5af3d35ab9e79a4d2dfbfbbff54174f9e6154e35735f41c412e8d792e96be3b5383f7a32159e044b4315e99411c8d236b110367a4fae96a7454c2e38a7216c44851719ebc7e78b0bcb34567aef13636b60d77ec50b680b9d8b07549031ab4132bc56640524b21e25c2002c084648564aa6104e1da21ec5634a4fd9a3cc37", 0xcb}, {&(0x7f00000022c0)="5b324b2d88ff93762be7e55fe62529adea74fdad266d04b26e548dec105474c89c8977461cc52204", 0x28}, {&(0x7f0000002300)="7cfff42eda22546c119ff1481096dacd785efd913da57751a132a3d992ead629902e28c98944c19bb1b5c61be066e29be3847513ab40d31f853e74bd3c38accaf303b928f99bc06579916b12af8851aac1a0ef9e5446dd43c86769f4b1d0b5477583dca1bfa33e4f358efa8ccb7f2c04b8298fc8568dc38dbce3fb1b1824eafebdc4ca878dbd", 0x86}, {&(0x7f0000003400)="ba36fbcb7af2e5e405965a11623f4bf1194470956fbd021ff7a56801bd14749971d5fcdadd6c56edecf76bd3742e6545a4d18409ce7372987ae7a42254356e03", 0x40}, {&(0x7f0000000440)="00d11a98112d1eb1c9", 0x9}, {&(0x7f0000003500)="e1093869f5243b7e5bb478e6f638c7176a59b44a9a21282ac91048c7d8d01a0f1c12ec4f1c765f87959da50d04d37d144ec38b8133912de94356fdc3fa9ccc4de4632a36cf1883a2395df7b60f63022f2f5548ee6aff394a64e28cbb1d3cb16bdb5aea39558329c776b2da267a8f4026b174bf515b08827d474feb8adb5aa04038468a3875203ff0c60068b6bf2d1ce4aaa9b4f43b79c956fcac1abae62c293a", 0xa0}], 0x7}}], 0x3, 0x40)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@textreal={0x8, &(0x7f0000000040)="36666664f30f090f23d00f21f86635300000020f23f80f3805c366b9ad0b00000f320fc79fc0ff360f01c20f0d110f01fc660fdf1b0f59f4", 0x38}], 0x1, 0x1, &(0x7f00000000c0)=[@dstype0={0x6, 0x6}], 0x1)

443.821757ms ago: executing program 2 (id=6912):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000300)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x62, 0x2, 0x16}, @ptr={0x70742a85, 0xfffffffc, &(0x7f00000029c0)=""/201, 0xc9, 0x1, 0x14}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1d}}, &(0x7f0000000180)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x28, 0x1d, 0x1, 0x0, 0x25dfdbff, {0x7}, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x4}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r4, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41, 0x20000}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x20000040)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/reserved_size', 0x80802, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000500)=ANY=[@ANYBLOB='\v\x00'], 0x1c7)
ppoll(&(0x7f0000000040)=[{r4, 0x1200}, {r5, 0x419}], 0x2, &(0x7f00000000c0), &(0x7f0000000100)={[0x7]}, 0x8)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000000)={0x1})

443.595987ms ago: executing program 2 (id=6913):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) (async, rerun: 32)
r1 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 32)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) (async)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) (async)
bind$tipc(r3, 0x0, 0x0)
sendmsg$tipc(r3, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async, rerun: 32)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) (async, rerun: 32)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0) (async, rerun: 32)
sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) (rerun: 32)
ioprio_get$pid(0x2, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

430.376037ms ago: executing program 5 (id=6914):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TTY_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x10, 0x70bd25, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000080}, 0x40)
r2 = socket$igmp6(0xa, 0x3, 0x3a)
unshare(0x60000600)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000a40)={'syztnl0\x00', 0x0, 0x87, 0x8, 0x4000006, 0x8, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x0, 0x83, 0x4, 0x0, @multicast1, @private=0xa010102}}}})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r5 = socket(0x11, 0x3, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r7=>0x0})
bind$packet(r5, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14)
close_range(r4, 0xffffffffffffffff, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendto(r8, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f0000002f40)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xe51}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000dc0)=""/4100, 0x1004}, {&(0x7f0000003180)=""/177, 0xb1}, {&(0x7f0000000c80)=""/258, 0x102}, {&(0x7f00000033c0)=""/218, 0xda}, {&(0x7f0000000a80)=""/211, 0xd3}, {&(0x7f00000035c0)=""/63, 0x3f}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000340)=""/149, 0x95}, {&(0x7f0000000000)=""/92, 0x5c}], 0x9}, 0x81}], 0x3, 0x2100, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f0000000080)=@x86={0x83, 0x3, 0xd1, 0x0, 0xc764, 0x93, 0xcb, 0xc, 0x19, 0x5, 0x3, 0xa, 0x0, 0x4, 0x5, 0x0, 0x4, 0x2, 0x16, '\x00', 0x8, 0x4})
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r12, 0x2)
r13 = fcntl$dupfd(r12, 0x0, r12)
accept(r13, 0x0, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r13, 0x0, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x4)
getsockopt$MRT6(r2, 0x3a, 0x1, 0x0, &(0x7f0000000100))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x200b, 0x1})
setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e22, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0xe}, {0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1, {[0x100, 0x5, 0x101, 0x4f, 0x6, 0x4, 0x1, 0x4]}}, 0x5c)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)

423.430957ms ago: executing program 2 (id=6915):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x6c, 0x0, &(0x7f0000000040)="c77f63941720024fcb205ad3f3502124f14eba8419d2d70aade14d22ca5137369a7e2f7c68839e02d428fe526929aaaeb71b01b4a33854d4ca7681b53a970b1a4175371ccff2ad1d15ed65d48b4135592cc9f51ca34fc19caa5d8bcabb64f47a3db15181446bc1a93ee07d37"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, &(0x7f00000004c0)={@ptr={0x70742a85, 0x100000, 0x0, 0x0, 0x2, 0x7}, @flat=@weak_binder={0x77622a85, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, 0x0}}], 0x0, 0x0, 0x0})

363.752538ms ago: executing program 2 (id=6916):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000180)=[{0x0}], 0x1)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x167342, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x6, 0x9, &(0x7f0000000080)={{0x1, @empty, 0x2, 0x43, 'fo\x00', 0x2, 0x0, 0x3a}, {@private=0xa810101, 0x4, 0x0, 0x0, 0xba0, 0xdffffffe}}, 0x44)
getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f0000000040))
readv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/4108, 0x100c}, {0x0, 0x7}], 0x2)

363.161188ms ago: executing program 2 (id=6917):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000001100)={{r0}, "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"})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f00000000c0)={0x1, 0xada, 0x0, &(0x7f0000002400)})
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)})
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x5)
r3 = accept(0xffffffffffffffff, &(0x7f0000000600)=@nl=@unspec, &(0x7f0000000680)=0x80)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000000800)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000780)={0x14, 0x5, 0x1, 0x5, 0x0, 0x0, {0xa}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x5)
getrandom(&(0x7f0000000240)=""/281, 0x119, 0x0)
r7 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1})
syz_clone(0xa61a2100, 0x0, 0x0, 0x0, 0x0, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file2\x00', &(0x7f00000001c0), &(0x7f0000000380)=ANY=[@ANYBLOB="00fb390107238f25c29691201f9c2a0f1c08f28ae9f0d3ec11e53a408d2c6d856c7bf9d188"], 0x39, 0x3)
ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000})
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYRES16=r0, @ANYRES16=r6, @ANYRESHEX=r4], 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x40d0)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000840)=ANY=[@ANYRES32=r1, @ANYRES16=r5, @ANYRES32=r3, @ANYRES8=r3, @ANYRESOCT=r1], 0x160}, 0x1, 0x0, 0x0, 0x4890}, 0x8000)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)

360.750508ms ago: executing program 2 (id=6918):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000331000/0x400000)=nil)
r1 = socket(0x1e, 0x4, 0x0)
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r1, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000003100)="37e60184b0057083828231f13dcd054c934631ebdcc27d8bad2fda68ac60a89a2c9d52dfb0c05bc82227d7593102f83749068ce6b465f25bacac63b8077386d766f728d443dc", 0x46}], 0x1, &(0x7f0000000480)}}], 0x1, 0x9200000000000000)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x60, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffe00}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x140000c0}, 0x0)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f0000000040)={0x4, <r5=>0xffffffffffffffff})
ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x2, &(0x7f0000000180)=0x6})
r6 = dup3(r2, r1, 0x0)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000004a0001e000000000000000000a000003"], 0x1c}}, 0x0)
r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x12b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r8, 0x0, 0x0)
syz_usb_control_io(r8, &(0x7f0000000240)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000607000000070d934ac61224"], 0x0, 0x0, 0x0, 0x0}, 0x0)
recvmmsg$unix(r6, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x58cb23c0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000036c0)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000001840)={<r11=>0x0, <r12=>0x0}, &(0x7f0000001880)=0xc)
r13 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendmmsg$unix(r10, &(0x7f0000008280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003700)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r13, @ANYRES32=r13, @ANYRES32=r9, @ANYRES32=r9, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001"], 0xb0}}], 0x2, 0x0)
fadvise64(r0, 0x81, 0xc, 0x2)

106.35583ms ago: executing program 4 (id=6920):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b2da5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d341711130800726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed03b83fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"})
close_range(r0, 0xffffffffffffffff, 0x0)

43.78307ms ago: executing program 4 (id=6921):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xfffffff8, 0x4, 0x2, 0x8, 0x2})

42.95249ms ago: executing program 4 (id=6922):
r0 = getpid() (async)
userfaultfd(0x3) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) (async, rerun: 32)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
pipe(&(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32)
r4 = socket(0x28, 0x5, 0x0) (rerun: 32)
bind$vsock_stream(r4, &(0x7f0000000040), 0x10)
listen(r4, 0x0)
r5 = socket(0x1d, 0xa, 0x200000)
connect$vsock_stream(r5, &(0x7f0000000080), 0x10)
sched_setscheduler(r3, 0x5, 0x0) (async)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async)
writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000280)="fb", 0x1}], 0x1) (async)
setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) (async)
close(r5)
write$P9_RGETLOCK(r2, &(0x7f00000002c0)=ANY=[], 0x200002e6) (async)
fcntl$setpipe(r1, 0x407, 0x7000001) (async)
r6 = syz_pidfd_open(r0, 0x0)
r7 = pidfd_getfd(r6, r6, 0x0)
setns(r7, 0x66020000) (async)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) (async, rerun: 64)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (rerun: 64)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async)
chdir(&(0x7f00000003c0)='./bus\x00') (async)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r8, 0x1, 0x2e, &(0x7f0000000040)=0x4, 0x4) (async)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)

42.30908ms ago: executing program 4 (id=6923):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x0, 0x0)
preadv2(r1, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101c00, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9, 0x28011, r2, 0xffffa000)

26.647941ms ago: executing program 4 (id=6924):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
close(r1)
socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @private}, 0x2, 0x4, 0x2, 0x3}}, 0x2e)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x0, 0xfffffc}]}, 0x10)
close(r3)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r2, r0, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a})
socketpair$unix(0x1, 0x2, 0x0, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x40)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x5, 0xfffffffd})
prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x4c, 0x0, &(0x7f0000000e00)=[@acquire, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

0s ago: executing program 4 (id=6925):
futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f00000001c0), 0x2}, {0x3, &(0x7f0000000140)=0x3, 0x2}], 0x2, 0x0, &(0x7f00000040c0)={0x77359400}, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
pipe2$9p(&(0x7f0000001900)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_readahead}], [], 0x6b}})
truncate(&(0x7f0000000240)='./file0\x00', 0x1)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x143042, 0x80)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000340)={0x240, 0x188, 0x16}, 0x18)
r6 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x3}, 0x10)
sendmsg$tipc(r6, &(0x7f0000000540)={&(0x7f0000000200)=@id={0x1e, 0x3, 0x1}, 0x10, 0x0}, 0x4)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}}, 0x0)
syz_clone(0x80063311, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000280)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r9=>0x0)
io_submit(r9, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r8, &(0x7f00000001c0)='m', 0xfffffdfc}])
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendfile(r5, r5, 0x0, 0x7a680000)
r10 = openat$binderfs(0xffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x1100})
r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000200)=[@acquire, @enter_looper], 0x53, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000480)={0x50, 0x0, &(0x7f0000000640)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@fda={0x66646185, 0x7, 0x0, 0x20}, @fda={0x66646185, 0x3, 0x0, 0x28}, @ptr={0x70742a85, 0x1, &(0x7f0000000700)=""/153, 0x99, 0x0, 0x11}}, &(0x7f0000000380)={0x0, 0x20, 0x40}}}, @decrefs={0x40046307, 0x1}, @enter_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000540)="ec77b3c70b80e11380298b97c39316bd537d241cf2cfdfc81cc4a3d9ce3b4ac7e8591123380f80ad227532b79119d0802a1bc1bbd76d0488e0be0800a96f709d5640d8fb31b5ce1e6a3e9a47f9e8e22e"})

kernel console output (not intermixed with test programs):

