last executing test programs:

5m15.259966837s ago: executing program 1 (id=255):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newae={0x5c, 0x1e, 0x5e74984b1e295b5f, 0x70bd25, 0x25dfdbfc, {{@in=@private=0xa010101, 0x4d5, 0x0, 0x3c}, @in=@multicast1, 0x5, 0x34ff}, [@replay_val={0x10, 0xa, {0x70bd2b, 0x70bd2d, 0x7ff8}}, @mark={0xc, 0x15, {0x35075d}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x850}, 0x20004810)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume_offset', 0x149a82, 0x0)
write$cgroup_int(r2, &(0x7f0000000140), 0x12)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0xfffffffffffffdb7, 0x0, &(0x7f0000000080)=[@decrefs], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_mtu(r3, 0x29, 0x17, 0x0, 0x0)
sendmmsg$inet6(r3, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0xc040)
openat$rnullb(0xffffffffffffff9c, 0x0, 0xa00, 0x0)
futex(&(0x7f0000000180)=0x2, 0x7, 0x1, &(0x7f0000000540), 0x0, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x20000000000001e4, &(0x7f0000000040)=[{0x6, 0xb, 0x4, 0x7}, {0xdf07, 0x0, 0xf8, 0x9}, {0x40, 0x7f, 0x2, 0x44}]})
r4 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0)
ioctl$EVIOCGLED(r4, 0x40284504, &(0x7f0000000000)=""/56)
r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r5)
ptrace$peeksig(0x4209, r5, &(0x7f00000003c0)={0x1, 0x0, 0xfffffeca}, 0x0)
open(0x0, 0x0, 0x718bb647156ec3b7)
r6 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = fsmount(r6, 0x1, 0x0)
r8 = openat$cgroup_procs(r7, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0)
pread64(r8, &(0x7f00000000c0)=""/36, 0xfffffe49, 0x800000000004)
ppoll(&(0x7f0000000440), 0x0, &(0x7f00000004c0), &(0x7f0000000500)={[0xfffffffffffffffe]}, 0x8)
ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000280))
sendmsg$AUDIT_SET(r7, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8100}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)={0x3c, 0x3e9, 0x2, 0x70bd2d, 0x25dfdbfe, {0x10, 0x0, 0x0, 0x0, 0x1, 0xe, 0x10000, 0x7, 0x0, 0x0, 0xc582}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x44010)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @flat=@handle={0x73682a85, 0x1000, 0x1}, @fda={0x66646185, 0x2, 0x2, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})

5m15.167928969s ago: executing program 1 (id=257):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async, rerun: 64)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000080)={0x4, 0x10ffff, 0xfffffffd}) (rerun: 64)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x8, 0x7ecfe12a, 0xa, 0x10, 0x16, "5d0f855dabc9a38b2c02931e263e3d9d579389"})
ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0)

5m15.167450768s ago: executing program 1 (id=258):
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8010)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000)
arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000000))
syz_open_dev$loop(&(0x7f0000006200), 0xb3, 0x82403)
ioctl$BLKRRPART(r1, 0x125f, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x22, 0x0, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

5m15.155849799s ago: executing program 1 (id=259):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
unshare(0x22020600)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in6=@private1}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, 0x0)
wait4(0x0, 0x0, 0x2, 0x0)
mount$9p_unix(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240), 0x20000, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
ioperm(0x1, 0x3, 0x163f)
r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSACTIVE(r3, 0x40047459, &(0x7f0000009280)={0xfffffffffffffff7, 0x0})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000000000004000000040000000000000000000000010000000400000000000000000000000000000000000000000000000000000004000000020000000100400000000000060000000000000002000000000000000100000000000000a200000001000000"])
write$ppp(r3, &(0x7f0000000180)="99d64c", 0x3)
readv(r3, &(0x7f0000009500)=[{&(0x7f00000092c0)=""/71, 0x47}], 0x1)
ptrace(0x10, r2)
ptrace$getregset(0x4204, r2, 0x201, &(0x7f00000001c0)={0x0, 0x300})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

5m14.267848215s ago: executing program 1 (id=270):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="44000000140001000000000000000000020000000420000014000100ff010006000000000000000000000001150002"], 0x44}}, 0x0)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x8000000100000000)
openat2(r3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x400000, 0x81, 0x10}, 0x18)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x86, 0x23, 0x9, 0xdedb, 0x18, "00faec694b00"})
ioctl$TIOCMSET(r4, 0x5418, &(0x7f0000000000)=0x8001)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0)
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
ioctl$TCSETSF2(r5, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x2, 0xff, 0x7, "ea71061d0000000001000200", 0x0, 0x80})
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x6)
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xffffff7fffffffff)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r7, @ANYBLOB="05", @ANYRES16=r7, @ANYRES16, @ANYRES16], 0x0)
syz_kvm_setup_cpu$x86(r3, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0)
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r6, 0x4068aea3, &(0x7f0000000100)={0xc7, 0x0, 0x1})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x800, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

5m14.239468356s ago: executing program 1 (id=271):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

5m14.203957926s ago: executing program 32 (id=271):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

3m40.287807317s ago: executing program 2 (id=2049):
getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, 0x0, &(0x7f0000000080))
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2b85fcf330ca9af6, 0x12, r0, 0x8ee42000)
ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f00000000c0)=@urb_type_bulk={0x3, {0x7, 0x1}, 0x3, 0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x5, 0x0})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB="a3b14f8f5dfc7509ac0e43363e1fbe8f2b1e9ab40ca7d532326cc6db5cfa2d51b46542cdaf852c20066245e1a8952f608ffbcf97ba3e4c5e2609ca0dec83b33e68c24297520c96a0bc0dbae1ced91e74a7ef17202ee3ae10d30d58e030959a9d896b702ba29172e1e7453ad5318390cb4300e402c77c388cb4a0b16a0d33367ea9", @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r1, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x3, {0x7, 0x29, 0x3c, 0x2100039, 0x0, 0x0, 0x1, 0x57, 0x0, 0x0, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000004280)="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", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x78, 0x0, 0x4, {0x3, 0xa, 0x0, {0x6, 0xfffffffffffffffa, 0xe2a, 0x1000, 0x4, 0x7, 0x5, 0xb, 0x6, 0x2000, 0x2, 0x0, 0x0, 0x7, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40042, 0x21)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}})
utimes(&(0x7f00000000c0)='./file0\x00', 0x0)
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0xa0031718561b10dc, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50)
utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x100)
syz_fuse_handle_req(r2, &(0x7f0000008340)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x78, 0x0, 0x3, {0x8000, 0xcd, 0x0, {0x2, 0x0, 0x9ef1, 0x1004, 0x5, 0x9b, 0xf79c000, 0x2339fdf8, 0x3, 0x8000, 0x538, 0x0, 0xffffffffffffffff, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap(&(0x7f000046e000/0x3000)=nil, 0x3000, 0x300000f, 0x11, r1, 0xc45f0000)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000040)=0x4, 0x4)
sendmsg$netlink(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}], 0x1}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x4)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000000)=0x1a, 0x4)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f0000000300)=0x1a, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)

3m39.435578313s ago: executing program 2 (id=2066):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r2, &(0x7f0000000000)=@abs={0x1}, 0x6e)
bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000180)={0x0, 'veth0_vlan\x00', {0x4}, 0x3ff})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x10, 0x0, &(0x7f0000001b40)=[@clear_death={0x400c6313, 0x1}], 0x0, 0x0, 0x0})

3m39.367889755s ago: executing program 2 (id=2067):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000040))
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f00000042c0)={&(0x7f0000004000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004280)={&(0x7f0000004300)={0x14, 0x1, 0x3, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}}, 0x14}}, 0x48000)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5)
mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000)

3m39.363326485s ago: executing program 2 (id=2068):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11)
mount(0x0, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000000)='omfs\x00', 0x100880, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0xa81404, 0x0)
pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0\x00')
r0 = openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0)
r1 = socket(0x10, 0x80002, 0x0)
sendmsg(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008001e00fff3c00e", 0x24}], 0x1}, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=<r2=>0x0)
rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000280)='./file0\x00')
r3 = syz_open_procfs(r2, &(0x7f0000000100)='net/udp6\x00')
read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020)

3m39.362269845s ago: executing program 2 (id=2070):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
socket$netlink(0x10, 0x3, 0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee42000)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_freeze_timeout', 0x1a1081, 0x18)
write$khugepaged_scan(r1, &(0x7f0000000000), 0x8) (async)
write$khugepaged_scan(r1, &(0x7f0000000000), 0x8)
setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000040)={0x3a, @empty, 0x4e23, 0x0, 'lblc\x00', 0x0, 0x8, 0x20}, 0x2c)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0) (async)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x2, 0x80000000000c, 0x1, 0x0, 0x0, 0x0) (async)
futex(&(0x7f000000cffc)=0x2, 0x80000000000c, 0x1, 0x0, 0x0, 0x0)
personality(0x5400004)
io_setup(0x9, &(0x7f0000000280))
ioctl$TIOCCONS(0xffffffffffffffff, 0x541d)
r3 = fsopen(&(0x7f0000000140)='msdos\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x1)
fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000100)='+\x00', 0x0, r4) (async)
fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000100)='+\x00', 0x0, r4)
openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r5 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_create(r5, &(0x7f0000000040)=@access={'system_u:object_r:ld_so_cache_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0xfffffffffffffffd}, 0x48) (async)
write$selinux_create(r5, &(0x7f0000000040)=@access={'system_u:object_r:ld_so_cache_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0xfffffffffffffffd}, 0x48)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f00000bd000), 0x0, 0x1000)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x1c)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) (async)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10)
fcntl$dupfd(r7, 0x0, r7) (async)
r8 = fcntl$dupfd(r7, 0x0, r7)
r9 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
getsockopt$IPT_SO_GET_INFO(r9, 0x0, 0x40, &(0x7f0000000300)={'security\x00', 0x0, [0xfff, 0x4, 0x800, 0x6b38, 0x8]}, &(0x7f0000000280)=0x54)
sendmsg$TIPC_NL_NAME_TABLE_GET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4040011)

3m39.305729476s ago: executing program 2 (id=2071):
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x7, <r0=>0xffffffffffffffff, 0x1})
ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000100)=@attr_other={0x0, 0x7, 0x6, &(0x7f00000000c0)=0x7})
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r2, 0x45809000)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0)
ioctl$BLKRRPART(r3, 0x125f, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x7, 0xffffffffffffffff, 0x1}) (async)
ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000100)=@attr_other={0x0, 0x7, 0x6, &(0x7f00000000c0)=0x7}) (async)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r2, 0x45809000) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) (async)
ioctl$BLKRRPART(r3, 0x125f, 0x0) (async)

3m39.255108647s ago: executing program 33 (id=2071):
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x7, <r0=>0xffffffffffffffff, 0x1})
ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000100)=@attr_other={0x0, 0x7, 0x6, &(0x7f00000000c0)=0x7})
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r2, 0x45809000)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0)
ioctl$BLKRRPART(r3, 0x125f, 0x0)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x7, 0xffffffffffffffff, 0x1}) (async)
ioctl$KVM_HAS_DEVICE_ATTR(r0, 0x4018aee3, &(0x7f0000000100)=@attr_other={0x0, 0x7, 0x6, &(0x7f00000000c0)=0x7}) (async)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r2, 0x45809000) (async)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0) (async)
ioctl$BLKRRPART(r3, 0x125f, 0x0) (async)

2m43.857960851s ago: executing program 4 (id=3034):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100})
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/97, 0x1000000, 0x1000, 0x5, 0x1}, 0x20) (async)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async, rerun: 32)
mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) (async, rerun: 32)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1280, 0x2}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008032, 0xffffffffffffffff, 0xcdc2000) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) (async, rerun: 32)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) (rerun: 32)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b"])
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r6, &(0x7f0000000040)="05000000010000", 0x7) (async, rerun: 64)
connect$netlink(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})

2m43.799784052s ago: executing program 4 (id=3035):
r0 = syz_open_dev$evdev(&(0x7f00000001c0), 0x200, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r2, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000002200)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})
r3 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40)
ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000240)={0x9, 0xf8, 0x2})
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r3)
socket$unix(0x1, 0x1, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="200000006d0001", @ANYRESHEX], 0x28}], 0x1}, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
mmap(&(0x7f000000f000/0x1000)=nil, 0x1000, 0x0, 0x3032, 0xffffffffffffffff, 0x1263b000)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000040)={{0x1309, 0x1, 0x101, 0x2}, 'syz1\x00', 0x13})
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
write(r5, &(0x7f0000000400)="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", 0x1f000)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
r6 = syz_open_dev$loop(&(0x7f0000000180), 0x7, 0xa242)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000005c0)={r7, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab38fc179f9f9e91dc1ddaaca7bd6447a4b4e00d9683dd010000000000000000030000000000000000000002000000000000000000ecff00", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c551240460fba6e00000000000000000000000000000000001000", [0x4, 0x40000000000000]}})
unlinkat$binderfs_device(0xffffffffffffff9c, 0x0)
write$nbd(r7, &(0x7f00000001c0)={0x67446698, 0x0, 0x1, 0x3, 0x3}, 0x10)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
mmap(&(0x7f00003ff000/0x2000)=nil, 0x2000, 0x200000d, 0x12, r5, 0x5e271000)

2m43.657637464s ago: executing program 4 (id=3036):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
fcntl$setlease(r1, 0x400, 0x2) (async)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r2, &(0x7f00000021c0)={0x1f, 0x404, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x2}, 0xe) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'geneve0\x00', <r3=>0x0})
sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="e5bc14fd2124b3efc46b031b3406c222f85f51cadf7bf2db08d1754e4774a9dc0f5697f2607557c93ebd69c76b77a5090fba1482a95b484170be5b487259d2e702087616b59c4ce5f3d0a5368ff74a69c84d0633a139f36d6c1954c9c4a9c74bb579e423ea9ac198fa42789303", 0x6d}], 0x1, &(0x7f0000000180)=[@ip_retopts={{0x58, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x18, [@private=0xa010102, @local]}, @cipso={0x86, 0x8, 0x1, [{0x7, 0x2}]}, @lsrr={0x83, 0xf, 0xd4, [@broadcast, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x10}]}, @noop, @timestamp_prespec={0x44, 0xc, 0x11, 0x3, 0x6, [{@rand_addr=0x64010102, 0xd}]}, @ra={0x94, 0x4, 0x1}, @noop, @generic={0x93, 0x11, "e6272e0bc119bf0f9f7e287321b7ed"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010102, @empty}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end, @noop, @noop]}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@rr={0x7, 0x13, 0x40, [@multicast1, @multicast2, @remote, @broadcast]}]}}}, @ip_retopts={{0x90, 0x0, 0x7, {[@ssrr={0x89, 0x23, 0x96, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @rand_addr=0x64010101, @remote, @private=0xa010100, @rand_addr=0x64010101]}, @ssrr={0x89, 0x13, 0xa3, [@dev={0xac, 0x14, 0x14, 0x3b}, @dev={0xac, 0x14, 0x14, 0x2f}, @remote, @private=0xa010101]}, @generic={0x7, 0x10, "d515597744e6f6003cdc6354fffc"}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x24, 0x14, 0x1, 0x3, [{@multicast2, 0x6}, {@multicast2, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x45aa}, {@multicast2}]}, @end, @lsrr={0x83, 0x3, 0x4a}, @generic={0x19e4da4bcb62b9c4, 0xe, "6ce74a082b0c18a83d544e05"}]}}}], 0x148}, 0x805)

2m43.655663565s ago: executing program 4 (id=3037):
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='befs\x00', 0x200000, 0x0)
lstat(&(0x7f0000000140)='./cgroup/file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
timer_create(0x4, 0x0, 0x0)
ptrace(0x10, r1)
openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x101000, 0x0)
ptrace$setregs(0x1a, r1, 0xc, &(0x7f0000000000))
mount$bpf(0x0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100), 0x1000, &(0x7f0000000200)={[{@mode={'mode', 0x3d, 0x6}}], [{@fowner_gt={'fowner>', r0}}, {@appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '&-'}}, {@appraise_type}, {@seclabel}, {@subj_type={'subj_type', 0x3d, '}!'}}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x34, 0x0, 0x62, 0x62, 0xc78d548e2dbadccd, 0x33, 0x39], 0x2d, [0x7, 0x33, 0x61, 0x39], 0x2d, [0x64, 0x39, 0x0, 0x62], 0x2d, [0x65, 0x34, 0x33, 0x34], 0x2d, [0x36, 0x36, 0x0, 0x61, 0x64, 0x38, 0x61, 0x62]}}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}]})

2m43.654824394s ago: executing program 4 (id=3038):
r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000040)=""/233) (async)
syz_usb_connect$uac1(0x5, 0xdb, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9, 0x3, 0x1, 0x10, 0x0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7fff, 0x9e}, [@feature_unit={0xf, 0x24, 0x6, 0x5, 0xfa, 0x4, [0x2, 0x6, 0x7, 0x4], 0x6}, @mixer_unit={0x8, 0x24, 0x4, 0x5, 0x3, "81ea59"}, @selector_unit={0xb, 0x24, 0x5, 0x4, 0x1e, "7d9a6549b59a"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3, 0x3, 0xfa, 0xb5, "1f58", "5117"}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x6, 0x7653, 0xca, "d1b0"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x2, 0x4, 0x40, 0xf8, "1c10"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xa1da, 0x8001, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xf7, 0x4, 0x4, {0x7, 0x25, 0x1, 0x3, 0xff, 0xd75}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x0, 0x4, 0x97, 0xf4, "a3af778f"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x9, 0x4, 0x9, 0xa, "2db0", '^'}, @as_header={0x7, 0x24, 0x1, 0x7, 0x4, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x81, 0x0, 0x6, {0x7, 0x25, 0x1, 0x81, 0x9, 0x7}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0x2, 0x8, 0x0, 0x40, 0x2}, 0x4b, &(0x7f0000000280)={0x5, 0xf, 0x4b, 0x4, [@wireless={0xb, 0x10, 0x1, 0xc, 0x5, 0xff, 0x14, 0xffff, 0x5}, @ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x40, 0xf00, 0xfffb, [0xff00, 0xe856479d520dcd76, 0xff3f00, 0xc0, 0xf0, 0xff00cf]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x40, 0xd, 0xfe, 0x7, 0x2}, @ssp_cap={0xc, 0x10, 0xa, 0x9, 0x0, 0x3, 0x0, 0x5}]}, 0x1, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x42c}}]}) (async, rerun: 64)
ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000380)={0x6, 0x10, 0x0, 0x8}) (async, rerun: 64)
syz_usb_connect(0x4, 0xc56, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x7b, 0xf1, 0x73, 0x10, 0x83a, 0x5501, 0x4e35, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc44, 0x3, 0x7, 0xb4, 0x50, 0x3, [{{0x9, 0x4, 0x88, 0x1, 0xa, 0x95, 0xd2, 0x4f, 0x78, [@uac_control={{0xa, 0x24, 0x1, 0x3000, 0x1}, [@selector_unit={0x5, 0x24, 0x5, 0x4, 0x1}]}], [{{0x9, 0x5, 0x6, 0xc, 0x400, 0x1, 0x1, 0x0, [@generic={0xa5, 0x23, "1f46b7057dd255e4ca315b709e70ca5ace83b7aa578ed6367b8927ced591e51f3ad4ae8c7f43e4d95b5d8451317183869a596156f6b109b74624b4817e5defa5c34ecfbb0782ca48471ea57d4bb89ab8bba98961aa2faa92debd14e86f9fab8ae89cf3722df20c03d03d43990085d68f4ee6f78329539253f274678d3af40bf7992e5ec0d5f128f73049c0afbaeedf0b0e456548035f919b2a16c2b750d7c52e0eaf02"}, @generic={0x31, 0x8, "5d910f03af4a65860bf9ae4c44fb3d8684565e5c83557c0d7225ac55296c052b1ef8bf969416fd0642e709bfc8fcdd"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x23, 0x0, 0xff, [@generic={0x25, 0x8, "ead0907048c4d744b89126c1b779a81f3b39773180bdaa67a94a72b0b9cb3495dea23a"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x7fff}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0x74, 0x30, 0x2, [@generic={0xe4, 0x25, "7a47d470e132da10529311d695253f8cee04383513760cf56263afe8e0f1339bb5497ee3cbe771c0254256c3e3526f1a0250eadf90e0c099d63e26dd06768bcf4d27253baebb168ec7fa196a17f54a78cb246762779424450d21ff6aabe05cba4d14c58c36cd1d1e7dbc5a9c3aef728d5ff7214c32fa6873bfe6e1d8bb9a3e80656ad5636e0dc6322440a498b4ca60c2732b407de8c29566ae861f8bdab8f0ae83e3832420fbd6609abb948ed5b472ad2908a6d9f6cfa7591a84c8787bfd1e77b383e1a74995f0e66f5206973512e7ded31324fb6bf331b113f6bc52773f793c5def"}, @generic={0xf1, 0x3, "2ea8639c897afa77da1bada22ff355247649c0db9b67385a5e7e6936ff07ecccccd2b6a734dc5250d8ba901c07889cd2d7f5b0f082c4dd1f76bcbcadd06d4b5915b8a02715e71d34a66d898f36417c2dc4200b2a7114974d0884974c8a49fb806dd06fe534a0b8bdc7d1c697580a00f5ed256ee8328e11cbaa3df1c67a1cc8367591bd9d55c3478808d184d0fc7bdf53ae83946a39333c1ae500584040cdbbc3457274e5b10038b5419a917cbdc8c7fba373a592e92f20043a432d33281c72a7346cd0d6f67733da41e0a87578e4d2c068e9b742b99dcb22c83d6e0dcdae9b018e874078dbe15a48fd10d95ca068e9"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0xc0, 0x21, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xf, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xe0, 0xffff}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x5f, 0xbe, 0x7, [@generic={0xee, 0xe, "ab9d11cb824bae7421924900bdb4fdbbdd7f781f5683f1390a0cc66cd4b8f59021bd351691d603853b8326f976e118da170ce1a04ce8ffb5ff285ef1f056a80a84c3e066bb68f00ab5538766b2d85278363e7112e04c2c90438bf86678aec594f5a02d5da2d82acf1894ed6efa37d7808d947dda49227ef8404b30ab6b1ea08fc5a98d43ad1e1abc44e827b8c2e39a2d45bba3abd697b9df21b9ec76fc5f972ce61d39df0aa7f2557e23479526236c27f7ed33fe1f31129f3869bb905ec0a3e584f44791d1651277617873316fdbe8d5efa7b7683b081727c040a7b8f257330e5b0e2d01acda4be3f8e1790c"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x6, 0x0, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x1}]}}, {{0x9, 0x5, 0xf, 0x4a21d8ca5de2b03, 0x40, 0x6, 0xc7, 0x9}}, {{0x9, 0x5, 0x4, 0x4, 0x40, 0xd, 0x1, 0x14}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x4, 0x8d, 0x5, [@generic={0x4e, 0x4, "00e83f084add48236be6f50cb69fedf00f7bad8d3012fbfacd1f72d77bffa78523974c609021a1ec840433f11ac2f97cbb3f980df3fa8166cc6aba610bcf2fec9b4bcb36ce5f9c5394353672"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x420, 0x3, 0xe, 0xb9, [@generic={0xc2, 0x21, "7dc4bda12f7568a7f550cf1550f204a8fee1a1bc245a413ea566d71fe7236afea8b6e6a7695f7fd3f2287b0379487fdc8abb42cb1c7c5758e039af761c69e4feab78516beacc98142e349bcb87fbea9933582f5a501d4533528217bc116581bb7955342feeb98d0a86c1b8acfc9e386982e0d9cbffa95ee188f5924de1322bf1d0df158fb21ef127d94de4d3a88fe77d21e6f2602c37270869d84abd9e64afd543396d42f511ffd05ca73dd1bc0b62737be507cd1c2d0528fcc11b79250e10e6"}, @generic={0x1d, 0xf, "ddbe914e3f2a2dd2ea0a4a26b55c7299ba66877bb686551578cf64"}]}}]}}, {{0x9, 0x4, 0x15, 0xa, 0x3, 0xff, 0x47, 0xd0, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x9, 0x7f}, [@processing_unit={0x7, 0x24, 0x7, 0x1, 0x4, 0x2}, @selector_unit={0x9, 0x24, 0x5, 0x3, 0xfc, "8e97608f"}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0x6, 'U'}]}, @uac_as={[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xed, 0x4, 0x6, 0x2, "3656cb"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x7, 0xfffe, 0x6}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0xd, 0x4, 0x40, 0x2, "3c41ea272cd00158"}]}], [{{0x9, 0x5, 0xe, 0x10, 0x1f7, 0xb, 0xe, 0x2, [@generic={0xc5, 0xd, "def7360e1f27ab9ffdd7213581efd0893022f5b03dc244cbf56abac673a0e8025d5ad9c2b164c3d9f13c0b858603a6ca0c3427bb1a5fc2a14ba98c428de9313810239a2805ca4f75514f6ae257a5995a13f85dcfb28cf1dddf0fb6ae2c78718213520544d627cee15859abf605109e0773f3e9ecaa1faa7d9a561bf87077eefab6e380dda39029f6c0262950019a317007e31342140fef9c0bb16d634c9642a0e78ba125f48648d0f0418900faa6cd1904ca287d41dd8e681812f50ca5299ae557dc75"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xb, 0x4}]}}, {{0x9, 0x5, 0x8, 0x8, 0x200, 0x6, 0x0, 0x0, [@generic={0x11, 0xa, "7fc4c167cbc057a35d83c596683db4"}, @generic={0xac, 0x31, "582e95f12524744d66ecc85b015ad790ceb636c4330ec2b00a70da84e6512c481750ad26a0d8100bc73324804fc973af357579c77c14a69b69dc658cd76b2514c68e9410aa1637600de5b5a12ad95f5c0e2b1e6106e66d20f0b7ee1df1b71eb0ca1900d5e1d5e31ccdb98cbf8cae24f7d0290fafdf0d5881a1dd35b4509e34970568058223647a477e582a8b2d5c732eb2640bf1def3eb35c9a2a5b28b23949758d117a5e20e49daf493"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x70, 0xe9, 0x9, 0x5, [@generic={0xf0, 0xb, "e7712845a94c6312349cd2e06b4e1096de6c4a8ebc902290307aa702ae40e0b8b1752ebf8136ff7da11ebe2b1a528a3bba2d169643870387ca467b0ba724f4eb37fb78316f3895440af821eb5fdfc309005d2c147e10cc4de7e9ab007d160cb7cc8a8abfebf37cfeca1d2877252976ea67737b29294173d0ecb4102617f52e961c04dd4dcad7367d43ac0e3190178f15a1f5b061bdad896a908da1bde4333ef5906af08366a0600355af1355a9198ca95cf89577f2e9dd2448f6efb45b759ee1a65ef4dba2aec39994bbb18b3906e493985432a46802a44d07fe8f1764219cdf3969912565a1c5f06a2f503065f6"}, @generic={0xce, 0xf, "c2e1665f313c5677de93e1be12a0fec8d402856ff9b879b37ca728fc8118e1b4fdd1768033158152dab1bcd3f3935eacd2ab912b21751cb30a0935f253bd289949f48a47485811712eff3fdc416f02cfe4ed97077ade7e8204ae397d2591ebdcc2ca4ab324d9aba1defafdc2d27a8eb002c48112d2c7208ea68b7c8ef1567f4297da8190b490b5d9c408f1110630ffe39aa165ddd9359a645c1b5f780638255ba5edb407df1cf34021ffef26db028e06c4da17b72d79cdf0fa711911b9baf715d5d67c1d2b28fb4482690ee8"}]}}]}}, {{0x9, 0x4, 0xef, 0xa, 0xe, 0x8a, 0xd2, 0xb6, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x9}, [@selector_unit={0xa, 0x24, 0x5, 0x1, 0x0, "ef556cf9f6"}, @extension_unit={0x7, 0x24, 0x8, 0x3, 0x5}]}, @cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "b79df5"}, {0x5, 0x24, 0x0, 0xfffa}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x8, 0x2, 0x4}, {0x6, 0x24, 0x1a, 0x9, 0x34}}], [{{0x9, 0x5, 0x11899f228c7fc3fc, 0x4, 0x8, 0x81, 0x5, 0x8, [@generic={0xa9, 0xc, "771267ec2062c2cede4feef6671d949027bb38bc6747508f0bb041333f2815810701475700aa4d738c7ec038f83fbccee23f157e3508a849b8026b64e7e1e981598f509316d8a97671baa0b0e6d6f23ffcb749225d1c3a5a125a54abc3c3b8ab8fd9a7c6fba4d0a5ad7314a0f4a5955151712eeadc8a12f9410fd79c20c97eb8fb19539e88759553a5717dff9bc62752ae886f9990331704974c835c4bef99c49839767fc05d7c"}, @generic={0x46, 0x7, "b7771590f45a4b63745ed1dc5621d69ede0c557f9c95b2488e1dd7c60ff4c00187f388421673807ff0a652c614cd7933c762fb3b80d7ac39bbdec4938b2b3d52ee9b8a34"}]}}, {{0x9, 0x5, 0x86, 0x14, 0x3ff, 0x4, 0xed, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x7eb}, @generic={0xa0, 0x7, "630aaf9ee0dab147e43097c80a151fd5be968ad83a36652454edfa4fe7444d9530a8364a2b157a1ffce2bb11dcdcb03d7afafe191d5835b3168eadbbaf4b5f31067be31a93d0885ebf6c35a60a5b279a14796967b593ab8f9179177472b581dde5ca3a6bfcfa7e9fdd2a4cff7b0f3d95afc3dd899b8fd817e41e80838dd9c67e05b657fae0ea24c4cbb96a4209731014f1adde2e475151a779cdec831851"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x9, 0x4, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xd2, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x8}]}}, {{0x9, 0x5, 0x8, 0x1, 0x40, 0x7, 0x9, 0xc}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x0, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7f, 0x1d6}]}}, {{0x9, 0x5, 0x9, 0x2, 0x200, 0x0, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xc4, 0xa}]}}, {{0x9, 0x5, 0xe, 0x2, 0x10, 0x1, 0x1, 0x9b, [@generic={0x78, 0x30, "bdd11104f629cc2e791952a514f113f06628473685ba6ad2462c378df5f983221711ff260e821f43d69c1dad019824047b6d8688eb60eb7ae2a57983b5a13f8cacaa473442a1769fe6e8048547d6a02e1a696660d490dc7a3282a5013a1dc91ea80e61526222d38465a6b280f705622c33fb33ff6677"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x3}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x2, 0xff, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x3}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x3, 0xfc, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xfe, 0x403f}]}}, {{0x9, 0x5, 0xd, 0x4, 0x20, 0x7, 0x6, 0x5}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x5, 0x9, 0x1}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0xa, 0x3, 0x91, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x3}]}}, {{0x9, 0x5, 0x4, 0x3, 0x618, 0x80, 0x7, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x2}]}}, {{0x9, 0x5, 0x109, 0x3, 0x20, 0x4, 0x8, 0x7b}}]}}]}}]}}, &(0x7f0000001100)={0xa, &(0x7f0000001040)={0xa, 0x6, 0x110, 0xa, 0x76, 0x7, 0x20, 0x6}, 0x5, &(0x7f0000001080)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x2801}}]}) (async)
mount$binderfs(&(0x7f0000001140), &(0x7f0000001180)='./binderfs\x00', &(0x7f00000011c0), 0x80000, &(0x7f0000001200)={[{@max={'max', 0x3d, 0x4}}], [{@smackfsdef={'smackfsdef', 0x3d, '\''}}, {@obj_user={'obj_user', 0x3d, '/selinux/mls\x00'}}]})
ioctl$TIOCSBRK(r0, 0x5427) (async)
sched_setscheduler(0xffffffffffffffff, 0x3, &(0x7f0000001280)=0x1) (async)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) (async)
read(r0, &(0x7f00000012c0)=""/17, 0x11) (async, rerun: 32)
r1 = fspick(r0, &(0x7f0000001300)='./file0\x00', 0x1) (rerun: 32)
fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000001340)='silent\x00', 0x0, 0x0)
r2 = eventfd(0x0)
ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000001380)={r0, 0xf, 0x0, r2}) (async, rerun: 32)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 32)
ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f00000013c0)={0x9, 0x9, 0x7, 0x0, 0x2, 0xffff})
ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000001400)) (async)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) (async, rerun: 64)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000001440)={0x2, 0x7, 0xfff, 0x6, 0x7, "adceeafc7033c29e9f9f063c00b8d4ac5c2a23", 0x10000, 0x2}) (async, rerun: 64)
r4 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001480), 0x2, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) (async)
creat(&(0x7f00000014c0)='./file0\x00', 0x20)
lsetxattr(&(0x7f0000001500)='./file0\x00', &(0x7f0000001540)=@random={'trusted.', '\x00'}, &(0x7f0000001580)='\x00', 0x1, 0x1) (async, rerun: 64)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000015c0)={0x30, 0x5, 0x0, {0x0, 0x3, 0x8, 0xa}}, 0x30) (rerun: 64)
ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000001640)=&(0x7f0000001600)) (async)
r5 = syz_open_dev$hiddev(&(0x7f00000016c0), 0xb6, 0x208100)
fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000001680)='trusted.', 0x0, r5) (async)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000001700), 0x11d081, 0x0) (async)
madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x65)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x38)

2m43.653128384s ago: executing program 4 (id=3039):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
clock_gettime(0xfffffffffffffffe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18)
r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000780)=[@rdmsr={0x32, 0x18, {0x118}}, @cpuid={0x14, 0x18, {0xa, 0x800}}, @uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x18, 0x7fff}, @cpuid={0x14, 0x18, {0x7, 0xd}}, @wr_crn={0x46, 0x20, {0x2, 0x113}}, @wr_crn={0x46, 0x20, {0x3, 0x3}}, @uexit={0x0, 0x18, 0xc}, @code={0xa, 0x69, {"0f20d835080000000f22d8c4a249dcd8663e66470f388008420f0f01a0c7442400e5000000c744240242000000ff2c24400f0766460fd8930028000066b800000f00d066450f00e066baf80cb850ea0e87ef66bafc0c66ed"}}, @uexit={0x0, 0x18, 0x3}, @wr_crn={0x46, 0x20, {0x8, 0x6}}, @code={0xa, 0x5a, {"43c01ca9bfc401bd5ce966b87a000f00d0c4c249af9d484c0000477b00c744240024000000c744240200600000c7442406000000000f011424f390c462795803410f01c3c4a2d5abcb"}}, @wrmsr={0x1e, 0x20, {0x3f7, 0x8}}, @uexit={0x0, 0x18, 0x1}, @rdmsr={0x32, 0x18, {0xc0010202}}, @cpuid={0x14, 0x18, {0x1000}}, @cpuid={0x14, 0x18, {0x9, 0xdc2}}, @rdmsr={0x32, 0x18, {0x48b}}, @cpuid={0x14, 0x18, {0x8, 0x101}}, @cpuid={0x14, 0x18, {0xffff, 0x8f4}}, @cpuid={0x14, 0x18, {0x69b438bf, 0x7}}, @cpuid={0x14, 0x18, {0x6, 0x4}}, @code={0xa, 0x64, {"8f4978c383af000000360f07660f38813a66ba4300b0e3ee66430f38813b66baf80cb85896ba89ef66bafc0c66ed48b80b000000000000000f23d00f21f835200000030f23f866b829000f00d0400f01c50f77"}}, @wrmsr={0x1e, 0x20, {0x23b, 0x6}}, @cpuid={0x14, 0x18, {0x0, 0x9}}, @cpuid={0x14, 0x18, {0x9, 0x100}}], 0x377})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="c744240093000000c744240200000000ff1c24b805000000b9821c00000f01c1c481796ef9c744240000880000c7442402b4838507c7442406000000000f011c24c4c259cf529bc482fd232c1bdc47ffc40291914c7a073e2e3e64420f01c566baa10066ed", 0x65}], 0x1, 0xf, &(0x7f0000000280)=[@cstype3={0x5, 0x4}], 0x1)
r3 = open(0x0, 0x0, 0x718bb647156ec3b7)
creat(&(0x7f00000000c0)='./file0\x00', 0x43)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c)
listen(r4, 0x3)
mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22'])
ppoll(&(0x7f0000000440)=[{r3, 0x4040}, {0xffffffffffffffff, 0x422}, {0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x113c}, {r0, 0x2}], 0x5, &(0x7f00000004c0), &(0x7f0000000500)={[0xfffffffffffffffe]}, 0x8)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000700)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000600)=""/225, 0xe1, 0x2, 0x32}, @fda={0x66646185, 0x2, 0x2, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
clock_gettime(0xfffffffffffffffe, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) (async)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000780)=[@rdmsr={0x32, 0x18, {0x118}}, @cpuid={0x14, 0x18, {0xa, 0x800}}, @uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x18, 0x7fff}, @cpuid={0x14, 0x18, {0x7, 0xd}}, @wr_crn={0x46, 0x20, {0x2, 0x113}}, @wr_crn={0x46, 0x20, {0x3, 0x3}}, @uexit={0x0, 0x18, 0xc}, @code={0xa, 0x69, {"0f20d835080000000f22d8c4a249dcd8663e66470f388008420f0f01a0c7442400e5000000c744240242000000ff2c24400f0766460fd8930028000066b800000f00d066450f00e066baf80cb850ea0e87ef66bafc0c66ed"}}, @uexit={0x0, 0x18, 0x3}, @wr_crn={0x46, 0x20, {0x8, 0x6}}, @code={0xa, 0x5a, {"43c01ca9bfc401bd5ce966b87a000f00d0c4c249af9d484c0000477b00c744240024000000c744240200600000c7442406000000000f011424f390c462795803410f01c3c4a2d5abcb"}}, @wrmsr={0x1e, 0x20, {0x3f7, 0x8}}, @uexit={0x0, 0x18, 0x1}, @rdmsr={0x32, 0x18, {0xc0010202}}, @cpuid={0x14, 0x18, {0x1000}}, @cpuid={0x14, 0x18, {0x9, 0xdc2}}, @rdmsr={0x32, 0x18, {0x48b}}, @cpuid={0x14, 0x18, {0x8, 0x101}}, @cpuid={0x14, 0x18, {0xffff, 0x8f4}}, @cpuid={0x14, 0x18, {0x69b438bf, 0x7}}, @cpuid={0x14, 0x18, {0x6, 0x4}}, @code={0xa, 0x64, {"8f4978c383af000000360f07660f38813a66ba4300b0e3ee66430f38813b66baf80cb85896ba89ef66bafc0c66ed48b80b000000000000000f23d00f21f835200000030f23f866b829000f00d0400f01c50f77"}}, @wrmsr={0x1e, 0x20, {0x23b, 0x6}}, @cpuid={0x14, 0x18, {0x0, 0x9}}, @cpuid={0x14, 0x18, {0x9, 0x100}}], 0x377}) (async)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="c744240093000000c744240200000000ff1c24b805000000b9821c00000f01c1c481796ef9c744240000880000c7442402b4838507c7442406000000000f011c24c4c259cf529bc482fd232c1bdc47ffc40291914c7a073e2e3e64420f01c566baa10066ed", 0x65}], 0x1, 0xf, &(0x7f0000000280)=[@cstype3={0x5, 0x4}], 0x1) (async)
open(0x0, 0x0, 0x718bb647156ec3b7) (async)
creat(&(0x7f00000000c0)='./file0\x00', 0x43) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) (async)
listen(r4, 0x3) (async)
mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) (async)
ppoll(&(0x7f0000000440)=[{r3, 0x4040}, {0xffffffffffffffff, 0x422}, {0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x113c}, {r0, 0x2}], 0x5, &(0x7f00000004c0), &(0x7f0000000500)={[0xfffffffffffffffe]}, 0x8) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000700)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000600)=""/225, 0xe1, 0x2, 0x32}, @fda={0x66646185, 0x2, 0x2, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) (async)

2m28.647488317s ago: executing program 34 (id=3039):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
clock_gettime(0xfffffffffffffffe, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18)
r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000780)=[@rdmsr={0x32, 0x18, {0x118}}, @cpuid={0x14, 0x18, {0xa, 0x800}}, @uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x18, 0x7fff}, @cpuid={0x14, 0x18, {0x7, 0xd}}, @wr_crn={0x46, 0x20, {0x2, 0x113}}, @wr_crn={0x46, 0x20, {0x3, 0x3}}, @uexit={0x0, 0x18, 0xc}, @code={0xa, 0x69, {"0f20d835080000000f22d8c4a249dcd8663e66470f388008420f0f01a0c7442400e5000000c744240242000000ff2c24400f0766460fd8930028000066b800000f00d066450f00e066baf80cb850ea0e87ef66bafc0c66ed"}}, @uexit={0x0, 0x18, 0x3}, @wr_crn={0x46, 0x20, {0x8, 0x6}}, @code={0xa, 0x5a, {"43c01ca9bfc401bd5ce966b87a000f00d0c4c249af9d484c0000477b00c744240024000000c744240200600000c7442406000000000f011424f390c462795803410f01c3c4a2d5abcb"}}, @wrmsr={0x1e, 0x20, {0x3f7, 0x8}}, @uexit={0x0, 0x18, 0x1}, @rdmsr={0x32, 0x18, {0xc0010202}}, @cpuid={0x14, 0x18, {0x1000}}, @cpuid={0x14, 0x18, {0x9, 0xdc2}}, @rdmsr={0x32, 0x18, {0x48b}}, @cpuid={0x14, 0x18, {0x8, 0x101}}, @cpuid={0x14, 0x18, {0xffff, 0x8f4}}, @cpuid={0x14, 0x18, {0x69b438bf, 0x7}}, @cpuid={0x14, 0x18, {0x6, 0x4}}, @code={0xa, 0x64, {"8f4978c383af000000360f07660f38813a66ba4300b0e3ee66430f38813b66baf80cb85896ba89ef66bafc0c66ed48b80b000000000000000f23d00f21f835200000030f23f866b829000f00d0400f01c50f77"}}, @wrmsr={0x1e, 0x20, {0x23b, 0x6}}, @cpuid={0x14, 0x18, {0x0, 0x9}}, @cpuid={0x14, 0x18, {0x9, 0x100}}], 0x377})
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="c744240093000000c744240200000000ff1c24b805000000b9821c00000f01c1c481796ef9c744240000880000c7442402b4838507c7442406000000000f011c24c4c259cf529bc482fd232c1bdc47ffc40291914c7a073e2e3e64420f01c566baa10066ed", 0x65}], 0x1, 0xf, &(0x7f0000000280)=[@cstype3={0x5, 0x4}], 0x1)
r3 = open(0x0, 0x0, 0x718bb647156ec3b7)
creat(&(0x7f00000000c0)='./file0\x00', 0x43)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c)
listen(r4, 0x3)
mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22'])
ppoll(&(0x7f0000000440)=[{r3, 0x4040}, {0xffffffffffffffff, 0x422}, {0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x113c}, {r0, 0x2}], 0x5, &(0x7f00000004c0), &(0x7f0000000500)={[0xfffffffffffffffe]}, 0x8)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000700)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000600)=""/225, 0xe1, 0x2, 0x32}, @fda={0x66646185, 0x2, 0x2, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
clock_gettime(0xfffffffffffffffe, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x18) (async)
syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000780)=[@rdmsr={0x32, 0x18, {0x118}}, @cpuid={0x14, 0x18, {0xa, 0x800}}, @uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x18, 0x7fff}, @cpuid={0x14, 0x18, {0x7, 0xd}}, @wr_crn={0x46, 0x20, {0x2, 0x113}}, @wr_crn={0x46, 0x20, {0x3, 0x3}}, @uexit={0x0, 0x18, 0xc}, @code={0xa, 0x69, {"0f20d835080000000f22d8c4a249dcd8663e66470f388008420f0f01a0c7442400e5000000c744240242000000ff2c24400f0766460fd8930028000066b800000f00d066450f00e066baf80cb850ea0e87ef66bafc0c66ed"}}, @uexit={0x0, 0x18, 0x3}, @wr_crn={0x46, 0x20, {0x8, 0x6}}, @code={0xa, 0x5a, {"43c01ca9bfc401bd5ce966b87a000f00d0c4c249af9d484c0000477b00c744240024000000c744240200600000c7442406000000000f011424f390c462795803410f01c3c4a2d5abcb"}}, @wrmsr={0x1e, 0x20, {0x3f7, 0x8}}, @uexit={0x0, 0x18, 0x1}, @rdmsr={0x32, 0x18, {0xc0010202}}, @cpuid={0x14, 0x18, {0x1000}}, @cpuid={0x14, 0x18, {0x9, 0xdc2}}, @rdmsr={0x32, 0x18, {0x48b}}, @cpuid={0x14, 0x18, {0x8, 0x101}}, @cpuid={0x14, 0x18, {0xffff, 0x8f4}}, @cpuid={0x14, 0x18, {0x69b438bf, 0x7}}, @cpuid={0x14, 0x18, {0x6, 0x4}}, @code={0xa, 0x64, {"8f4978c383af000000360f07660f38813a66ba4300b0e3ee66430f38813b66baf80cb85896ba89ef66bafc0c66ed48b80b000000000000000f23d00f21f835200000030f23f866b829000f00d0400f01c50f77"}}, @wrmsr={0x1e, 0x20, {0x23b, 0x6}}, @cpuid={0x14, 0x18, {0x0, 0x9}}, @cpuid={0x14, 0x18, {0x9, 0x100}}], 0x377}) (async)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="c744240093000000c744240200000000ff1c24b805000000b9821c00000f01c1c481796ef9c744240000880000c7442402b4838507c7442406000000000f011c24c4c259cf529bc482fd232c1bdc47ffc40291914c7a073e2e3e64420f01c566baa10066ed", 0x65}], 0x1, 0xf, &(0x7f0000000280)=[@cstype3={0x5, 0x4}], 0x1) (async)
open(0x0, 0x0, 0x718bb647156ec3b7) (async)
creat(&(0x7f00000000c0)='./file0\x00', 0x43) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) (async)
listen(r4, 0x3) (async)
mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) (async)
ppoll(&(0x7f0000000440)=[{r3, 0x4040}, {0xffffffffffffffff, 0x422}, {0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x113c}, {r0, 0x2}], 0x5, &(0x7f00000004c0), &(0x7f0000000500)={[0xfffffffffffffffe]}, 0x8) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000700)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000600)=""/225, 0xe1, 0x2, 0x32}, @fda={0x66646185, 0x2, 0x2, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x40}}, 0x400}], 0x0, 0x0, 0x0}) (async)

2m7.935777678s ago: executing program 3 (id=3531):
creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
socket$inet_icmp(0x2, 0x2, 0x1)
socket(0x10, 0x3, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)
r3 = add_key$keyring(&(0x7f0000002740), &(0x7f0000002780)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb)
add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$clear(0x7, r3)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r4 = dup(r1)
write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
mount$9p_fd(0x0, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="cce3b9642d4486d6000000"])
syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000), 0x20000328)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000001240)={0x49834e15, 0x4f0, 0x9, 0x1, 0x81}, 0x14)
fcntl$setpipe(0xffffffffffffffff, 0x8, 0x80000000)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0)
syz_clone(0x1000080, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = syz_usb_connect$cdc_ecm(0x5, 0x0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')

2m7.160119072s ago: executing program 3 (id=3533):
write$FUSE_NOTIFY_POLL(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x1, 0x0, {0x60000000}}, 0x18)
timer_create(0x7, &(0x7f0000000180)={0x0, 0x2a, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000240)={{0x77359400}}, &(0x7f0000000280))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x800, 0x0, 0x2, 0x0, 0x6109, 0xc2}, 0x20)
close_range(0xffffffffffffffff, r1, 0x0)
close(r2)
r3 = syz_usb_connect$uac1(0x2, 0xd8, &(0x7f00000009c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x2, 0x40, 0x56, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0xf4}, [@mixer_unit={0xb, 0x24, 0x4, 0x6, 0x1, "04914fe6e26f"}, @extension_unit={0x7, 0x24, 0x8, 0x6, 0xb, 0x3}, @feature_unit={0x13, 0x24, 0x6, 0x2, 0x5, 0x6, [0xa, 0x6, 0x2, 0x2, 0x8, 0x3]}, @feature_unit={0x7, 0x24, 0x6, 0x2, 0x5, 0x0, [], 0x1}, @extension_unit={0xc, 0x24, 0x8, 0x2, 0x1, 0x41, "f3d0a69cfe"}, @mixer_unit={0x5, 0x24, 0x4, 0x6, 0xd}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x7, 0x1000}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0xa, 0x4, "f7bc"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0xde, 0x4, {0x7, 0x25, 0x1, 0x80, 0x1, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xa, 0x9, 0x1002}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x3, 0x4, 0x0, "", "7faee6"}, @as_header={0x7, 0x24, 0x1, 0x4, 0x2, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0xd, 0x6, {0x7, 0x25, 0x1, 0x80, 0xb, 0x9}}}}}}}]}}, &(0x7f0000000d80)={0xa, &(0x7f0000000ac0)={0xa, 0x6, 0x200, 0x0, 0xdc, 0x2, 0x20, 0x6}, 0x20a, &(0x7f00000014c0)={0x5, 0xf, 0x20a, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "f07f7481aa3a7e60d7018bca9d829245"}, @ssp_cap={0x20, 0x10, 0xa, 0xef, 0x5, 0x2, 0x991e, 0x9, [0xc00f, 0xff00, 0xc000, 0x30, 0xff]}, @generic={0x59, 0x10, 0x2, "98d136a08e8de3eae2ada947f797398402087b69274d880da02e09d5034a84c1553fcc94c10f4b15c8b475d4468de760b677689a28134ccbea86eef717d19be9b8430748fa801777ffd3299e6570ccf783a118a2f90b"}, @generic={0xa1, 0x10, 0x1, "2a8e75799cde2058d15ef2e7bc7a0f7d7e90793c715173b0b32c41be2e4a2b3c1837fc9d5d444a6d53a95fef4344a86aaf29b1ae994df904c84b5663e947a5e8114f18f9eb59158a4442e127cc836b3d384c26b8db6f31f63d397cf3fc35e3467909c5bd6aaa2c965f310fc9ba723a329b0e867732e112915cc42ac07e48e258b182cdbaa504bd54001578aee0b8a0be9a41371e3c2c29c2925f99a8ead5"}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x1, 0xf000, 0x1000, [0xcf, 0xc000]}, @generic={0xc3, 0x10, 0x1, "8036151fd3839482e4745fd22432bb247f3c00210b6ebf3b3ddc433394ed300a4b094be2ee0167b90c4769d58ca80a86797d9079cf64907c4d095c511b0497ebb74ee455eaf34151fb883cce06e66472cd61ced87dd4784a993a92e66ad8957d52e97342ed95baca73250af4ec1e5b113d6cb99106d3be55dab8d8b2c56e8b43b6fe35ee18292212255281b7d1f975eb1fa4980c74e304aa9a3f0a98181501dd34e60649a9f1719a094afa8cf2e1f0953b40525a918a85b98c681d4058f6b899"}]}, 0x2, [{0x28, &(0x7f0000000d00)=@string={0x28, 0x3, "a2f67312181b4cded9c976f0eaa6493c51e44a6b938fa8f823c03c27b2fff8961ae6c45beac9"}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x407}}]})
syz_usb_control_io$uac1(r3, &(0x7f0000000f00)={0x14, &(0x7f0000000dc0)={0x20, 0x20, 0xcb, {0xcb, 0x25, "acc1942e30580d737dd2c177d713b8f550427928856ac188b1902214b6aab5825393c35325e5bc1a9e1e6167195f9f2d232be3d154f7c8632264e153b24ff8bb58e5a919bd318ea0828d66815095517b87d8b3b98c3d6b8cc80300965e29bb0b45604c306234ce7797f80b96cc7e2a7279456b97ba9b4e96a4f4688425b7aa4eeec4488d1a0148f88455066bbe61cc782baeb4591b2249a298f491ba2d46f92487f842a3d99eb377c233ca9c389ac02ac93fdf6daf1d2ced884d431b12466aed208990b65aaa07d63e"}}, &(0x7f0000000ec0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}}, &(0x7f0000001140)={0x44, &(0x7f0000000f40)={0x0, 0x12, 0x15, "fbbef02bda5c0ea0834889d45542d14ac38d5dea1e"}, &(0x7f0000000f80)={0x0, 0xa, 0x1, 0xfd}, &(0x7f0000000fc0)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000001000)={0x20, 0x81, 0x1, "f0"}, &(0x7f0000001040)={0x20, 0x82, 0x2, "5aba"}, &(0x7f0000001080)={0x20, 0x83, 0x2, "23d5"}, &(0x7f00000010c0)={0x20, 0x84, 0x2, "a8b1"}, &(0x7f0000001100)={0x20, 0x85, 0x3, "a74bdd"}})
socket$netlink(0x10, 0x3, 0xa)
r4 = gettid()
r5 = gettid()
kcmp(r4, r5, 0x6, 0xffffffffffffffff, 0xffffffffffffffff)
r6 = syz_usb_connect$uac1(0x5, 0x87, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x75, 0x3, 0x1, 0x80, 0x70, 0x81, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x81}, [@mixer_unit={0x5, 0x24, 0x4, 0x1, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x2, 0x10, 0xc7, '@'}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x8, 0x2, 0xc8, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x0, 0xd, 0x7f, {0x7, 0x25, 0x1, 0x1, 0x3, 0x606b}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x5, 0x1, 0xa, {0x7, 0x25, 0x1, 0x2, 0x7, 0x100}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x1, 0x4, 0x9, 0x40, 0xa}, 0x52, &(0x7f00000002c0)={0x5, 0xf, 0x52, 0x5, [@wireless={0xb, 0x10, 0x1, 0x0, 0x8, 0x6, 0x8, 0x9, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "90ce1b870151f343cf9fbb32e6f4dcad"}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x7fffffc, 0x1ef00, 0x7f, [0xc0, 0x3f30, 0x3f00, 0xffc0, 0xc0]}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x8, 0xf9, 0x7, 0xd}]}, 0x4, [{0xee, &(0x7f0000000440)=@string={0xee, 0x3, "bc2b202e58c0d10fac7cb05d89565f4147d715347596fb1dda82a48ffc6a317a8af4ed050be83ffc615d506e0a7856cfff1e55c7de2c287b1fb12cbf39ed3452d8e1a48b46b8cd0a5b202e99d3a6ca4dd52c03b0df4fc544e0c8ba1071b0a52e8b3aa9bf889f05d350b46c7ba049baa5955c60d6fe8a983f37bc586bb982ee058fd85da1d251c28f3b753c1a9c3eaca321e683e442d061819908c9616a7172f984d3ba3b0c01cb9f8e576546b61259428ad136ad8e6b4684b02453a6bf09847edb4ae4b72eb847df69094290491dd1bb670d0b179cb1e32a423c7aa615dc3da9f80de487830f34821a9f7453"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1401}}]})
syz_usb_control_io$uac1(r6, &(0x7f00000006c0)={0x14, &(0x7f00000005c0)={0x40, 0x31, 0xc2, {0xc2, 0xf, "3d897edbe1ba91ec8ed3330613aed89c01b1a18718cc5e21992470d9bd44f9634d06c8f988d285a6cef52844ac8bf5a9b4e6e266daf04516dd40b1cc93cb8b5d5e98492048fb6f37e7646dbe1188c9d09108c242682774676dd3c20839f6534a6292619a88711b173aa532f4cafd416cab22d3bcbca70e0aef8e4f7e8610fe6ca5d94adf96ce287363a30a060a8c319eb92b50b70b200a919af1623d124502cd4d0fd3f75769825066c64ad928602154fa64ba9151d586ca25f69ba1fcbb8f99"}}, &(0x7f0000000240)={0x0, 0x3, 0x10, @string={0x10, 0x3, "859143e23c60a15a2340f10b795e"}}}, &(0x7f0000000940)={0x44, &(0x7f0000000700)={0x0, 0xf, 0x51, "54c07174ea485efa66793b408da031bdf141e6c327a02146ee378f849ecd71ef5d626b8d144ac8c3aefb3bea5c2b21c6883c995b181ce31d38115acb5f8cb3edde616bb447a4e7f3a2d24424a40febfd45"}, &(0x7f0000000780)={0x0, 0xa, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0xa2}, &(0x7f0000000800)={0x20, 0x81, 0x3, "7a92d4"}, &(0x7f0000000840)={0x20, 0x82, 0x1, '\b'}, &(0x7f0000000880)={0x20, 0x83, 0x1, "fa"}, &(0x7f00000008c0)={0x20, 0x84, 0x4, "f69df858"}, &(0x7f0000000900)={0x20, 0x85, 0x3, "b49627"}})
mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x810000, &(0x7f0000000340)={[{}], [{@fowner_gt}]})
r7 = socket$inet(0x2, 0x3, 0x8d)
setsockopt$inet_msfilter(r7, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1)
getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000000c0)={<r8=>0x0, @local, @local}, &(0x7f0000000140)=0xc)
r9 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @broadcast}, 0x1, r8})
r10 = socket(0xa, 0x1, 0x0)
ioctl(r10, 0x8916, &(0x7f0000000000))
ioctl(r10, 0x8936, &(0x7f0000000000))
r11 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r11, &(0x7f0000000200)={0x2, 0x4e23, @multicast1}, 0x10)

2m5.66784832s ago: executing program 3 (id=3564):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210})
mount_setattr(0xffffffffffffffff, 0x0, 0x9000, &(0x7f0000000000)={0x100002, 0x1000f7, 0x40000}, 0x21)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0})

2m5.66702942s ago: executing program 3 (id=3566):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x80000, 0x0) (async)
mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020) (async)
read$FUSE(r1, &(0x7f00000005c0)={0x2020}, 0x2020)
inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x200000d) (async)
inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0x200000d)

2m5.626201561s ago: executing program 3 (id=3568):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x10b602, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x78, 0x183281)
ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f0000002840)=0xabb2)
ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000180)=@usbdevfs_connect={0x5})
readv(r0, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}, {0x0}], 0x2)