 type 1 has an invalid length.
[  336.275691][T15285] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5049'.
[  336.285095][T15283] netlink: 'syz.5.5049': attribute type 1 has an invalid length.
[  336.293650][T15285] 9pnet_fd: Insufficient options for proto=fd
[  336.299998][T15283] netlink: 1 bytes leftover after parsing attributes in process `syz.5.5049'.
[  336.398716][ T2188] Bluetooth: hci0: Frame reassembly failed (-84)
[  336.458049][T15314] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5057'.
[  336.546455][  T331] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  336.697450][  T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  336.708444][  T331] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  336.718242][  T331] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  336.731239][  T331] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  336.740395][  T331] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.749201][  T331] usb 3-1: config 0 descriptor??
[  336.847951][T15317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=22032 sclass=netlink_route_socket pid=15317 comm=syz.4.5058
[  336.973201][  T331] usbhid 3-1:0.0: can't add hid device: -71
[  336.982023][  T331] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  336.999443][  T331] usb 3-1: USB disconnect, device number 35
[  337.242968][   T36] audit: type=1400 audit(1761931979.363:56851): avc:  denied  { write } for  pid=15325 comm="syz.2.5060" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  337.292907][   T36] audit: type=1400 audit(1761931979.373:56852): avc:  denied  { remove_name } for  pid=15325 comm="syz.2.5060" name="binder0" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  337.316140][   T36] audit: type=1400 audit(1761931979.373:56853): avc:  denied  { unlink } for  pid=15325 comm="syz.2.5060" name="binder0" dev="binder" ino=25 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  337.408883][T15335] rust_binder: Failed to allocate buffer. len:4240, is_oneway:false
[  337.447397][   T36] audit: type=1326 audit(1761931979.583:56854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15336 comm="syz.2.5066" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f876ff8efc9 code=0x0
[  338.306729][T15369] /dev/rnullb0: Can't open blockdev
[  338.416473][T15312] Bluetooth: hci0: command 0x1003 tx timeout
[  338.416579][  T340] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  338.431441][   T10] usbhid 2-1:0.0: can't add hid device: -71
[  338.438301][   T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  338.449231][T15379] rust_binder: Write failure EFAULT in pid:179
[  338.459201][   T10] usb 2-1: USB disconnect, device number 32
[  338.466720][   T36] audit: type=1326 audit(1761931980.603:56855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15395 comm="syz.4.5085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982258efc9 code=0x7ffc0000
[  338.495039][   T36] audit: type=1326 audit(1761931980.603:56856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15395 comm="syz.4.5085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f982258efc9 code=0x7ffc0000
[  338.518858][   T36] audit: type=1326 audit(1761931980.603:56857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15395 comm="syz.4.5085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982258efc9 code=0x7ffc0000
[  338.543040][   T36] audit: type=1326 audit(1761931980.603:56858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15395 comm="syz.4.5085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f982258efc9 code=0x7ffc0000
[  338.566630][   T36] audit: type=1326 audit(1761931980.603:56859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15395 comm="syz.4.5085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982258efc9 code=0x7ffc0000
[  338.590474][   T36] audit: type=1326 audit(1761931980.603:56860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15395 comm="syz.4.5085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f982258efc9 code=0x7ffc0000
[  338.609332][T15400] netlink: 'syz.4.5087': attribute type 1 has an invalid length.
[  338.614351][   T36] audit: type=1326 audit(1761931980.603:56861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15395 comm="syz.4.5085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982258efc9 code=0x7ffc0000
[  338.645779][   T36] audit: type=1326 audit(1761931980.603:56862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15395 comm="syz.4.5085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f982258efc9 code=0x7ffc0000
[  338.671897][   T36] audit: type=1326 audit(1761931980.603:56863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15395 comm="syz.4.5085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982258efc9 code=0x7ffc0000
[  338.695879][   T36] audit: type=1326 audit(1761931980.603:56864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15395 comm="syz.4.5085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f982258d810 code=0x7ffc0000
[  339.081574][T15418] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5094'.
[  339.188562][T15420] rust_binder: Error while translating object.
[  339.188609][T15420] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  339.198684][T15420] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:182
[  339.261677][T15427] random: crng reseeded on system resumption
[  339.309091][T15426] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  339.309130][T15426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:186
[  339.650568][ T2182] bridge_slave_1: left allmulticast mode
[  339.669111][ T2182] bridge_slave_1: left promiscuous mode
[  339.683033][ T2182] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.700445][ T2182] bridge_slave_0: left allmulticast mode
[  339.711785][ T2182] bridge_slave_0: left promiscuous mode
[  339.726530][ T2182] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.902564][ T2182] veth1_macvtap: left promiscuous mode
[  339.910305][ T2182] veth0_vlan: left promiscuous mode
[  340.001984][T15473] tipc: Enabling <eth:lo> not permitted
[  340.007686][T15473] tipc: Enabling of bearer <eth:lo> rejected, failed to enable media
[  340.056307][T15462] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.063606][T15462] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.070996][T15462] bridge_slave_0: entered allmulticast mode
[  340.077442][T15462] bridge_slave_0: entered promiscuous mode
[  340.084045][T15462] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.091385][T15462] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.098607][T15462] bridge_slave_1: entered allmulticast mode
[  340.104985][T15462] bridge_slave_1: entered promiscuous mode
[  340.158358][T15462] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.165431][T15462] bridge0: port 2(bridge_slave_1) entered forwarding state
[  340.172756][T15462] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.179837][T15462] bridge0: port 1(bridge_slave_0) entered forwarding state
[  340.203008][ T2188] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.206428][  T448] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  340.218213][ T2188] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.228026][ T2169] bridge0: port 1(bridge_slave_0) entered blocking state
[  340.235115][ T2169] bridge0: port 1(bridge_slave_0) entered forwarding state
[  340.244576][ T2188] bridge0: port 2(bridge_slave_1) entered blocking state
[  340.251684][ T2188] bridge0: port 2(bridge_slave_1) entered forwarding state
[  340.280314][T15462] veth0_vlan: entered promiscuous mode
[  340.292851][T15462] veth1_macvtap: entered promiscuous mode
[  340.334946][T15487] rust_binder: validate_parent_fixup: new_min_offset=18, sg_entry.length=0
[  340.334976][T15487] rust_binder: Error while translating object.
[  340.343855][T15487] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  340.350349][T15487] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:5
[  340.367605][  T448] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  340.387642][  T448] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  340.397496][  T448] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  340.410724][  T448] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  340.420458][  T448] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.429952][  T448] usb 2-1: config 0 descriptor??
[  340.466773][T15499] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[  340.514194][T15511] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5125'.
[  340.548511][T15515] cannot load conntrack support for proto=3
[  340.562008][T15517] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5128'.
[  340.838870][  T448] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  340.846435][  T448] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  340.854018][  T448] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  340.861772][  T448] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  340.869377][  T448] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  340.876905][  T448] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  340.884421][  T448] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  340.891889][  T448] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  340.899426][  T448] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  340.906867][  T448] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  340.914377][  T448] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  340.921819][  T448] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  340.929325][  T448] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  340.936767][  T448] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  340.944191][  T448] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0
[  340.952144][  T448] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving
[  340.965408][  T448] plantronics 0003:047F:FFFF.0017: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  341.107540][   T10] usb 2-1: USB disconnect, device number 33
[  341.372383][T15552] rust_binder: 17: no such ref 6
[  341.377578][T15552] rust_binder: 17: no such ref 3
[  341.382663][T15552] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3
[  341.390414][T15552] rust_binder: Write failure EFAULT in pid:17
[  341.471306][T15557] fuse: Unknown parameter 'd�Y
[  341.471306][T15557] LE&
�֘������e��?xA�c'͝mb7x�/2.�Sk�Њcz�5y4r�uI���n�u���
�����#0x0000000000000006'
[  341.685123][T15587] rust_binder: Failed to allocate buffer. len:1144, is_oneway:true
[  341.843982][T15594] input input16: cannot allocate more than FF_MAX_EFFECTS effects
[  342.213539][T15625] rust_binder: 36: no such ref 3
[  342.218871][T15625] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  342.226002][T15625] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  342.234105][T15625] rust_binder: Write failure EFAULT in pid:36
[  342.252585][T15636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  342.267845][T15636] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  342.288405][T15632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=15632 comm=syz.4.5165
[  342.486429][  T331] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[  342.636423][  T331] usb 3-1: Using ep0 maxpacket: 8
[  342.643306][  T331] usb 3-1: config 1 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  342.656265][  T331] usb 3-1: config 1 interface 0 has no altsetting 0
[  342.664329][  T331] usb 3-1: New USB device found, idVendor=04b3, idProduct=3100, bcdDevice= 0.40
[  342.673494][  T331] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.681550][  T331] usb 3-1: Product: syz
[  342.685741][  T331] usb 3-1: Manufacturer: syz
[  342.690379][  T331] usb 3-1: SerialNumber: syz
[  342.721571][T15653] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  342.721616][T15653] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  342.728439][T15653] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  342.734670][T15653] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  342.741494][T15653] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  342.748159][T15653] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  342.754704][T15653] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  342.761670][T15653] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  342.767981][T15653] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  342.774534][T15653] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  342.781262][T15653] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  342.901242][  T331] usbhid 3-1:1.0: can't add hid device: -71
[  342.913910][  T331] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[  342.924313][  T331] usb 3-1: USB disconnect, device number 36
[  343.036424][   T10] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  343.187643][   T10] usb 2-1: config index 0 descriptor too short (expected 3133, got 61)
[  343.196220][   T10] usb 2-1: config 0 has an invalid interface number: 156 but max is 1
[  343.204497][   T10] usb 2-1: config 0 has an invalid descriptor of length 234, skipping remainder of the config
[  343.214822][   T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  343.224052][   T10] usb 2-1: config 0 has no interface number 0
[  343.230266][   T10] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  343.246409][   T10] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  343.257464][   T10] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  343.267348][   T10] usb 2-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  343.280545][   T10] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  343.289622][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  343.298296][   T10] usb 2-1: config 0 descriptor??
[  343.304507][   T10] usb 2-1: MIDIStreaming interface descriptor not found
[  343.517669][   T45] usb 2-1: USB disconnect, device number 34
[  343.815655][T15684] /dev/rnullb0: Can't lookup blockdev
[  343.845249][   T36] kauditd_printk_skb: 18 callbacks suppressed
[  343.845271][   T36] audit: type=1400 audit(1761931985.973:56883): avc:  denied  { read } for  pid=15685 comm="syz.4.5183" name="ptp0" dev="tmpfs" ino=581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0"
[  343.879118][   T36] audit: type=1400 audit(1761931985.973:56884): avc:  denied  { open } for  pid=15685 comm="syz.4.5183" path="/dev/ptp0" dev="tmpfs" ino=581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0"
[  343.906624][   T36] audit: type=1400 audit(1761931986.013:56885): avc:  denied  { ioctl } for  pid=15685 comm="syz.4.5183" path="/dev/ptp0" dev="tmpfs" ino=581 ioctlcmd=0x3d0f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0"
[  344.044950][T15689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5184'.
[  344.271536][T15691] ext3: Unknown parameter 'da��'
[  344.278365][T15691] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  344.286813][T15691] rust_binder: Write failure EFAULT in pid:47
[  344.566420][   T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[  344.575004][T15728] rust_binder: Write failure EINVAL in pid:211
[  344.667412][T15738] /dev/rnullb0: Can't open blockdev
[  344.736408][   T10] usb 3-1: Using ep0 maxpacket: 32
[  344.743565][   T10] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  344.752168][   T10] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  344.758616][T15749] 9pnet_fd: Insufficient options for proto=fd
[  344.761054][   T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  344.776009][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  344.785769][   T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  344.795578][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  344.808697][   T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  344.818803][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.841737][   T10] usb 3-1: config 0 descriptor??
[  344.967359][  T384] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  345.052101][   T10] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 37 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  345.064644][   T10] usb 3-1: USB disconnect, device number 37
[  345.071701][   T10] usblp0: removed
[  345.117483][  T384] usb 2-1: config 0 has an invalid interface number: 199 but max is 1
[  345.125775][  T384] usb 2-1: config 0 has no interface number 1
[  345.131944][  T384] usb 2-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  345.142050][  T384] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  345.153644][  T384] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  345.162895][  T384] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  345.170987][  T384] usb 2-1: SerialNumber: syz
[  345.176336][  T384] usb 2-1: config 0 descriptor??
[  345.182822][  T384] usb 2-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  345.189774][  T384] usb 2-1: No valid video chain found.
[  345.385523][  T384] usb 2-1: USB disconnect, device number 35
[  345.486424][   T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[  345.636462][   T10] usb 3-1: Using ep0 maxpacket: 32
[  345.642904][   T10] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[  345.651342][   T10] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  345.660058][   T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[  345.669088][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  345.678795][   T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  345.688511][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  345.701654][   T10] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  345.710863][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.719705][   T10] usb 3-1: config 0 descriptor??
[  345.909291][T15773] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  345.935380][   T10] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  345.940952][T15775] rust_binder: Error while translating object.
[  345.946160][T15775] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  345.956285][T15775] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:221
[  346.113135][   T36] audit: type=1400 audit(1761931988.243:56886): avc:  denied  { lock } for  pid=15797 comm="syz.5.5219" path="socket:[50254]" dev="sockfs" ino=50254 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  346.127891][T15796] tipc: MTU too low for tipc bearer
[  346.156150][T15796] input: syz1 as /devices/virtual/input/input18
[  346.263363][   T45] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0
[  346.281987][   T45] hid-generic 0000:0000:0000.0018: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  346.543072][T15847] rust_binder: Error while translating object.
[  346.543100][T15847] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  346.549406][T15847] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:246
[  346.590420][T15851] 9pnet_fd: Insufficient options for proto=fd
[  346.820823][   T36] audit: type=1400 audit(1761931988.953:56887): avc:  denied  { mounton } for  pid=15868 comm="syz.1.5243" path="/91/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  346.843367][   T36] audit: type=1400 audit(1761931988.953:56888): avc:  denied  { watch watch_reads } for  pid=15868 comm="syz.1.5243" path="/91/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  346.867617][T15869] netlink: 'syz.1.5243': attribute type 13 has an invalid length.
[  346.876073][T15869] fuseblk: Unknown parameter 'group_i�'
[  346.954855][   T36] audit: type=1326 audit(1761931989.083:56889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15881 comm="syz.4.5248" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f982258efc9 code=0x0
[  347.128230][T15907] 9pnet_fd: Insufficient options for proto=fd
[  347.345315][   T45] usb 3-1: USB disconnect, device number 38
[  347.352381][   T45] usblp0: removed
[  347.357839][T15315] usb 2-1: new low-speed USB device number 36 using dummy_hcd
[  347.496435][T15315] usb 2-1: device descriptor read/64, error -71
[  347.736405][T15315] usb 2-1: device descriptor read/64, error -71
[  347.736405][   T45] usb 3-1: new full-speed USB device number 39 using dummy_hcd
[  347.773443][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5272'.
[  347.887604][   T45] usb 3-1: config 1 has an invalid interface number: 146 but max is 0
[  347.896015][   T45] usb 3-1: config 1 has no interface number 0
[  347.903296][   T45] usb 3-1: config 1 interface 146 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64
[  347.916080][   T45] usb 3-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=fd.eb
[  347.925495][   T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.933821][   T45] usb 3-1: Product: syz
[  347.938302][   T45] usb 3-1: Manufacturer: syz
[  347.942979][   T45] usb 3-1: SerialNumber: syz
[  347.950024][   T45] usbserial_generic 3-1:1.146: The "generic" usb-serial driver is only for testing and one-off prototypes.
[  347.963748][   T45] usbserial_generic 3-1:1.146: Tell linux-usb@vger.kernel.org to add your device to a proper driver.
[  347.975038][   T45] usbserial_generic 3-1:1.146: generic converter detected
[  347.984093][   T45] usb 3-1: generic converter now attached to ttyUSB0
[  347.996411][T15315] usb 2-1: new low-speed USB device number 37 using dummy_hcd
[  348.140465][T15315] usb 2-1: device descriptor read/64, error -71
[  348.152135][T15936] rust_binder: Failed copying remainder into alloc: EFAULT
[  348.152293][T15936] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  348.159910][T15936] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  348.164137][T15967] 9pnet_fd: Insufficient options for proto=fd
[  348.168619][T15936] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:62
[  348.184918][  T384] usb 3-1: USB disconnect, device number 39
[  348.200961][  T384] generic ttyUSB0: generic converter now disconnected from ttyUSB0
[  348.210063][  T384] usbserial_generic 3-1:1.146: device disconnected
[  348.386511][T15315] usb 2-1: device descriptor read/64, error -71
[  348.497009][T15315] usb usb2-port1: attempt power cycle
[  348.846466][T15315] usb 2-1: new low-speed USB device number 38 using dummy_hcd
[  348.877510][T15315] usb 2-1: device descriptor read/8, error -71
[  349.007629][T15315] usb 2-1: device descriptor read/8, error -71
[  349.246422][T15315] usb 2-1: new low-speed USB device number 39 using dummy_hcd
[  349.267519][T15315] usb 2-1: device descriptor read/8, error -71
[  349.397518][T15315] usb 2-1: device descriptor read/8, error -71
[  349.506580][T15315] usb usb2-port1: unable to enumerate USB device
[  349.614233][T15999] rust_binder: Failed to allocate buffer. len:4256, is_oneway:false
[  349.835906][T16015] tipc: Invalid UDP bearer configuration
[  349.844047][T16015] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  350.028012][T16022] netlink: 'syz.1.5293': attribute type 4 has an invalid length.
[  350.829242][   T36] audit: type=1400 audit(2000000000.450:56890): avc:  denied  { append } for  pid=16030 comm="syz.1.5298" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  351.066453][   T66] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  351.146424][T15315] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[  351.216444][   T66] usb 2-1: Using ep0 maxpacket: 16
[  351.222843][   T66] usb 2-1: config 1 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0
[  351.232781][   T66] usb 2-1: config 1 interface 0 altsetting 32 endpoint 0x82 has invalid wMaxPacketSize 0
[  351.242674][   T66] usb 2-1: config 1 interface 0 altsetting 32 bulk endpoint 0x82 has invalid maxpacket 0
[  351.252610][   T66] usb 2-1: config 1 interface 0 altsetting 32 endpoint 0x3 has invalid wMaxPacketSize 0
[  351.262497][   T66] usb 2-1: config 1 interface 0 altsetting 32 bulk endpoint 0x3 has invalid maxpacket 0
[  351.272331][   T66] usb 2-1: config 1 interface 0 has no altsetting 0
[  351.279845][   T66] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  351.289074][   T66] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  351.297252][   T66] usb 2-1: SerialNumber: syz
[  351.306527][T15315] usb 3-1: Using ep0 maxpacket: 16
[  351.313040][T15315] usb 3-1: config 0 interface 0 has no altsetting 0
[  351.319948][T15315] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  351.329084][T15315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.338208][T15315] usb 3-1: config 0 descriptor??
[  351.507101][   T66] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[  351.515700][   T66] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -12
[  351.525808][   T66] usb 2-1: USB disconnect, device number 40
[  351.554052][T15315] usbhid 3-1:0.0: can't add hid device: -71
[  351.566285][T15315] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  351.577780][T15315] usb 3-1: USB disconnect, device number 40
[  351.584523][   T36] audit: type=1326 audit(2000000001.200:56891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16045 comm="syz.1.5301" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faceb78efc9 code=0x0
[  351.721021][T16051] loop7: detected capacity change from 0 to 7
[  351.728429][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  351.737695][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  351.748607][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  351.757825][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  351.765708][T16051]  loop7: unable to read partition table
[  351.771894][T16051] loop_reread_partitions: partition scan of loop7 (����ى���C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  351.771948][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  351.795608][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  351.804799][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  351.812970][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  351.822156][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  351.830261][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  351.839432][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  351.847555][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  351.856763][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  351.864858][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  351.874070][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  352.449638][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  352.458960][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  352.467152][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  352.476408][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  352.484302][  T110]  loop7: unable to read partition table
[  352.806403][T15315] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  352.971523][T15315] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  352.978368][T16158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5338'.
[  352.983985][T15315] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  352.999558][T15315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.008978][T15315] usb 2-1: Product: syz
[  353.013271][T15315] usb 2-1: Manufacturer: syz
[  353.026436][T15315] usb 2-1: SerialNumber: syz
[  353.437716][T15315] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS
[  353.446686][T16175] x_tables: duplicate underflow at hook 2
[  353.452716][T15315] cdc_ncm 2-1:1.0: bind() failure
[  353.461098][T15315] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  353.468130][T15315] cdc_ncm 2-1:1.1: bind() failure
[  353.534011][T16177] +$<�: renamed from bridge0 (while UP)
[  353.550516][T16177] /dev/rnullb0: Can't lookup blockdev
[  353.588914][T16181] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5346'.
[  353.598090][T16181] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5346'.
[  353.607370][T16181] netlink: 'syz.4.5346': attribute type 5 has an invalid length.
[  353.615382][T16181] netlink: 43 bytes leftover after parsing attributes in process `syz.4.5346'.
[  353.977231][T16185] netlink: 200 bytes leftover after parsing attributes in process `syz.5.5347'.
[  353.986553][T16185] tc_dump_action: action bad kind
[  354.008589][T16187] overlayfs: missing 'lowerdir'
[  354.098714][   T36] audit: type=1107 audit(2000000003.720:56892): pid=16190 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  354.146806][T15315] usb 2-1: USB disconnect, device number 41
[  354.222110][T16208] rust_binder: 16204 RLIMIT_NICE not set
[  354.247599][T16208] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  354.317040][T16226] netlink: 'syz.4.5360': attribute type 11 has an invalid length.
[  354.378548][T16238] tap0: tun_chr_ioctl cmd 1074025677
[  354.384069][T16238] tap0: linktype set to 1
[  354.390262][T16238] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  354.390298][T16238] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:307
[  354.412111][T16241] netlink: 312 bytes leftover after parsing attributes in process `syz.4.5365'.
[  354.512324][T16248] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:309
[  354.653073][T16257] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  354.669721][T16257] rust_binder: Write failure EINVAL in pid:314
[  354.786285][T16268] fuseblk: Bad value for 'fd'
[  354.977523][T16275] rust_binder: Error in use_page_slow: ESRCH
[  354.977543][T16275] rust_binder: use_range failure ESRCH
[  354.983552][T16275] rust_binder: Failed to allocate buffer. len:1048, is_oneway:true
[  354.989079][T16275] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  354.997039][T16275] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:113
[  355.018988][T16278] 9pnet_fd: Insufficient options for proto=fd
[  355.050394][T16285] rust_binder: Write failure EFAULT in pid:118
[  355.146465][T16303] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  355.153620][T16303] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 152, size: 18446744073709551507)
[  355.160228][T16303] rust_binder: Error while translating object.
[  355.172293][T16303] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  355.178643][T16303] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:125
[  355.388105][T16314] VFS: Mount too revealing
[  355.901301][   T36] audit: type=1400 audit(2000000005.520:56893): avc:  denied  { watch } for  pid=16326 comm="syz.1.5396" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  355.950717][   T36] audit: type=1326 audit(2000000005.570:56894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16301 comm="syz.4.5388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982258efc9 code=0x7fc00000
[  356.010526][T16329] 9p: Unknown access argument : -22
[  356.157301][T16318] 9pnet_fd: Insufficient options for proto=fd
[  356.276448][T15315] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[  356.426510][T15315] usb 3-1: Using ep0 maxpacket: 16
[  356.431721][  T384] usb 2-1: new full-speed USB device number 42 using dummy_hcd
[  356.440573][T15315] usb 3-1: config 1 has an invalid descriptor of length 128, skipping remainder of the config
[  356.450954][T15315] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 16
[  356.464681][T15315] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.61
[  356.473790][T15315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  356.481821][T15315] usb 3-1: SerialNumber: syz
[  356.488855][T15315] cdc_ether 3-1:1.0: skipping garbage
[  356.494299][T15315] usb 3-1: bad CDC descriptors
[  356.595591][  T384] usb 2-1: config 0 has an invalid descriptor of length 149, skipping remainder of the config
[  356.606068][  T384] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  356.615248][  T384] usb 2-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00
[  356.624354][  T384] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.633005][  T384] usb 2-1: config 0 descriptor??
[  356.715363][  T384] usb 3-1: USB disconnect, device number 41
[  357.140078][T16355] overlayfs: conflicting options: userxattr,verity=require
[  357.148284][T16355] /dev/rnullb0: Can't lookup blockdev
[  357.203685][T16365] /dev/rnullb0: Can't lookup blockdev
[  357.267725][T16374] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  357.268414][T16374] rust_binder: Error while translating object.
[  357.275002][T16374] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  357.281274][T16374] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:130
[  357.331798][   T36] audit: type=1400 audit(2000000006.950:56895): avc:  denied  { lock } for  pid=16380 comm="syz.2.5417" path="socket:[52344]" dev="sockfs" ino=52344 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  357.380242][T16383] rust_binder: 139: no such ref 1
[  357.386012][T16383] rust_binder: 139: no such ref 0
[  357.386130][T16385] incfs: Options parsing error. -22
[  357.396751][T16385] incfs: mount failed -22
[  357.401228][T16383] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  357.408736][T16383] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  357.431037][T16391] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  357.432002][T16392] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:143
[  357.539531][T16417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  357.592951][T16417] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  357.711544][T16436] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  357.711662][T16436] rust_binder: inc_ref_done called when no active inc_refs
[  357.720912][T16436] rust_binder: Write failure EINVAL in pid:165
[  357.802618][T16442] netlink: 'syz.5.5434': attribute type 1 has an invalid length.
[  357.862495][T16454] overlayfs: failed to clone upperpath
[  358.116450][   T66] usb 3-1: new full-speed USB device number 42 using dummy_hcd
[  358.267632][   T66] usb 3-1: config 4 has an invalid interface number: 168 but max is 0
[  358.275901][   T66] usb 3-1: config 4 has no interface number 0
[  358.282171][   T66] usb 3-1: config 4 interface 168 has no altsetting 0
[  358.290507][   T66] usb 3-1: New USB device found, idVendor=059f, idProduct=105f, bcdDevice= f.69
[  358.299682][   T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.307837][   T66] usb 3-1: Product: syz
[  358.312021][   T66] usb 3-1: Manufacturer: syz
[  358.316841][   T66] usb 3-1: SerialNumber: syz