2m5.415199435s ago: executing program 3 (id=3572):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000)
pipe2$9p(0x0, 0x0) (async)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) (async)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00')
read$FUSE(r2, &(0x7f0000016440)={0x2020}, 0x2020) (async)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @empty, 0x2}, 0x1c) (async)
r3 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) (async)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)

2m5.332428937s ago: executing program 35 (id=3572):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
r1 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000)
pipe2$9p(0x0, 0x0) (async)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) (async)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00')
read$FUSE(r2, &(0x7f0000016440)={0x2020}, 0x2020) (async)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @empty, 0x2}, 0x1c) (async)
r3 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) (async)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c)
close_range(r0, 0xffffffffffffffff, 0x0)

25.739138016s ago: executing program 6 (id=4999):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
r2 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x58, 0x0, &(0x7f0000000480)=[@free_buffer={0x40086303, r2}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000400)={@fd, @fda={0x66646185, 0x3, 0x0, 0xd}, @flat=@weak_binder={0x77622a85, 0x1, 0x1}}, 0x0}, 0x400}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0xa8, 0x0, &(0x7f0000000580)=[@register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0x9, 0x0, 0x1b}, @fda={0x66646185, 0x3, 0x1, 0x3d}, @flat=@handle={0x73682a85, 0x100, 0x2}}, &(0x7f0000000080)={0x0, 0x20, 0x40}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/92, 0x5c, 0x2, 0xe}, @flat=@binder={0x73622a85, 0x110b, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/142, 0x8e, 0x1, 0x2e}}, &(0x7f00000000c0)={0x0, 0x28, 0x40}}, 0x400}, @free_buffer={0x40086303, r2}, @decrefs], 0x23, 0x0, &(0x7f0000000180)="2ccd7d1b648d563b7c662fbbf16465188e165c3e83eca4f32c0c0716e65e5aba1598e5"})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

25.683174437s ago: executing program 6 (id=5000):
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x1, 0x140, 0x140, &(0x7f0000000380)=[0x6, 0x7, 0xffffffffffffff1e, 0xf9, 0x8, 0xffffffffffff0878, 0x0, 0x0, 0x100, 0xff, 0x0, 0x2, 0x6, 0x7a, 0x4, 0x7, 0x0, 0x11, 0x49, 0xfff, 0x0, 0x7f, 0x4, 0x3, 0x3, 0xac3, 0xfffffffffffffffa, 0xfffffffffffffe01, 0x6, 0xc, 0xd9b, 0xf, 0xffffffffffff563c, 0x6, 0x8000, 0x4, 0x2, 0x2, 0x80000001, 0x8000000000000001, 0x8, 0x6, 0x9, 0x8, 0x55, 0x5, 0x6, 0x1, 0xc1, 0xd1, 0x1, 0x5, 0x101, 0x80000000000000, 0x9, 0x1, 0x7, 0x1, 0x401, 0x88e5, 0x3, 0xff, 0x9, 0x0, 0x7, 0x1c03, 0x8, 0x9, 0x8000000000000001, 0x5, 0x100000000, 0x9, 0x76, 0x2, 0x3ff, 0xc, 0x1ff, 0x3, 0x0, 0x8, 0x5, 0x4, 0xffffffffffff1ff8, 0x81, 0xf64a, 0x95, 0x2, 0x10000, 0x2, 0x8, 0xaeeb, 0x7, 0x1, 0x93, 0x5, 0x6, 0x48c, 0x8, 0xea5, 0x955, 0x1400000, 0x2b, 0x8000000000000001, 0xb36, 0x6, 0x3324, 0x9, 0x7fff, 0xeed1, 0x1, 0x0, 0xfffffffff3e9eeba, 0x3, 0xe, 0x6, 0x9fe0, 0x7, 0x80000001, 0x3, 0x400, 0xcf, 0xc6, 0x0, 0x5, 0x0, 0x1, 0xf, 0x1]})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
preadv(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000100)=""/82, 0x52}], 0x1, 0x7, 0x0)
r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r1, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0)
r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
r4 = gettid()
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0, <r6=>0x0, <r7=>0x0}, 0x2020)
syz_fuse_handle_req(r5, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x130, 0x0, 0x403, {0x1, 0x5, 0x0, '\x00', {0x1, 0xad4, 0x4, 0x8, r6, r7, 0xa000, '\x00', 0x1, 0x4, 0x9, 0x6, {0x6, 0x6}, {0x4}, {0x100000000, 0x9}, {0x8, 0xa04}, 0x4, 0x800007, 0x4, 0x3}}}})
getresgid(&(0x7f0000000180), &(0x7f0000000300)=<r8=>0x0, &(0x7f0000000340))
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000c80)={0x0, <r9=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r10=>0xffffffffffffffff})
fstat(r10, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r11=>0x0})
setreuid(r11, r11)
ioprio_set$uid(0x3, r11, 0x4000)
fstat(r0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0})
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)={0x1c8, 0x3e, 0x100, 0x70bd25, 0x25dfdbfd, "", [@nested={0x9d, 0xc4, 0x0, 0x1, [@typed={0x8, 0x4b, 0x0, 0x0, @pid}, @typed={0x8, 0x116, 0x0, 0x0, @uid}, @generic="916b9357bc6c6249661a37baa37e53b4c6026b31cb80abd1f9fa80c01fc1203aaee313a13acc4cfde46c57dfce2c7546d249a3873a9664598c06406d724937b62e1dd19b87230fa1c7fa5a1d55250e2c9c58e3e083f6f4fcf65bfbe04d444f32b44645bbddf5c0f3908f20c7130bb40206acfa4826e2c2a8075b05677dbdfa67e0536377b2cdfa2876"]}, @generic="d2e26d22a9eef0145d56714a1935882eb2fa36feb0812033b2b9e983f7afb5c4c99891209381bf626071c5e34f9212042623f77c5a21c0ba076fff73949075bdf6cd5bf8bf24b1de6c5c3dfd32a808d0d43e47e73ae1c25daaf7555e5e5d96fb5947066d7d52bf555b89e2cb1bb48fc6dd238bba92ac2a6a64146e1f225e849c13b23551ed83c11be168d182316052923616256a209be655fd345c", @generic="ca39fd834b43e251426b5067848afc2f15357a7220bee6d109f9ac8f27c34a8a246953a6ed34220b3136af2dd59967687ca98e8f44974a7cdab0f72ca081053f1865d2e59ec16a159a5e5deecb129eaa515f67681eaee78af3e1689c427660b88f554d71a636070f8e6b2893d80e9ede41c8ed677aaedcafcdf1e2fcc1"]}, 0x1c8}, {&(0x7f0000000980)={0x2f4, 0x1d, 0x10, 0x70bd28, 0x25dfdbfd, "", [@nested={0x184, 0x33, 0x0, 0x1, [@generic="6251a8e84bfd0edf94f94d67b790716d4fa40b0e31d08367196d290ede78a0c09d2041cae38b46dc295ed44262ba3d9a8520492a08e3179784ad5709c9cf850a3fbe7c52333667df3e93a1a578c300898018e9e12a36d8db237ecaa8f17c0007646d00b16d3c6a63e053927c9a9fdeaaaba091e39d9f26e20ef7d6ea3ba7050a7db1ec695b3a34e1f82d9eb3adfabf3945f18e6d7b9cca65903ce6bc307091fa7663cb27acaaf2ad60a1c7605313b6f840fc36629843ca45abe0cb209831b10ba5e87eee4d6d6edcafe9a9f045836b4242be2a1f2f3223eef564c4ec6d65454b5a32d3a3c9e73df7a15e", @typed={0x8, 0x3b, 0x0, 0x0, @ipv4=@local}, @generic="d45bee1214aa6fb04d5777515cee3448cfcc0d572106a261141ea210c17712453663e83a9afe94173e94206c8841cd814ff558c0d9af9e711e40747c9c74cad3d914980bfa4c5d2e06dfab8a79a8fae717c05c30ecc60265607f3659a236da73cf095f9b461ff848a5cac74d8673d60ecc869b7d2fc4e84146305e5b6591c9c23eea8dd6e2a54b27fd60e63e2682"]}, @nested={0x26, 0xb8, 0x0, 0x1, [@typed={0x5, 0xc9, 0x0, 0x0, @str='\x00'}, @typed={0xc, 0x9a, 0x0, 0x0, @u64=0x1}, @generic="cbb9de6b005d", @nested={0x4, 0x135}, @nested={0x4, 0xa8}]}, @typed={0x8, 0xc0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x7e, 0x0, 0x0, @pid}, @typed={0x14, 0x1e, 0x0, 0x0, @ipv6=@private2}, @nested={0xc, 0x12d, 0x0, 0x1, [@typed={0x8, 0x82, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1b}}]}, @typed={0x14, 0x95, 0x0, 0x0, @ipv6=@empty}, @typed={0xd6, 0xe6, 0x0, 0x0, @binary="e2b0343eba5bfa09f908000e6fd629530d48ca346882cad4c137c1ef0db46e9d54b3fc97d1ee8d4338da65131df06108831013e9a141bb2896804c48137c2b6b712868c956be079f55cc506b4d69727e1a7d0f8c354fe7e7a5fc2bfdc7e9b12a10aadde027bf91cb609981f6f34ffa691bc2b75d9044e61f4b5a059f3b810a996c75dc42dae2d54c18c532a89f16d021dee04db1cfbd8d5fc4eebc0d0325b691f3bb6bfd98c299f93c1a12de0cf6204061feb82e8da3e860c441cadacf84f99a9891da94924ea5997d59bfeb0786d841d529"}, @nested={0xc, 0xeb, 0x0, 0x1, [@nested={0x4, 0x4d}, @nested={0x4, 0xa6}]}, @nested={0x10, 0x139, 0x0, 0x1, [@typed={0x8, 0x46, 0x0, 0x0, @uid=0xffffffffffffffff}, @nested={0x4, 0xfd}]}]}, 0x2f4}, {&(0x7f0000000ec0)={0x3cc, 0x23, 0x2, 0x70bd2d, 0x25dfdbfc, "", [@nested={0xe2, 0xdb, 0x0, 0x1, [@nested={0x4, 0x3b}, @nested={0x4, 0x3f}, @generic="10c3b6f00498721dbf3256f4d8f86453fdcd5d52fb16b1badb9040997a1e1cef59062409d930e74587a908fa53b403c4cce099d3b48e91db5fb4fafd34aebd5a23c1e412ffb51d3d144c7f449d0a4e6ce5588a89b60d5a740711318982239934595dc6cbc49ea139c8608bd93a44da5be790808f7ef3cb3e77784f334cc46a3c80f0895e51349116646f57eb355e2fc5aae9eecbe28ce13bf78347ebc805ccf5ff5dcb2712d5f33069cd7f61de506607e9352a302e53766998464c02623aef309383", @nested={0x4, 0x39}, @typed={0x6, 0x3e, 0x0, 0x0, @str='*\x00'}, @typed={0x7, 0x5b, 0x0, 0x0, @str='\'\'\x00'}]}, @generic="3d6d5a9e2760c06c135ba4dc1ac8853f348de484eeb1f4a5278b5c860af070c953e0400638b80f34a21ce41451ad63c05eab819ca45621446470f21a30621d0bc1cc6c36652420dcfb4ddece780cc1e30c410b67e03efd7c06ef3e5d29227d310dfdb0b9240aac01a96f702d", @nested={0x27, 0x92, 0x0, 0x1, [@generic="4462cd01b57d1ebc3134a846c22792e10e98572f80fe9428c9e0b5781b5f37b6cdf662"]}, @nested={0x9b, 0x9f, 0x0, 0x1, [@generic="38e545a4f69270de5f220cf2eca578290466103c73e3b4ac82b283f01a5afd41d91b76910988b97fe3c295ce9d2634f34d9139b2b96891b51aa0fd5df79901e07858fc9025b8e8b8dbd4a4080c4b7bc75ce5052235b47f069efa1e79", @nested={0x4, 0x111}, @generic="30a58782d57f4b99168c745430bafc8e1c2d600de247f3398efb2a754967c2bd7997d4f7d3f0049c2e0cdd5dc12c7240becc2f9db6b50e"]}, @nested={0xf2, 0x6e, 0x0, 0x1, [@typed={0x8, 0x35, 0x0, 0x0, @fd=r0}, @typed={0x8, 0xc0, 0x0, 0x0, @uid}, @typed={0x14, 0x37, 0x0, 0x0, @ipv6=@mcast1}, @generic="075cd45302f29609958cde3e58b7eaadf2b52d389d4b034c3a001ca59fdc4be92ddc1737369fea8ec168693d2aebcda42be7ab94266dd8b5dea15516cfca442d113177bb59d175910c683bfb4509aa094114ca5fb48ba44b38c698e17f137aa3e683893e329185276320015c1ab8468403e77afb3cb54846bec456893c9db431cf2971f0ff9d4007cbd022d3411cdf86602906b06c273cf5791306737a61e6e80681ac737d7c5b85f34673b34375f0a95d0f17e36e0f4883615690da7255b194be1d913b45bef89c84bd"]}, @generic="112da9cf74", @generic="3aa5a48ef212d854e7ad601ed7a699c05023a5ebd9b16fe193bbc46f5d84c14e01b70bd3bc7b8d80e3d8a4961c1954e77dbf3dc0790d57d4302c7db14e4fd16581a14ec14a9ac2528e30b2a93f8c8a60765c7d4eb29d8d040d388818e1a510178202491c1b456476c6fc4b86b76acfa5b6931e73d300feed74d3580a9d676acdc18d66cf240fe960815c7402158181065d8efa8fd4ddb8a0adc34421168eca6a6d081794cdf818", @typed={0x8, 0x5b, 0x0, 0x0, @fd=r0}]}, 0x3cc}], 0x3, &(0x7f0000000d80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r1]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0]}}, @rights={{0x28, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r2, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r6, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r11, r12}}}], 0xa8, 0x4000050}, 0x0)
mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0xc000001)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000e80)=@gcm_256={{0x303, 0x36}, "437e509e2d2800", "8b3de2aabceef2a0640000d5a66fd32f419e59f3000000000400", "02000a3c"}, 0x38)
r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$FS_IOC_RESVSP(r13, 0x40305828, 0x0)

25.638480528s ago: executing program 6 (id=5001):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x8, &(0x7f0000000200), 0x4)
unlinkat(0xffffffffffffffff, 0x0, 0x134)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000240)=ANY=[@ANYBLOB="7365636c6162656c2c00f95fd88398ce3400de8599c579e055810deb409905c0eaf913cdfbff10f109f1ec77e2acbf007561caa609c177654b2304735a2cf442540035250763338b00d82e84e37035bd4949e362a12e1f23b7ce487d9ebafac3ccecfee53e96540b4846fc4825e4ebc3fc8a2497181ab5a0eb7916c25b4642ff5a226fbb892417bf30b7227bf354981ee35f9a2154ec64779d45b35f5c00b66cf4904efd7f02076bd5dba090c4aabad22a60cd7eff0be3dcfc03ea13d6c239af12db44938a219fc175e2a6"])

25.633483748s ago: executing program 6 (id=5002):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2ac02, 0x0) (async)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2ac02, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x10b282, 0x0) (async)
openat$kvm(0xffffffffffffff9c, 0x0, 0x10b282, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r2, &(0x7f0000002340)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, &(0x7f0000003480)=[{&(0x7f00000023c0)=""/4096, 0x1000}], 0x1, 0x0)
timer_create(0x1, &(0x7f0000000080)={0x0, 0x11, 0x0, @tid=r2}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) (async)
pipe2(&(0x7f0000000000)={0x0, <r3=>0x0}, 0x0)
vmsplice(r3, 0x0, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async)
connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)

24.542393979s ago: executing program 0 (id=5020):
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/bus/input/handlers\x00', 0x0, 0x0)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x20800, 0x0)
ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f00000000c0)={0x7, 0x21, 0x0, 0x17, 0x4, 0xc0, 0x5, 0x14c, 0x1})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x802, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r2, 0x0, 0x32, &(0x7f0000000080)=0xff, 0x4)
unshare(0x62040200)
r3 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0xc, &(0x7f0000000100)=0x3e60, 0x48)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f00000011c0)=ANY=[@ANYBLOB="8704040000000000fc02000000619cc069610000000000000003"], 0x28)
sendmsg$netlink(r3, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="240000001e00290700000000000000000c000000000000000000", @ANYRESHEX], 0x24}], 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, 0x0)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r6)
ptrace$PTRACE_SETSIGMASK(0x420b, r6, 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/warn_count', 0x200881, 0x40)

24.334176733s ago: executing program 0 (id=5024):
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0xfffffffffffffee6, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2800408, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f0000003800)={0x2020}, 0x2020)

24.177185956s ago: executing program 0 (id=5027):
r0 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$MRT6(r0, 0x3a, 0xd0, 0x0, 0x0) (async)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
ioctl$BLKROTATIONAL(r1, 0x127e, &(0x7f0000000080)) (async)
pselect6(0x40, &(0x7f0000000000)={0x5, 0x200, 0x1, 0x6, 0xfffffffffffffffb, 0x8000, 0x9, 0x2}, &(0x7f00000000c0)={0x7, 0x3, 0x5, 0x7, 0x2, 0x2, 0x100000001, 0x5}, &(0x7f0000000140)={0x7fffffff, 0xcc, 0x1, 0x7, 0x1, 0x2, 0xe0, 0x7}, &(0x7f0000000180), &(0x7f0000000240)={&(0x7f00000001c0)={[0x7fffffffffffffff]}, 0x3e}) (async)
clock_nanosleep(0x3, 0x1, &(0x7f0000000040), 0x0) (async)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, 0x28011, r1, 0xffffd000)

24.175912376s ago: executing program 7 (id=5029):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
pipe(&(0x7f0000000040))
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast1, @loopback}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0), 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001a00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x440c0)
r5 = socket(0xa, 0x3, 0x3a)
r6 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'bridge0\x00', <r7=>0x0})
setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x0, r7}, 0xc)
setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x5, r7, 0xffffff8f}, 0xc)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0xb0, r4, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x80}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xf}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x9}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x200}, @ETHTOOL_A_CHANNELS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0xfffffff8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x40001d0)
close_range(r0, 0xffffffffffffffff, 0x0)

24.051083269s ago: executing program 5 (id=5030):
futex(0x0, 0x10b, 0x4, 0x0, 0x0, 0x1)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1400, 0x0)
madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x4000, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x16, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4, 0x3fff}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, 0x0)

24.050113788s ago: executing program 7 (id=5031):
r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x1, 0x6)
timerfd_settime(r0, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000100))
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
syz_clone(0x80004000, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
setregid(0x0, 0xee00)
r3 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r4)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
syz_open_procfs(r3, &(0x7f0000000140)='smaps\x00')
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, 0x0)
ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x26)
close_range(r1, r1, 0x2)
openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.log\x00', 0x1, 0x6) (async)
timerfd_settime(r0, 0x1, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f0000000100)) (async)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
syz_clone(0x80004000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
setregid(0x0, 0xee00) (async)
syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async)
fchdir(r4) (async)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) (async)
syz_open_procfs(r3, &(0x7f0000000140)='smaps\x00') (async)
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, 0x0) (async)
ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x26) (async)
close_range(r1, r1, 0x2) (async)

24.046932748s ago: executing program 0 (id=5032):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
read(r1, 0x0, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) (async)
read(r1, 0x0, 0x0) (async)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)

23.94364237s ago: executing program 5 (id=5033):
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0)
rt_sigsuspend(&(0x7f0000000300)={[0x3]}, 0x8)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, <r1=>0x0}, &(0x7f0000000040)=0xc)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in6=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000000080)=0xe8)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x7, "ff000000000000000000000000000200"})
r4 = syz_open_pts(r3, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000000c0))
ioctl$TCSETA(r4, 0x5406, &(0x7f0000000200)={0xfffe, 0x80, 0xe000, 0xb3, 0x17, "041000"})
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000140)=0x4)
setreuid(r1, r2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x51, 0x0, &(0x7f0000000400)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e7094"})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00')
read$FUSE(r6, &(0x7f00000012c0)={0x2020}, 0x2020)
ioctl$TUNSETSNDBUF(r6, 0x400454d4, &(0x7f0000000300)=0x3)
sendmsg$nl_xfrm(r5, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

23.94237149s ago: executing program 0 (id=5034):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x48400)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x14800, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000240), 0x41)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000340)='./binderfs2/binder0\x00', 0x800, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a)
mkdir(&(0x7f0000000040)='./bus\x00', 0x48)
mkdir(&(0x7f0000000300)='./bus\x00', 0x100)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
clock_nanosleep(0x8, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0xa00000, &(0x7f0000000480)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_off}], [{@func={'func', 0x3d, 'PATH_CHECK'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@pcr={'pcr', 0x3d, 0x40}}, {@fsname={'fsname', 0x3d, './binderfs2/binder0\x00'}}, {@seclabel}]})
r4 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0)
getdents(r4, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x1aa)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
getdents64(r5, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000000), 0x10)
close(0x4)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r6 = eventfd2(0x6, 0x80800)
r7 = dup(0xffffffffffffffff)
ioctl$KVM_HYPERV_EVENTFD(r7, 0x4018aebd, &(0x7f00000002c0)={0x100, r6})
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2200400, &(0x7f0000000340)=ANY=[])
read$FUSE(r8, &(0x7f00000021c0)={0x2020}, 0x2020)

23.941781891s ago: executing program 7 (id=5035):
r0 = socket(0x18, 0x1, 0x1)
getsockopt$inet_int(r0, 0x111, 0x32, 0x0, &(0x7f0000000040)=0x2d)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001900), 0xaa042, 0x0)
keyctl$search(0xa, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003})
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='oom_score_adj\x00')
exit(0xfffffffffffffff7)
preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000100)=""/206, 0xce}], 0x1, 0x2b1, 0x200)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x36}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0)
socket(0x18, 0x1, 0x1) (async)
getsockopt$inet_int(r0, 0x111, 0x32, 0x0, &(0x7f0000000040)=0x2d) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000001900), 0xaa042, 0x0) (async)
keyctl$search(0xa, 0x0, 0x0, 0x0, 0xfffffffffffffffc) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003}) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='oom_score_adj\x00') (async)
exit(0xfffffffffffffff7) (async)
preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000100)=""/206, 0xce}], 0x1, 0x2b1, 0x200) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) (async)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0) (async)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x36}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) (async)

23.921534981s ago: executing program 5 (id=5036):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x0, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000100)={r0, 0x3, 0x2, 0x7ff})
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x9})
r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00')
ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, 0x0)
r2 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x12, &(0x7f0000000040)=0x1, 0x4)
r4 = syz_pidfd_open(r2, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x18, &(0x7f0000000240)={@flat=@weak_binder={0x77622a85, 0x110a, 0x3}, @fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x8, 0x1, 0xc}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

23.850454702s ago: executing program 5 (id=5037):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffff3)
r1 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r2 = dup(r1)
read$FUSE(r2, &(0x7f0000002940)={0x2020}, 0x2020)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2<Z l\xdfDh\xa1\x99Bj<\r\x87\xa3\xd1?$\x8b\x02\x00\x00\x00h\x1b\x01\x00\x00\x00\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[<Y4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v<H\x8cmD\x8e\x9e\x18\xf7\xac\xa5\x17\x89\xc6\x88\x86\xe9\x15\x87WV\xfbF\xb1\x1fo\x85t\xf1\r\x8a\x9c\xe8\xac^\x19cp\xcceJ\xa6\x0e_\aE\bZ\x9f\xfa\xdf$\xad\xf0\xa5E\xeb\xd6\x80\xb7 \rd\xcc\x92\b\x01\x1bG\xb4su\x90\xcfs\x18LQ\x81^\x17\x80\xca\xdc\xe2\xb3\x01\x85\xa4r\x87G\xb8\x92\xdaJt\xa2g\xb7Azy+\x8f\xee\xb9\xa9\xa6\x04\xd1a\xca1~\x03\xbc\x87\xd1\xbaY\xf3\x8ai\xff[\xde\xde\xc6\xb1\xb9T{\xe2>\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9')
ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="000300000600000000000000000100efff000040000300000000000000157b0200000000"], 0x24)
socket$packet(0x11, 0x2, 0x300)
r4 = socket$inet6(0xa, 0x2, 0xff)
setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000000)=0x6, 0xffffffffffffffd0)
setresuid(0xee00, 0xee00, 0x0)
bind$inet6(r4, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa)
bind$inet6(r5, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
close_range(r3, 0xffffffffffffffff, 0x0)

23.793351304s ago: executing program 7 (id=5038):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="38010000fe00004a59ac3fab5a3b30692619d523a7eb0167d4f100fd8bcb"], 0x138)
ioctl$PPPIOCDISCONN(r2, 0x7439)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f00000001c0)=[@request_death], 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) (async)
pipe2$9p(&(0x7f00000001c0), 0x0) (async)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) (async)
dup(r1) (async)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="38010000fe00004a59ac3fab5a3b30692619d523a7eb0167d4f100fd8bcb"], 0x138) (async)
ioctl$PPPIOCDISCONN(r2, 0x7439) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x5, 0x0, &(0x7f00000001c0)=[@request_death], 0x0, 0x0, 0x0}) (async)

23.779210984s ago: executing program 5 (id=5039):
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00')
setreuid(0xee00, 0x0)
r1 = getuid()
setreuid(0x0, r1)
unlinkat(r0, &(0x7f0000000380)='./file1\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@index_off}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r3, &(0x7f0000000200)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1400000000000000290000004300000009000000000000001400000000000000290000003e000000ffffff7f00000000580000000000000029000000040000003c080000000000000105000000000005020003c910fe88000000000000ceaf8e0222eb8610c20400000002c910fe8000000000000000000000000000400401090106000120000000140000000000000029000000430000000500000000000000180000000000000029000000390000002e0002070000000014"], 0xd0}}], 0x1, 0xc8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r4)
sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000ffdbdf250f0000002c0007800c000300000200fbffffffff070002"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x800}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4008080}, 0x0)
r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000000), 0x4)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r7, 0x0)
munmap(&(0x7f0000002000/0x800000)=nil, 0x800000)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000940)={0xa0, 0x0, &(0x7f0000000400)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}}, @register_looper, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0xfffffffffffffd06, 0x18, &(0x7f0000000340)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/122, 0x7a, 0x2, 0x19}, @ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/83, 0x53, 0x0, 0x30}}, &(0x7f00000003c0)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0})
io_setup(0x82, &(0x7f0000000080))
clock_gettime(0x5, &(0x7f0000000240))

23.737955415s ago: executing program 7 (id=5040):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)={0x73622a85, 0x7cab6ced6415609}) (async)
r1 = dup2(r0, r0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000680)={&(0x7f00000004c0), 0xc, &(0x7f0000000500)={&(0x7f0000000600)={0x50, 0x2, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x400c001)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"}) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480), r3)
sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)={0xfffffffffffffdaa, r4, 0x1, 0x70bd2f, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x1, @media='udp\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async, rerun: 64)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async, rerun: 64)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0x118a, 0x3}, @flat=@weak_binder={0x77622a85, 0x10a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

21.89998944s ago: executing program 6 (id=5041):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x101801, 0x0)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x224, r2, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_MEDIA={0x80, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1cf8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd49}]}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "8c1e8c05efb20d5fcd64ec894743777ec1fc520926aa9e01ef2ab25e28"}}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x62}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}, @TIPC_NLA_MEDIA={0x1c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010101}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010101}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @mcast1, 0xa}}}}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x31}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x8}, 0x814)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'batadv0\x00', 0x1003})
ioctl$TUNSETLINK(r1, 0x400454ce, 0x321)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vxcan1\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wg2\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'team0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xb8, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x4040004)
ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000040))
fcntl$lock(0xffffffffffffffff, 0x7, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

17.829455129s ago: executing program 5 (id=5042):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r2 = socket$inet(0x2, 0x3, 0x4)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10)
sendmmsg$inet(r2, &(0x7f0000000600)=[{{&(0x7f0000000380)={0x2, 0x4e01, @local}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0xbf, 0x0, 0x8}]}}}], 0x18}}], 0x1, 0x46000)
r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15)
r5 = dup(r4)
write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENT(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58)
mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r4, @ANYRESHEX=r1, @ANYBLOB="2c77666451f70b3d", @ANYRESHEX=r4])
utime(&(0x7f0000000200)='./file0/file0\x00', 0x0)
ftruncate(r3, 0xffff)
fcntl$addseals(r3, 0x409, 0x7)
r6 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0xc0086202, &(0x7f0000000440)=0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