[  358.527577][T16441] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  358.527870][T16441] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 136, size: 238)
[  358.534391][T16441] rust_binder: Error while translating object.
[  358.544995][T16441] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  358.551349][T16441] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:167
[  359.138984][T15315] usb 2-1: USB disconnect, device number 42
[  359.866657][T16470] netlink: 328 bytes leftover after parsing attributes in process `syz.4.5445'.
[  359.907538][   T36] audit: type=1400 audit(2000000009.530:56896): avc:  denied  { write } for  pid=16473 comm="syz.4.5447" name="ptp0" dev="tmpfs" ino=581 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:syslogd_var_lib_t:s0"
[  359.963153][T16480] overlayfs: failed to clone upperpath
[  360.046451][   T36] audit: type=1326 audit(2000000009.660:56897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16486 comm="syz.4.5451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f982258efc9 code=0x7fc00000
[  360.120965][T16505] netlink: 1143 bytes leftover after parsing attributes in process `syz.4.5456'.
[  360.170329][T16510] rust_binder: inc_ref_done called when no active inc_refs
[  360.188870][T16512] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  360.196216][T16512] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:354
[  360.331164][T16524] SELinux: security_context_str_to_sid () failed with errno=-22
[  360.404976][T16529] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  360.405003][T16529] rust_binder: Read failure Err(EFAULT) in pid:370
[  360.413608][T16529] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:370
[  360.706413][  T384] usb 2-1: new low-speed USB device number 43 using dummy_hcd
[  360.758477][   T66] usb-storage 3-1:4.168: USB Mass Storage device detected
[  360.769379][T16535] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  360.779542][   T66] usb-storage 3-1:4.168: Quirks match for vid 059f pid 105f: 44000000
[  360.816020][   T66] usb 3-1: USB disconnect, device number 42
[  360.835892][T16540] rust_binder: Error in use_page_slow: ESRCH
[  360.835915][T16540] rust_binder: use_range failure ESRCH
[  360.841992][T16540] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false
[  360.847582][T16540] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  360.855633][T16540] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:170
[  360.856422][  T384] usb 2-1: device descriptor read/64, error -71
[  361.116484][  T384] usb 2-1: device descriptor read/64, error -71
[  361.356427][  T384] usb 2-1: new low-speed USB device number 44 using dummy_hcd
[  361.380224][T16554] netlink: 'syz.5.5475': attribute type 10 has an invalid length.
[  361.388197][T16554] netlink: 5 bytes leftover after parsing attributes in process `syz.5.5475'.
[  361.397404][T16554] bridge_slave_1: left promiscuous mode
[  361.403098][T16554] bridge0: port 2(bridge_slave_1) entered disabled state
[  361.486442][  T384] usb 2-1: device descriptor read/64, error -71
[  361.613804][T16556] sock: sock_timestamping_bind_phc: sock not bind to device
[  361.726458][  T384] usb 2-1: device descriptor read/64, error -71
[  361.836488][  T384] usb usb2-port1: attempt power cycle
[  361.856660][  T448] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[  361.995197][   T36] audit: type=1326 audit(2000000011.610:56898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16568 comm="syz.5.5482" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f520778efc9 code=0x0
[  362.007647][  T448] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  362.029234][  T448] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  362.039177][  T448] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  362.052249][  T448] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  362.061349][  T448] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.070065][  T448] usb 3-1: config 0 descriptor??
[  362.148978][   T36] audit: type=1400 audit(2000000011.770:56899): avc:  denied  { write } for  pid=15315 comm="kworker/0:6" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=51749 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  362.176429][  T384] usb 2-1: new low-speed USB device number 45 using dummy_hcd
[  362.197552][  T384] usb 2-1: device descriptor read/8, error -71
[  362.327645][  T384] usb 2-1: device descriptor read/8, error -71
[  362.478021][  T448] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[  362.485480][  T448] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[  362.492951][  T448] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[  362.500436][  T448] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[  362.507901][  T448] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[  362.515482][  T448] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[  362.522913][  T448] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[  362.530369][  T448] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[  362.537802][  T448] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[  362.545211][  T448] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[  362.552633][  T448] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[  362.560090][  T448] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0
[  362.567718][  T448] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving
[  362.577020][  T384] usb 2-1: new low-speed USB device number 46 using dummy_hcd
[  362.577592][  T448] plantronics 0003:047F:FFFF.0019: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  362.607551][  T384] usb 2-1: device descriptor read/8, error -71
[  362.737069][T15315] usb 3-1: USB disconnect, device number 43
[  362.743744][  T384] usb 2-1: device descriptor read/8, error -71
[  362.856569][  T384] usb usb2-port1: unable to enumerate USB device
[  363.234505][T16581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16581 comm=syz.4.5485
[  363.651070][T16590] binder: Unknown parameter 'defcontext01777777777777777777777'
[  363.871606][   T36] audit: type=1400 audit(2000000013.490:56900): avc:  denied  { accept } for  pid=16611 comm="syz.5.5496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  363.926476][  T448] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  364.069938][T16631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5502'.
[  364.080165][  T448] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  364.093234][  T448] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  364.103093][  T448] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  364.111897][  T448] usb 2-1: Product: syz
[  364.116306][  T448] usb 2-1: Manufacturer: syz
[  364.121496][  T448] usb 2-1: SerialNumber: syz
[  365.135870][  T448] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[  365.142762][  T448] cdc_ncm 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  365.150258][  T448] cdc_ncm 2-1:1.0: setting rx_max = 2048
[  365.389352][T16599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  365.397985][T16599] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  365.437895][T16701] overlayfs: failed to clone lowerpath
[  365.476889][  T448] cdc_ncm 2-1:1.0: setting tx_max = 184
[  365.485690][  T448] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  365.500960][  T448] usb 2-1: USB disconnect, device number 47
[  365.507633][  T448] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP)
[  365.515828][   T36] audit: type=1400 audit(2000000015.130:56901): avc:  denied  { search } for  pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  365.540239][   T36] audit: type=1400 audit(2000000015.160:56902): avc:  denied  { read } for  pid=149 comm="dhcpcd" name="n17" dev="tmpfs" ino=5513 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  365.562481][   T36] audit: type=1400 audit(2000000015.160:56903): avc:  denied  { open } for  pid=149 comm="dhcpcd" path="/run/udev/data/n17" dev="tmpfs" ino=5513 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  365.599832][   T36] audit: type=1400 audit(2000000015.160:56904): avc:  denied  { getattr } for  pid=149 comm="dhcpcd" path="/run/udev/data/n17" dev="tmpfs" ino=5513 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  365.639576][   T36] audit: type=1400 audit(2000000015.260:56905): avc:  denied  { read } for  pid=16714 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=426 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  365.677236][   T36] audit: type=1400 audit(2000000015.260:56906): avc:  denied  { map } for  pid=16712 comm="syz.2.5528" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[  365.714479][   T36] audit: type=1400 audit(2000000015.260:56907): avc:  denied  { execute } for  pid=16712 comm="syz.2.5528" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1
[  365.784539][T16740] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5532'.
[  365.806274][T16740] gretap0: entered promiscuous mode
[  366.137610][T16784] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  366.144910][T16784] IPv6: NLM_F_CREATE should be set when creating new route
[  366.152204][T16784] IPv6: NLM_F_CREATE should be set when creating new route
[  366.534176][T16795] rust_binder: Write failure EINVAL in pid:400
[  366.648229][T16805] overlay: Unknown parameter 'smackfsdef'
[  366.648475][T16806] overlay: Unknown parameter 'smackfsdef'
[  366.678662][T16808] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  366.786410][  T448] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  366.926418][  T448] usb 2-1: device descriptor read/64, error -71
[  367.075080][T16830] tipc: Started in network mode
[  367.080226][T16830] tipc: Node identity ac14140f, cluster identity 4711
[  367.087526][T16830] tipc: New replicast peer: 255.255.255.255
[  367.093659][T16830] tipc: Enabled bearer <udp:syz2>, priority 10
[  367.176408][  T448] usb 2-1: device descriptor read/64, error -71
[  367.395858][T16881] virtiofs: Unknown parameter 'always'
[  367.416405][  T448] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  367.566436][  T448] usb 2-1: device descriptor read/64, error -71
[  367.806660][  T448] usb 2-1: device descriptor read/64, error -71
[  367.916565][  T448] usb usb2-port1: attempt power cycle
[  368.109134][T16930] fuse: Bad value for 'fd'
[  368.206579][   T45] tipc: Node number set to 2886997007
[  368.220246][T16945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5599'.
[  368.230264][T16945] 9pnet_fd: Insufficient options for proto=fd
[  368.266434][  T448] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  368.287524][  T448] usb 2-1: device descriptor read/8, error -71
[  368.417383][  T448] usb 2-1: device descriptor read/8, error -71
[  368.447673][   T36] kauditd_printk_skb: 9 callbacks suppressed
[  368.447691][   T36] audit: type=1326 audit(2000000018.070:56917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16961 comm="syz.2.5606" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f92ca78efc9 code=0x0
[  368.516947][   T36] audit: type=1400 audit(2000000018.140:56918): avc:  denied  { create } for  pid=16961 comm="syz.2.5606" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  368.666421][  T448] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  368.687531][  T448] usb 2-1: device descriptor read/8, error -71
[  368.776441][T16968] erspan0: mtu less than device minimum
[  368.817452][  T448] usb 2-1: device descriptor read/8, error -71
[  368.926570][  T448] usb usb2-port1: unable to enumerate USB device
[  369.115995][T16994] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5617'.
[  369.125095][T16994] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5617'.
[  369.218447][T16996] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=16996 comm=syz.5.5618
[  369.308453][T17003] overlayfs: failed to resolve './file0': -2
[  369.408109][T17019] netlink: 'syz.2.5626': attribute type 4 has an invalid length.
[  369.415953][T17019] netlink: 3649 bytes leftover after parsing attributes in process `syz.2.5626'.
[  369.754912][T17037] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5629'.
[  369.976601][T17049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5637'.
[  369.987132][   T36] audit: type=1326 audit(2000000019.610:56919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17048 comm="syz.4.5637" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f982258efc9 code=0x0
[  370.746410][T15315] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  370.897313][T15315] usb 2-1: Using ep0 maxpacket: 32
[  370.903754][T15315] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[  370.912212][T15315] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  370.920904][T15315] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[  370.929932][T15315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  370.939653][T15315] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  370.949374][T15315] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  370.962411][T15315] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  370.971510][T15315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.980195][T15315] usb 2-1: config 0 descriptor??
[  371.187610][T15315] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 52 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  371.200573][T15315] usb 2-1: USB disconnect, device number 52
[  371.207628][T15315] usblp0: removed
[  371.348610][   T36] audit: type=1400 audit(2000000020.970:56920): avc:  denied  { nlmsg_read } for  pid=17076 comm="syz.4.5646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  371.881761][T17079] 9pnet_fd: Insufficient options for proto=fd
[  371.888290][T17079] 9pnet_fd: Insufficient options for proto=fd
[  371.894692][T17079] 9pnet_fd: Insufficient options for proto=fd
[  371.901182][T17079] 9pnet_fd: Insufficient options for proto=fd
[  371.908023][T17079] 9pnet_fd: Insufficient options for proto=fd
[  371.914527][T17079] 9pnet_fd: Insufficient options for proto=fd
[  371.920939][T17079] 9pnet_fd: Insufficient options for proto=fd
[  371.927183][T17079] 9pnet_fd: Insufficient options for proto=fd
[  371.933390][T17079] 9pnet_fd: Insufficient options for proto=fd
[  371.939921][T17079] 9pnet_fd: Insufficient options for proto=fd
[  371.946237][T17079] 9pnet_fd: Insufficient options for proto=fd
[  371.952740][T17079] 9pnet_fd: Insufficient options for proto=fd
[  371.959094][T17079] 9pnet_fd: Insufficient options for proto=fd
[  371.965285][T17079] 9pnet_fd: Insufficient options for proto=fd
[  371.971677][T17079] 9pnet_fd: Insufficient options for proto=fd
[  371.977930][T17079] 9pnet_fd: Insufficient options for proto=fd
[  371.984267][T17079] 9pnet_fd: Insufficient options for proto=fd
[  371.990610][T17079] 9pnet_fd: Insufficient options for proto=fd
[  371.996909][T17079] 9pnet_fd: Insufficient options for proto=fd
[  372.003197][T17079] 9pnet_fd: Insufficient options for proto=fd
[  372.009552][T17079] 9pnet_fd: Insufficient options for proto=fd
[  372.015779][T17079] 9pnet_fd: Insufficient options for proto=fd
[  372.022442][T17079] 9pnet_fd: Insufficient options for proto=fd
[  372.029459][T17079] 9pnet_fd: Insufficient options for proto=fd
[  372.035979][T17079] 9pnet_fd: Insufficient options for proto=fd
[  372.041922][T17091] rust_binder: 435: no such ref 0
[  372.043698][T17079] 9pnet_fd: Insufficient options for proto=fd
[  372.053506][T17079] 9pnet_fd: Insufficient options for proto=fd
[  372.061092][T17079] 9pnet_fd: Insufficient options for proto=fd
[  372.067610][T17079] 9pnet_fd: Insufficient options for proto=fd
[  372.074270][T17079] 9pnet_fd: Insufficient options for proto=fd
[  372.080709][T17079] 9pnet_fd: Insufficient options for proto=fd
[  372.086984][T17079] 9pnet_fd: Insufficient options for proto=fd
[  372.093227][T17079] 9pnet_fd: Insufficient options for proto=fd
[  372.243918][T17115] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:442
[  372.243962][T17115] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  372.253877][T17115] rust_binder: Read failure Err(EFAULT) in pid:442
[  372.499422][T17135] /dev/rnullb0: Can't lookup blockdev
[  372.526408][  T448] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  372.551039][   T36] audit: type=1400 audit(2000000022.170:56921): avc:  denied  { mount } for  pid=17143 comm="syz.4.5671" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  372.601146][T17150] /dev/rnullb0: Can't lookup blockdev
[  372.677512][  T448] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  372.687866][  T448] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  372.697891][  T448] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  372.707303][  T448] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  372.715396][  T448] usb 2-1: SerialNumber: syz
[  372.798965][T17161] /dev/rnullb0: Can't lookup blockdev
[  372.926861][  T448] usb 2-1: 0:2 : does not exist
[  372.931835][  T448] usb 2-1: unit 255 not found!
[  372.940613][  T448] usb 2-1: USB disconnect, device number 53
[  373.451901][T17202] rust_binder: Error in use_page_slow: ESRCH
[  373.451931][T17202] rust_binder: use_range failure ESRCH
[  373.465110][T17202] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false
[  373.476309][T17202] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  373.486759][T17202] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:447
[  373.548996][T17221] fuse: Bad value for 'fd'
[  373.580934][T17223] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5699'.
[  373.826403][  T448] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  373.977769][  T448] usb 2-1: unable to get BOS descriptor or descriptor too short
[  373.986313][  T448] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 167, changing to 7
[  373.997485][  T448] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  374.007299][  T448] usb 2-1: config 1 interface 1 has no altsetting 0
[  374.015412][  T448] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  374.024538][  T448] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.032615][  T448] usb 2-1: Product: syz
[  374.036827][  T448] usb 2-1: Manufacturer: syz
[  374.041448][  T448] usb 2-1: SerialNumber: syz
[  374.254380][  T448] usb 2-1: USB disconnect, device number 54
[  374.264099][T13864] udevd[13864]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  374.775609][T17242] rust_binder: Error while translating object.
[  374.775654][T17242] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  374.781976][T17242] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:461
[  374.902507][ T2167] tipc: Subscription rejected, illegal request
[  375.665428][T17272] rust_binder: Failed copying remainder into alloc: EFAULT
[  375.665459][T17272] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  375.673045][T17272] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  375.681488][T17272] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:470
[  375.706505][T17275] __vm_enough_memory: pid: 17275, comm: syz.1.5720, bytes: 18014402804453376 not enough memory for the allocation
[  375.776317][T17286] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  375.884994][T17291] fuse: Bad value for 'fd'
[  376.126395][   T66] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[  376.276418][   T66] usb 2-1: Using ep0 maxpacket: 8
[  376.282712][   T66] usb 2-1: config 0 has an invalid interface number: 200 but max is 0
[  376.291058][   T66] usb 2-1: config 0 has no interface number 0
[  376.297210][   T66] usb 2-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xB5, changing to 0x85
[  376.308948][   T66] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  376.320039][   T66] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x85 has invalid maxpacket 1126, setting to 1024
[  376.331315][   T66] usb 2-1: config 0 interface 200 has no altsetting 0
[  376.339412][   T66] usb 2-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39
[  376.348550][   T66] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.356588][   T66] usb 2-1: Product: syz
[  376.360750][   T66] usb 2-1: Manufacturer: syz
[  376.365342][   T66] usb 2-1: SerialNumber: syz
[  376.370955][   T66] usb 2-1: config 0 descriptor??
[  376.376253][T17289] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  376.588215][   T66] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.200/input/input22
[  376.600602][    C1] usb 2-1: hanwang_irq - nonzero urb status received: -71
[  376.608083][    C1] usb 2-1: hanwang_irq - nonzero urb status received: -71
[  376.615264][    C1] usb 2-1: hanwang_irq - usb_submit_urb failed with result -1
[  376.623218][    C0] usb 2-1: hanwang_irq - urb shutting down with status: -2
[  376.629933][   T66] usb 2-1: USB disconnect, device number 55
[  377.122306][T17349] netlink: 'syz.4.5747': attribute type 4 has an invalid length.
[  377.133009][T17349] netlink: 'syz.4.5747': attribute type 4 has an invalid length.
[  377.141803][T17352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=17352 comm=syz.4.5747
[  377.154682][T17349] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5747'.
[  377.183211][T17358] overlayfs: failed to resolve './file1': -2
[  377.253095][T17363] /dev/loop0: Can't lookup blockdev
[  377.271346][T17365] af_packet: tpacket_rcv: packet too big, clamped from 4066 to 4294967272. macoff=96
[  377.376502][  T384] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  377.526444][  T384] usb 2-1: Using ep0 maxpacket: 16
[  377.532755][  T384] usb 2-1: config 0 has an invalid descriptor of length 98, skipping remainder of the config
[  377.543184][  T384] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  377.557443][  T384] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  377.576404][  T384] usb 2-1: New USB device strings: Mfr=16, Product=0, SerialNumber=20
[  377.584722][  T384] usb 2-1: Manufacturer: syz
[  377.589655][  T384] usb 2-1: SerialNumber: syz
[  377.595115][  T384] usb 2-1: config 0 descriptor??
[  377.806492][   T66] usb 2-1: USB disconnect, device number 56
[  378.007478][T17406] netlink: 'syz.2.5767': attribute type 1 has an invalid length.
[  378.273319][T17421] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5774'.
[  378.556399][T15315] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  378.736379][T15315] usb 2-1: Using ep0 maxpacket: 16
[  378.748635][T15315] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  378.766422][T15315] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  378.786421][T15315] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  378.807227][T15315] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  378.816564][T15315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  378.830250][T15315] usb 2-1: Product: syz
[  378.839989][T15315] usb 2-1: Manufacturer: syz
[  378.847752][T17442] 9pnet_fd: Insufficient options for proto=fd
[  378.853942][T15315] usb 2-1: SerialNumber: syz
[  379.262913][T15315] usb 2-1: 0:2 : does not exist
[  379.473187][T17426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  379.482338][T17426] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  379.492928][T17426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  379.502473][T17426] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  379.522720][T17426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  379.524091][T17492] 9pnet_fd: Insufficient options for proto=fd
[  379.531169][T17490] syz.2.5796: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null)
[  379.537509][T17426] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  379.556632][T17492] 9pnet_fd: Insufficient options for proto=fd
[  379.560951][T17490] ,cpuset=syz2,mems_allowed=0
[  379.566641][T17492] 9pnet_fd: Insufficient options for proto=fd
[  379.574826][T17426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  379.583430][T17490] CPU: 0 UID: 0 PID: 17490 Comm: syz.2.5796 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[  379.583467][T17490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  379.583487][T17490] Call Trace:
[  379.583494][T17490]  <TASK>
[  379.583507][T17490]  __dump_stack+0x21/0x30
[  379.583543][T17490]  dump_stack_lvl+0x10c/0x190
[  379.583572][T17490]  ? __cfi_dump_stack_lvl+0x10/0x10
[  379.583604][T17490]  dump_stack+0x19/0x20
[  379.583632][T17490]  warn_alloc+0x1bc/0x2a0
[  379.583659][T17490]  ? __cfi_warn_alloc+0x10/0x10
[  379.583688][T17490]  ? kasan_save_track+0x4f/0x80
[  379.583710][T17490]  ? __kasan_kmalloc+0x96/0xb0
[  379.583733][T17490]  ? __kmalloc_cache_noprof+0x24c/0x490
[  379.583756][T17490]  ? do_sock_setsockopt+0x26d/0x400
[  379.583787][T17490]  ? __x64_sys_setsockopt+0x1b8/0x250
[  379.583820][T17490]  ? x64_sys_call+0x2adc/0x2ee0
[  379.583853][T17490]  ? do_syscall_64+0x58/0xf0
[  379.583881][T17490]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  379.583907][T17490]  __vmalloc_node_range_noprof+0x135/0x1420
[  379.583946][T17490]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  379.583980][T17490]  ? kasan_save_alloc_info+0x40/0x50
[  379.584014][T17490]  ? __kasan_kmalloc+0x96/0xb0
[  379.584040][T17490]  ? __kmalloc_cache_noprof+0x24c/0x490
[  379.584063][T17490]  ? futex_setup_timer+0xb4/0xd0
[  379.584085][T17490]  vmalloc_user_noprof+0x77/0x90
[  379.584118][T17490]  ? xskq_create+0xdb/0x2a0
[  379.584152][T17490]  xskq_create+0xdb/0x2a0
[  379.584184][T17490]  xsk_init_queue+0xb6/0x120
[  379.584218][T17490]  xsk_setsockopt+0x43f/0x6f0
[  379.584251][T17490]  ? __cfi_xsk_setsockopt+0x10/0x10
[  379.584290][T17490]  ? do_futex+0x309/0x500
[  379.584314][T17490]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[  379.584343][T17490]  ? security_socket_setsockopt+0x33/0xd0
[  379.584367][T17490]  ? __cfi_xsk_setsockopt+0x10/0x10
[  379.584399][T17490]  do_sock_setsockopt+0x26d/0x400
[  379.584441][T17490]  ? __cfi_do_sock_setsockopt+0x10/0x10
[  379.584477][T17490]  __x64_sys_setsockopt+0x1b8/0x250
[  379.584511][T17490]  x64_sys_call+0x2adc/0x2ee0
[  379.584543][T17490]  do_syscall_64+0x58/0xf0
[  379.584572][T17490]  ? clear_bhb_loop+0x50/0xa0
[  379.584596][T17490]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  379.584618][T17490] RIP: 0033:0x7f92ca78efc9
[  379.584646][T17490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  379.584668][T17490] RSP: 002b:00007f92cb6e0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  379.584691][T17490] RAX: ffffffffffffffda RBX: 00007f92ca9e5fa0 RCX: 00007f92ca78efc9
[  379.584708][T17490] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000046
[  379.584722][T17490] RBP: 00007f92ca811f91 R08: 0000000000000004 R09: 0000000000000000
[  379.584736][T17490] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  379.584750][T17490] R13: 00007f92ca9e6038 R14: 00007f92ca9e5fa0 R15: 00007ffc012e6038
[  379.584769][T17490]  </TASK>
[  379.584784][T17490] Mem-Info:
[  379.589800][T17492] 9pnet_fd: Insufficient options for proto=fd
[  379.599380][T17426] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  379.626669][T17492] 9pnet_fd: Insufficient options for proto=fd
[  379.628755][T17490] active_anon:63125 inactive_anon:26 isolated_anon:0
[  379.628755][T17490]  active_file:14430 inactive_file:12667 isolated_file:0
[  379.628755][T17490]  unevictable:16393 dirty:64 writeback:0
[  379.628755][T17490]  slab_reclaimable:6107 slab_unreclaimable:79486
[  379.628755][T17490]  mapped:27512 shmem:56442 pagetables:1275
[  379.628755][T17490]  sec_pagetables:0 bounce:0
[  379.628755][T17490]  kernel_misc_reclaimable:0
[  379.628755][T17490]  free:1430135 free_pcp:7150 free_cma:0
[  379.636664][T17492] 9pnet_fd: Insufficient options for proto=fd
[  379.646744][T17426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  379.653350][   T36] audit: type=1400 audit(2000000029.260:56922): avc:  denied  { map } for  pid=17425 comm="syz.1.5776" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  379.667659][T17426] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  379.681813][T17492] 9pnet_fd: Insufficient options for proto=fd
[  379.685047][T17490] Node 0 active_anon:255300kB inactive_anon:104kB active_file:57720kB inactive_file:50668kB unevictable:65572kB isolated(anon):0kB isolated(file):0kB mapped:112748kB dirty:256kB writeback:0kB shmem:228468kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7864kB pagetables:5200kB sec_pagetables:0kB all_unreclaimable? no
[  379.691881][T17492] 9pnet_fd: Insufficient options for proto=fd
[  379.697230][T17426] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  379.706632][T17492] 9pnet_fd: Insufficient options for proto=fd
[  379.710259][T17426] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:493
[  379.725777][T17492] 9pnet_fd: Insufficient options for proto=fd
[  379.736770][T17490] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:68kB free_cma:0kB
[  379.755417][T17492] 9pnet_fd: Insufficient options for proto=fd
[  379.761882][T17490] lowmem_reserve[]:
[  379.775293][T17492] 9pnet_fd: Insufficient options for proto=fd
[  379.781127][   T10] usb 2-1: USB disconnect, device number 57
[  379.796015][T17492] 9pnet_fd: Insufficient options for proto=fd
[  379.803454][T17490]  0
[  379.807196][T17492] 9pnet_fd: Insufficient options for proto=fd
[  379.826191][T17490]  3921
[  379.856693][T17492] 9pnet_fd: Insufficient options for proto=fd
[  379.858093][T17490]  3921
[  379.873571][T17492] 9pnet_fd: Insufficient options for proto=fd
[  379.879884][T17490] 
[  379.894262][T17492] 9pnet_fd: Insufficient options for proto=fd
[  379.902491][T17490] Normal free:2754312kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:268100kB inactive_anon:104kB active_file:57720kB inactive_file:50668kB unevictable:65572kB writepending:256kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:13648kB local_pcp:3276kB free_cma:0kB
[  379.947103][T17492] 9pnet_fd: Insufficient options for proto=fd
[  379.971848][T17490] lowmem_reserve[]:
[  379.997446][T17492] 9pnet_fd: Insufficient options for proto=fd
[  380.036388][T17490]  0
[  380.040057][T17492] 9pnet_fd: Insufficient options for proto=fd
[  380.077140][T17490]  0
[  380.102232][T17492] 9pnet_fd: Insufficient options for proto=fd
[  380.146592][T17490]  0
[  380.158218][T17492] 9pnet_fd: Insufficient options for proto=fd
[  380.181177][T17490] 
[  380.193740][T17492] 9pnet_fd: Insufficient options for proto=fd
[  380.217384][T17490] DMA32: 
[  380.219600][T17492] 9pnet_fd: Insufficient options for proto=fd
[  380.233908][T17490] 5*4kB 
[  380.242907][T17492] 9pnet_fd: Insufficient options for proto=fd
[  380.258893][T17490] (M) 
[  380.263220][T17492] 9pnet_fd: Insufficient options for proto=fd
[  380.270093][T17490] 2*8kB 
[  380.272396][T17492] 9pnet_fd: Insufficient options for proto=fd
[  380.276004][T17490] (M) 
[  380.281959][T17492] 9pnet_fd: Insufficient options for proto=fd
[  380.291154][T17492] 9pnet_fd: Insufficient options for proto=fd
[  380.292868][T17490] 3*16kB 
[  380.303673][T17492] 9pnet_fd: Insufficient options for proto=fd
[  380.308637][T17490] (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[  380.313086][T17492] 9pnet_fd: Insufficient options for proto=fd
[  380.332604][T17490] Normal: 52*4kB (E) 687*8kB (UE) 1324*16kB (UME) 28*32kB (ME) 1042*64kB (UE) 116*128kB (UE) 35*256kB (UME) 12*512kB (UE) 24*1024kB (UME) 14*2048kB (M) 622*4096kB (UM) = 2725384kB
[  380.351030][T17490] 110659 total pagecache pages
[  380.355885][T17490] 55 pages in swap cache
[  380.363388][T17516] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  380.363412][T17516] rust_binder: Read failure Err(EFAULT) in pid:495
[  380.363677][T17517] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[  380.385438][T17490] Free swap  = 124256kB
[  380.390233][T17490] Total swap = 124996kB
[  380.394640][T17490] 2097051 pages RAM
[  380.400776][T17517] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:495
[  380.400827][T17490] 0 pages HighMem/MovableOnly
[  380.415260][T17490] 351537 pages reserved
[  380.419925][T17490] 0 pages cma reserved
[  380.436607][T17490] Memory allocations:
[  380.440742][T17490]          0 B        0 init/main.c:1370 func:do_initcalls
[  380.448301][T17490]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  380.456616][T17490]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  380.464367][T17490]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  380.472565][T17490]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  380.480775][T17490]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  380.489608][T17490]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  380.498551][T17490]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  380.506726][T17490]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  380.514759][T17490]          0 B        0 init/initramfs.c:101 func:find_link
[  380.592774][T17522] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5809'.
[  381.076985][T17544] netlink: 3 bytes leftover after parsing attributes in process `syz.5.5816'.
[  381.591445][T17601] 9pnet_fd: Insufficient options for proto=fd
[  382.139279][T17646] 9pnet_fd: Insufficient options for proto=fd
[  382.403286][T17662] cgroup: release_agent respecified
[  382.422791][T17664] netlink: 'syz.4.5859': attribute type 13 has an invalid length.
[  382.617589][ T2167] Bluetooth: hci0: Frame reassembly failed (-84)
[  382.624101][T17666] Bluetooth: hci0: Frame reassembly failed (-84)
[  384.656472][T15312] Bluetooth: hci0: command 0x1003 tx timeout
[  384.656470][  T340] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  392.284926][T17691] /dev/rnullb0: Can't open blockdev
[  392.487674][T17718] incfs: Error accessing: ./file0.
[  392.492879][T17718] incfs: mount failed -20
[  392.539659][T17720] netlink: 'syz.2.5881': attribute type 14 has an invalid length.
[  392.546572][   T36] audit: type=1400 audit(2000000042.160:56923): avc:  denied  { execute } for  pid=17725 comm="syz.5.5883" path="/cpu.stat" dev="rootfs" ino=44896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  392.571346][T17720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=17720 comm=syz.2.5881