17.084031204s ago: executing program 0 (id=5043):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
sendto$inet6(r1, &(0x7f0000001040)="0daa5a22bbad4afb", 0x8, 0x3b00, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x218, 0x108, 0x108, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)
syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0)
futex_waitv(&(0x7f0000000ec0)=[{0x0, &(0x7f0000000040), 0x2}], 0x1, 0x0, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x10) (async)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x10)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x200}], 0x1, 0x0, 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0xffffffffffffffff) (async)
mmap$binder(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0xffffffffffffffff)
openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r4 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x44, r6, 0xc4fc9e906872338b, 0x24, 0x25dfdbff, {{0x15}, {@void, @val={0xc, 0x99, {0xa, 0x2}}}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x25, 0x9, 0x800, 0x2, 0x5, 0x963, 0x6, 0x8]}}]}]}]}]}]}, 0x44}}, 0x0)
mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x8000)
msync(&(0x7f000035f000/0x4000)=nil, 0x4000, 0x4)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) (async)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c9, 0x0) (async)
ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c9, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000)
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x1c}}, 0x20000814) (async)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x1c}}, 0x20000814)
r9 = accept4$packet(r4, &(0x7f0000000180), &(0x7f00000001c0)=0x14, 0x80000)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) (async)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612)
syz_usb_connect$uac1(0x4, 0xc6, &(0x7f0000000a40)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb4, 0x3, 0x1, 0x9, 0x80, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xb}, [@mixer_unit={0x8, 0x24, 0x4, 0x2, 0x91, "cd2231"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x35, 0x16}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xff01, 0x0, 0x3}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xb5, 0xffff, 0x0, "d6589864b62e05b3fc"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x3, 0x7, 0x5, "0f796e", '4'}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x10, 0x4, 0x1a, {0x7, 0x25, 0x1, 0x0, 0xd4, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x63, 0x4, 0xe, 0x81, "45fc91e2281679"}, @as_header={0x7, 0x24, 0x1, 0xc0, 0xb, 0x5}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0x7, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xf7, 0x9, 0x1, {0x7, 0x25, 0x1, 0x82, 0x3, 0x3}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x110, 0xfd, 0x7, 0xf1, 0x10, 0x6}, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="050f0c8f92dcd60001074bfb63bb0b00"], 0x3, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x500a}}, {0x61, &(0x7f0000000880)=@string={0x61, 0x3, "1e1f980c9c3fdf16ed94e03b9d93b4cc5e9bbebec8e8c64c65b4eeeda969379ac8f2078003ce187a61a6ed8ace3e310f28c61d7603cc57cff5ba6474ef7fe8322d33983454ad83dd226103aa4ed2c70f20f2e604b90e45a8e1ff91f7293650"}}]})

16.941566397s ago: executing program 7 (id=5044):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f00000000c0)="3c00000058001f00032ae4f9002304000a04d65f080001000201000217d1ae3b70b0406700912deb5b859322340b0100000078f72e230a19fb2bcb1d", 0x3c)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0x3f7, 0x0, 0x6}, {0x87b, 0x0, 0x4000}]})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x300, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
r5 = open(0x0, 0x0, 0x718bb647156ec3b7)
ppoll(&(0x7f0000000440)=[{r5, 0x4040}, {0xffffffffffffffff, 0x422}, {0xffffffffffffffff, 0x2020}, {0xffffffffffffffff, 0x113c}, {r1, 0x2}], 0x5, &(0x7f00000004c0), &(0x7f0000000500)={[0xfffffffffffffffe]}, 0x8)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000300)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000180)={@flat=@weak_binder={0x77622a85, 0x10a, 0x3}, @fda={0x66646185, 0x8, 0x2, 0x2d}, @fda={0x66646185, 0x2, 0x2, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}, 0x400}], 0x0, 0x0, 0x0})
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
sendfile(r6, r7, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'})

15.331828548s ago: executing program 6 (id=5045):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x10)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_GET_SREGS2(r3, 0x8140aecc, &(0x7f0000000000))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0xa, 0x0, &(0x7f00000001c0)=[@free_buffer], 0x0, 0x0, 0x0})
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000000)={0x0, @adiantum, 0x0, @desc1})

0s ago: executing program 36 (id=5043):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
sendto$inet6(r1, &(0x7f0000001040)="0daa5a22bbad4afb", 0x8, 0x3b00, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x4, 0x3e8, 0x218, 0x218, 0x108, 0x108, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@local, @broadcast, 0xff000000, 0xff000000, 0xf, 0xf, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, {[0xff, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0x0, 0xff]}}, 0xffff, 0x9, 0x0, 0x40, 0x3f0, 0x2, 'bond0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x4}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6af, 'syz1\x00', {0xed}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @remote, @broadcast, 0x8, 0x1}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffff00, 0x5, 0xe, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff]}}, 0x80, 0x9, 0x0, 0x6, 0x9, 0x5, 'veth0_to_bridge\x00', 'gretap0\x00', {0xff}, {0xff}, 0x0, 0x13}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)
syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0)
futex_waitv(&(0x7f0000000ec0)=[{0x0, &(0x7f0000000040), 0x2}], 0x1, 0x0, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x10) (async)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x10)
ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x200}], 0x1, 0x0, 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0xffffffffffffffff) (async)
mmap$binder(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0xffffffffffffffff)
openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
r4 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x44, r6, 0xc4fc9e906872338b, 0x24, 0x25dfdbff, {{0x15}, {@void, @val={0xc, 0x99, {0xa, 0x2}}}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x25, 0x9, 0x800, 0x2, 0x5, 0x963, 0x6, 0x8]}}]}]}]}]}]}, 0x44}}, 0x0)
mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x8000)
msync(&(0x7f000035f000/0x4000)=nil, 0x4000, 0x4)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) (async)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c9, 0x0) (async)
ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c9, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x4008032, 0xffffffffffffffff, 0xcdc2000)
connect$netlink(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x1c}}, 0x20000814) (async)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES32=r1], 0x1c}}, 0x20000814)
r9 = accept4$packet(r4, &(0x7f0000000180), &(0x7f00000001c0)=0x14, 0x80000)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612) (async)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r9, 0x6612)
syz_usb_connect$uac1(0x4, 0xc6, &(0x7f0000000a40)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb4, 0x3, 0x1, 0x9, 0x80, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0xb}, [@mixer_unit={0x8, 0x24, 0x4, 0x2, 0x91, "cd2231"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x35, 0x16}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xff01, 0x0, 0x3}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0xb5, 0xffff, 0x0, "d6589864b62e05b3fc"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x5, 0x3, 0x7, 0x5, "0f796e", '4'}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x10, 0x4, 0x1a, {0x7, 0x25, 0x1, 0x0, 0xd4, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x63, 0x4, 0xe, 0x81, "45fc91e2281679"}, @as_header={0x7, 0x24, 0x1, 0xc0, 0xb, 0x5}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x0, 0x7, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xf7, 0x9, 0x1, {0x7, 0x25, 0x1, 0x82, 0x3, 0x3}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x110, 0xfd, 0x7, 0xf1, 0x10, 0x6}, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="050f0c8f92dcd60001074bfb63bb0b00"], 0x3, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x500a}}, {0x61, &(0x7f0000000880)=@string={0x61, 0x3, "1e1f980c9c3fdf16ed94e03b9d93b4cc5e9bbebec8e8c64c65b4eeeda969379ac8f2078003ce187a61a6ed8ace3e310f28c61d7603cc57cff5ba6474ef7fe8322d33983454ad83dd226103aa4ed2c70f20f2e604b90e45a8e1ff91f7293650"}}]})

kernel console output (not intermixed with test programs):

nvalid descriptor of length 0, skipping remainder of the config
[  190.420896][  T541] usb 4-1: config 7 has no interface number 0
[  190.427000][  T541] usb 4-1: config 7 has no interface number 1
[  190.433310][  T541] usb 4-1: config 7 interface 95 altsetting 7 endpoint 0xE has invalid maxpacket 64, setting to 8
[  190.451829][  T541] usb 4-1: config 7 interface 75 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  190.468606][ T4478] bridge0: port 1(bridge_slave_0) entered disabled state
[  190.475876][  T541] usb 4-1: config 7 interface 2 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 9
[  190.489004][ T4478] bridge0: port 2(bridge_slave_1) entered disabled state
[  190.491114][  T541] usb 4-1: config 7 interface 95 has no altsetting 0
[  190.503107][  T541] usb 4-1: config 7 interface 75 has no altsetting 0
[  190.510088][  T541] usb 4-1: config 7 interface 2 has no altsetting 0
[  190.518694][ T4473] bridge0: port 1(bridge_slave_0) entered blocking state
[  190.525786][ T4473] bridge0: port 1(bridge_slave_0) entered forwarding state
[  190.535003][ T4473] bridge0: port 2(bridge_slave_1) entered blocking state
[  190.542105][ T4473] bridge0: port 2(bridge_slave_1) entered forwarding state
[  190.570835][ T9013] veth0_vlan: entered promiscuous mode
[  190.583333][ T9013] veth1_macvtap: entered promiscuous mode
[  191.305503][ T9034] netlink: 'syz.5.2988': attribute type 4 has an invalid length.
[  191.628161][ T9050] SELinux: security_context_str_to_sid () failed with errno=-22
[  191.707402][ T9055] rust_binder: Write failure EINVAL in pid:12
[  191.767179][ T9059] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  192.019630][   T31] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  192.040641][ T9063] 9pnet: p9_errstr2errno: server reported unknown error 1844674
[  192.116288][   T36] audit: type=1326 audit(1757076952.885:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9067 comm="syz.5.3001" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f271298ebe9 code=0x0
[  192.179605][   T31] usb 5-1: Using ep0 maxpacket: 32
[  192.186679][   T31] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  192.195302][   T31] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  192.203994][   T31] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  192.213031][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  192.222717][   T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  192.232395][   T31] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  192.245410][   T31] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  192.254500][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.263345][   T31] usb 5-1: config 0 descriptor??
[  192.471147][   T31] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 37 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  192.484250][   T31] usb 5-1: USB disconnect, device number 37
[  192.491116][   T31] usblp0: removed
[  192.909624][  T571] usb 5-1: new high-speed USB device number 38 using dummy_hcd
[  192.977967][  T541] usb 4-1: New USB device found, idVendor=14aa, idProduct=0225, bcdDevice=59.e3
[  192.996099][  T541] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.006430][  T541] usb 4-1: Product: И
[  193.011527][  T541] usb 4-1: Manufacturer: ۤꕁ弘덪넙驴긌얫ꉵ喓隁敹ヺ㗊鞟塡磹ዋﴏ刐䮉㰝䔿쓫ഽ䐁嵦ﭬ疱㿘驅誫﵍팒蚼㧠樵鱌쏩ⅲ鞚㗃䓐帱ꂧ亚⪶읢楤젰꯸꘭䚴㯚욪뀳軜佚钶繼᪌鰋픎ꈜ▕㫶꣓坒⣋㈭漢磆폵㵓琵峁밄ꜥጻ觚黹㈑퀧媖혀꫟௿≌䓦붐䍍淊ꊡ杨ᒨ독Ү乎ץ
[  193.047847][  T541] usb 4-1: can't set config #7, error -71
[  193.054435][ T9089] x_tables: arp_tables: NFLOG.0 target: invalid size 80 (kernel) != (user) 0
[  193.056182][  T541] usb 4-1: USB disconnect, device number 46
[  193.070616][  T571] usb 5-1: Using ep0 maxpacket: 32
[  193.080202][  T571] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  193.090412][  T571] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  193.099117][  T571] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  193.108736][  T571] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  193.120553][  T571] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  193.130372][  T571] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  193.135425][ T9100] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[  193.143453][  T571] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  193.160475][   T36] audit: type=1400 audit(1757076953.935:584): avc:  denied  { relabelto } for  pid=9099 comm="syz.3.3011" name="file0" dev="tmpfs" ino=477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  193.162199][  T571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.194162][ T9100] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3011'.
[  193.205905][  T571] usb 5-1: config 0 descriptor??
[  193.208800][   T36] audit: type=1400 audit(1757076953.935:585): avc:  denied  { associate } for  pid=9099 comm="syz.3.3011" name="file0" dev="tmpfs" ino=477 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0"
[  193.212788][ T9100] rust_binder: Failed copying remainder into alloc: EFAULT
[  193.238288][ T9100] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  193.245813][ T9100] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  193.254412][ T9100] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:267
[  193.275936][   T36] audit: type=1400 audit(1757076954.045:586): avc:  denied  { unlink } for  pid=7156 comm="syz-executor" name="file0" dev="tmpfs" ino=477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0"
[  193.328832][ T9110] fuse: Bad value for 'rootmode'
[  193.339268][ T9110] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3015'.
[  193.349521][ T9110] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:273
[  193.406924][ T9061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.425215][ T9061] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.450420][  T571] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  193.481454][   T36] audit: type=1400 audit(1757076954.255:587): avc:  denied  { mounton } for  pid=9122 comm="syz.0.3018" path="/120/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  193.505512][   T36] audit: type=1400 audit(1757076954.275:588): avc:  denied  { unmount } for  pid=7283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  193.536691][ T9130] rust_binder: 373: no such ref 3
[  193.541805][ T9130] rust_binder: Write failure EINVAL in pid:373
[  193.545065][   T31] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  193.569734][   T31] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  193.599181][ T9133] fido_id[9133]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  193.651920][  T571] usb 5-1: USB disconnect, device number 38
[  193.659638][  T365] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[  193.664057][  T571] usblp0: removed
[  193.811086][  T365] usb 4-1: unable to get BOS descriptor or descriptor too short
[  193.819482][  T365] usb 4-1: config 16 has an invalid interface number: 168 but max is 0
[  193.827887][  T365] usb 4-1: config 16 has no interface number 0
[  193.834120][  T365] usb 4-1: config 16 interface 168 has no altsetting 0
[  193.842442][  T365] usb 4-1: New USB device found, idVendor=0403, idProduct=da72, bcdDevice=d8.b8
[  193.851534][  T365] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.859566][  T365] usb 4-1: Product: syz
[  193.863739][  T365] usb 4-1: Manufacturer: syz
[  193.868338][  T365] usb 4-1: SerialNumber: syz
[  193.929652][   T31] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  193.982746][ T9148] fuse: Bad value for 'user_id'
[  193.987651][ T9148] fuse: Bad value for 'user_id'
[  194.067674][   T36] audit: type=1326 audit(1757076954.835:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9157 comm="syz.5.3029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271298ebe9 code=0x7fc00000
[  194.091028][   T31] usb 1-1: Using ep0 maxpacket: 32
[  194.092166][   T31] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  194.104800][   T31] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  194.113507][   T31] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  194.122610][   T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  194.133392][   T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  194.143103][   T31] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  194.156219][   T31] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  194.165321][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.174365][   T31] usb 1-1: config 0 descriptor??
[  194.187395][   T36] audit: type=1400 audit(1757076954.955:590): avc:  denied  { append } for  pid=9167 comm="syz.4.3032" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  194.233347][ T9170] veth1: entered allmulticast mode
[  194.336741][ T9187] loop2: detected capacity change from 0 to 7
[  194.386423][   T31] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 29 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  194.405189][   T31] usb 1-1: USB disconnect, device number 29
[  194.418890][   T31] usblp0: removed
[  194.523715][ T9200] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:50
[  194.524132][ T9201] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  194.889633][   T31] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  194.961842][ T9165] veth1: left allmulticast mode
[  195.048630][ T9206] mmap: syz.5.3041 (9206): VmData 29208576 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data.
[  195.061074][   T31] usb 1-1: Using ep0 maxpacket: 32
[  195.067449][   T31] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  195.076153][   T31] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  195.084977][   T31] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  195.094205][   T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  195.104063][   T31] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  195.113958][   T31] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  195.127103][   T31] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  195.136294][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.145122][   T31] usb 1-1: config 0 descriptor??
[  195.553467][   T31] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  195.565880][   T31] usb 1-1: USB disconnect, device number 30
[  195.572858][   T31] usblp0: removed
[  196.241776][ T9233] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.249047][ T9233] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.256469][ T9233] bridge0: entered promiscuous mode
[  196.261854][ T9233] bridge0: entered allmulticast mode
[  196.269004][ T9233] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.276115][ T9233] bridge0: port 2(bridge_slave_1) entered forwarding state
[  196.283498][ T9233] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.290577][ T9233] bridge0: port 1(bridge_slave_0) entered forwarding state
[  196.312720][   T36] audit: type=1326 audit(1757076957.085:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9232 comm="syz.0.3050" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38ac98ebe9 code=0x0
[  196.384991][  T365] usb 4-1: NDI device with a latency value of 1
[  196.393132][  T365] ftdi_sio 4-1:16.168: FTDI USB Serial Device converter detected
[  196.401370][  T365] ftdi_sio ttyUSB0: unknown device type: 0xd8b8
[  196.408622][  T365] usb 4-1: USB disconnect, device number 47
[  196.415031][  T365] ftdi_sio 4-1:16.168: device disconnected
[  196.709722][  T365] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  196.860697][  T365] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  196.869865][  T365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.878530][  T365] usb 4-1: config 0 descriptor??
[  197.638424][ T9260] fuseblk: Unknown parameter 'fowner'
[  197.644335][ T9260] veth0_to_team: mtu greater than device maximum
[  198.291619][  T365] usb 4-1: Cannot set autoneg
[  198.296476][  T365] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  198.308899][  T365] usb 4-1: USB disconnect, device number 48
[  198.820055][ T9297] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3070'.
[  198.829208][ T9297] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3070'.
[  199.109618][   T31] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  199.219605][  T365] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  199.239607][   T31] usb 4-1: device descriptor read/64, error -71
[  199.369612][  T365] usb 1-1: Using ep0 maxpacket: 32
[  199.376627][  T365] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  199.385402][  T365] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  199.395526][  T365] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  199.405898][  T365] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  199.415038][  T365] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.423141][  T365] usb 1-1: Product: Њ
[  199.427246][  T365] usb 1-1: Manufacturer: 悷羊瘵ﾌ맼籞ፙﮉ햆ت䇖๜猷헠⁐鎚슥焴Ⓧퟆನﳳ崬
[  199.438057][  T365] usb 1-1: SerialNumber: 홑䇙论뾟ᮘﵣ㖺◨㽀餺冀૿ᙩό㨘濄ڛ━뢿횻嶳猸ᇲ飀抚賕즃ൊ薘邳쀤㠺爄䗶췑㐼똕퇢넁鑼㸜ᗵ밞❵Л栋虼젷ᬨ톣餝⭲혠岱뼯䨒嵰뛠婱Ｇ⊏긬䑣
[  199.489637][   T31] usb 4-1: device descriptor read/64, error -71
[  199.670358][  T365] usb 1-1: 0:2 : does not exist
[  199.677878][  T365] usb 1-1: USB disconnect, device number 31
[  199.739630][   T31] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  199.869661][   T31] usb 4-1: device descriptor read/64, error -71
[  200.109638][   T31] usb 4-1: device descriptor read/64, error -71
[  200.178276][ T9325] netlink: 'syz.0.3081': attribute type 64 has an invalid length.
[  200.219812][   T31] usb usb4-port1: attempt power cycle
[  200.242454][ T9336] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3086'.
[  200.519653][  T966] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  200.569662][   T31] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  200.590723][   T31] usb 4-1: device descriptor read/8, error -71
[  200.671439][  T966] usb 1-1: config 1 interface 0 altsetting 15 bulk endpoint 0x1 has invalid maxpacket 64
[  200.681438][  T966] usb 1-1: config 1 interface 0 altsetting 15 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  200.694456][  T966] usb 1-1: config 1 interface 0 has no altsetting 0
[  200.702635][  T966] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  200.711742][  T966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.719837][  T966] usb 1-1: Product: syz
[  200.724053][  T966] usb 1-1: Manufacturer: syz
[  200.728744][  T966] usb 1-1: SerialNumber: syz
[  200.734213][   T31] usb 4-1: device descriptor read/8, error -71
[  200.740882][ T9332] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  200.748105][ T9332] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  200.845449][ T9355] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3093'.
[  200.979598][   T31] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  201.000516][   T31] usb 4-1: device descriptor read/8, error -71
[  201.130556][   T31] usb 4-1: device descriptor read/8, error -71
[  201.156564][ T9332] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:446
[  201.160527][  T966] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 15 proto 1 vid 0x0525 pid 0xA4A8
[  201.182554][  T966] usb 1-1: USB disconnect, device number 32
[  201.190096][  T966] usblp0: removed
[  201.239718][   T31] usb usb4-port1: unable to enumerate USB device
[  201.891764][ T9394] fuse: Bad value for 'fd'
[  201.907563][ T9398] usb usb8: usbfs: process 9398 (syz.3.3108) did not claim interface 0 before use
[  201.916964][ T9398] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  201.925416][   T36] audit: type=1400 audit(1757076962.698:592): avc:  denied  { map } for  pid=9397 comm="syz.3.3108" path="socket:[48872]" dev="sockfs" ino=48872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  202.003002][  T541] usb 1-1: new full-speed USB device number 33 using dummy_hcd
[  202.139619][  T541] usb 1-1: device descriptor read/64, error -71
[  202.153893][ T9404] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:296
[  202.153930][ T9406] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[  202.379598][  T541] usb 1-1: device descriptor read/64, error -71
[  202.629620][  T541] usb 1-1: new full-speed USB device number 34 using dummy_hcd
[  202.759622][  T541] usb 1-1: device descriptor read/64, error -71
[  202.999650][  T541] usb 1-1: device descriptor read/64, error -71
[  203.109875][  T541] usb usb1-port1: attempt power cycle
[  203.163938][ T9416] __vm_enough_memory: pid: 9416, comm: syz.3.3112, bytes: 18014402804453376 not enough memory for the allocation
[  203.449762][  T541] usb 1-1: new full-speed USB device number 35 using dummy_hcd
[  203.481148][  T541] usb 1-1: device descriptor read/8, error -71
[  203.613132][  T541] usb 1-1: device descriptor read/8, error -71
[  203.939643][  T541] usb 1-1: new full-speed USB device number 36 using dummy_hcd
[  203.960746][  T541] usb 1-1: device descriptor read/8, error -71
[  204.070467][ T9439] netlink: 'syz.3.3121': attribute type 27 has an invalid length.
[  204.091098][  T541] usb 1-1: device descriptor read/8, error -71
[  204.199836][  T541] usb usb1-port1: unable to enumerate USB device
[  204.309612][  T571] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  204.438463][ T9441] overlayfs: failed to resolve './file0redirect_dir=follow': -2
[  204.469597][  T571] usb 4-1: Using ep0 maxpacket: 32
[  204.479987][  T571] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  204.488367][  T571] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  204.497052][  T571] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  204.506071][  T571] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  204.515924][  T571] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  204.526018][  T571] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  204.539371][  T571] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  204.548651][  T571] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.557924][  T571] usb 4-1: config 0 descriptor??
[  204.766564][  T571] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 53 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  204.780860][  T571] usb 4-1: USB disconnect, device number 53
[  204.787894][  T571] usblp0: removed
[  204.904081][ T9486] fuse: Unknown parameter 'gboup_�d'
[  204.911118][ T9486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3136'.
[  204.920921][ T9486] netlink: 'syz.0.3136': attribute type 10 has an invalid length.
[  204.941297][ T9488] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  204.968076][ T9439] netlink: 'syz.3.3121': attribute type 4 has an invalid length.
[  204.975969][ T9439] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3121'.
[  204.995790][ T9490] rust_binder: Error in use_page_slow: ESRCH
[  204.995808][ T9490] rust_binder: use_range failure ESRCH
[  205.002068][ T9490] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  205.007635][ T9490] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  205.015739][ T9490] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:478
[  205.269641][  T329] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  205.286341][  T365] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  205.419694][  T329] usb 4-1: device descriptor read/64, error -71
[  205.439618][  T365] usb 1-1: Using ep0 maxpacket: 16
[  205.445911][  T365] usb 1-1: config 28 has an invalid interface number: 169 but max is 0
[  205.454225][  T365] usb 1-1: config 28 has no interface number 0
[  205.460422][  T365] usb 1-1: config 28 interface 169 has no altsetting 0
[  205.468483][ T9493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.477100][ T9493] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.490421][  T365] usb 1-1: string descriptor 0 read error: -71
[  205.496661][  T365] usb 1-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48
[  205.505819][  T365] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.515302][  T365] r8152-cfgselector 1-1: Unknown version 0x0000
[  205.524655][  T365] r8152-cfgselector 1-1: rejected 1 configuration due to insufficient available bus power
[  205.534706][  T365] r8152-cfgselector 1-1: no configuration chosen from 1 choice
[  205.543332][  T365] r8152-cfgselector 1-1: USB disconnect, device number 37
[  205.679623][  T329] usb 4-1: device descriptor read/64, error -71
[  205.737581][ T9521] netlink: 'syz.5.3148': attribute type 15 has an invalid length.
[  205.777801][ T9529] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=9529 comm=syz.5.3151
[  205.839641][  T365] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  205.919614][  T329] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  205.991082][  T365] usb 1-1: unable to get BOS descriptor or descriptor too short
[  205.999479][  T365] usb 1-1: config 16 has an invalid interface number: 168 but max is 0
[  206.007807][  T365] usb 1-1: config 16 has no interface number 0
[  206.014035][  T365] usb 1-1: config 16 interface 168 has no altsetting 0
[  206.022468][  T365] usb 1-1: New USB device found, idVendor=0403, idProduct=da72, bcdDevice=d8.b8
[  206.031564][  T365] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.039599][  T365] usb 1-1: Product: syz
[  206.043773][  T365] usb 1-1: Manufacturer: syz
[  206.048355][  T365] usb 1-1: SerialNumber: syz
[  206.053445][  T329] usb 4-1: device descriptor read/64, error -71
[  206.299630][  T329] usb 4-1: device descriptor read/64, error -71
[  206.313191][ T9533] overlayfs: failed to clone upperpath
[  206.320444][ T9535] overlayfs: failed to clone upperpath
[  206.409726][  T329] usb usb4-port1: attempt power cycle
[  206.749620][  T329] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  206.770590][  T329] usb 4-1: device descriptor read/8, error -71
[  206.900599][  T329] usb 4-1: device descriptor read/8, error -71
[  207.135821][ T9569] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[  207.144097][ T9569] rust_binder: Write failure EINVAL in pid:312
[  207.773619][   T36] audit: type=1400 audit(1757076968.548:593): avc:  denied  { append } for  pid=9612 comm="syz.5.3181" name="file0" dev="tmpfs" ino=1786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  207.810515][ T9615] overlayfs: failed to clone upperpath
[  207.816786][ T9615] overlayfs: failed to clone upperpath
[  207.839699][  T329] usb 4-1: new high-speed USB device number 57 using dummy_hcd
[  207.859951][  T329] usb 4-1: Using ep0 maxpacket: 8
[  207.866205][  T329] usb 4-1: config 162 has an invalid interface number: 79 but max is 1
[  207.874692][  T329] usb 4-1: config 162 has an invalid interface number: 183 but max is 1
[  207.883166][  T329] usb 4-1: config 162 has no interface number 0
[  207.889441][  T329] usb 4-1: config 162 has no interface number 1
[  207.895754][  T329] usb 4-1: config 162 interface 79 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  207.908947][  T329] usb 4-1: config 162 interface 183 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  207.919850][  T329] usb 4-1: config 162 interface 183 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  207.931723][  T329] usb 4-1: config 162 interface 183 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  207.943238][  T329] usb 4-1: config 162 interface 183 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  207.953613][  T329] usb 4-1: config 162 interface 183 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  207.966859][  T329] usb 4-1: config 162 interface 79 has no altsetting 0
[  207.976672][  T329] usb 4-1: config 162 interface 183 has no altsetting 0
[  207.985058][  T329] usb 4-1: New USB device found, idVendor=056e, idProduct=5004, bcdDevice=db.d1
[  207.994188][  T329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.002252][  T329] usb 4-1: Product: syz
[  208.006434][  T329] usb 4-1: Manufacturer: syz
[  208.011056][  T329] usb 4-1: SerialNumber: syz
[  208.272993][  T329] pl2303 4-1:162.79: required endpoints missing
[  208.280592][  T329] pl2303 4-1:162.183: pl2303 converter detected
[  208.287135][  T329] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71
[  208.296006][  T329] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0404]: -71
[  208.304577][  T329] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71
[  208.313148][  T329] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8383]: -71
[  208.322085][  T329] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71
[  208.330683][  T329] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0404]: -71
[  208.339318][  T329] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8484]: -71
[  208.347959][  T329] pl2303 4-1:162.183: pl2303_vendor_read - failed to read [8383]: -71
[  208.356561][  T329] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0000]: -71
[  208.365266][  T329] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0001]: -71
[  208.373872][  T329] pl2303 4-1:162.183: pl2303_vendor_write - failed to write [0002]: -71
[  208.383445][  T329] usb 4-1: pl2303 converter now attached to ttyUSB0
[  208.392540][  T329] usb 4-1: USB disconnect, device number 57
[  208.401836][  T329] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  208.410066][  T329] pl2303 4-1:162.183: device disconnected
[  208.598029][  T365] usb 1-1: NDI device with a latency value of 1
[  208.604588][  T365] ftdi_sio 1-1:16.168: FTDI USB Serial Device converter detected
[  208.608108][   T36] audit: type=1400 audit(1757076969.378:594): avc:  denied  { create } for  pid=9623 comm="syz.0.3185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  208.613424][  T365] ftdi_sio ttyUSB0: unknown device type: 0xd8b8
[  208.647509][  T365] usb 1-1: USB disconnect, device number 38
[  208.654354][  T365] ftdi_sio 1-1:16.168: device disconnected
[  208.676806][ T9630] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:502
[  208.788353][ T9646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3191'.
[  208.965728][ T4473] Bluetooth: hci0: Frame reassembly failed (-84)
[  209.640107][ T9663] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.647266][ T9663] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.654659][ T9663] bridge_slave_0: entered allmulticast mode
[  209.661085][ T9663] bridge_slave_0: entered promiscuous mode
[  209.668396][ T9663] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.675504][ T9663] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.682643][ T9663] bridge_slave_1: entered allmulticast mode
[  209.688948][ T9663] bridge_slave_1: entered promiscuous mode
[  209.741703][ T9663] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.748816][ T9663] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.756164][ T9663] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.763254][ T9663] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.769590][   T62] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  209.787615][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.795016][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.804734][ T4478] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.811817][ T4478] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.821505][ T4478] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.828553][ T4478] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.854257][ T9663] veth0_vlan: entered promiscuous mode
[  209.865205][ T9663] veth1_macvtap: entered promiscuous mode
[  209.929632][   T62] usb 1-1: Using ep0 maxpacket: 8
[  209.936875][   T62] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  209.946184][   T62] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.955829][   T62] usb 1-1: config 0 descriptor??
[  210.165816][   T62] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  211.009680][ T2133] Bluetooth: hci0: command 0x1003 tx timeout
[  211.010901][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  211.378344][   T62] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  211.389062][   T62] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  211.400754][   T62] asix 1-1:0.0: probe with driver asix failed with error -71
[  211.411148][   T62] usb 1-1: USB disconnect, device number 39
[  211.439591][  T365] usb 4-1: new high-speed USB device number 58 using dummy_hcd
[  211.592949][  T365] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  211.602434][  T365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.611672][  T365] usb 4-1: config 0 descriptor??
[  211.825832][  T365] usb 4-1: Cannot read MAC address
[  211.832343][  T365] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  211.846128][  T365] usb 4-1: USB disconnect, device number 58
[  212.444790][ T9782] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37
[  212.444817][ T9782] rust_binder: Error while translating object.
[  212.454149][ T9782] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  212.460496][ T9782] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18
[  212.550326][   T36] audit: type=1400 audit(1757076973.328:595): avc:  denied  { load_policy } for  pid=9785 comm="syz.6.3235" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  212.550348][ T9787] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0)
[  212.550380][ T9787] SELinux: failed to load policy
[  212.594976][   T36] audit: type=1400 audit(1757076973.368:596): avc:  denied  { remount } for  pid=9785 comm="syz.6.3235" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[  212.615049][ T9786] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 223)
[  212.615070][ T9786] rust_binder: Error while translating object.
[  212.625679][ T9786] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  212.631875][ T9786] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender.
[  212.641349][ T9786] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:23
[  212.658475][  T571] rust_binder: 9785: removing orphan mapping 0:24
[  212.682438][ T9789] netlink: 'syz.6.3236': attribute type 32 has an invalid length.
[  212.744484][ T9801] overlayfs: failed to resolve './file0/file0': -2
[  212.755500][ T9804] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  212.758386][ T9803] rust_binder: Error while translating object.
[  212.758396][ T9804] rust_binder: Error while translating object.
[  212.758429][ T9804] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  212.764957][ T9803] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  212.771539][ T9804] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:511
[  212.777259][ T9803] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:511
[  212.847503][ T9813] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  212.911686][ T9814] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:43
[  213.156962][ T9823] rust_binder: Error while translating object.
[  213.166202][ T9823] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  213.175581][ T9823] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:525
[  213.529621][  T966] usb 4-1: new full-speed USB device number 59 using dummy_hcd
[  213.690739][  T966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  213.701858][  T966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  213.711704][  T966] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  213.724636][  T966] usb 4-1: New USB device found, idVendor=056a, idProduct=003b, bcdDevice= 0.00
[  213.734133][  T966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.743042][  T966] usb 4-1: config 0 descriptor??
[  213.934845][ T9864] syz.6.3263 (9864): attempted to duplicate a private mapping with mremap.  This is not supported.
[  214.034210][ T9879] fuse: Bad value for 'fd'
[  214.339590][  T365] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  214.354760][  T966] usbhid 4-1:0.0: can't add hid device: -71
[  214.360823][  T966] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  214.370112][  T966] usb 4-1: USB disconnect, device number 59
[  214.489606][  T365] usb 1-1: Using ep0 maxpacket: 32
[  214.495907][  T365] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  214.504469][  T365] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  214.513113][  T365] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  214.522218][  T365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  214.532659][  T365] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  214.542390][  T365] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  214.555396][  T365] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  214.564495][  T365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.573300][  T365] usb 1-1: config 0 descriptor??
[  214.714816][   T36] audit: type=1400 audit(1757076975.482:597): avc:  denied  { execute } for  pid=9901 comm="syz.5.3277" path="/memory.events.local" dev="ramfs" ino=50853 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  214.753680][ T9904] veth1: entered allmulticast mode
[  214.759752][ T9903] veth1: left allmulticast mode
[  214.785773][  T365] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  214.802129][  T365] usb 1-1: USB disconnect, device number 40
[  214.810084][  T365] usblp0: removed
[  214.821435][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3282'.
[  214.830862][ T9912] netlink: 'syz.5.3282': attribute type 4 has an invalid length.
[  214.840625][ T9912] netlink: 'syz.5.3282': attribute type 4 has an invalid length.
[  214.851326][ T9912] x_tables: duplicate underflow at hook 1
[  214.874950][ T9917] rust_binder: validate_parent_fixup: fixup_min_offset=57, parent_offset=37
[  214.874977][ T9917] rust_binder: Error while translating object.
[  214.883994][ T9917] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  214.891093][ T9917] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:364
[  214.901189][ T9923] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  214.920324][   T36] audit: type=1400 audit(1757076975.682:598): avc:  denied  { execute } for  pid=9920 comm="syz.5.3285" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=51226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  215.399608][  T571] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  215.432691][ T9963] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3298'.
[  215.549578][  T571] usb 1-1: Using ep0 maxpacket: 32
[  215.556221][  T571] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  215.564843][  T571] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  215.573954][  T571] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  215.585723][  T571] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  215.595429][  T571] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  215.605107][  T571] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  215.618158][  T571] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  215.627225][  T571] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.636179][  T571] usb 1-1: config 0 descriptor??
[  215.819614][ T9982] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:379
[  215.843124][  T571] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  215.869950][  T571] usb 1-1: USB disconnect, device number 41
[  215.877667][  T571] usblp0: removed
[  216.036229][ T9995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3309'.
[  216.069445][T10002] netlink: 37 bytes leftover after parsing attributes in process `syz.3.3311'.
[  216.313523][  T571] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  216.470993][  T571] usb 1-1: unable to get BOS descriptor or descriptor too short
[  216.479420][  T571] usb 1-1: config 1 has an invalid interface number: 6 but max is 2
[  216.487492][  T571] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  216.496229][  T571] usb 1-1: config 1 has no interface number 1
[  216.502366][  T571] usb 1-1: too many endpoints for config 1 interface 6 altsetting 1: 145, using maximum allowed: 30
[  216.513207][  T571] usb 1-1: config 1 interface 6 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 145
[  216.526319][  T571] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 153, changing to 7
[  216.537479][  T571] usb 1-1: config 1 interface 6 has no altsetting 0
[  216.545762][  T571] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  216.554867][  T571] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.562880][  T571] usb 1-1: Product: syz
[  216.567151][  T571] usb 1-1: Manufacturer: syz
[  216.571802][  T571] usb 1-1: SerialNumber: syz
[  216.782354][  T571] usb 1-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  216.792893][  T571] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  216.811039][  T571] hub 1-1:1.6: Invalid hub with more than one config or interface
[  216.819644][  T571] hub 1-1:1.6: probe with driver hub failed with error -22
[  216.829603][  T571] usb 1-1: USB disconnect, device number 42
[  216.841416][  T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  217.296977][T10060] EXT4-fs: dax option not supported
[  217.303571][T10060] rust_binder: 552: no such ref 3
[  217.355008][T10061] rust_binder: BC_REQUEST_FREEZE_NOTIFICATION invalid ref 0