[  392.666225][   T36] audit: type=1400 audit(2000000042.292:56924): avc:  denied  { create } for  pid=17740 comm="syz.5.5887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1
[  393.072873][T17757] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:516
[  393.084578][T17762] rust_binder: Write failure EINVAL in pid:521
[  393.278008][   T36] audit: type=1326 audit(2000000042.902:56925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17785 comm="syz.1.5900" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faceb78efc9 code=0x0
[  393.553867][T17791] overlayfs: failed to clone upperpath
[  393.796552][T17808] fuseblk: Unknown parameter 'rootmon��t��wLde'
[  394.436135][T17846] rust_binder: Failed to allocate buffer. len:152, is_oneway:false
[  394.459141][T17849] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5921'.
[  394.476113][T17848] netlink: 80 bytes leftover after parsing attributes in process `syz.1.5921'.
[  394.716445][   T10] usb 2-1: new full-speed USB device number 58 using dummy_hcd
[  394.872922][   T10] usb 2-1: config 0 has an invalid interface number: 151 but max is 0
[  394.881372][   T10] usb 2-1: config 0 has no interface number 0
[  394.887679][   T10] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10
[  394.900374][   T10] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f
[  394.909959][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.918361][   T10] usb 2-1: Product: syz
[  394.922626][   T10] usb 2-1: Manufacturer: syz
[  394.927527][   T10] usb 2-1: SerialNumber: syz
[  394.933051][   T10] usb 2-1: config 0 descriptor??
[  395.146443][   T10] usb 2-1: invalid MIDI out EP 0
[  395.153843][   T10] snd-usb-audio 2-1:0.151: probe with driver snd-usb-audio failed with error -22
[  395.164620][   T10] usb 2-1: USB disconnect, device number 58
[  395.175615][T17850] udevd[17850]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  404.997432][T17894] fuse: Bad value for 'user_id'
[  405.002365][T17894] fuse: Bad value for 'user_id'
[  405.237106][T17905] rust_binder: Error while translating object.
[  405.237148][T17905] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  405.247332][T17905] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:563
[  405.546395][   T31] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  405.727684][   T31] usb 2-1: Using ep0 maxpacket: 16
[  405.737326][   T31] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  405.751721][   T31] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8
[  405.762911][   T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  405.772408][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  405.775761][T17934] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17934 comm=syz.4.5950
[  405.780746][   T31] usb 2-1: SerialNumber: syz
[  405.803416][T17907] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  405.810647][T17940] netlink: 'syz.4.5952': attribute type 6 has an invalid length.
[  405.811285][T17907] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  405.819440][T17940] netlink: 'syz.4.5952': attribute type 4 has an invalid length.
[  405.828084][T17932] 9pnet_fd: Insufficient options for proto=fd
[  405.833755][T17943] 9pnet_fd: Insufficient options for proto=fd
[  405.840072][T17940] netlink: 'syz.4.5952': attribute type 6 has an invalid length.
[  405.854066][T17940] netlink: 'syz.4.5952': attribute type 13 has an invalid length.
[  405.862485][T17940] netlink: 'syz.4.5952': attribute type 15 has an invalid length.
[  405.870619][T17940] netlink: 'syz.4.5952': attribute type 19 has an invalid length.
[  405.878892][T17940] netlink: 5664 bytes leftover after parsing attributes in process `syz.4.5952'.
[  406.007601][T17963] overlayfs: failed to resolve './file0': -2
[  406.027693][T17964] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  406.028241][T17907] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  406.038614][   T31] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[  406.054209][   T31] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
[  406.066481][   T31] usb 2-1: USB disconnect, device number 59
[  406.644204][T18003] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  406.651600][T18003] rust_binder: Write failure EINVAL in pid:572
[  407.380098][T18111] TCP: TCP_TX_DELAY enabled
[  407.545306][T18125] rust_binder: Error while translating object.
[  407.545343][T18125] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  407.551703][T18125] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:585
[  407.574654][T18128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6015'.
[  407.593466][T18128] loop7: detected capacity change from 0 to 7
[  407.600170][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  407.609404][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  407.617463][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  407.626782][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  407.634734][T17908]  loop7: unable to read partition table
[  407.641107][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  407.650317][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  407.658495][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  407.667700][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  407.675591][T18128]  loop7: unable to read partition table
[  407.675884][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  407.690862][T18128] loop_reread_partitions: partition scan of loop7 (����ى���C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  407.704499][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  407.713690][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  407.721925][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  407.731111][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  407.739414][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  407.748646][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  407.756827][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  407.766128][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  407.774297][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  407.783461][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  407.817921][T18141] rust_binder: Write failure EFAULT in pid:592
[  407.843681][   T36] audit: type=1326 audit(2000000057.462:56926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18147 comm="syz.1.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faceb78efc9 code=0x7ffc0000
[  407.873585][   T36] audit: type=1326 audit(2000000057.462:56927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18147 comm="syz.1.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faceb78efc9 code=0x7ffc0000
[  407.897748][   T36] audit: type=1326 audit(2000000057.472:56928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18147 comm="syz.1.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7faceb78efc9 code=0x7ffc0000
[  407.921526][   T36] audit: type=1326 audit(2000000057.492:56929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18147 comm="syz.1.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faceb78efc9 code=0x7ffc0000
[  407.945308][   T36] audit: type=1326 audit(2000000057.492:56930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18147 comm="syz.1.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faceb78efc9 code=0x7ffc0000
[  407.969073][   T36] audit: type=1326 audit(2000000057.492:56931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18147 comm="syz.1.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faceb78efc9 code=0x7ffc0000
[  407.992564][   T36] audit: type=1326 audit(2000000057.592:56932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18147 comm="syz.1.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faceb78efc9 code=0x7ffc0000
[  408.016286][   T36] audit: type=1326 audit(2000000057.592:56933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18147 comm="syz.1.6022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faceb78efc9 code=0x7ffc0000
[  409.334107][   T36] audit: type=1326 audit(2000000058.952:56934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18193 comm="syz.2.6037" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f92ca78efc9 code=0x0
[  409.996419][  T448] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  410.147550][  T448] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  410.157778][  T448] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  410.166983][  T448] usb 2-1: New USB device found, idVendor=047f, idProduct=001b, bcdDevice= 0.01
[  410.176369][  T448] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  410.185742][  T448] usb 2-1: config 0 descriptor??
[  410.235058][T18227] 9pnet_fd: Insufficient options for proto=fd
[  410.290626][T18238] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=18238 comm=syz.2.6050
[  410.385902][   T36] audit: type=1326 audit(2000000060.002:56935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18251 comm="syz.2.6056" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ca78efc9 code=0x7ffc0000
[  410.651226][T18257] netlink: 'syz.5.6057': attribute type 1 has an invalid length.
[  410.659547][T18257] netlink: 'syz.5.6057': attribute type 3 has an invalid length.
[  410.703766][T18261] overlayfs: failed to clone upperpath
[  410.746413][T18267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  410.764988][T18267] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  411.283586][T18292] 9pnet_fd: Insufficient options for proto=fd
[  411.434962][T18299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6072'.
[  411.444752][T18299] +$<�: port 1(bridge_slave_0) entered disabled state
[  411.453466][T18299] bridge_slave_0 (unregistering): left allmulticast mode
[  411.460741][T18299] bridge_slave_0 (unregistering): left promiscuous mode
[  411.467835][T18299] +$<�: port 1(bridge_slave_0) entered disabled state
[  411.530545][T18302] netlink: 'syz.4.6073': attribute type 2 has an invalid length.
[  411.858002][T18330] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6077'.
[  412.572163][T18336] netlink: 'syz.5.6084': attribute type 13 has an invalid length.
[  412.763403][   T45] usb 2-1: USB disconnect, device number 60
[  412.807693][T18343] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  412.814878][T18343] rust_binder: Write failure EINVAL in pid:615
[  413.664893][T18370] netlink: 'syz.5.6097': attribute type 4 has an invalid length.
[  413.720608][T18378] __vm_enough_memory: pid: 18378, comm: syz.1.6101, bytes: 18014402804453376 not enough memory for the allocation
[  413.755919][T18386] /dev/rnullb0: Can't open blockdev
[  413.778800][T18390] rust_binder: Write failure EINVAL in pid:629
[  413.790941][T18392] 9pnet_fd: Insufficient options for proto=fd
[  414.066432][  T331] usb 2-1: new full-speed USB device number 61 using dummy_hcd
[  414.217520][  T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  414.228605][  T331] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  414.238415][  T331] usb 2-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00
[  414.247542][  T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  414.256522][  T331] usb 2-1: config 0 descriptor??
[  414.262626][  T331] usbhid 2-1:0.0: can't add hid device: -22
[  414.268652][  T331] usbhid 2-1:0.0: probe with driver usbhid failed with error -22
[  414.463078][T18398] rust_binder: Write failure EINVAL in pid:633
[  414.465268][   T45] usb 2-1: USB disconnect, device number 61
[  414.879029][T18429] overlayfs: failed to clone upperpath
[  414.927339][T18437] netlink: 'syz.5.6123': attribute type 4 has an invalid length.
[  414.935328][T18437] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6123'.
[  415.069539][T18462] overlayfs: failed to clone upperpath
[  415.226899][T18501] binder: Unknown parameter '0x00000000000000040x0000000000000000'
[  415.333875][T18507] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[  415.343139][T18507] rust_binder: inc_ref_done called when no active inc_refs
[  415.553100][T18526] 9pnet_fd: Insufficient options for proto=fd
[  415.791033][T18543] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6159'.
[  416.118124][T18603] binder: Bad value for 'stats'
[  416.396403][  T331] usb 2-1: new full-speed USB device number 62 using dummy_hcd
[  416.557527][  T331] usb 2-1: config 201 has an invalid interface number: 249 but max is 0
[  416.565957][  T331] usb 2-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config
[  416.576299][  T331] usb 2-1: config 201 has no interface number 0
[  416.582639][  T331] usb 2-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81
[  416.594626][  T331] usb 2-1: config 201 interface 249 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  416.608103][  T331] usb 2-1: config 201 interface 249 has no altsetting 0
[  416.611392][T18617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6185'.
[  416.618049][  T331] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df
[  416.624651][T18618] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6185'.
[  416.643396][  T331] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.653241][  T331] usb 2-1: Product: syz
[  416.657602][  T331] usb 2-1: Manufacturer: syz
[  416.662228][  T331] usb 2-1: SerialNumber: syz
[  416.733672][T18634] fuse: Bad value for 'fd'
[  416.759490][T18632] IPv6: NLM_F_CREATE should be specified when creating new route
[  416.767400][T18632] IPv6: NLM_F_REPLACE set, but no existing node found!
[  416.872934][T18609] rust_binder: Write failure EFAULT in pid:663
[  416.883842][  T331] usb 2-1: USB disconnect, device number 62
[  416.958813][T18637] bridge0: port 1(bridge_slave_0) entered blocking state
[  416.965905][T18637] bridge0: port 1(bridge_slave_0) entered disabled state
[  416.973238][T18637] bridge_slave_0: entered allmulticast mode
[  416.980402][T18637] bridge_slave_0: entered promiscuous mode
[  416.987409][T18637] bridge0: port 2(bridge_slave_1) entered blocking state
[  416.994540][T18637] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.001923][T18637] bridge_slave_1: entered allmulticast mode
[  417.010624][T18637] bridge_slave_1: entered promiscuous mode
[  417.085849][T18637] bridge0: port 2(bridge_slave_1) entered blocking state
[  417.092983][T18637] bridge0: port 2(bridge_slave_1) entered forwarding state
[  417.100298][T18637] bridge0: port 1(bridge_slave_0) entered blocking state
[  417.107348][T18637] bridge0: port 1(bridge_slave_0) entered forwarding state
[  417.131241][ T2188] bridge0: port 1(bridge_slave_0) entered disabled state
[  417.138939][ T2188] bridge0: port 2(bridge_slave_1) entered disabled state
[  417.149575][ T2177] bridge0: port 1(bridge_slave_0) entered blocking state
[  417.156692][ T2177] bridge0: port 1(bridge_slave_0) entered forwarding state
[  417.165855][ T2188] bridge0: port 2(bridge_slave_1) entered blocking state
[  417.172974][ T2188] bridge0: port 2(bridge_slave_1) entered forwarding state
[  417.202249][T18637] veth0_vlan: entered promiscuous mode
[  417.213928][T18637] veth1_macvtap: entered promiscuous mode
[  417.408001][T18671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:665
[  417.408273][T18671] netlink: 'syz.1.6199': attribute type 4 has an invalid length.
[  417.425825][T18671] netlink: 'syz.1.6199': attribute type 4 has an invalid length.
[  417.445717][T18671] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  417.445757][T18671] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:665
[  417.545175][   T36] kauditd_printk_skb: 562 callbacks suppressed
[  417.545196][   T36] audit: type=1400 audit(2000000067.162:57498): avc:  denied  { setattr } for  pid=18681 comm="syz.4.6203" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  417.618880][T18689] 9pnet_fd: p9_fd_create_tcp (18689): problem connecting socket to 127.0.0.1
[  417.628739][T18689] 9pnet_fd: Insufficient options for proto=fd
[  417.635476][T18689] rust_binder: 18689 RLIMIT_NICE not set
[  417.635601][T18689] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:676
[  417.767553][T18691] 9pnet_fd: Insufficient options for proto=fd
[  418.052196][T18715] netlink: 324 bytes leftover after parsing attributes in process `syz.2.6215'.
[  418.339010][T18727] Invalid logical block size (-1)
[  418.363607][T18730] @: renamed from vlan0 (while UP)
[  418.365435][T18731] binder: Unknown parameter '0xffffffffffffffff����'
[  418.395083][T18735] rust_binder: Fixups oob 178 180 369 186
[  418.395116][T18735] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL }
[  418.401020][T18735] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  418.409386][T18735] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:684
[  418.428447][T18741] input: syz1 as /devices/virtual/input/input23
[  418.724055][T18786] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6241'.
[  418.936593][  T331] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  418.948162][T18811] fuse: Unknown parameter '�+�k�c��Xg��'
[  419.096449][  T331] usb 2-1: Using ep0 maxpacket: 16
[  419.106684][  T331] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  419.116984][  T331] usb 2-1: config 0 has no interfaces?