[  217.362513][T10061] rust_binder: Write failure EINVAL in pid:552
[  217.833053][T10086] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  217.850698][T10088] tipc: New replicast peer: 255.255.255.255
[  217.864873][T10088] tipc: Enabled bearer <udp:syz2>, priority 10
[  217.874030][T10088] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:423
[  217.964120][   T36] audit: type=1400 audit(1757076978.732:599): avc:  denied  { remount } for  pid=10097 comm="syz.6.3346" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  218.476448][T10120] 9pnet_fd: Insufficient options for proto=fd
[  218.489604][   T45] usb 4-1: new high-speed USB device number 60 using dummy_hcd
[  218.499577][  T541] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  218.569228][T10124] netlink: 'syz.5.3354': attribute type 4 has an invalid length.
[  218.577826][T10124] netlink: 'syz.5.3354': attribute type 4 has an invalid length.
[  218.640793][   T45] usb 4-1: config 0 interface 0 has no altsetting 0
[  218.647533][   T45] usb 4-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00
[  218.656819][   T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.659886][  T541] usb 1-1: Using ep0 maxpacket: 8
[  218.672151][  T541] usb 1-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  218.674085][   T45] usb 4-1: config 0 descriptor??
[  218.692870][  T541] usb 1-1: config 1 interface 0 has no altsetting 0
[  218.702383][  T541] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0a16, bcdDevice= 0.40
[  218.711508][  T541] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.720283][  T541] usb 1-1: Product: 닭鎉ꉥ↼뜣컧䩮掖羂勰튯䣑ￊ글䚐糋࢘꿞漊ꞵ瑴楢ꊫ⃜䈃뇬ﵔꞴ퍪姌Ὥ粡畨젞뎷ボ晨ぺ훩р왜䘥聑叝욥↗鶯ﴹ퐞䰓㑴끤ꯅᇁ耷灲夀鈀ਔ夢ꄧ౜㆗匾Ⲙ㌎䧚Ђ蒿］쫄⻨㞶뛯끭ᗦ완䒊⼝笉嬈ꦃ릙璯魪അﴯ
[  218.750248][  T541] usb 1-1: Manufacturer: ࠊ
[  218.755019][  T541] usb 1-1: SerialNumber: 䂲⇩閧븫᫨춫ꅒ˖᣺긑뛀窙岿ᛘ䩅ጪ㙰䩝侹ᡤ쭶๬⧢뛸맟嗡卿幯䯪ྭ
[  218.882036][T10141] netlink: 124 bytes leftover after parsing attributes in process `syz.5.3359'.
[  218.979596][  T966] tipc: Node number set to 1593835521
[  218.980608][  T541] usbhid 1-1:1.0: can't add hid device: -71
[  218.992695][  T541] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  219.001948][  T541] usb 1-1: USB disconnect, device number 43
[  219.101279][   T45] elecom 0003:056E:010C.0008: unknown main item tag 0x0
[  219.113625][   T45] elecom 0003:056E:010C.0008: hidraw0: USB HID v1.01 Device [HID 056e:010c] on usb-dummy_hcd.3-1/input0
[  219.125581][T10166] 9pnet_fd: Insufficient options for proto=fd
[  219.134391][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3368'.
[  219.151156][T10173] netlink: 'syz.6.3368': attribute type 11 has an invalid length.
[  219.161836][T10173] netlink: 'syz.6.3368': attribute type 1 has an invalid length.
[  219.169721][T10173] netlink: 3593 bytes leftover after parsing attributes in process `syz.6.3368'.
[  219.272497][T10186] 9pnet_fd: Insufficient options for proto=fd
[  219.296341][T10117] rust_binder: Write failure EFAULT in pid:440
[  219.296638][  T541] usb 4-1: USB disconnect, device number 60
[  219.792631][T10200] tipc: Started in network mode
[  219.797529][T10200] tipc: Node identity , cluster identity 4711
[  219.803852][T10200] tipc: Failed to set node id, please configure manually
[  219.811100][T10200] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  219.819970][T10200] netlink: 'syz.6.3379': attribute type 29 has an invalid length.
[  219.827823][T10200] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.3379'.
[  219.875960][T10202] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  219.875987][T10202] rust_binder: Read failure Err(EFAULT) in pid:442
[  220.004834][T10217] 9pnet_fd: Insufficient options for proto=fd
[  220.599104][T10229] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3390'.
[  220.692994][T10233] netlink: 25 bytes leftover after parsing attributes in process `syz.5.3392'.
[  220.758039][T10239] SELinux:  policydb table sizes (0,0) do not match mine (8,7)
[  220.771002][T10239] SELinux: failed to load policy
[  220.891279][   T36] audit: type=1400 audit(1757076981.662:600): avc:  denied  { read } for  pid=10247 comm="syz.3.3396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  220.911760][T10248] netlink: 'syz.3.3396': attribute type 28 has an invalid length.
[  220.947940][T10255] binder: Unknown parameter 'defcontext01777777777777777777777'
[  220.982396][   T36] audit: type=1400 audit(1757076981.752:601): avc:  denied  { watch watch_reads } for  pid=10261 comm="syz.0.3398" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1
[  221.301564][T10282] binder: Bad value for 'max'
[  221.574177][  T541] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  221.605760][T10301] fuse: Bad value for 'user_id'
[  221.610709][T10301] fuse: Bad value for 'user_id'
[  221.638240][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.638272][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.646574][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.651467][T10309] rust_binder: Write failure EINVAL in pid:497
[  221.668564][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.668587][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.675521][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.682051][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.688666][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.695226][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.701790][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.708266][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.714836][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.721376][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.727956][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.735205][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.750282][  T541] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  221.772036][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.772065][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.773364][T10314] overlayfs: failed to clone upperpath
[  221.778774][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.790492][  T541] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.805068][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.805093][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.806535][T10314] overlayfs: failed to clone upperpath
[  221.823820][  T541] usb 1-1: config 0 descriptor??
[  221.832445][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.832473][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.839332][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.845973][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.853379][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.866759][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.873554][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.880323][T10319] sit0: entered promiscuous mode
[  221.891841][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.891866][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.898340][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.906803][T10319] netlink: 'syz.5.3417': attribute type 1 has an invalid length.
[  221.921157][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.921200][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.927649][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.934213][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.940716][T10319] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3417'.
[  221.956168][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.956213][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.962918][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.969436][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.976290][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.983123][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.989746][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  221.996387][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  222.003677][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  222.010212][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  222.016733][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  222.023241][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  222.035046][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  222.045164][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  222.053283][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  222.060328][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  222.066877][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  222.074126][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  222.081020][  T541] usb 1-1: Cannot read MAC address
[  222.093437][  T541] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  222.106794][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  222.106822][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  222.114579][  T541] usb 1-1: USB disconnect, device number 44
[  222.132994][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  222.133023][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  222.139474][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  222.148311][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  222.154800][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  222.162737][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  222.169583][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  222.176025][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  222.183071][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  222.189636][T10307] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  222.220626][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3421'.
[  222.243099][T10333] rust_binder: Write failure EFAULT in pid:501
[  222.569008][T10357] incfs: Options parsing error. -22
[  222.582720][T10357] incfs: mount failed -22
[  222.615185][T10369] overlayfs: failed to clone upperpath
[  222.723291][   T36] audit: type=1326 audit(1757076983.492:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10398 comm="syz.0.3440" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38ac98ebe9 code=0x0
[  222.746367][   T36] audit: type=1326 audit(1757076983.492:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10398 comm="syz.0.3440" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38ac98ebe9 code=0x0
[  222.824021][T10405] binder: Unknown parameter 'mask'
[  223.242687][   T36] audit: type=1400 audit(1757076984.012:604): avc:  denied  { remount } for  pid=10409 comm="syz.3.3443" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  224.107686][T10423] rust_binder: Write failure EFAULT in pid:512
[  224.124178][   T36] audit: type=1400 audit(1757076984.892:605): avc:  denied  { remount } for  pid=10424 comm="syz.3.3448" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  224.282989][T10441] >: renamed from veth0_vlan (while UP)
[  225.366369][T10489] tmpfs: Unknown parameter ''
[  225.832948][T10492] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3473'.
[  226.591241][T10515] overlayfs: conflicting lowerdir path
[  226.829598][  T541] usb 1-1: new full-speed USB device number 45 using dummy_hcd
[  226.901456][T10545] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  226.901487][T10545] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:538
[  226.922214][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[  226.937813][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[  226.962578][  T541] usb 1-1: device descriptor read/64, error -71
[  227.229621][  T541] usb 1-1: device descriptor read/64, error -71
[  227.469594][  T541] usb 1-1: new full-speed USB device number 46 using dummy_hcd
[  227.599608][  T541] usb 1-1: device descriptor read/64, error -71
[  227.839587][  T541] usb 1-1: device descriptor read/64, error -71
[  227.949792][  T541] usb usb1-port1: attempt power cycle
[  228.080471][T10566] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3499'.
[  228.201792][   T36] audit: type=1326 audit(1757076988.972:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10583 comm="syz.6.3506" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb1478ebe9 code=0x0
[  228.289592][  T541] usb 1-1: new full-speed USB device number 47 using dummy_hcd
[  228.310590][  T541] usb 1-1: device descriptor read/8, error -71
[  228.440697][  T541] usb 1-1: device descriptor read/8, error -71
[  228.679579][  T541] usb 1-1: new full-speed USB device number 48 using dummy_hcd
[  228.700616][  T541] usb 1-1: device descriptor read/8, error -71
[  228.830600][  T541] usb 1-1: device descriptor read/8, error -71
[  228.929628][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  228.935802][ T2133] Bluetooth: hci0: command 0x1003 tx timeout
[  228.941970][  T541] usb usb1-port1: unable to enumerate USB device
[  228.970845][T10592] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3
[  229.050443][T10600] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  229.060123][T10600] SELinux: failed to load policy
[  229.616935][   T36] audit: type=1400 audit(1757076990.382:607): avc:  denied  { getopt } for  pid=10616 comm="syz.0.3517" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  229.633444][T10620] cgroup: Need name or subsystem set
[  229.657741][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  229.664533][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  229.671356][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  229.678067][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  229.684838][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  229.691738][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  229.698454][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  229.705190][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  229.712053][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  229.718968][    C0] IPv4: Oversized IP packet from 172.20.20.170
[  229.770511][T10629] fuse: Bad value for 'fd'
[  230.207368][T10658] 9pnet_fd: Insufficient options for proto=fd
[  230.270768][T10660] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  231.032578][T10671] netlink: 'syz.6.3534': attribute type 28 has an invalid length.
[  231.075040][T10679] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3537'.
[  231.085161][T10679] 9pnet_fd: Insufficient options for proto=fd
[  231.127443][T10684] netlink: 'syz.6.3539': attribute type 28 has an invalid length.
[  231.249582][  T541] usb 4-1: new full-speed USB device number 61 using dummy_hcd
[  231.400953][  T541] usb 4-1: not running at top speed; connect to a high speed hub
[  231.409434][  T541] usb 4-1: config 1 has an invalid interface number: 6 but max is 2
[  231.417478][  T541] usb 4-1: config 1 has 4 interfaces, different from the descriptor's value: 3
[  231.426513][  T541] usb 4-1: config 1 has no interface number 3
[  231.432637][  T541] usb 4-1: config 1 interface 6 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  231.445696][  T541] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023
[  231.456728][  T541] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023
[  231.467823][  T541] usb 4-1: config 1 interface 6 has no altsetting 0
[  231.475760][  T541] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  231.484882][  T541] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.492973][  T541] usb 4-1: Product: syz
[  231.497188][  T541] usb 4-1: Manufacturer: Ї
[  231.501754][  T541] usb 4-1: SerialNumber: syz
[  231.661286][T10690] 9pnet_fd: Insufficient options for proto=fd
[  231.909256][T10669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  231.917834][T10669] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  231.926180][T10669] tmpfs: Unknown parameter 'fowner>00000000000000000000'
[  231.936324][  T541] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  231.944950][  T541] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  231.955155][  T541] usb 4-1: USB disconnect, device number 61
[  231.964221][  T332] udevd[332]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  232.869665][ T4473] bridge_slave_1: left allmulticast mode
[  232.875363][ T4473] bridge_slave_1: left promiscuous mode
[  232.919941][ T4473] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.939750][ T4473] bridge_slave_0: left allmulticast mode
[  232.945459][ T4473] bridge_slave_0: left promiscuous mode
[  232.959734][ T4473] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.091878][ T4473] tipc: Disabling bearer <udp:syz2>
[  233.097714][ T4473] tipc: Left network mode
[  233.113698][ T4473] veth1_macvtap: left promiscuous mode
[  233.129632][ T4473] >: left promiscuous mode
[  233.233954][T10784] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.241253][T10784] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.248428][T10784] bridge_slave_0: entered allmulticast mode
[  233.255128][T10784] bridge_slave_0: entered promiscuous mode
[  233.266223][T10784] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.279592][T10784] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.294855][T10784] bridge_slave_1: entered allmulticast mode
[  233.308369][T10784] bridge_slave_1: entered promiscuous mode
[  233.434670][T10784] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.441777][T10784] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.449086][T10784] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.456164][T10784] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.495886][ T4478] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.504423][ T4478] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.520279][ T4478] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.527375][ T4478] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.537419][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.544531][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.584519][T10784] veth0_vlan: entered promiscuous mode
[  233.598256][T10784] veth1_macvtap: entered promiscuous mode
[  233.690204][T10829] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed.
[  233.702246][T10831] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  233.702279][T10831] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  233.708855][T10831] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  233.708876][T10831] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  233.708892][T10831] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  233.708909][T10831] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  233.722451][T10831] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  233.735767][T10831] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  233.747802][T10831] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  233.754385][T10831] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  233.852857][T10840] rust_binder: 10839 RLIMIT_NICE not set
[  233.859770][T10839] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  233.865492][T10839] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:18
[  233.945972][   T45] rust_binder: 10838: removing orphan mapping 0:4248
[  234.006332][T10850] rust_binder: 10842 RLIMIT_NICE not set
[  234.007390][T10842] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  234.013415][T10842] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21
[  234.029834][  T541] rust_binder: 10841: removing orphan mapping 0:4248
[  234.070590][T10851] veth1_macvtap: left promiscuous mode
[  234.078481][T10858] rust_binder: Error while translating object.
[  234.078537][T10858] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  234.085053][T10858] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:29
[  234.122121][T10863] 9pnet: p9_errstr2errno: server reported unknown error 18446744
[  234.203909][T10877] rust_binder: Write failure EFAULT in pid:38
[  234.239442][T10881] kvm: kvm [10880]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x187) = 0xea8000ffff
[  234.309691][T10898] ������<_�m]�L��: renamed from lo (while UP)
[  234.438751][   T36] audit: type=1400 audit(1757076996.206:608): avc:  denied  { setattr } for  pid=10926 comm="syz.6.3615" name="PACKET" dev="sockfs" ino=55030 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  234.465215][T10927] erofs: Unknown parameter '*'
[  234.497408][   T36] audit: type=1400 audit(1757076996.236:609): avc:  denied  { listen } for  pid=10926 comm="syz.6.3615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  234.539114][   T36] audit: type=1400 audit(1757076996.306:610): avc:  denied  { create } for  pid=10936 comm="syz.6.3619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1
[  234.558926][   T36] audit: type=1400 audit(1757076996.316:611): avc:  denied  { write } for  pid=10936 comm="syz.6.3619" name="/" dev="configfs" ino=1317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  234.581510][   T36] audit: type=1400 audit(1757076996.316:612): avc:  denied  { add_name } for  pid=10936 comm="syz.6.3619" name=6A3613BCFA849DA1B5E070A7911D7488B3E628D9339718E8B821F1BB5D5C45F0316BB563D0A442801412DFD5A4D61CA657E04D6686F7D5863D579544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  234.613489][   T36] audit: type=1400 audit(1757076996.316:613): avc:  denied  { create } for  pid=10936 comm="syz.6.3619" name=6A3613BCFA849DA1B5E070A7911D7488B3E628D9339718E8B821F1BB5D5C45F0316BB563D0A442801412DFD5A4D61CA657E04D6686F7D5863D579544 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1
[  234.770791][T10945] netlink: 4096 bytes leftover after parsing attributes in process `syz.7.3621'.
[  234.863543][T10950] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  234.913729][   T36] audit: type=1400 audit(1757076996.686:614): avc:  denied  { mounton } for  pid=10949 comm="syz.7.3623" path="/17/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1
[  234.943997][T10950] rust_binder: Failed to allocate buffer. len:1024, is_oneway:false
[  235.281946][T10981] overlayfs: failed to clone upperpath
[  235.331713][T10988] batadv_slave_1: entered promiscuous mode
[  235.338390][T10987] batadv_slave_1: left promiscuous mode
[  236.459591][   T45] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  236.609754][   T45] usb 1-1: Using ep0 maxpacket: 32
[  236.616604][   T45] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[  236.626557][   T45] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  236.637648][   T45] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  236.646765][   T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.654847][   T45] usb 1-1: Product: syz
[  236.659047][   T45] usb 1-1: Manufacturer: syz
[  236.663669][   T45] usb 1-1: SerialNumber: syz
[  237.072613][T11004] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  237.072695][T11026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  237.080423][T11004] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  237.089159][T11026] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  237.304147][   T45] cdc_ncm 1-1:1.0: bind() failure
[  237.310382][   T45] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71
[  237.318569][   T45] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71
[  237.328017][   T45] usb 1-1: USB disconnect, device number 49
[  237.530514][T11037] SELinux:  Context ϧ� is not valid (left unmapped).
[  237.537806][   T36] audit: type=1400 audit(1757076999.306:615): avc:  denied  { create } for  pid=11036 comm="syz.5.3653" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE
[  237.538833][T11037] overlayfs: failed to clone upperpath
[  237.571937][   T36] audit: type=1400 audit(1757076999.306:616): avc:  denied  { associate } for  pid=11036 comm="syz.5.3653" name="file0" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=CFA7AE
[  237.595405][   T36] audit: type=1400 audit(1757076999.306:617): avc:  denied  { mounton } for  pid=11036 comm="syz.5.3653" path="/464/bus" dev="tmpfs" ino=2536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=CFA7AE
[  237.883367][T11041] rust_binder: Error while translating object.
[  237.883421][T11041] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  237.889848][T11041] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:642
[  237.981895][T11044] incfs: Options parsing error. -22
[  237.996701][T11044] incfs: mount failed -22
[  238.003174][T11044] loop7: detected capacity change from 0 to 7
[  238.010303][    C0] blk_print_req_error: 6 callbacks suppressed
[  238.010321][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  238.025796][    C0] buffer_io_error: 6 callbacks suppressed
[  238.025824][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  238.039897][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  238.049092][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[  238.056988][  T332]  loop7: unable to read partition table
[  238.109793][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  238.119030][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  238.127430][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  238.137056][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  238.145622][T11044]  loop7: unable to read partition table
[  238.151477][T11044] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  238.165894][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  238.175197][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  238.183854][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  238.193070][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  238.201555][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  238.210759][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  238.219982][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  238.229187][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  238.238039][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  238.247238][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  238.292103][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  238.297100][T11063] incfs_lookup_dentry err:-1
[  238.301312][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[  238.311809][T11063] incfs: Can't find or create .index dir in ./file0
[  238.319345][  T109]  loop7: unable to read partition table
[  238.334031][T11063] incfs: mount failed -1
[  238.339737][  T365] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  238.490620][  T365] usb 1-1: config 0 descriptor has 1 excess byte, ignoring
[  238.497995][  T365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  238.517556][  T365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  238.530420][  T365] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  238.539629][  T365] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.549881][  T365] usb 1-1: Product: syz
[  238.554129][  T365] usb 1-1: Manufacturer: syz
[  238.558783][  T365] usb 1-1: SerialNumber: syz
[  238.564954][  T365] usb 1-1: config 0 descriptor??
[  238.571647][  T365] usb 1-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress f8
[  238.776705][  T365] usb 1-1: USB disconnect, device number 50
[  239.001898][T11101] netlink: 324 bytes leftover after parsing attributes in process `syz.6.3675'.
[  239.236209][  T109]  loop7: unable to read partition table
[  239.301845][T11124] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  239.301872][T11124] rust_binder: Read failure Err(EFAULT) in pid:650
[  253.169443][T11130] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  253.270109][T11151] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11151 comm=syz.6.3691
[  253.285856][T11151] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11151 comm=syz.6.3691
[  253.317218][T11146] rust_binder: Error in use_page_slow: ESRCH
[  253.317245][T11146] rust_binder: use_range failure ESRCH
[  253.326916][T11146] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  253.333076][T11146] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  253.341660][T11146] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:657
[  253.365624][T11174] 2N: renamed from vcan0 (while UP)
[  253.406491][T11180] GUP no longer grows the stack in syz.0.3700 (11180): 200000005000-200000008000 (200000004000)
[  253.417221][T11180] CPU: 1 UID: 0 PID: 11180 Comm: syz.0.3700 Not tainted syzkaller #0 e0010524de270d562e17ec59754923f7dbe680d3
[  253.417262][T11180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  253.417286][T11180] Call Trace:
[  253.417295][T11180]  <TASK>
[  253.417306][T11180]  __dump_stack+0x21/0x30
[  253.417347][T11180]  dump_stack_lvl+0x10c/0x190
[  253.417378][T11180]  ? __cfi_dump_stack_lvl+0x10/0x10
[  253.417408][T11180]  ? futex_lock_pi_atomic+0xdd/0xc70
[  253.417438][T11180]  dump_stack+0x19/0x20
[  253.417474][T11180]  fixup_user_fault+0x63d/0x6d0
[  253.417505][T11180]  fault_in_user_writeable+0x76/0xe0
[  253.417527][T11180]  futex_lock_pi+0x258/0xa10
[  253.417551][T11180]  ? futex_unqueue+0x136/0x160
[  253.417574][T11180]  ? should_fail+0xf/0x20
[  253.417596][T11180]  ? __cfi_futex_lock_pi+0x10/0x10
[  253.417623][T11180]  ? __cfi_futex_wake_mark+0x10/0x10
[  253.417651][T11180]  ? futex_setup_timer+0xb4/0xd0
[  253.417673][T11180]  ? __cfi_futex_wake_mark+0x10/0x10
[  253.417702][T11180]  ? mas_find+0x358/0x5f0
[  253.417729][T11180]  ? __kasan_check_write+0x18/0x20
[  253.417766][T11180]  do_futex+0x25c/0x500
[  253.417789][T11180]  ? __cfi_do_futex+0x10/0x10
[  253.417812][T11180]  ? __vm_munmap+0x2c7/0x370
[  253.417835][T11180]  __se_sys_futex+0x28f/0x300
[  253.417859][T11180]  ? __x64_sys_futex+0x110/0x110
[  253.417883][T11180]  ? __kasan_check_write+0x18/0x20
[  253.417915][T11180]  __x64_sys_futex+0xe9/0x110
[  253.417938][T11180]  x64_sys_call+0x227f/0x2ee0
[  253.417971][T11180]  do_syscall_64+0x58/0xf0
[  253.417991][T11180]  ? clear_bhb_loop+0x50/0xa0
[  253.418020][T11180]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  253.418047][T11180] RIP: 0033:0x7f38ac98ebe9
[  253.418072][T11180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  253.418094][T11180] RSP: 002b:00007f38ad7d8038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  253.418125][T11180] RAX: ffffffffffffffda RBX: 00007f38acbc5fa0 RCX: 00007f38ac98ebe9
[  253.418143][T11180] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000
[  253.418160][T11180] RBP: 00007f38aca11e19 R08: 0000000000000000 R09: 0000000000000000
[  253.418176][T11180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  253.418191][T11180] R13: 00007f38acbc6038 R14: 00007f38acbc5fa0 R15: 00007ffca4f203c8
[  253.418211][T11180]  </TASK>
[  253.418975][T11180] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3700'.
[  253.479079][T11193] netlink: 'syz.5.3704': attribute type 1 has an invalid length.
[  253.503146][T11180] 9pnet_fd: Insufficient options for proto=fd
[  253.509406][T11193] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3704'.
[  253.750332][T11202] rust_binder: 664: no such ref 2
[  253.755509][T11202] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:664
[  253.785262][T11216] rust_binder: Write failure EFAULT in pid:668
[  253.827136][T11220] veth1: entered allmulticast mode
[  253.838798][T11220] veth1: left allmulticast mode
[  254.023895][   T36] kauditd_printk_skb: 6 callbacks suppressed
[  254.023914][   T36] audit: type=1400 audit(1757077015.796:624): avc:  denied  { setattr } for  pid=11250 comm="syz.5.3724" name="AF_VSOCK" dev="sockfs" ino=57791 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  254.613748][T11264] overlayfs: failed to clone upperpath
[  254.666087][T11272] netlink: 248 bytes leftover after parsing attributes in process `syz.5.3732'.
[  254.670775][T11273] netlink: 248 bytes leftover after parsing attributes in process `syz.5.3732'.
[  254.684527][T11273] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3732'.
[  254.695355][T11273] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3732'.
[  254.697982][T11275] overlayfs: failed to resolve './file1': -2
[  254.704379][T11272] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3732'.
[  254.719455][T11272] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3732'.
[  254.815235][T11304] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3743'.
[  254.825079][T11304] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3743'.
[  254.834034][T11304] net_ratelimit: 22 callbacks suppressed
[  254.834395][T11304] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  254.877106][T11311] FAT-fs (rnullb0): bogus number of reserved sectors
[  254.883924][T11311] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  255.746076][   T36] audit: type=1326 audit(1757077017.516:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11346 comm="syz.6.3761" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb1478ebe9 code=0x0
[  255.798655][T11353] overlayfs: failed to clone upperpath
[  255.957953][   T36] audit: type=1400 audit(1757077017.726:626): avc:  denied  { execute } for  pid=11368 comm="syz.0.3768" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  256.001978][T11374] rust_binder: 706: no such ref 0
[  256.007247][T11374] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  256.014823][T11374] rust_binder: 706: no such ref 0
[  256.259571][   T62] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  256.329549][T11380] rust_binder: 102: no such ref 3
[  256.344431][T11385] incfs: Options parsing error. -22
[  256.349813][T11385] incfs: mount failed -22
[  256.397541][T11394] rust_binder: Error while translating object.
[  256.397594][T11394] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  256.404112][T11394] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:107
[  256.410714][   T62] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  256.433940][   T62] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  256.443835][   T62] usb 1-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00
[  256.453415][   T62] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.463049][   T62] usb 1-1: config 0 descriptor??
[  256.478055][T11402] overlayfs: failed to clone upperpath
[  256.532437][T11411] fuse: Bad value for 'group_id'
[  256.537581][T11411] fuse: Bad value for 'group_id'
[  256.611533][T11417] overlayfs: failed to clone upperpath
[  256.620050][T11394] 9pnet_fd: p9_fd_create_tcp (11394): problem connecting socket to 127.0.0.1
[  256.638389][T11394] 9pnet_fd: p9_fd_create_tcp (11394): problem connecting socket to 127.0.0.1
[  256.650714][T11394] 9pnet_fd: p9_fd_create_tcp (11394): problem connecting socket to 127.0.0.1
[  256.876939][   T62] hid-led 0003:04D8:F372.0009: unknown main item tag 0x0
[  256.886230][T11447] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11447 comm=syz.6.3794
[  256.898767][   T62] hid-led 0003:04D8:F372.0009: unknown main item tag 0x0
[  256.905883][   T62] hid-led 0003:04D8:F372.0009: unknown main item tag 0x0
[  256.920655][   T62] hid-led 0003:04D8:F372.0009: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.0-1/input0
[  256.966534][   T62] hid-led 0003:04D8:F372.0009: Greynut Luxafor initialized
[  257.325286][T11465] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:109
[  257.325755][T11465] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:109
[  257.354633][   T62] usb 1-1: USB disconnect, device number 51
[  257.370626][  T541] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38)
[  257.378992][  T541] leds luxafor0:green:led5: Setting an LED's brightness failed (-38)
[  257.387386][  T541] leds luxafor0:red:led5: Setting an LED's brightness failed (-38)
[  257.396182][  T541] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38)
[  257.404527][  T541] leds luxafor0:green:led4: Setting an LED's brightness failed (-38)
[  257.412999][  T541] leds luxafor0:red:led4: Setting an LED's brightness failed (-38)
[  257.421214][  T541] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38)
[  257.429608][    T9] leds luxafor0:green:led3: Setting an LED's brightness failed (-38)
[  257.438215][    T9] leds luxafor0:red:led3: Setting an LED's brightness failed (-38)
[  257.446433][    T9] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38)
[  257.454708][    T9] leds luxafor0:green:led2: Setting an LED's brightness failed (-38)
[  257.463124][    T9] leds luxafor0:red:led2: Setting an LED's brightness failed (-38)
[  257.471330][    T9] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38)
[  257.479682][    T9] leds luxafor0:green:led1: Setting an LED's brightness failed (-38)
[  257.488102][    T9] leds luxafor0:red:led1: Setting an LED's brightness failed (-38)
[  257.496349][    T9] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38)
[  257.504724][    T9] leds luxafor0:green:led0: Setting an LED's brightness failed (-38)
[  257.513074][    T9] leds luxafor0:red:led0: Setting an LED's brightness failed (-38)
[  258.148303][  T365] usb 1-1: new high-speed USB device number 52 using dummy_hcd
[  258.175517][T11480] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:112