[  419.123258][  T331] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  419.132417][  T331] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  419.140681][  T331] usb 2-1: SerialNumber: syz
[  419.146034][  T331] usb 2-1: config 0 descriptor??
[  419.367841][T18759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  419.376759][T18759] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  420.461105][T18879] netlink: 'syz.2.6275': attribute type 12 has an invalid length.
[  420.470690][T18879] 9pnet_fd: Insufficient options for proto=fd
[  421.503331][  T448] usb 2-1: USB disconnect, device number 63
[  421.572391][T18924] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  421.572417][T18926] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  421.601236][T18929] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  421.607030][T18928] 9pnet_fd: Insufficient options for proto=fd
[  421.608083][T18929] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:29
[  422.486292][T18957] ip6gretap0: mtu less than device minimum
[  422.508978][T18957] rust_binder: 716: no such ref 0
[  422.556536][T18973] netlink: 'syz.1.6308': attribute type 9 has an invalid length.
[  422.564471][T18973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6308'.
[  422.619731][T18980] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  422.619909][T18980] rust_binder: Error in use_page_slow: ESRCH
[  422.626488][T18980] rust_binder: use_range failure ESRCH
[  422.632525][T18980] rust_binder: Failed to allocate buffer. len:1160, is_oneway:true
[  422.638260][T18980] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  422.646280][T18980] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:729
[  422.669473][T18982] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  422.678986][T18982] rust_binder: 731: no such ref 0
[  422.690639][T18982] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  422.697736][T18982] rust_binder: 731: no such ref 2
[  422.702872][T18982] rust_binder: Error in use_page_slow: ESRCH
[  422.702889][T18982] rust_binder: use_range failure ESRCH
[  422.709100][T18982] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false
[  422.714764][T18982] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  422.722848][T18982] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:731
[  423.096911][  T448] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  423.256375][  T448] usb 2-1: Using ep0 maxpacket: 16
[  423.262740][  T448] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  423.272980][  T448] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  423.287127][  T448] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40
[  423.296289][  T448] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  423.304821][  T448] usb 2-1: Product: syz
[  423.309142][  T448] usb 2-1: Manufacturer: syz
[  423.322698][  T448] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[  423.432001][T19032] fuse: Bad value for 'group_id'
[  423.432117][T19033] overlay: Unknown parameter 'mask'
[  423.437160][T19032] fuse: Bad value for 'group_id'
[  423.524432][T15315] usb 2-1: USB disconnect, device number 64
[  424.043022][T19074] rust_binder: Write failure EFAULT in pid:743
[  424.090548][T19083] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set
[  424.174233][T19086] loop7: detected capacity change from 0 to 7
[  424.181025][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  424.190212][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  424.198267][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  424.207469][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  424.215358][T19086]  loop7: unable to read partition table
[  424.221263][T19086] loop_reread_partitions: partition scan of loop7 (����ى���C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  424.233362][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  424.243980][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  424.252904][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  424.262156][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  424.262811][T19091] netlink: 'syz.4.6347': attribute type 28 has an invalid length.
[  424.272202][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  424.287091][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  424.287806][T19091] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:45
[  424.295292][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  424.313585][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  424.326343][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  424.335535][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  424.346544][T15315] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  424.362900][T19098] /dev/rnullb0: Can't open blockdev
[  424.382472][   T36] audit: type=1400 audit(2000000074.002:57499): avc:  denied  { module_load } for  pid=19099 comm="syz.4.6351" path="/sys/power/pm_trace_dev_match" dev="sysfs" ino=1461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1
[  424.387657][T19100] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  424.409467][T19101] overlayfs: failed to clone lowerpath
[  424.506364][T15315] usb 2-1: Using ep0 maxpacket: 16
[  424.516924][T15315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  424.532745][T15315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  424.542834][T15315] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00
[  424.552196][T15315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  424.555554][T19115] overlayfs: overlapping lowerdir path
[  424.568464][T15315] usb 2-1: config 0 descriptor??
[  424.618325][T19118] lo: entered allmulticast mode
[  424.777124][T15315] usbhid 2-1:0.0: can't add hid device: -71
[  424.783693][T15315] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  424.792449][T15315] usb 2-1: USB disconnect, device number 65
[  425.288957][T19132] rust_binder: Write failure EFAULT in pid:756
[  425.300964][T19134] binder: Unknown parameter 'context����[7�'
[  425.397315][T19116] lo: left allmulticast mode
[  425.407374][T19139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6367'.
[  425.422464][T19141] 9pnet_fd: Insufficient options for proto=fd
[  425.566409][T15315] usb 2-1: new low-speed USB device number 66 using dummy_hcd
[  425.737511][T15315] usb 2-1: config 1 interface 0 altsetting 44 endpoint 0x81 has invalid maxpacket 64, setting to 8
[  425.748756][T15315] usb 2-1: config 1 interface 0 altsetting 44 endpoint 0x2 has invalid maxpacket 32, setting to 8
[  425.759650][T15315] usb 2-1: config 1 interface 0 has no altsetting 0
[  425.949596][T19180] tipc: Started in network mode
[  425.954550][T19180] tipc: Node identity 00000000400500008, cluster identity 4711
[  426.174260][T19186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6383'.
[  426.186459][   T36] audit: type=1326 audit(2000000075.802:57500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19184 comm="syz.2.6383" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92ca78efc9 code=0x0
[  427.037711][T19194] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6386'.
[  427.879591][T19209] overlayfs: failed to clone upperpath
[  427.886279][T19209] /dev/loop0: Can't lookup blockdev
[  428.335765][T15315] usb 2-1: New USB device found, idVendor=05ac, idProduct=0323, bcdDevice= 0.40
[  428.347524][T15315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  428.355611][T15315] usb 2-1: Product: ࠐ
[  428.360142][T15315] usb 2-1: Manufacturer: Њ
[  428.369506][T15315] usb 2-1: can't set config #1, error -71
[  428.378821][T15315] usb 2-1: USB disconnect, device number 66
[  428.472418][   T36] audit: type=1326 audit(2000000078.092:57501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19222 comm="syz.2.6397" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f92ca78efc9 code=0x0
[  429.232182][T19233] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  429.486461][   T31] usb 2-1: new high-speed USB device number 67 using dummy_hcd
[  429.637624][   T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  429.648670][   T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  429.658485][   T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  429.671425][   T31] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  429.680545][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.689257][   T31] usb 2-1: config 0 descriptor??
[  430.113666][   T31] usbhid 2-1:0.0: can't add hid device: -71
[  430.116793][T19288] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  430.119838][   T31] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  430.136771][   T31] usb 2-1: USB disconnect, device number 67
[  430.426427][   T31] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  430.556403][   T31] usb 2-1: device descriptor read/64, error -71
[  430.605412][T19292] fuse: Bad value for 'fd'
[  430.611197][T19292] netlink: 'syz.2.6422': attribute type 2 has an invalid length.
[  430.796410][   T31] usb 2-1: device descriptor read/64, error -71
[  431.041004][T19305] overlayfs: failed to clone upperpath
[  431.056518][   T31] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  431.196389][   T31] usb 2-1: device descriptor read/64, error -71
[  431.436447][   T31] usb 2-1: device descriptor read/64, error -71
[  431.546534][   T31] usb usb2-port1: attempt power cycle
[  431.869750][   T36] audit: type=1326 audit(2000000081.492:57502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19348 comm="syz.2.6445" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f92ca78efc9 code=0x0
[  431.886396][   T31] usb 2-1: new high-speed USB device number 70 using dummy_hcd
[  431.917582][   T31] usb 2-1: device descriptor read/8, error -71
[  432.047562][   T31] usb 2-1: device descriptor read/8, error -71
[  432.286421][   T31] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  432.307529][   T31] usb 2-1: device descriptor read/8, error -71
[  432.437524][   T31] usb 2-1: device descriptor read/8, error -71
[  432.546509][   T31] usb usb2-port1: unable to enumerate USB device
[  433.130597][T19390] incfs_lookup_dentry err:-13
[  433.135354][T19390] incfs: Can't find or create .index dir in ./bus
[  433.136612][T19391] rust_binder: 779: no such ref 1
[  433.142209][T19390] incfs: mount failed -13
[  433.147171][T19391] rust_binder: Error in use_page_slow: ESRCH
[  433.151197][T19391] rust_binder: use_range failure ESRCH
[  433.157306][T19391] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false
[  433.162901][T19391] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  433.171463][T19391] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:779
[  433.213154][T19396] rust_binder: Error in use_page_slow: ESRCH
[  433.222349][T19396] rust_binder: use_range failure ESRCH
[  433.228398][T19396] rust_binder: Failed to allocate buffer. len:8, is_oneway:true
[  433.233881][T19396] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  433.241584][T19396] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:785
[  433.265400][T19398] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 11
[  433.284525][T19398] tipc: Started in network mode
[  433.289487][T19398] tipc: Node identity ac1414aa, cluster identity 4711
[  433.296470][T19398] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  433.317134][T19402] rust_binder: 789: no such ref 1
[  433.356550][T19411] /dev/rnullb0: Can't open blockdev
[  433.410759][T19417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6467'.
[  433.496655][   T36] audit: type=1400 audit(2000000083.122:57503): avc:  denied  { setcheckreqprot } for  pid=19424 comm="syz.1.6469" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  433.504285][T19425] netlink: 88 bytes leftover after parsing attributes in process `syz.1.6469'.
[  433.557679][T19427] binder: Bad value for 'max'
[  433.689174][T19434] batadv_slave_1: entered promiscuous mode
[  433.696416][T19434] batadv_slave_1: left promiscuous mode
[  433.746722][T19440] fuse: Bad value for 'fd'
[  433.850388][T19461] fuse: Bad value for 'fd'
[  433.885259][T19474] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6486'.
[  434.921380][T19521] tipc: Enabling of bearer <Yth:v> rejected, media not registered
[  434.942401][T19523] 9pnet_fd: Insufficient options for proto=fd
[  434.964239][T19526] fuse: Unknown parameter 'f��"ӗg7�d'
[  435.277682][   T36] audit: type=1326 audit(2000000084.902:57504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19541 comm="syz.2.6509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ca78efc9 code=0x7ffc0000
[  435.301422][   T36] audit: type=1326 audit(2000000084.902:57505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19541 comm="syz.2.6509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ca78efc9 code=0x7ffc0000
[  435.325319][   T36] audit: type=1326 audit(2000000084.902:57506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19541 comm="syz.2.6509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ca78efc9 code=0x7ffc0000
[  435.349040][   T36] audit: type=1326 audit(2000000084.902:57507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19541 comm="syz.2.6509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ca78efc9 code=0x7ffc0000
[  435.373155][   T36] audit: type=1326 audit(2000000084.902:57508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19541 comm="syz.2.6509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f92ca78efc9 code=0x7ffc0000
[  435.396775][   T36] audit: type=1326 audit(2000000084.902:57509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19541 comm="syz.2.6509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ca78efc9 code=0x7ffc0000
[  435.420651][   T36] audit: type=1326 audit(2000000084.902:57510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19541 comm="syz.2.6509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ca78efc9 code=0x7ffc0000
[  435.444230][   T36] audit: type=1326 audit(2000000084.902:57511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19541 comm="syz.2.6509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ca78efc9 code=0x7ffc0000
[  435.484948][T19547] netlink: 'syz.2.6510': attribute type 63 has an invalid length.
[  435.493207][T19547] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6510'.
[  435.526479][T19553] 9pnet_fd: Insufficient options for proto=fd
[  435.665781][T19564] veth0: entered promiscuous mode
[  435.671144][T19563] veth0: left promiscuous mode
[  435.875654][T19607] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6531'.
[  436.164353][T19619] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.171490][T19619] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.180610][T19619] bridge_slave_0: entered allmulticast mode
[  436.187246][T19619] bridge_slave_0: entered promiscuous mode
[  436.197856][T19619] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.205049][T19619] bridge0: port 2(bridge_slave_1) entered disabled state
[  436.212486][T19619] bridge_slave_1: entered allmulticast mode
[  436.218869][T19619] bridge_slave_1: entered promiscuous mode
[  436.290253][ T2167] bridge_slave_0: left allmulticast mode
[  436.296541][ T2167] bridge_slave_0: left promiscuous mode
[  436.302351][ T2167] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.421503][T19619] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.428608][T19619] bridge0: port 2(bridge_slave_1) entered forwarding state
[  436.435979][T19619] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.443062][T19619] bridge0: port 1(bridge_slave_0) entered forwarding state
[  436.465148][ T2188] bridge0: port 1(bridge_slave_0) entered disabled state
[  436.472751][ T2188] bridge0: port 2(bridge_slave_1) entered disabled state
[  436.484943][ T2167] tipc: Left network mode
[  436.491149][ T2188] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.498251][ T2188] bridge0: port 1(bridge_slave_0) entered forwarding state
[  436.505784][ T2188] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.512952][ T2188] bridge0: port 2(bridge_slave_1) entered forwarding state
[  436.521611][ T2167] veth1_macvtap: left promiscuous mode
[  436.574932][T19619] veth0_vlan: entered promiscuous mode
[  436.586865][T19619] veth1_macvtap: entered promiscuous mode
[  436.811247][T19646] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  436.818920][T19646] rust_binder: 19646 RLIMIT_NICE not set
[  436.928810][T19657] tipc: Started in network mode
[  436.939648][T19657] tipc: Node identity 6209b83971ba, cluster identity 4711
[  436.946967][T19657] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  436.957441][T19657] tipc: Resetting bearer <eth:syzkaller0>
[  436.963799][T19657] /dev/rnullb0: Can't open blockdev
[  436.970340][T19656] tipc: Disabling bearer <eth:syzkaller0>
[  437.117533][   T36] kauditd_printk_skb: 128 callbacks suppressed
[  437.117552][   T36] audit: type=1326 audit(2000000086.742:57640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19658 comm="syz.2.6544" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92ca78efc9 code=0x0