[  258.175909][T11481] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  258.304173][  T365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  258.321631][  T365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  258.331431][  T365] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  258.340514][  T365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.349631][  T365] usb 1-1: config 0 descriptor??
[  258.837026][  T365] hid-steam 0003:28DE:1142.000A: unknown main item tag 0x0
[  258.844509][  T365] hid-steam 0003:28DE:1142.000A: unknown main item tag 0x0
[  258.851772][  T365] hid-steam 0003:28DE:1142.000A: unknown main item tag 0x0
[  258.859073][  T365] hid-steam 0003:28DE:1142.000A: unknown main item tag 0x0
[  258.866333][  T365] hid-steam 0003:28DE:1142.000A: unknown main item tag 0x0
[  258.874358][  T365] hid-steam 0003:28DE:1142.000A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0
[  259.047127][T11478] netlink: 'syz.0.3801': attribute type 4 has an invalid length.
[  259.056158][T11478] netlink: 'syz.0.3801': attribute type 4 has an invalid length.
[  259.066919][  T365] usb 1-1: USB disconnect, device number 52
[  259.171470][T11491] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:119
[  259.176134][   T45] rust_binder: 11488: removing orphan mapping 0:24
[  259.230989][T11498] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[  259.450710][   T36] audit: type=1400 audit(1757077021.159:627): avc:  denied  { mounton } for  pid=11499 comm="syz.7.3807" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1
[  259.685308][T11508] rust_binder: Write failure EFAULT in pid:719
[  259.697737][T11510] rust_binder: Failed to allocate buffer. len:4120, is_oneway:true
[  259.877927][T11520] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:728
[  259.998715][   T36] audit: type=1400 audit(1757077021.684:628): avc:  denied  { mounton } for  pid=11528 comm="syz.0.3815" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  259.999803][T11530] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  260.040939][T11530] SELinux: failed to load policy
[  260.046072][T11529] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  260.055696][T11529] SELinux: failed to load policy
[  260.136396][T11537] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  260.144401][T11537] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  260.152964][T11537] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  260.160976][T11537] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  260.170242][T11539] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  260.178347][T11539] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  260.186816][T11539] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  260.194866][T11539] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  260.282675][T11543] binder: Unknown parameter 'fscontext?}'
[  260.358674][T11548] overlayfs: failed to resolve './file1': -2
[  260.451130][T11558] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[  260.459400][T11558] rust_binder: Write failure EINVAL in pid:149
[  260.459765][T11558] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found
[  260.474224][T11558] rust_binder: Write failure EINVAL in pid:149
[  260.486168][T11561] rust_binder: Failed to allocate buffer. len:18446744073709551600, is_oneway:false
[  260.492947][T11562] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  260.664340][   T36] audit: type=1326 audit(1757077022.337:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11575 comm="syz.6.3829" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb1478ebe9 code=0x0
[  260.736487][T11571] rust_binder: Error while translating object.
[  260.736533][T11571] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  260.742781][T11571] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:162
[  261.136798][T11587] overlayfs: failed to clone upperpath
[  261.398567][   T36] audit: type=1400 audit(1757077023.058:630): avc:  denied  { mounton } for  pid=11605 comm="syz.0.3838" path="/243/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=blk_file permissive=1
[  261.446337][T11606] __nla_validate_parse: 1 callbacks suppressed
[  261.446358][T11606] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3838'.
[  261.659135][  T365] rust_binder: 11624: removing orphan mapping 0:24
[  261.793756][   T36] audit: type=1400 audit(1757077023.438:631): avc:  denied  { mounton } for  pid=11650 comm="syz.5.3853" path="/538/file0" dev="tmpfs" ino=2933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  261.793781][T11652] cgroup: No subsys list or none specified
[  262.199962][T11659] netlink: 9 bytes leftover after parsing attributes in process `syz.6.3856'.
[  262.209129][T11659] gretap0: entered promiscuous mode
[  262.214935][T11659] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3856'.
[  262.224020][T11659] 0��{X��: renamed from gretap0
[  262.229846][T11659] 0��{X��: left promiscuous mode
[  262.234971][T11659] 0��{X��: entered allmulticast mode
[  262.240818][T11659] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  262.338634][T11676] fuse: Bad value for 'rootmode'
[  262.375598][T11683] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  262.389853][T11683] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  262.473367][   T36] audit: type=1400 audit(1757077024.092:632): avc:  denied  { mounton } for  pid=11687 comm="syz.0.3867" path="/dev/binderfs/binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  262.931806][T11732] netlink: 'syz.6.3881': attribute type 25 has an invalid length.
[  263.292589][T11735] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 112, limit: 112, size: 119)
[  263.292612][T11735] rust_binder: Error while translating object.
[  263.303411][T11735] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  263.309601][T11735] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender.
[  263.319144][T11735] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:772
[  263.336446][    T9] rust_binder: 11734: removing orphan mapping 0:24
[  263.521854][   T36] audit: type=1326 audit(1757077025.128:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11747 comm="syz.5.3886" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f271298ebe9 code=0x0
[  263.854317][    T9] usb 1-1: new full-speed USB device number 53 using dummy_hcd
[  264.008586][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  264.019664][    T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  264.030053][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  264.039168][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  264.047184][    T9] usb 1-1: SerialNumber: syz
[  264.054689][    T9] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  264.063146][    T9] usb-storage 1-1:1.0: USB Mass Storage device detected
[  264.070990][    T9] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  264.078992][    T9] scsi host1: usb-storage 1-1:1.0
[  264.747467][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3906'.
[  264.756446][T11812] erspan0: default FDB implementation only supports local addresses
[  264.824725][T11825] netlink: 182 bytes leftover after parsing attributes in process `syz.5.3911'.
[  265.369660][   T36] audit: type=1400 audit(1757077026.931:634): avc:  denied  { execmod } for  pid=11829 comm="syz.5.3913" path="/dev/rnullb0" dev="tmpfs" ino=547 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  265.810360][T11832] rust_binder: Write failure EFAULT in pid:201
[  265.849917][T11837] EXT4-fs: dax option not supported
[  266.504085][    T9] usb 1-1: USB disconnect, device number 53
[  266.556668][T11876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3930'.
[  266.567637][T11876] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:786
[  266.603623][T11881] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[  266.629103][T11881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3932'.
[  266.690379][T11903] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3932'.
[  267.344471][   T36] audit: type=1400 audit(1757077028.875:635): avc:  denied  { accept } for  pid=11944 comm="syz.5.3953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  267.408103][T11961] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3960'.
[  267.589782][T12010] netlink: 388 bytes leftover after parsing attributes in process `syz.6.3973'.
[  269.377637][T12075] overlayfs: failed to clone upperpath
[  269.394544][T12077] netlink: 'syz.5.3995': attribute type 3 has an invalid length.
[  269.402487][T12077] netlink: 944 bytes leftover after parsing attributes in process `syz.5.3995'.
[  269.657947][T12103] overlayfs: failed to clone upperpath
[  269.663823][T12103] overlayfs: failed to clone upperpath
[  269.669698][T12103] overlayfs: failed to clone upperpath
[  269.675433][T12103] overlayfs: failed to clone upperpath
[  269.681265][T12103] overlayfs: failed to clone upperpath
[  269.687188][T12103] overlayfs: failed to clone upperpath
[  269.693329][T12103] overlayfs: failed to clone upperpath
[  269.699324][T12103] overlayfs: failed to clone upperpath
[  269.705089][T12103] overlayfs: failed to clone upperpath
[  269.710911][T12103] overlayfs: failed to clone upperpath
[  269.716694][T12103] overlayfs: failed to clone upperpath
[  269.722573][T12103] overlayfs: failed to clone upperpath
[  269.728311][T12103] overlayfs: failed to clone upperpath
[  269.734120][T12103] overlayfs: failed to clone upperpath
[  269.740036][T12103] overlayfs: failed to clone upperpath
[  269.745786][T12103] overlayfs: failed to clone upperpath
[  269.751661][T12103] overlayfs: failed to clone upperpath
[  269.757374][T12103] overlayfs: failed to clone upperpath
[  269.763231][T12103] overlayfs: failed to clone upperpath
[  269.769109][T12103] overlayfs: failed to clone upperpath
[  269.775658][T12103] overlayfs: failed to clone upperpath
[  269.781547][T12103] overlayfs: failed to clone upperpath
[  269.787371][T12103] overlayfs: failed to clone upperpath
[  269.793834][T12103] overlayfs: failed to clone upperpath
[  269.799687][T12103] overlayfs: failed to clone upperpath
[  269.805525][T12103] overlayfs: failed to clone upperpath
[  269.811386][T12103] overlayfs: failed to clone upperpath
[  269.817168][T12103] overlayfs: failed to clone upperpath
[  269.822999][T12103] overlayfs: failed to clone upperpath
[  269.828780][T12103] overlayfs: failed to clone upperpath
[  269.834733][T12103] overlayfs: failed to clone upperpath
[  269.840625][T12103] overlayfs: failed to clone upperpath
[  269.846436][T12103] overlayfs: failed to clone upperpath
[  269.957931][T12122] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4010'.
[  269.974444][T12121] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4010'.
[  270.314774][T12166] rust_binder: Error while translating object.
[  270.314830][T12166] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  270.321168][T12166] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:227
[  270.331444][T12166] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  270.371703][T12172] SELinux: failed to load policy
[  270.534187][T12190] fuse: Bad value for 'fd'
[  270.718762][T12195] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4031'.
[  270.727790][T12195] erspan0: default FDB implementation only supports local addresses
[  270.990526][   T36] audit: type=1400 audit(1757077032.469:636): avc:  denied  { unmount } for  pid=7283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  271.013154][T12213] rust_binder: Error while translating object.
[  271.013197][T12213] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  271.019720][T12213] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:876
[  271.606512][T12225] SELinux:  policydb version 134217492 does not match my version range 15-33
[  271.624500][T12225] SELinux: failed to load policy
[  271.630191][T12225] input: syz0 as /devices/virtual/input/input11
[  272.300068][T12252] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4048'.
[  272.335100][T12260] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4051'.
[  272.401672][  T541] rust_binder: 12259: removing orphan mapping 0:4232
[  272.608907][T12289] SELinux: security_context_str_to_sid (syste_u�Gй�:��) failed with errno=-22
[  272.725949][T12292] rust_binder: Error while translating object.
[  272.725978][T12292] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  272.732228][T12292] rust_binder: Failure BR_FAILED_REPLY { source: EPERM } during reply - delivering BR_FAILED_REPLY to sender.
[  272.741583][T12292] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:920
[  272.816334][   T45] rust_binder: 12291: removing orphan mapping 0:24
[  272.869807][T12314] netlink: 'syz.6.4067': attribute type 4 has an invalid length.
[  272.939368][   T36] audit: type=1326 audit(1757077034.384:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.0.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ac98ebe9 code=0x7fc00000
[  272.964445][   T36] audit: type=1326 audit(1757077034.384:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.0.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38ac98ebe9 code=0x7fc00000
[  272.988093][   T36] audit: type=1326 audit(1757077034.384:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.0.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ac98ebe9 code=0x7fc00000
[  273.011768][   T36] audit: type=1326 audit(1757077034.384:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.0.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ac98ebe9 code=0x7fc00000
[  273.035268][   T36] audit: type=1326 audit(1757077034.384:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.0.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ac98ebe9 code=0x7fc00000
[  273.059107][   T36] audit: type=1326 audit(1757077034.384:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.0.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ac98ebe9 code=0x7fc00000
[  273.083006][   T36] audit: type=1326 audit(1757077034.384:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.0.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ac98ebe9 code=0x7fc00000
[  273.106661][   T36] audit: type=1326 audit(1757077034.384:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.0.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ac98ebe9 code=0x7fc00000
[  273.131545][   T36] audit: type=1326 audit(1757077034.384:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12304 comm="syz.0.4064" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ac98ebe9 code=0x7fc00000
[  273.215921][T12329] overlayfs: failed to clone upperpath
[  273.356151][T12331] rust_binder: 931: no such ref 2
[  273.361268][T12331] rust_binder: 931: no such ref 65535
[  273.366768][T12331] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  273.379290][T12331] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4075'.
[  273.601280][T12361] rust_binder: Write failure EFAULT in pid:242
[  273.688167][T12369] tipc: Started in network mode
[  273.699471][T12369] tipc: Node identity , cluster identity 4711
[  273.705643][T12369] tipc: Failed to set node id, please configure manually
[  273.712803][T12369] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  274.006553][T12385] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.013654][T12385] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.020993][T12385] bridge_slave_0: entered allmulticast mode
[  274.027460][T12385] bridge_slave_0: entered promiscuous mode
[  274.034486][T12385] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.041552][T12385] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.048659][T12385] bridge_slave_1: entered allmulticast mode
[  274.054959][T12385] bridge_slave_1: entered promiscuous mode
[  274.107615][T12385] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.114695][T12385] bridge0: port 2(bridge_slave_1) entered forwarding state
[  274.122027][T12385] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.129280][T12385] bridge0: port 1(bridge_slave_0) entered forwarding state
[  274.153389][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.160923][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.171320][ T4478] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.178433][ T4478] bridge0: port 1(bridge_slave_0) entered forwarding state
[  274.188016][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  274.195107][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  274.225337][T12385] veth0_vlan: entered promiscuous mode
[  274.239249][T12385] veth1_macvtap: entered promiscuous mode
[  274.413808][T12410] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  274.414146][T12410] rust_binder: 7: no such ref 2
[  274.430798][T12410] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:7
[  274.504274][ T4478] Bluetooth: hci0: Frame reassembly failed (-84)
[  274.712143][T12460] binder: Bad value for 'defcontext'
[  274.818376][T12462] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  274.830612][T12462] fuse: Bad value for 'fd'
[  274.843575][    T9] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  275.004502][    T9] usb 1-1: Using ep0 maxpacket: 32
[  275.011221][    T9] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  275.019556][    T9] usb 1-1: config 0 has no interface number 0
[  275.027611][    T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  275.037247][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.045500][    T9] usb 1-1: Product: syz
[  275.049824][    T9] usb 1-1: Manufacturer: syz
[  275.054562][    T9] usb 1-1: SerialNumber: syz
[  275.060646][    T9] usb 1-1: config 0 descriptor??
[  275.066600][    T9] smsc95xx v2.0.0
[  275.471348][    T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  275.482203][    T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  275.694138][    T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  275.705007][    T9] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61
[  276.318252][T12516] x_tables: duplicate underflow at hook 1
[  276.570208][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  276.570238][ T2133] Bluetooth: hci0: command 0x1003 tx timeout
[  276.607358][T12538] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  276.607387][T12538] rust_binder: Read failure Err(EFAULT) in pid:951
[  276.790501][T12540] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  276.797239][T12540] rust_binder: Read failure Err(EFAULT) in pid:261
[  276.836309][T12553] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[  277.645222][  T365] usb 1-1: USB disconnect, device number 54
[  277.856412][   T36] kauditd_printk_skb: 62 callbacks suppressed
[  277.856433][   T36] audit: type=1400 audit(1757077039.254:708): avc:  denied  { execute } for  pid=12576 comm="syz.6.4144" path="/cpu.stat" dev="rootfs" ino=64087 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  277.997659][  T365] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  278.166273][  T365] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 251, changing to 11
[  278.185641][T12610] 9pnet_fd: Insufficient options for proto=fd
[  278.191975][  T365] usb 1-1: config 1 interface 0 has no altsetting 0
[  278.207935][  T365] usb 1-1: New USB device found, idVendor=28bd, idProduct=0078, bcdDevice= 0.40
[  278.217804][  T365] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.225890][  T365] usb 1-1: Product: syz
[  278.235092][  T365] usb 1-1: Manufacturer: syz
[  278.239849][  T365] usb 1-1: SerialNumber: syz
[  278.245531][  T365] usb 1-1: rejected 1 configuration due to insufficient available bus power
[  278.254265][  T365] usb 1-1: no configuration chosen from 1 choice
[  278.367185][T12623] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4155'.
[  278.551010][   T36] audit: type=1326 audit(1757077039.948:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12632 comm="syz.7.4159" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f810a78ebe9 code=0x0
[  279.288142][   T36] audit: type=1400 audit(1757077040.672:710): avc:  denied  { listen } for  pid=12655 comm="syz.5.4169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  279.363360][T12660] 9pnet_fd: Insufficient options for proto=fd
[  279.448750][T12598] syz.6.4144 invoked oom-killer: gfp_mask=0x100cc2(GFP_HIGHUSER), order=0, oom_score_adj=0
[  279.458882][T12598] CPU: 1 UID: 0 PID: 12598 Comm: syz.6.4144 Not tainted syzkaller #0 e0010524de270d562e17ec59754923f7dbe680d3
[  279.458916][T12598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  279.458932][T12598] Call Trace:
[  279.458940][T12598]  <TASK>
[  279.458949][T12598]  __dump_stack+0x21/0x30
[  279.458986][T12598]  dump_stack_lvl+0x10c/0x190
[  279.459016][T12598]  ? __cfi_dump_stack_lvl+0x10/0x10
[  279.459046][T12598]  ? ___ratelimit+0x3f7/0x5a0
[  279.459071][T12598]  dump_stack+0x19/0x20
[  279.459100][T12598]  dump_header+0xd7/0x490
[  279.459123][T12598]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  279.459154][T12598]  oom_kill_process+0x4c0/0x7e0
[  279.459181][T12598]  ? sched_clock_cpu+0x75/0x400
[  279.459212][T12598]  out_of_memory+0x7ee/0xbd0
[  279.459239][T12598]  ? __cfi_out_of_memory+0x10/0x10
[  279.459264][T12598]  ? mutex_lock_killable+0x92/0x1c0
[  279.459291][T12598]  ? __cfi_mutex_lock_killable+0x10/0x10
[  279.459319][T12598]  mem_cgroup_out_of_memory+0x279/0x350
[  279.459342][T12598]  ? drain_obj_stock+0xed0/0xed0
[  279.459366][T12598]  ? memcg1_oom_prepare+0x2c6/0x3a0
[  279.459389][T12598]  try_charge_memcg+0x8f7/0xde0
[  279.459419][T12598]  ? gfp_to_alloc_flags_cma+0x90/0x1c0
[  279.459454][T12598]  ? __cfi_try_charge_memcg+0x10/0x10
[  279.459485][T12598]  ? __alloc_pages_noprof+0x31f/0x7b0
[  279.459515][T12598]  __mem_cgroup_charge+0xf6/0x410
[  279.459548][T12598]  ? filemap_get_entry+0x3fb/0x460
[  279.459575][T12598]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  279.459609][T12598]  ? _raw_spin_lock+0x8c/0x120
[  279.459641][T12598]  filemap_add_folio+0x57/0x2d0
[  279.459667][T12598]  __filemap_get_folio+0x597/0x9d0
[  279.459702][T12598]  ? __vfs_getxattr+0xaf/0x450
[  279.459735][T12598]  ? __cfi___filemap_get_folio+0x10/0x10
[  279.459763][T12598]  ? inode_to_bdi+0x6d/0x100
[  279.459795][T12598]  simple_write_begin+0x60/0x390
[  279.459824][T12598]  generic_perform_write+0x32d/0x960
[  279.459858][T12598]  ? __cfi_generic_perform_write+0x10/0x10
[  279.459892][T12598]  ? mnt_get_write_access_file+0x1af/0x3b0
[  279.459921][T12598]  ? generic_write_checks_count+0x429/0x540
[  279.459950][T12598]  ? file_update_time+0x1ef/0x220
[  279.459980][T12598]  __generic_file_write_iter+0xcf/0x180
[  279.460011][T12598]  generic_file_write_iter+0xb1/0x310
[  279.460043][T12598]  ? __cfi_generic_file_write_iter+0x10/0x10
[  279.460074][T12598]  __kernel_write_iter+0x392/0x830
[  279.460096][T12598]  ? __cfi_generic_file_write_iter+0x10/0x10
[  279.460128][T12598]  ? __cfi___kernel_write_iter+0x10/0x10
[  279.460149][T12598]  ? get_dump_page+0x160/0x220
[  279.460176][T12598]  ? __asan_memset+0x39/0x50
[  279.460207][T12598]  ? iov_iter_bvec+0xc0/0x180
[  279.460236][T12598]  dump_user_range+0xb06/0xdf0
[  279.460260][T12598]  ? __cfi_dump_emit+0x10/0x10
[  279.460292][T12598]  ? __cfi_dump_user_range+0x10/0x10
[  279.460314][T12598]  ? elf_coredump_extra_notes_write+0x42f/0x4c0
[  279.460348][T12598]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[  279.460382][T12598]  elf_core_dump+0x2cd9/0x3810
[  279.460413][T12598]  ? __cfi_elf_core_dump+0x10/0x10
[  279.460447][T12598]  ? dump_interrupted+0xf0/0xf0
[  279.460480][T12598]  ? filp_open+0x182/0x1d0
[  279.460508][T12598]  ? 0xffffffffff600000
[  279.460527][T12598]  do_coredump+0x1bf7/0x2bd0
[  279.460563][T12598]  ? __cfi_do_coredump+0x10/0x10
[  279.460595][T12598]  ? asm_exc_page_fault+0x2b/0x30
[  279.460631][T12598]  ? __kasan_slab_free+0x6a/0x80
[  279.460655][T12598]  ? kmem_cache_free+0x1c1/0x510
[  279.460697][T12598]  ? get_signal+0xa75/0x14f0
[  279.460726][T12598]  get_signal+0x11fd/0x14f0
[  279.460757][T12598]  arch_do_signal_or_restart+0x96/0x720
[  279.460795][T12598]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  279.460832][T12598]  irqentry_exit_to_user_mode+0x4e/0xb0
[  279.460862][T12598]  irqentry_exit+0x16/0x60
[  279.460890][T12598]  exc_page_fault+0x66/0xc0
[  279.460917][T12598]  asm_exc_page_fault+0x2b/0x30
[  279.460943][T12598] RIP: 0033:0x7fdb1464f927
[  279.460962][T12598] Code: 88 15 d2 5d ea 00 88 05 cf 5d ea 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[  279.460981][T12598] RSP: 002b:00007fdb15520120 EFLAGS: 00010202
[  279.461003][T12598] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fdb1478ebe9
[  279.461019][T12598] RDX: 00007fdb15520140 RSI: 00007fdb15520270 RDI: 000000000000000b
[  279.461034][T12598] RBP: 00007fdb14811e19 R08: 0000000000000000 R09: 0000000000000000
[  279.461048][T12598] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  279.461062][T12598] R13: 00007fdb149c6128 R14: 00007fdb149c6090 R15: 00007ffecc2be938
[  279.461082][T12598]  </TASK>
[  279.461091][T12598] memory: usage 307200kB, limit 307200kB, failcnt 813
[  279.912404][T12598] memory+swap: usage 310188kB, limit 9007199254740988kB, failcnt 0
[  279.920579][T12598] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  279.927507][T12598] Memory cgroup stats for /syz6:
[  279.927642][T12598] cache 314572800
[  279.936333][T12598] rss 0
[  279.939184][T12598] rss_huge 0
[  279.942413][T12598] shmem 0
[  279.945360][T12598] mapped_file 0
[  279.948847][T12598] dirty 0
[  279.951831][T12598] writeback 0
[  279.955297][T12598] workingset_refault_anon 0
[  279.960035][T12598] workingset_refault_file 0
[  279.964557][T12598] swap 3059712
[  279.967933][T12598] swapcached 0
[  279.971330][T12598] pgpgin 230926
[  279.974805][T12598] pgpgout 156170
[  279.978360][T12598] pgfault 126223
[  279.981933][T12598] pgmajfault 7
[  279.985311][T12598] inactive_anon 0
[  279.988934][T12598] active_anon 0
[  279.992422][T12598] inactive_file 0
[  279.996063][T12598] active_file 0
[  279.999547][T12598] unevictable 314572800
[  280.003718][T12598] hierarchical_memory_limit 314572800
[  280.009081][T12598] hierarchical_memsw_limit 9223372036854771712
[  280.015296][T12598] total_cache 314572800
[  280.019500][T12598] total_rss 0
[  280.022786][T12598] total_rss_huge 0
[  280.026501][T12598] total_shmem 0
[  280.029983][T12598] total_mapped_file 0
[  280.033970][T12598] total_dirty 0
[  280.037421][T12598] total_writeback 0
[  280.041649][T12598] total_workingset_refault_anon 0
[  280.046708][T12598] total_workingset_refault_file 0
[  280.051939][T12598] total_swap 3059712
[  280.055936][T12598] total_swapcached 0
[  280.060026][T12598] total_pgpgin 230926
[  280.064059][T12598] total_pgpgout 156170
[  280.068147][T12598] total_pgfault 126223
[  280.072254][T12598] total_pgmajfault 7
[  280.076237][T12598] total_inactive_anon 0
[  280.080420][T12598] total_active_anon 0
[  280.084406][T12598] total_inactive_file 0
[  280.088553][T12598] total_active_file 0
[  280.092554][T12598] total_unevictable 314572800
[  280.097242][T12598] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4144,pid=12580,uid=0
[  280.112176][T12598] Memory cgroup out of memory: Killed process 12580 (syz.6.4144) total-vm:90036kB, anon-rss:1144kB, file-rss:54812kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0
[  280.143536][T12659] syz.6.4171 invoked oom-killer: gfp_mask=0x2100cca(GFP_HIGHUSER_MOVABLE|__GFP_CMA), order=0, oom_score_adj=0
[  280.231119][T12659] CPU: 1 UID: 0 PID: 12659 Comm: syz.6.4171 Not tainted syzkaller #0 e0010524de270d562e17ec59754923f7dbe680d3
[  280.231156][T12659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  280.231170][T12659] Call Trace:
[  280.231178][T12659]  <TASK>
[  280.231187][T12659]  __dump_stack+0x21/0x30
[  280.231222][T12659]  dump_stack_lvl+0x10c/0x190
[  280.231249][T12659]  ? __cfi_dump_stack_lvl+0x10/0x10
[  280.231277][T12659]  ? ___ratelimit+0x3f7/0x5a0
[  280.231302][T12659]  dump_stack+0x19/0x20
[  280.231330][T12659]  dump_header+0xd7/0x490
[  280.231353][T12659]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  280.231382][T12659]  oom_kill_process+0x4c0/0x7e0
[  280.231407][T12659]  ? sched_clock_cpu+0x75/0x400
[  280.231437][T12659]  out_of_memory+0x7ee/0xbd0
[  280.231463][T12659]  ? __cfi_out_of_memory+0x10/0x10
[  280.231487][T12659]  ? mutex_lock_killable+0x104/0x1c0
[  280.231514][T12659]  ? __cfi_mutex_lock_killable+0x10/0x10
[  280.231543][T12659]  mem_cgroup_out_of_memory+0x279/0x350
[  280.231565][T12659]  ? drain_obj_stock+0xed0/0xed0
[  280.231588][T12659]  ? memcg1_oom_prepare+0x2c6/0x3a0
[  280.231609][T12659]  try_charge_memcg+0x8f7/0xde0
[  280.231639][T12659]  ? __cfi_try_charge_memcg+0x10/0x10
[  280.231668][T12659]  ? xas_load+0x3a2/0x3d0
[  280.231691][T12659]  mem_cgroup_swapin_charge_folio+0x1b3/0x3e0
[  280.231724][T12659]  __read_swap_cache_async+0x34a/0x690
[  280.231750][T12659]  swap_cluster_readahead+0x2f7/0x530
[  280.231772][T12659]  ? xas_load+0x3a2/0x3d0
[  280.231792][T12659]  ? __cfi_swap_cluster_readahead+0x10/0x10
[  280.231818][T12659]  ? __kasan_check_write+0x18/0x20
[  280.231849][T12659]  swapin_readahead+0xf2/0x820
[  280.231871][T12659]  ? __filemap_get_folio+0x97f/0x9d0
[  280.231910][T12659]  ? __cfi_swapin_readahead+0x10/0x10
[  280.231934][T12659]  ? __sched_text_start+0x10/0x10
[  280.231958][T12659]  ? get_swap_device+0x10f/0x290
[  280.231981][T12659]  do_swap_page+0x43c/0x42f0
[  280.232004][T12659]  ? plist_del+0x3e3/0x400
[  280.232037][T12659]  ? futex_unqueue+0x12a/0x160
[  280.232060][T12659]  ? __futex_wait+0x22f/0x2a0
[  280.232087][T12659]  ? __cfi_do_swap_page+0x10/0x10
[  280.232109][T12659]  ? __cfi___futex_wait+0x10/0x10
[  280.232136][T12659]  ? __cfi_default_wake_function+0x10/0x10
[  280.232165][T12659]  ? __pte_offset_map+0x1b0/0x230
[  280.232195][T12659]  ? pte_offset_map_rw_nolock+0xba/0x110
[  280.232225][T12659]  handle_mm_fault+0x1205/0x1b90
[  280.232252][T12659]  ? __cfi_handle_mm_fault+0x10/0x10
[  280.232274][T12659]  ? lock_vma_under_rcu+0x49d/0x530
[  280.232301][T12659]  ? __se_sys_futex+0x28f/0x300
[  280.232324][T12659]  do_user_addr_fault+0x96c/0x1200
[  280.232359][T12659]  exc_page_fault+0x59/0xc0
[  280.232385][T12659]  asm_exc_page_fault+0x2b/0x30
[  280.232410][T12659] RIP: 0033:0x7fdb1478ebfb
[  280.232429][T12659] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41
[  280.232448][T12659] RSP: 002b:00007ffecc2bea98 EFLAGS: 00010213
[  280.232469][T12659] RAX: 000000000000006e RBX: 00000000000440a0 RCX: ffffffffffffffa8
[  280.232485][T12659] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fdb149c5fac
[  280.232499][T12659] RBP: 0000000000000032 R08: 7fffffffffffffff R09: 00000019cc2bed8f
[  280.232515][T12659] R10: 00007ffecc2beb90 R11: 0000000000000246 R12: 00007fdb149c5fac
[  280.232530][T12659] R13: 00007ffecc2beb90 R14: 00000000000440d2 R15: 00007ffecc2bebb0
[  280.232548][T12659]  </TASK>
[  280.232666][T12659] memory: usage 305468kB, limit 307200kB, failcnt 1426
[  280.282877][T12665] 9pnet_fd: Insufficient options for proto=fd
[  280.284129][T12659] memory+swap: usage 305540kB, limit 9007199254740988kB, failcnt 0
[  280.381610][   T36] audit: type=1326 audit(1757077041.753:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12666 comm="syz.5.4174" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f17af98ebe9 code=0x0
[  280.382496][T12659] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  280.448684][   T36] audit: type=1326 audit(1757077041.823:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12666 comm="syz.5.4174" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17af98ebe9 code=0x0
[  280.452468][T12659] Memory cgroup stats for 
[  280.537199][T12669] 9pnet_fd: Insufficient options for proto=fd
[  280.539098][T12659] /syz6:
[  280.649806][T12659] cache 314564608
[  280.656323][T12659] rss 8192
[  280.659354][T12659] rss_huge 0
[  280.662547][T12659] shmem 0
[  280.665533][T12659] mapped_file 0
[  280.669001][T12659] dirty 0
[  280.671949][T12659] writeback 0
[  280.675267][T12659] workingset_refault_anon 14
[  280.679877][T12659] workingset_refault_file 0
[  280.684389][T12659] swap 3051520
[  280.687879][T12659] swapcached 8192
[  280.691538][T12659] pgpgin 239490
[  280.695083][T12659] pgpgout 164734
[  280.698672][T12659] pgfault 126671
[  280.702235][T12659] pgmajfault 15
[  280.705747][T12659] inactive_anon 4096
[  280.709655][T12659] active_anon 0
[  280.710366][    T9] usb 1-1: USB disconnect, device number 55
[  280.713132][T12659] inactive_file 0
[  280.713144][T12659] active_file 0
[  280.713153][T12659] unevictable 314531840
[  280.713162][T12659] hierarchical_memory_limit 314572800
[  280.713172][T12659] hierarchical_memsw_limit 9223372036854771712
[  280.742272][T12659] total_cache 314564608
[  280.746487][T12659] total_rss 8192
[  280.750053][T12659] total_rss_huge 0
[  280.753798][T12659] total_shmem 0
[  280.757488][T12659] total_mapped_file 0
[  280.761507][T12659] total_dirty 0
[  280.765175][T12659] total_writeback 0
[  280.769034][T12659] total_workingset_refault_anon 14
[  280.774158][T12659] total_workingset_refault_file 0
[  280.779424][T12659] total_swap 3051520
[  280.783363][T12659] total_swapcached 8192
[  280.787816][T12659] total_pgpgin 239490
[  280.791862][T12659] total_pgpgout 164734
[  280.796098][T12659] total_pgfault 126671
[  280.800181][T12659] total_pgmajfault 15
[  280.804213][T12659] total_inactive_anon 4096
[  280.808913][T12659] total_active_anon 0
[  280.812961][T12659] total_inactive_file 0
[  280.817209][T12659] total_active_file 0
[  280.821245][T12659] total_unevictable 314531840
[  280.826002][T12659] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4144,pid=12588,uid=0
[  280.840967][T12659] Memory cgroup out of memory: Killed process 12588 (syz.6.4144) total-vm:90036kB, anon-rss:1016kB, file-rss:54684kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:0
[  280.937178][T12674] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[  280.996095][T12583] syz.6.4144 invoked oom-killer: gfp_mask=0x100cc2(GFP_HIGHUSER), order=0, oom_score_adj=0
[  281.089236][T12583] CPU: 0 UID: 0 PID: 12583 Comm: syz.6.4144 Not tainted syzkaller #0 e0010524de270d562e17ec59754923f7dbe680d3
[  281.089273][T12583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  281.089287][T12583] Call Trace:
[  281.089294][T12583]  <TASK>
[  281.089303][T12583]  __dump_stack+0x21/0x30
[  281.089338][T12583]  dump_stack_lvl+0x10c/0x190
[  281.089368][T12583]  ? __cfi_dump_stack_lvl+0x10/0x10
[  281.089396][T12583]  ? ___ratelimit+0x3f7/0x5a0
[  281.089420][T12583]  dump_stack+0x19/0x20
[  281.089449][T12583]  dump_header+0xd7/0x490
[  281.089474][T12583]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  281.089505][T12583]  oom_kill_process+0x4c0/0x7e0
[  281.089533][T12583]  out_of_memory+0x7ee/0xbd0
[  281.089557][T12583]  ? __cfi_out_of_memory+0x10/0x10
[  281.089582][T12583]  ? mutex_lock_killable+0x92/0x1c0
[  281.089608][T12583]  ? __cfi_mutex_lock_killable+0x10/0x10
[  281.089635][T12583]  mem_cgroup_out_of_memory+0x279/0x350
[  281.089659][T12583]  ? drain_obj_stock+0xed0/0xed0
[  281.089681][T12583]  ? memcg1_oom_prepare+0x2c6/0x3a0
[  281.089702][T12583]  try_charge_memcg+0x8f7/0xde0
[  281.089731][T12583]  ? gfp_to_alloc_flags_cma+0x90/0x1c0
[  281.089766][T12583]  ? __cfi_try_charge_memcg+0x10/0x10
[  281.089804][T12583]  ? __alloc_pages_noprof+0x31f/0x7b0
[  281.089834][T12583]  __mem_cgroup_charge+0xf6/0x410
[  281.089866][T12583]  ? filemap_get_entry+0x3fb/0x460
[  281.089893][T12583]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  281.089925][T12583]  ? _raw_spin_lock+0x8c/0x120
[  281.089956][T12583]  filemap_add_folio+0x57/0x2d0
[  281.089982][T12583]  __filemap_get_folio+0x597/0x9d0
[  281.090010][T12583]  ? __vfs_getxattr+0xaf/0x450
[  281.090042][T12583]  ? __cfi___filemap_get_folio+0x10/0x10
[  281.090069][T12583]  ? inode_to_bdi+0x6d/0x100
[  281.090099][T12583]  simple_write_begin+0x60/0x390
[  281.090126][T12583]  generic_perform_write+0x32d/0x960
[  281.090159][T12583]  ? __cfi_generic_perform_write+0x10/0x10
[  281.090191][T12583]  ? generic_write_checks_count+0x429/0x540
[  281.090219][T12583]  ? file_update_time+0xa3/0x220
[  281.090247][T12583]  __generic_file_write_iter+0xcf/0x180
[  281.090278][T12583]  generic_file_write_iter+0xb1/0x310
[  281.090310][T12583]  ? __cfi_generic_file_write_iter+0x10/0x10
[  281.090340][T12583]  __kernel_write_iter+0x392/0x830
[  281.090360][T12583]  ? __cfi_generic_file_write_iter+0x10/0x10
[  281.090391][T12583]  ? __cfi___kernel_write_iter+0x10/0x10
[  281.090412][T12583]  ? get_dump_page+0x160/0x220
[  281.090438][T12583]  ? __asan_memset+0x39/0x50
[  281.090469][T12583]  ? iov_iter_bvec+0xc0/0x180
[  281.090496][T12583]  dump_user_range+0xb06/0xdf0
[  281.090518][T12583]  ? __cfi_dump_emit+0x10/0x10
[  281.090551][T12583]  ? __cfi_dump_user_range+0x10/0x10
[  281.090574][T12583]  ? elf_coredump_extra_notes_write+0x42f/0x4c0