[  437.331966][T19669] rust_binder: Failed to allocate buffer. len:4208, is_oneway:false
[  437.354956][T19672] ./cgroup: Can't lookup blockdev
[  437.368407][T19672] ./cgroup: Can't lookup blockdev
[  437.373694][T19672] ./cgroup: Can't lookup blockdev
[  437.379154][T19672] ./cgroup: Can't lookup blockdev
[  437.384408][T19672] ./cgroup: Can't lookup blockdev
[  437.389652][T19672] ./cgroup: Can't lookup blockdev
[  437.394812][T19672] ./cgroup: Can't lookup blockdev
[  437.400034][T19672] ./cgroup: Can't lookup blockdev
[  437.405240][T19672] ./cgroup: Can't lookup blockdev
[  437.410441][T19672] ./cgroup: Can't lookup blockdev
[  437.415598][T19672] ./cgroup: Can't lookup blockdev
[  437.420830][T19672] ./cgroup: Can't lookup blockdev
[  437.425966][T19672] ./cgroup: Can't lookup blockdev
[  437.431148][T19672] ./cgroup: Can't lookup blockdev
[  437.436425][T19672] ./cgroup: Can't lookup blockdev
[  437.441569][T19672] ./cgroup: Can't lookup blockdev
[  437.446831][T19672] ./cgroup: Can't lookup blockdev
[  437.451965][T19672] ./cgroup: Can't lookup blockdev
[  437.457565][T19672] ./cgroup: Can't lookup blockdev
[  437.462740][T19672] ./cgroup: Can't lookup blockdev
[  437.468144][T19672] ./cgroup: Can't lookup blockdev
[  437.473289][T19672] ./cgroup: Can't lookup blockdev
[  437.478505][T19672] ./cgroup: Can't lookup blockdev
[  437.483670][T19672] ./cgroup: Can't lookup blockdev
[  437.488881][T19672] ./cgroup: Can't lookup blockdev
[  437.494039][T19672] ./cgroup: Can't lookup blockdev
[  437.499324][T19672] ./cgroup: Can't lookup blockdev
[  437.504544][T19672] ./cgroup: Can't lookup blockdev
[  437.509751][T19672] ./cgroup: Can't lookup blockdev
[  437.514919][T19672] ./cgroup: Can't lookup blockdev
[  437.520154][T19672] ./cgroup: Can't lookup blockdev
[  437.525359][T19672] ./cgroup: Can't lookup blockdev
[  437.530610][T19672] ./cgroup: Can't lookup blockdev
[  437.608807][T19675] rust_binder: 36: no such ref 1
[  437.661210][T19684] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:45
[  437.661609][T19684] rust_binder: Error while translating object.
[  437.670912][T19684] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  437.677193][T19684] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:45
[  437.696411][  T340] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  437.726248][T19690] fuse: Bad value for 'user_id'
[  437.731279][T19690] fuse: Bad value for 'user_id'
[  438.043758][T19709] SELinux:  Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped).
[  438.054208][   T36] audit: type=1400 audit(2000000087.672:57641): avc:  denied  { relabelto } for  pid=19707 comm="syz.1.6559" name="cgroup" dev="tmpfs" ino=1578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0"
[  438.081609][   T36] audit: type=1400 audit(2000000087.672:57642): avc:  denied  { associate } for  pid=19707 comm="syz.1.6559" name="cgroup" dev="tmpfs" ino=1578 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_log_t:s0"
[  438.116533][   T36] audit: type=1400 audit(2000000087.682:57643): avc:  denied  { unlink } for  pid=14291 comm="syz-executor" name="cgroup" dev="tmpfs" ino=1578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0"
[  438.146274][T19720] cgroup: No subsys list or none specified
[  438.231621][T19733] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=19733 comm=syz.2.6567
[  438.236640][T19730] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=19730 comm=syz.2.6567
[  438.731944][T19746] 9p: Unknown Cache mode or invalid value m
[  439.550230][T19785] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19785 comm=syz.5.6585
[  439.702647][T19812] tmpfs: Unknown parameter 'nevnr_�l'
[  440.150204][T19836] netlink: 'syz.1.6606': attribute type 1 has an invalid length.
[  440.158079][T19836] netlink: 'syz.1.6606': attribute type 2 has an invalid length.
[  440.167107][T19836] netlink: 'syz.1.6606': attribute type 1 has an invalid length.
[  440.174959][T19836] netlink: 'syz.1.6606': attribute type 2 has an invalid length.
[  440.393528][T19862] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6615'.
[  440.473806][   T36] audit: type=1400 audit(2000000090.092:57644): avc:  denied  { mount } for  pid=19870 comm="syz.5.6619" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  440.663331][T19875] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=37892 sclass=netlink_xfrm_socket pid=19875 comm=syz.2.6621
[  440.677933][   T36] audit: type=1400 audit(2000000090.302:57645): avc:  denied  { read } for  pid=19874 comm="syz.2.6621" path="socket:[61310]" dev="sockfs" ino=61310 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  440.686540][T19875] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65498 sclass=netlink_xfrm_socket pid=19875 comm=syz.2.6621
[  441.268021][T19884] rust_binder: inc_ref_done called when no active inc_refs
[  441.283475][T19887] 9pnet: p9_errstr2errno: server reported unknown error 1844674
[  441.312241][   T36] audit: type=1400 audit(2000000090.932:57646): avc:  denied  { nlmsg_tty_audit } for  pid=19888 comm="syz.4.6626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[  441.334540][T19893] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6627'.
[  441.414757][T19896] rust_binder: Error while translating object.
[  441.414793][T19896] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  441.421130][T19896] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:112
[  441.494412][T19901] netlink: 376 bytes leftover after parsing attributes in process `syz.4.6630'.
[  441.516234][T19901] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6630'.
[  441.580435][T19909] rust_binder: inc_ref_done called when no active inc_refs
[  441.605775][T19918] futex_wake_op: syz.5.6637 tries to shift op by -1; fix this program
[  441.635052][   T36] audit: type=1400 audit(2000000091.252:57647): avc:  denied  { mounton } for  pid=19919 comm="syz.4.6638" path="/42/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1
[  441.659070][   T36] audit: type=1400 audit(2000000091.282:57648): avc:  denied  { unmount } for  pid=18637 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1
[  441.684224][T19925] futex_wake_op: syz.5.6637 tries to shift op by -1; fix this program
[  442.087886][   T36] audit: type=1400 audit(2000000091.712:57649): avc:  denied  { create } for  pid=19942 comm="syz.2.6644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1
[  442.892554][T20003] tc_dump_action: action bad kind
[  443.491911][T20023] devpts: called with bogus options
[  445.533201][T20094] futex_wake_op: syz.5.6693 tries to shift op by -1; fix this program
[  445.588356][T20100] overlayfs: failed to clone upperpath
[  445.621104][T20106] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=20106 comm=syz.1.6699
[  445.634021][T20106] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=20106 comm=syz.1.6699
[  445.667806][T20110] rust_binder: 20104 RLIMIT_NICE not set
[  445.702733][T20115] can: request_module (can-proto-6) failed.
[  445.716237][T20118] can: request_module (can-proto-6) failed.
[  446.789786][   T36] audit: type=1400 audit(2000000096.412:57650): avc:  denied  { write } for  pid=20155 comm="syz.4.6716" name="usbmon1" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  447.129510][T20168] rust_binder: Write failure EFAULT in pid:166
[  447.196913][T20172] rust_binder: Write failure EFAULT in pid:170
[  447.209986][T20172] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:170
[  447.318920][T20182] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  447.335621][T20182] rust_binder: Read failure Err(EAGAIN) in pid:172
[  448.020322][T20224] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=20224 comm=syz.2.6741
[  448.110962][T20247] /dev/rnullb0: Can't open blockdev
[  448.137175][T20251] rust_binder: 177: no such ref 0
[  448.142290][T20251] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  448.152608][T20251] rust_binder: 177: no such ref 2
[  448.158069][T20251] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false
[  448.183422][T20259] netlink: 104 bytes leftover after parsing attributes in process `syz.4.6754'.
[  448.201443][   T36] audit: type=1400 audit(2000000097.822:57651): avc:  denied  { remount } for  pid=20258 comm="syz.4.6754" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  448.222499][T20265] binder: Binderfs stats mode cannot be changed during a remount
[  448.390735][T20290] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6765'.
[  448.542387][   T36] audit: type=1326 audit(2000000098.162:57652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20304 comm="syz.2.6771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ca78efc9 code=0x7fc00000
[  448.572826][   T36] audit: type=1326 audit(2000000098.162:57653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20304 comm="syz.2.6771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ca78efc9 code=0x7fc00000
[  448.599912][T20311] overlayfs: failed to clone lowerpath
[  448.780889][   T36] audit: type=1326 audit(2000000098.402:57654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20318 comm="syz.2.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92ca78efc9 code=0x7fc00000
[  448.848684][T20342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6784'.
[  449.092973][T20359] netlink: 'syz.5.6790': attribute type 4 has an invalid length.
[  449.140418][T20365] netlink: 'syz.5.6793': attribute type 12 has an invalid length.
[  449.183606][   T36] audit: type=1326 audit(2000000098.802:57655): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20371 comm="syz.4.6795" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feda9b8efc9 code=0x0
[  449.419619][T20388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6801'.
[  449.840086][T20395] fuse: Unknown parameter 'group_i�'
[  449.868650][T20402] netlink: 'syz.1.6806': attribute type 27 has an invalid length.
[  450.300313][T20460] overlayfs: conflicting options: userxattr,metacopy=on
[  450.771573][T20498] rust_binder: 211: no such ref 1
[  450.964641][T20511] veth1_to_team: mtu less than device minimum
[  451.278618][T20535] tipc: Enabled bearer <eth:xfrm0>, priority 10
[  451.667444][T20549] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1011 sclass=netlink_tcpdiag_socket pid=20549 comm=syz.2.6858
[  451.680914][   T36] audit: type=1400 audit(2000000101.302:57656): avc:  denied  { connect } for  pid=20547 comm="syz.2.6858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  452.168246][T20594] overlayfs: missing 'lowerdir'
[  452.172983][T20593] overlayfs: missing 'lowerdir'
[  452.406384][   T45] tipc: Node number set to 330545209
[  452.890260][T20648] netlink: 1 bytes leftover after parsing attributes in process `syz.5.6892'.
[  452.918208][T20650] fuse: Bad value for 'fd'
[  453.918165][T20729] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  453.918419][T20729] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[  453.926032][T20729] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  454.031892][T20745] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:239
[  454.115711][T20748] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI
[  454.116361][   T36] audit: type=1400 audit(2000000103.732:57657): avc:  denied  { write } for  pid=20746 comm="syz.4.6925" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  454.124886][T20748] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
[  454.166736][T20748] CPU: 1 UID: 0 PID: 20748 Comm: syz.4.6925 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[  454.173920][   T36] audit: type=1400 audit(2000000103.792:57658): avc:  denied  { read } for  pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  454.178398][T20748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  454.178417][T20748] RIP: 0010:iter_file_splice_write+0xace/0x11b0
[  454.178458][T20748] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 67 d6 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 43 d6 e6 ff 4c 8b 1b 48 8b 3c 24
[  454.178481][T20748] RSP: 0018:ffffc90001e37820 EFLAGS: 00010202
[  454.201368][   T36] audit: type=1400 audit(2000000103.822:57659): avc:  denied  { search } for  pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  454.210431][T20748] 
[  454.210442][T20748] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff88812922df00
[  454.210460][T20748] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffffffe
[  454.210475][T20748] RBP: ffffc90001e37a40 R08: ffff8881f6f72240 R09: 1ffff1103edee448
[  454.210496][T20748] R10: 1ffff1103edee44b R11: 0000000000000fd8 R12: dffffc0000000000
[  454.217639][   T36] audit: type=1400 audit(2000000103.822:57660): avc:  denied  { write } for  pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  454.236360][T20748] R13: 7ffffffffffffffe R14: ffff88811ab9e038 R15: ffff88811ab9e028
[  454.236383][T20748] FS:  00007fedaaa886c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  454.236404][T20748] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  454.236421][T20748] CR2: 0000000000000000 CR3: 00000001171ae000 CR4: 00000000003526b0
[  454.242686][   T36] audit: type=1400 audit(2000000103.822:57661): avc:  denied  { add_name } for  pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[  454.263914][T20748] Call Trace:
[  454.263924][T20748]  <TASK>
[  454.263940][T20748]  ? __cfi_iter_file_splice_write+0x10/0x10
[  454.263978][T20748]  ? __kmalloc_noprof+0x271/0x530
[  454.266878][   T36] audit: type=1400 audit(2000000103.822:57662): avc:  denied  { create } for  pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  454.274296][T20748]  ? __kasan_check_write+0x18/0x20
[  454.282642][   T36] audit: type=1400 audit(2000000103.822:57663): avc:  denied  { append open } for  pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  454.290277][T20748]  ? __cfi_iter_file_splice_write+0x10/0x10
[  454.290316][T20748]  direct_splice_actor+0x279/0x4b0
[  454.298717][   T36] audit: type=1400 audit(2000000103.822:57664): avc:  denied  { getattr } for  pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[  454.319659][T20748]  splice_direct_to_actor+0x4fb/0xbc0
[  454.319701][T20748]  ? __cfi_direct_splice_actor+0x10/0x10
[  454.482102][T20748]  ? __cfi_splice_direct_to_actor+0x10/0x10
[  454.488012][T20748]  do_splice_direct+0x182/0x270
[  454.492871][T20748]  ? __cfi_do_splice_direct+0x10/0x10
[  454.498251][T20748]  ? __cfi_direct_file_splice_eof+0x10/0x10
[  454.504154][T20748]  ? security_file_permission+0x2e/0xc0
[  454.509704][T20748]  ? rw_verify_area+0xac/0x230
[  454.514484][T20748]  do_sendfile+0x5c8/0xfb0
[  454.518908][T20748]  ? vfs_writev+0xcf0/0xcf0
[  454.523414][T20748]  ? __se_sys_futex+0x28f/0x300
[  454.528268][T20748]  __x64_sys_sendfile64+0x193/0x1f0
[  454.533475][T20748]  ? __cfi___x64_sys_sendfile64+0x10/0x10
[  454.539199][T20748]  ? switch_fpu_return+0x12/0x20
[  454.544138][T20748]  x64_sys_call+0xa26/0x2ee0
[  454.548749][T20748]  do_syscall_64+0x58/0xf0
[  454.553173][T20748]  ? clear_bhb_loop+0x50/0xa0
[  454.557855][T20748]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  454.563747][T20748] RIP: 0033:0x7feda9b8efc9
[  454.568160][T20748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  454.587769][T20748] RSP: 002b:00007fedaaa88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  454.596208][T20748] RAX: ffffffffffffffda RBX: 00007feda9de6090 RCX: 00007feda9b8efc9
[  454.604204][T20748] RDX: 0000000000000000 RSI: 0000000000000045 RDI: 0000000000000045
[  454.612172][T20748] RBP: 00007feda9c11f91 R08: 0000000000000000 R09: 0000000000000000
[  454.620144][T20748] R10: 000000007a680000 R11: 0000000000000246 R12: 0000000000000000
[  454.628117][T20748] R13: 00007feda9de6128 R14: 00007feda9de6090 R15: 00007ffef1389b48
[  454.636094][T20748]  </TASK>
[  454.639108][T20748] Modules linked in:
[  454.643485][T20748] ---[ end trace 0000000000000000 ]---
[  454.657894][T20748] RIP: 0010:iter_file_splice_write+0xace/0x11b0
[  454.664225][T20748] Code: 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 67 d6 e6 ff 49 8b 1e 49 c7 06 00 00 00 00 48 83 c3 08 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 43 d6 e6 ff 4c 8b 1b 48 8b 3c 24
[  454.683923][T20748] RSP: 0018:ffffc90001e37820 EFLAGS: 00010202
[  454.690061][T20748] RAX: 0000000000000001 RBX: 0000000000000008 RCX: ffff88812922df00
[  454.698137][T20748] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 7ffffffffffffffe
[  454.706157][T20748] RBP: ffffc90001e37a40 R08: ffff8881f6f72240 R09: 1ffff1103edee448
[  454.714176][T20748] R10: 1ffff1103edee44b R11: 0000000000000fd8 R12: dffffc0000000000
[  454.722240][T20748] R13: 7ffffffffffffffe R14: ffff88811ab9e038 R15: ffff88811ab9e028
[  454.730276][T20748] FS:  00007fedaaa886c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  454.740073][T20748] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  454.746744][T20748] CR2: 0000000000000000 CR3: 00000001171ae000 CR4: 00000000003526b0
[  454.754809][T20748] Kernel panic - not syncing: Fatal exception
[  454.761245][T20748] Kernel Offset: disabled
[  454.765589][T20748] Rebooting in 86400 seconds..