[  281.090605][T12583]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[  281.090638][T12583]  elf_core_dump+0x2cd9/0x3810
[  281.090668][T12583]  ? __cfi_elf_core_dump+0x10/0x10
[  281.090702][T12583]  ? dump_interrupted+0xf0/0xf0
[  281.090734][T12583]  ? filp_open+0x182/0x1d0
[  281.090762][T12583]  ? 0xffffffffff600000
[  281.090780][T12583]  do_coredump+0x1bf7/0x2bd0
[  281.090823][T12583]  ? __cfi_do_coredump+0x10/0x10
[  281.090853][T12583]  ? asm_exc_page_fault+0x2b/0x30
[  281.090889][T12583]  ? __kasan_slab_free+0x6a/0x80
[  281.090912][T12583]  ? kmem_cache_free+0x1c1/0x510
[  281.090945][T12583]  ? get_signal+0xa75/0x14f0
[  281.090973][T12583]  get_signal+0x11fd/0x14f0
[  281.091003][T12583]  arch_do_signal_or_restart+0x96/0x720
[  281.091036][T12583]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  281.091073][T12583]  irqentry_exit_to_user_mode+0x4e/0xb0
[  281.091101][T12583]  irqentry_exit+0x16/0x60
[  281.091127][T12583]  exc_page_fault+0x66/0xc0
[  281.091152][T12583]  asm_exc_page_fault+0x2b/0x30
[  281.091178][T12583] RIP: 0033:0x7fdb1464f927
[  281.091195][T12583] Code: 88 15 d2 5d ea 00 88 05 cf 5d ea 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[  281.091214][T12583] RSP: 002b:00007fdb15520120 EFLAGS: 00010202
[  281.091235][T12583] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fdb1478ebe9
[  281.091250][T12583] RDX: 00007fdb15520140 RSI: 00007fdb15520270 RDI: 000000000000000b
[  281.091266][T12583] RBP: 00007fdb14811e19 R08: 0000000000000000 R09: 0000000000000000
[  281.091279][T12583] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  281.091292][T12583] R13: 00007fdb149c6128 R14: 00007fdb149c6090 R15: 00007ffecc2be938
[  281.091311][T12583]  </TASK>
[  281.127663][T12583] memory: usage 304036kB, limit 307200kB, failcnt 2297
[  281.529501][T12688] netlink: 188 bytes leftover after parsing attributes in process `syz.5.4179'.
[  281.532024][T12583] memory+swap: usage 310064kB, limit 9007199254740988kB, failcnt 0
[  281.555770][T12583] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  281.562791][T12583] Memory cgroup stats for /syz6:
[  281.562933][T12583] cache 314445824
[  281.571615][T12583] rss 4096
[  281.574673][T12583] rss_huge 0
[  281.577888][T12583] shmem 0
[  281.580879][T12583] mapped_file 0
[  281.584352][T12583] dirty 0
[  281.587305][T12583] writeback 0
[  281.590603][T12583] workingset_refault_anon 25
[  281.595271][T12583] workingset_refault_file 0
[  281.599836][T12583] swap 3055616
[  281.603270][T12583] swapcached 4096
[  281.606933][T12583] pgpgin 247987
[  281.610831][T12583] pgpgout 173261
[  281.614443][T12583] pgfault 127131
[  281.617998][T12583] pgmajfault 23
[  281.621488][T12583] inactive_anon 4096
[  281.625408][T12583] active_anon 0
[  281.628894][T12583] inactive_file 0
[  281.632625][T12583] active_file 0
[  281.636101][T12583] unevictable 314445824
[  281.640292][T12583] hierarchical_memory_limit 314572800
[  281.645732][T12583] hierarchical_memsw_limit 9223372036854771712
[  281.651985][T12583] total_cache 314445824
[  281.656232][T12583] total_rss 4096
[  281.659802][T12583] total_rss_huge 0
[  281.663562][T12583] total_shmem 0
[  281.667036][T12583] total_mapped_file 0
[  281.671016][T12583] total_dirty 0
[  281.674541][T12583] total_writeback 0
[  281.678372][T12583] total_workingset_refault_anon 25
[  281.683527][T12583] total_workingset_refault_file 0
[  281.688574][T12583] total_swap 3055616
[  281.692521][T12583] total_swapcached 4096
[  281.696699][T12583] total_pgpgin 247987
[  281.700694][T12583] total_pgpgout 173261
[  281.704827][T12583] total_pgfault 127131
[  281.707327][T12694] binder: Unknown parameter '00000000000000000003'
[  281.708907][T12583] total_pgmajfault 23
[  281.708921][T12583] total_inactive_anon 4096
[  281.708931][T12583] total_active_anon 0
[  281.727890][T12583] total_inactive_file 0
[  281.732095][T12583] total_active_file 0
[  281.736094][T12583] total_unevictable 314445824
[  281.740789][T12583] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4144,pid=12583,uid=0
[  281.756520][T12697] rtc_cmos 00:00: Alarms can be up to one day in the future
[  281.763360][T12583] Memory cgroup out of memory: Killed process 12583 (syz.6.4144) total-vm:90036kB, anon-rss:1016kB, file-rss:57676kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0
[  281.911602][T12592] syz.6.4144 invoked oom-killer: gfp_mask=0x100cc2(GFP_HIGHUSER), order=0, oom_score_adj=0
[  281.939028][T12592] CPU: 1 UID: 0 PID: 12592 Comm: syz.6.4144 Not tainted syzkaller #0 e0010524de270d562e17ec59754923f7dbe680d3
[  281.939060][T12592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  281.939073][T12592] Call Trace:
[  281.939079][T12592]  <TASK>
[  281.939088][T12592]  __dump_stack+0x21/0x30
[  281.939120][T12592]  dump_stack_lvl+0x10c/0x190
[  281.939145][T12592]  ? __cfi_dump_stack_lvl+0x10/0x10
[  281.939171][T12592]  ? ___ratelimit+0x3f7/0x5a0
[  281.939192][T12592]  dump_stack+0x19/0x20
[  281.939217][T12592]  dump_header+0xd7/0x490
[  281.939236][T12592]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  281.939262][T12592]  oom_kill_process+0x4c0/0x7e0
[  281.939284][T12592]  ? sched_clock_cpu+0x75/0x400
[  281.939311][T12592]  out_of_memory+0x7ee/0xbd0
[  281.939333][T12592]  ? __cfi_out_of_memory+0x10/0x10
[  281.939355][T12592]  ? mutex_lock_killable+0x92/0x1c0
[  281.939380][T12592]  ? __cfi_mutex_lock_killable+0x10/0x10
[  281.939405][T12592]  mem_cgroup_out_of_memory+0x279/0x350
[  281.939424][T12592]  ? drain_obj_stock+0xed0/0xed0
[  281.939444][T12592]  ? memcg1_oom_prepare+0x2c6/0x3a0
[  281.939463][T12592]  try_charge_memcg+0x8f7/0xde0
[  281.939489][T12592]  ? gfp_to_alloc_flags_cma+0x90/0x1c0
[  281.939533][T12592]  ? __cfi_try_charge_memcg+0x10/0x10
[  281.939560][T12592]  ? __alloc_pages_noprof+0x31f/0x7b0
[  281.939586][T12592]  __mem_cgroup_charge+0xf6/0x410
[  281.939614][T12592]  ? filemap_get_entry+0x3fb/0x460
[  281.939639][T12592]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  281.939669][T12592]  filemap_add_folio+0x57/0x2d0
[  281.939691][T12592]  __filemap_get_folio+0x597/0x9d0
[  281.939715][T12592]  ? __vfs_getxattr+0xaf/0x450
[  281.939743][T12592]  ? __cfi___filemap_get_folio+0x10/0x10
[  281.939767][T12592]  ? inode_to_bdi+0x6d/0x100
[  281.939796][T12592]  simple_write_begin+0x60/0x390
[  281.939820][T12592]  generic_perform_write+0x32d/0x960
[  281.939849][T12592]  ? __cfi_generic_perform_write+0x10/0x10
[  281.939876][T12592]  ? mnt_get_write_access_file+0x1af/0x3b0
[  281.939901][T12592]  ? generic_write_checks_count+0x429/0x540
[  281.939925][T12592]  ? file_update_time+0x1ef/0x220
[  281.939952][T12592]  __generic_file_write_iter+0xcf/0x180
[  281.939979][T12592]  generic_file_write_iter+0xb1/0x310
[  281.940005][T12592]  ? __cfi_generic_file_write_iter+0x10/0x10
[  281.940032][T12592]  __kernel_write_iter+0x392/0x830
[  281.940050][T12592]  ? __cfi_generic_file_write_iter+0x10/0x10
[  281.940077][T12592]  ? __cfi___kernel_write_iter+0x10/0x10
[  281.940095][T12592]  ? get_dump_page+0x160/0x220
[  281.940120][T12592]  ? __asan_memset+0x39/0x50
[  281.940147][T12592]  ? iov_iter_bvec+0xc0/0x180
[  281.940172][T12592]  dump_user_range+0xb06/0xdf0
[  281.940191][T12592]  ? __cfi_dump_emit+0x10/0x10
[  281.940220][T12592]  ? __cfi_dump_user_range+0x10/0x10
[  281.940238][T12592]  ? elf_coredump_extra_notes_write+0x42f/0x4c0
[  281.940267][T12592]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[  281.940297][T12592]  elf_core_dump+0x2cd9/0x3810
[  281.940323][T12592]  ? __cfi_elf_core_dump+0x10/0x10
[  281.940353][T12592]  ? dump_interrupted+0xf0/0xf0
[  281.940380][T12592]  ? filp_open+0x182/0x1d0
[  281.940406][T12592]  ? 0xffffffffff600000
[  281.940422][T12592]  do_coredump+0x1bf7/0x2bd0
[  281.940453][T12592]  ? __cfi_do_coredump+0x10/0x10
[  281.940481][T12592]  ? asm_exc_page_fault+0x2b/0x30
[  281.940511][T12592]  ? __kasan_slab_free+0x6a/0x80
[  281.940538][T12592]  ? kmem_cache_free+0x1c1/0x510
[  281.940565][T12592]  ? get_signal+0xa75/0x14f0
[  281.940590][T12592]  get_signal+0x11fd/0x14f0
[  281.940617][T12592]  arch_do_signal_or_restart+0x96/0x720
[  281.940647][T12592]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  281.940679][T12592]  irqentry_exit_to_user_mode+0x4e/0xb0
[  281.940705][T12592]  irqentry_exit+0x16/0x60
[  281.940728][T12592]  exc_page_fault+0x66/0xc0
[  281.940752][T12592]  asm_exc_page_fault+0x2b/0x30
[  281.940774][T12592] RIP: 0033:0x7fdb1464f927
[  281.940792][T12592] Code: 88 15 d2 5d ea 00 88 05 cf 5d ea 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[  281.940808][T12592] RSP: 002b:00007fdb15520120 EFLAGS: 00010202
[  281.940826][T12592] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fdb1478ebe9
[  281.940840][T12592] RDX: 00007fdb15520140 RSI: 00007fdb15520270 RDI: 000000000000000b
[  281.940853][T12592] RBP: 00007fdb14811e19 R08: 0000000000000000 R09: 0000000000000000
[  281.940866][T12592] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  281.940878][T12592] R13: 00007fdb149c6128 R14: 00007fdb149c6090 R15: 00007ffecc2be938
[  281.940895][T12592]  </TASK>
[  281.940903][T12592] memory: usage 306964kB, limit 307200kB, failcnt 3618
[  282.241849][T12713] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  282.244716][   T45] rtc_cmos 00:00: Alarms can be up to one day in the future
[  282.247660][T12592] memory+swap: usage 285596kB, limit 9007199254740988kB, failcnt 0
[  282.253043][   T45] rtc_cmos 00:00: Alarms can be up to one day in the future
[  282.258150][T12713] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  282.263001][   T45] rtc_cmos 00:00: Alarms can be up to one day in the future
[  282.268169][T12592] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  282.272874][   T45] rtc_cmos 00:00: Alarms can be up to one day in the future
[  282.284398][T12592] Memory cgroup stats for 
[  282.288827][   T45] rtc rtc0: __rtc_set_alarm: err=-22
[  282.294524][T12592] /syz6:
[  282.472461][T12592] cache 285270016
[  282.486182][T12592] rss 0
[  282.489077][T12592] rss_huge 0
[  282.496978][T12592] shmem 0
[  282.499962][T12592] mapped_file 0
[  282.504133][T12592] dirty 0
[  282.508693][T12592] writeback 0
[  282.512017][T12592] workingset_refault_anon 88
[  282.534135][T12592] workingset_refault_file 0
[  282.545616][T12592] swap 2437120
[  282.549530][T12592] swapcached 126976
[  282.560561][T12592] pgpgin 252866
[  282.564513][T12592] pgpgout 185233
[  282.564638][T12729] 2N: renamed from vcan0 (while UP)
[  282.582047][T12592] pgfault 127230
[  282.585652][T12592] pgmajfault 52
[  282.596333][T12592] inactive_anon 0
[  282.600137][T12592] active_anon 126976
[  282.604116][T12592] inactive_file 0
[  282.610302][T12592] active_file 0
[  282.613806][T12592] unevictable 285270016
[  282.624267][T12592] hierarchical_memory_limit 314572800
[  282.656960][T12592] hierarchical_memsw_limit 9223372036854771712
[  282.669745][T12592] total_cache 285270016
[  282.674070][T12592] total_rss 0
[  282.677434][T12592] total_rss_huge 0
[  282.682872][T12592] total_shmem 0
[  282.686676][T12592] total_mapped_file 0
[  282.691301][T12592] total_dirty 0
[  282.694932][T12592] total_writeback 0
[  282.698964][T12592] total_workingset_refault_anon 88
[  282.704181][T12592] total_workingset_refault_file 0
[  282.709482][T12592] total_swap 2437120
[  282.713484][T12592] total_swapcached 126976
[  282.717903][T12592] total_pgpgin 252866
[  282.727079][T12592] total_pgpgout 185233
[  282.731413][T12592] total_pgfault 127230
[  282.735579][T12592] total_pgmajfault 52
[  282.739809][T12592] total_inactive_anon 0
[  282.744112][T12592] total_active_anon 126976
[  282.748767][T12592] total_inactive_file 0
[  282.752991][T12592] total_active_file 0
[  282.753712][   T36] audit: type=1400 audit(1757077044.117:713): avc:  denied  { mounton } for  pid=12745 comm="syz.5.4197" path="/file0" dev="ramfs" ino=64504 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1
[  282.757609][T12592] total_unevictable 285270016
[  282.779602][T12746] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock
[  282.784117][T12592] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4144,pid=12581,uid=0
[  282.802713][T12747] 9pnet_fd: Insufficient options for proto=fd
[  282.808434][T12592] Memory cgroup out of memory: OOM victim 12581 (syz.6.4144) is already exiting. Skip killing the task
[  283.144030][T12592] syz.6.4144 invoked oom-killer: gfp_mask=0x100cc2(GFP_HIGHUSER), order=0, oom_score_adj=0
[  283.157055][T12592] CPU: 1 UID: 0 PID: 12592 Comm: syz.6.4144 Not tainted syzkaller #0 e0010524de270d562e17ec59754923f7dbe680d3
[  283.157091][T12592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  283.157106][T12592] Call Trace:
[  283.157115][T12592]  <TASK>
[  283.157124][T12592]  __dump_stack+0x21/0x30
[  283.157160][T12592]  dump_stack_lvl+0x10c/0x190
[  283.157189][T12592]  ? __cfi_dump_stack_lvl+0x10/0x10
[  283.157220][T12592]  ? ___ratelimit+0x3f7/0x5a0
[  283.157245][T12592]  dump_stack+0x19/0x20
[  283.157274][T12592]  dump_header+0xd7/0x490
[  283.157297][T12592]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  283.157327][T12592]  oom_kill_process+0x4c0/0x7e0
[  283.157354][T12592]  ? sched_clock_cpu+0x75/0x400
[  283.157397][T12592]  out_of_memory+0x7ee/0xbd0
[  283.157423][T12592]  ? __cfi_out_of_memory+0x10/0x10
[  283.157448][T12592]  ? mutex_lock_killable+0x92/0x1c0
[  283.157476][T12592]  ? __cfi_mutex_lock_killable+0x10/0x10
[  283.157505][T12592]  mem_cgroup_out_of_memory+0x279/0x350
[  283.157528][T12592]  ? drain_obj_stock+0xed0/0xed0
[  283.157552][T12592]  ? memcg1_oom_prepare+0x2c6/0x3a0
[  283.157574][T12592]  try_charge_memcg+0x8f7/0xde0
[  283.157606][T12592]  ? gfp_to_alloc_flags_cma+0x90/0x1c0
[  283.157642][T12592]  ? __cfi_try_charge_memcg+0x10/0x10
[  283.157673][T12592]  ? __alloc_pages_noprof+0x31f/0x7b0
[  283.157703][T12592]  __mem_cgroup_charge+0xf6/0x410
[  283.157736][T12592]  ? filemap_get_entry+0x3fb/0x460
[  283.157763][T12592]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  283.157799][T12592]  filemap_add_folio+0x57/0x2d0
[  283.157825][T12592]  __filemap_get_folio+0x597/0x9d0
[  283.157853][T12592]  ? __vfs_getxattr+0xaf/0x450
[  283.157884][T12592]  ? __cfi___filemap_get_folio+0x10/0x10
[  283.157913][T12592]  ? inode_to_bdi+0x6d/0x100
[  283.157944][T12592]  simple_write_begin+0x60/0x390
[  283.157971][T12592]  generic_perform_write+0x32d/0x960
[  283.158006][T12592]  ? __cfi_generic_perform_write+0x10/0x10
[  283.158038][T12592]  ? generic_write_checks_count+0x429/0x540
[  283.158065][T12592]  ? file_update_time+0xa3/0x220
[  283.158096][T12592]  __generic_file_write_iter+0xcf/0x180
[  283.158128][T12592]  generic_file_write_iter+0xb1/0x310
[  283.158161][T12592]  ? __cfi_generic_file_write_iter+0x10/0x10
[  283.158193][T12592]  __kernel_write_iter+0x392/0x830
[  283.158214][T12592]  ? __cfi_generic_file_write_iter+0x10/0x10
[  283.158247][T12592]  ? __cfi___kernel_write_iter+0x10/0x10
[  283.158269][T12592]  ? get_dump_page+0x160/0x220
[  283.158295][T12592]  ? __asan_memset+0x39/0x50
[  283.158327][T12592]  ? iov_iter_bvec+0xc0/0x180
[  283.158354][T12592]  dump_user_range+0xb06/0xdf0
[  283.158383][T12592]  ? __cfi_dump_emit+0x10/0x10
[  283.158417][T12592]  ? __cfi_dump_user_range+0x10/0x10
[  283.158439][T12592]  ? elf_coredump_extra_notes_write+0x42f/0x4c0
[  283.158472][T12592]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[  283.158507][T12592]  elf_core_dump+0x2cd9/0x3810
[  283.158538][T12592]  ? __cfi_elf_core_dump+0x10/0x10
[  283.158573][T12592]  ? dump_interrupted+0xf0/0xf0
[  283.158604][T12592]  ? filp_open+0x182/0x1d0
[  283.158634][T12592]  ? 0xffffffffff600000
[  283.158653][T12592]  do_coredump+0x1bf7/0x2bd0
[  283.158690][T12592]  ? __cfi_do_coredump+0x10/0x10
[  283.158723][T12592]  ? asm_exc_page_fault+0x2b/0x30
[  283.158759][T12592]  ? __kasan_slab_free+0x6a/0x80
[  283.158783][T12592]  ? kmem_cache_free+0x1c1/0x510
[  283.158817][T12592]  ? get_signal+0xa75/0x14f0
[  283.158846][T12592]  get_signal+0x11fd/0x14f0
[  283.158877][T12592]  arch_do_signal_or_restart+0x96/0x720
[  283.158911][T12592]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  283.158949][T12592]  irqentry_exit_to_user_mode+0x4e/0xb0
[  283.158980][T12592]  irqentry_exit+0x16/0x60
[  283.159007][T12592]  exc_page_fault+0x66/0xc0
[  283.159034][T12592]  asm_exc_page_fault+0x2b/0x30
[  283.159061][T12592] RIP: 0033:0x7fdb1464f927
[  283.159079][T12592] Code: 88 15 d2 5d ea 00 88 05 cf 5d ea 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[  283.159094][T12592] RSP: 002b:00007fdb15520120 EFLAGS: 00010202
[  283.159111][T12592] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fdb1478ebe9
[  283.159125][T12592] RDX: 00007fdb15520140 RSI: 00007fdb15520270 RDI: 000000000000000b
[  283.159138][T12592] RBP: 00007fdb14811e19 R08: 0000000000000000 R09: 0000000000000000
[  283.159150][T12592] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  283.159162][T12592] R13: 00007fdb149c6128 R14: 00007fdb149c6090 R15: 00007ffecc2be938
[  283.159179][T12592]  </TASK>
[  283.159233][T12592] memory: usage 307200kB, limit 307200kB, failcnt 3925
[  283.599262][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  283.600308][ T2133] Bluetooth: hci0: command 0x1003 tx timeout
[  283.605487][T12592] memory+swap: usage 309756kB, limit 9007199254740988kB, failcnt 0
[  283.621710][T12592] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  283.628647][T12592] Memory cgroup stats for /syz6:
[  283.628793][T12592] cache 314572800
[  283.637493][T12592] rss 0
[  283.640348][T12592] rss_huge 0
[  283.643633][T12592] shmem 0
[  283.646936][T12592] mapped_file 4096
[  283.650754][T12592] dirty 0
[  283.653738][T12592] writeback 0
[  283.657145][T12592] workingset_refault_anon 130
[  283.661869][T12592] workingset_refault_file 0
[  283.666686][T12592] swap 2617344
[  283.670131][T12592] swapcached 0
[  283.673595][T12592] pgpgin 274370
[  283.677212][T12592] pgpgout 199614
[  283.680897][T12592] pgfault 128001
[  283.684702][T12592] pgmajfault 73
[  283.690561][T12592] inactive_anon 0
[  283.694248][T12592] active_anon 0
[  283.702817][T12592] inactive_file 0
[  283.706528][T12592] active_file 0
[  283.710024][T12592] unevictable 314572800
[  283.714192][T12592] hierarchical_memory_limit 314572800
[  283.719609][T12592] hierarchical_memsw_limit 9223372036854771712
[  283.725802][T12592] total_cache 314572800
[  283.729961][T12592] total_rss 0
[  283.733241][T12592] total_rss_huge 0
[  283.737020][T12592] total_shmem 0
[  283.740509][T12592] total_mapped_file 4096
[  283.745332][T12592] total_dirty 0
[  283.748887][T12592] total_writeback 0
[  283.752783][T12592] total_workingset_refault_anon 130
[  283.758122][T12592] total_workingset_refault_file 0
[  283.763207][T12592] total_swap 2617344
[  283.767651][T12592] total_swapcached 0
[  283.771622][T12592] total_pgpgin 274370
[  283.775703][T12592] total_pgpgout 199614
[  283.779828][T12592] total_pgfault 128001
[  283.783964][T12592] total_pgmajfault 73
[  283.787990][T12592] total_inactive_anon 0
[  283.792158][T12592] total_active_anon 0
[  283.796449][T12592] total_inactive_file 0
[  283.800629][T12592] total_active_file 0
[  283.804623][T12592] total_unevictable 314572800
[  283.811495][T12592] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4144,pid=12579,uid=0
[  283.827367][T12592] Memory cgroup out of memory: Killed process 12579 (syz.6.4144) total-vm:90036kB, anon-rss:1144kB, file-rss:57676kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0
[  283.888410][T12776] fuse: Bad value for 'user_id'
[  283.893343][T12776] fuse: Bad value for 'user_id'
[  283.899058][   T36] audit: type=1400 audit(1757077045.260:714): avc:  denied  { create } for  pid=12769 comm="syz.7.4206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1
[  283.919001][T12777] rust_binder: Error while translating object.
[  283.919039][T12777] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  283.925535][T12777] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:329
[  283.955201][T12593] syz.6.4144 invoked oom-killer: gfp_mask=0x100cc2(GFP_HIGHUSER), order=0, oom_score_adj=0
[  283.978945][T12593] CPU: 0 UID: 0 PID: 12593 Comm: syz.6.4144 Not tainted syzkaller #0 e0010524de270d562e17ec59754923f7dbe680d3
[  283.978981][T12593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  283.978995][T12593] Call Trace:
[  283.979003][T12593]  <TASK>
[  283.979013][T12593]  __dump_stack+0x21/0x30
[  283.979046][T12593]  dump_stack_lvl+0x10c/0x190
[  283.979075][T12593]  ? __cfi_dump_stack_lvl+0x10/0x10
[  283.979103][T12593]  ? ___ratelimit+0x3f7/0x5a0
[  283.979128][T12593]  dump_stack+0x19/0x20
[  283.979155][T12593]  dump_header+0xd7/0x490
[  283.979178][T12593]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  283.979208][T12593]  oom_kill_process+0x4c0/0x7e0
[  283.979233][T12593]  ? sched_clock_cpu+0x75/0x400
[  283.979261][T12593]  out_of_memory+0x7ee/0xbd0
[  283.979284][T12593]  ? __cfi_out_of_memory+0x10/0x10
[  283.979310][T12593]  ? mutex_lock_killable+0x92/0x1c0
[  283.979336][T12593]  ? __cfi_mutex_lock_killable+0x10/0x10
[  283.979364][T12593]  mem_cgroup_out_of_memory+0x279/0x350
[  283.979386][T12593]  ? drain_obj_stock+0xed0/0xed0
[  283.979409][T12593]  ? memcg1_oom_prepare+0x2c6/0x3a0
[  283.979431][T12593]  try_charge_memcg+0x8f7/0xde0
[  283.979460][T12593]  ? gfp_to_alloc_flags_cma+0x90/0x1c0
[  283.979493][T12593]  ? __cfi_try_charge_memcg+0x10/0x10
[  283.979524][T12593]  ? __alloc_pages_noprof+0x31f/0x7b0
[  283.979553][T12593]  __mem_cgroup_charge+0xf6/0x410
[  283.979583][T12593]  ? filemap_get_entry+0x3fb/0x460
[  283.979608][T12593]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  283.979648][T12593]  ? _raw_spin_lock+0x8c/0x120
[  283.979681][T12593]  filemap_add_folio+0x57/0x2d0
[  283.979706][T12593]  __filemap_get_folio+0x597/0x9d0
[  283.979733][T12593]  ? __vfs_getxattr+0xaf/0x450
[  283.979765][T12593]  ? __cfi___filemap_get_folio+0x10/0x10
[  283.979792][T12593]  ? inode_to_bdi+0x6d/0x100
[  283.979822][T12593]  simple_write_begin+0x60/0x390
[  283.979849][T12593]  generic_perform_write+0x32d/0x960
[  283.979882][T12593]  ? __cfi_generic_perform_write+0x10/0x10
[  283.979911][T12593]  ? mnt_get_write_access_file+0x1af/0x3b0
[  283.979939][T12593]  ? generic_write_checks_count+0x429/0x540
[  283.979966][T12593]  ? file_update_time+0x1ef/0x220
[  283.979996][T12593]  __generic_file_write_iter+0xcf/0x180
[  283.980027][T12593]  generic_file_write_iter+0xb1/0x310
[  283.980056][T12593]  ? __cfi_generic_file_write_iter+0x10/0x10
[  283.980085][T12593]  __kernel_write_iter+0x392/0x830
[  283.980105][T12593]  ? __cfi_generic_file_write_iter+0x10/0x10
[  283.980135][T12593]  ? __cfi___kernel_write_iter+0x10/0x10
[  283.980154][T12593]  ? get_dump_page+0x160/0x220
[  283.980180][T12593]  ? __asan_memset+0x39/0x50
[  283.980210][T12593]  ? iov_iter_bvec+0xc0/0x180
[  283.980236][T12593]  dump_user_range+0xb06/0xdf0
[  283.980258][T12593]  ? __cfi_dump_emit+0x10/0x10
[  283.980291][T12593]  ? __cfi_dump_user_range+0x10/0x10
[  283.980311][T12593]  ? elf_coredump_extra_notes_write+0x42f/0x4c0
[  283.980343][T12593]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[  283.980377][T12593]  elf_core_dump+0x2cd9/0x3810
[  283.980407][T12593]  ? __cfi_elf_core_dump+0x10/0x10
[  283.980440][T12593]  ? dump_interrupted+0xf0/0xf0
[  283.980472][T12593]  ? filp_open+0x182/0x1d0
[  283.980499][T12593]  ? 0xffffffffff600000
[  283.980517][T12593]  do_coredump+0x1bf7/0x2bd0
[  283.980552][T12593]  ? __cfi_do_coredump+0x10/0x10
[  283.980582][T12593]  ? asm_exc_page_fault+0x2b/0x30
[  283.980616][T12593]  ? __kasan_slab_free+0x6a/0x80
[  283.980645][T12593]  ? kmem_cache_free+0x1c1/0x510
[  283.980677][T12593]  ? get_signal+0xa75/0x14f0
[  283.980704][T12593]  get_signal+0x11fd/0x14f0
[  283.980735][T12593]  arch_do_signal_or_restart+0x96/0x720
[  283.980769][T12593]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  283.980807][T12593]  irqentry_exit_to_user_mode+0x4e/0xb0
[  283.980834][T12593]  irqentry_exit+0x16/0x60
[  283.980861][T12593]  exc_page_fault+0x66/0xc0
[  283.980886][T12593]  asm_exc_page_fault+0x2b/0x30
[  283.980911][T12593] RIP: 0033:0x7fdb1464f927
[  283.980929][T12593] Code: 88 15 d2 5d ea 00 88 05 cf 5d ea 00 c3 50 48 8d 35 01 25 1c 00 48 8d 3d 07 25 1c 00 31 c0 e8 20 f7 ff ff 53 89 fb 48 83 ec 10 <64> 8b 04 25 94 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8
[  283.980948][T12593] RSP: 002b:00007fdb15520120 EFLAGS: 00010202
[  283.980969][T12593] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007fdb1478ebe9
[  283.980984][T12593] RDX: 00007fdb15520140 RSI: 00007fdb15520270 RDI: 000000000000000b
[  283.981000][T12593] RBP: 00007fdb14811e19 R08: 0000000000000000 R09: 0000000000000000
[  283.981014][T12593] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  283.981027][T12593] R13: 00007fdb149c6128 R14: 00007fdb149c6090 R15: 00007ffecc2be938
[  283.981046][T12593]  </TASK>
[  283.981094][T12593] memory: usage 307200kB, limit 307200kB, failcnt 4867
[  284.431863][T12593] memory+swap: usage 309688kB, limit 9007199254740988kB, failcnt 0
[  284.431955][    T9] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  284.447500][T12593] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  284.461671][T12593] Memory cgroup stats for /syz6:
[  284.461820][T12593] cache 307138560
[  284.475481][T12593] rss 0
[  284.478574][T12593] rss_huge 0
[  284.482396][T12593] shmem 0
[  284.485484][T12593] mapped_file 4096
[  284.500046][T12593] dirty 0
[  284.503140][T12593] writeback 0
[  284.506444][T12593] workingset_refault_anon 130
[  284.511531][T12593] workingset_refault_file 0
[  284.516107][T12593] swap 2547712
[  284.520411][T12593] swapcached 0
[  284.523860][T12593] pgpgin 274370
[  284.527354][T12593] pgpgout 201412
[  284.537064][T12593] pgfault 128001
[  284.540805][T12593] pgmajfault 73
[  284.544282][T12593] inactive_anon 0
[  284.547947][T12593] active_anon 0
[  284.551736][T12593] inactive_file 0
[  284.555393][T12593] active_file 0
[  284.558863][T12593] unevictable 307208192
[  284.563391][T12593] hierarchical_memory_limit 314572800
[  284.568791][T12593] hierarchical_memsw_limit 9223372036854771712
[  284.575182][T12593] total_cache 307138560
[  284.579447][T12593] total_rss 0
[  284.582968][T12593] total_rss_huge 0
[  284.586709][T12593] total_shmem 0
[  284.587306][T12803] 9pnet_fd: Insufficient options for proto=fd
[  284.590576][T12593] total_mapped_file 4096
[  284.596408][    T9] usb 1-1: Using ep0 maxpacket: 16
[  284.600770][T12593] total_dirty 0
[  284.606815][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  284.609142][T12593] total_writeback 0
[  284.609167][T12593] total_workingset_refault_anon 130
[  284.620867][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  284.637486][T12593] total_workingset_refault_file 0
[  284.642753][T12593] total_swap 2547712
[  284.646816][T12593] total_swapcached 0
[  284.650202][T12805] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  284.651293][T12593] total_pgpgin 274370
[  284.663217][T12593] total_pgpgout 201412
[  284.667392][T12593] total_pgfault 128001
[  284.671651][T12593] total_pgmajfault 73
[  284.675872][    T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  284.685320][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.708720][    T9] usb 1-1: Product: syz
[  284.713453][T12593] total_inactive_anon 0
[  284.718231][    T9] usb 1-1: Manufacturer: syz
[  284.722918][T12593] total_active_anon 0
[  284.726920][T12593] total_inactive_file 0
[  284.731168][    T9] usb 1-1: SerialNumber: syz
[  284.736226][T12593] total_active_file 0
[  284.740239][T12593] total_unevictable 307208192
[  284.748859][T12593] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.4144,pid=12593,uid=0
[  284.764051][T12593] Memory cgroup out of memory: Killed process 12593 (syz.6.4144) total-vm:90036kB, anon-rss:1140kB, file-rss:57676kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0
[  285.048298][T12828] SELinux:  Context system_u:object_r:event_device_t:s0 is not valid (left unmapped).
[  285.065747][   T36] audit: type=1400 audit(1757077046.413:715): avc:  denied  { relabelto } for  pid=12827 comm="syz.5.4225" name="70" dev="tmpfs" ino=403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:event_device_t:s0"
[  285.105043][   T36] audit: type=1400 audit(1757077046.413:716): avc:  denied  { associate } for  pid=12827 comm="syz.5.4225" name="70" dev="tmpfs" ino=403 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:event_device_t:s0"
[  285.153834][   T36] audit: type=1400 audit(1757077046.413:717): avc:  denied  { write } for  pid=12827 comm="syz.5.4225" name="70" dev="tmpfs" ino=403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:event_device_t:s0"
[  285.181760][   T36] audit: type=1400 audit(1757077046.413:718): avc:  denied  { add_name } for  pid=12827 comm="syz.5.4225" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:event_device_t:s0"
[  285.213118][   T36] audit: type=1400 audit(1757077046.413:719): avc:  denied  { create } for  pid=12827 comm="syz.5.4225" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  285.233702][   T36] audit: type=1400 audit(1757077046.413:720): avc:  denied  { associate } for  pid=12827 comm="syz.5.4225" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  285.263335][   T36] audit: type=1400 audit(1757077046.483:721): avc:  denied  { remove_name } for  pid=12385 comm="syz-executor" name="file0" dev="tmpfs" ino=408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:event_device_t:s0"
[  285.293516][   T36] audit: type=1400 audit(1757077046.483:722): avc:  denied  { rmdir } for  pid=12385 comm="syz-executor" name="file0" dev="tmpfs" ino=408 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  285.323680][   T36] audit: type=1400 audit(1757077046.483:723): avc:  denied  { rmdir } for  pid=12385 comm="syz-executor" name="70" dev="tmpfs" ino=403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:event_device_t:s0"
[  286.225224][T12857] overlayfs: failed to clone upperpath
[  286.612065][T12930] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12930 comm=syz.6.4261
[  286.695109][T12935] veth1_to_team: entered promiscuous mode
[  286.733445][    T9] usb 1-1: 0:2 : does not exist
[  286.743382][    T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  286.747833][T12943] rust_binder: 972: no such ref 3
[  286.760372][    T9] usb 1-1: USB disconnect, device number 56
[  286.774980][T11375] udevd[11375]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  286.800341][T12950] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[  286.800719][T12950] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  286.809150][T12950] rust_binder: 979: no such ref 3
[  286.821346][T12950] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:979
[  287.241651][T12956] netlink: 'syz.6.4268': attribute type 4 has an invalid length.
[  287.309231][T12965] netlink: 'syz.6.4271': attribute type 30 has an invalid length.
[  287.386232][T12980] netlink: 'syz.5.4275': attribute type 16 has an invalid length.
[  287.402366][T12980] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.4275'.
[  287.916395][T13060] overlayfs: workdir and upperdir must be separate subtrees
[  287.939035][T13062] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:989
[  287.963505][T13066] overlayfs: failed to resolve '/�ɚ�����9UQ_5�� "�s�䖥�Y٬Y�$�|m�9����A���p-�-�F���r·+� F�OϚG�hmb��v0��e�n_��r�t��W�1�䗏�����a�S��s': -2
[  288.021892][T13074] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4307'.
[  288.032341][T13074] incfs: Options parsing error. -22
[  288.037679][T13074] incfs: mount failed -22
[  288.397545][T13078] rust_binder: 13077 RLIMIT_NICE not set
[  288.404663][    T9] rust_binder: 13076: removing orphan mapping 0:4232
[  288.427479][T13086] rust_binder: Error in use_page_slow: ESRCH
[  288.436985][T13086] rust_binder: use_range failure ESRCH
[  288.437018][T13086] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  288.442641][T13086] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  288.452466][T13086] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:341
[  288.898771][T13110] netlink: 31 bytes leftover after parsing attributes in process `syz.0.4321'.
[  288.919316][T13112] fuse: Bad value for 'fd'
[  288.966320][T13116] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4324'.
[  290.389381][T13156] 9pnet_fd: Insufficient options for proto=fd
[  290.410961][T13160] __vm_enough_memory: pid: 13160, comm: syz.5.4342, bytes: 21200673189888 not enough memory for the allocation
[  290.461009][T13173] overlayfs: failed to clone upperpath
[  291.247152][   T36] kauditd_printk_skb: 2 callbacks suppressed
[  291.247172][   T36] audit: type=1400 audit(1757077052.578:726): avc:  denied  { remount } for  pid=13212 comm="syz.6.4359" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[  291.348240][T13215] netlink: 'syz.6.4360': attribute type 3 has an invalid length.
[  291.462444][T13222] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4363'.
[  291.471669][T13222] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4363'.
[  291.501846][T13230] fuse: Bad value for 'fd'
[  291.513684][T13231] netlink: 'syz.6.4365': attribute type 4 has an invalid length.
[  291.529597][T13231] netlink: 3581 bytes leftover after parsing attributes in process `syz.6.4365'.
[  291.577275][T13242] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4371'.
[  291.587816][T13242] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4371'.
[  291.623010][T13252] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13252 comm=syz.5.4374
[  291.636505][T13253] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1288 sclass=netlink_tcpdiag_socket pid=13253 comm=syz.5.4374
[  291.649801][T13253] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1288 sclass=netlink_tcpdiag_socket pid=13253 comm=syz.5.4374
[  291.663328][T13253] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1288 sclass=netlink_tcpdiag_socket pid=13253 comm=syz.5.4374
[  291.676568][T13253] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1288 sclass=netlink_tcpdiag_socket pid=13253 comm=syz.5.4374
[  291.691911][T13253] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1288 sclass=netlink_tcpdiag_socket pid=13253 comm=syz.5.4374
[  291.705089][T13253] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1288 sclass=netlink_tcpdiag_socket pid=13253 comm=syz.5.4374
[  291.718325][T13253] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1288 sclass=netlink_tcpdiag_socket pid=13253 comm=syz.5.4374
[  291.731369][T13253] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1288 sclass=netlink_tcpdiag_socket pid=13253 comm=syz.5.4374
[  291.744615][T13253] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1288 sclass=netlink_tcpdiag_socket pid=13253 comm=syz.5.4374
[  291.757760][T13253] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1288 sclass=netlink_tcpdiag_socket pid=13253 comm=syz.5.4374
[  292.212983][T13279] netlink: 'syz.0.4384': attribute type 11 has an invalid length.
[  292.243088][T13286] 2N: renamed from vcan0 (while UP)
[  292.250491][T13286] fuseblk: Bad value for 'fd'
[  292.268906][   T36] audit: type=1400 audit(1757077053.598:727): avc:  denied  { create } for  pid=13287 comm="syz.0.4387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1
[  292.420516][T13303] fuse: Bad value for 'fd'
[  292.422299][   T36] audit: type=1400 audit(1757077053.748:728): avc:  denied  { module_load } for  pid=13302 comm="syz.5.4393" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=67146 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=system permissive=1
[  292.535113][T13329] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4402'.
[  292.544907][T13329] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4402'.
[  292.553990][T13329] tipc: Invalid UDP bearer configuration
[  292.554015][T13329] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  292.581306][T13331] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  292.604448][T13333] netlink: 'syz.5.4404': attribute type 5 has an invalid length.
[  292.612257][T13333] netlink: 'syz.5.4404': attribute type 5 has an invalid length.
[  292.620039][T13333] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.4404'.
[  293.163684][T13347] netlink: 'syz.6.4408': attribute type 4 has an invalid length.
[  293.198779][T13356] overlayfs: failed to resolve './file1': -2
[  293.498033][T13379] netlink: 'syz.5.4420': attribute type 15 has an invalid length.
[  293.505972][T13379] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4420'.
[  293.545555][T13386] netlink: 188 bytes leftover after parsing attributes in process `syz.5.4422'.
[  293.720012][T13394] netlink: 'syz.6.4424': attribute type 29 has an invalid length.
[  293.727971][T13394] netlink: 64138 bytes leftover after parsing attributes in process `syz.6.4424'.
[  293.749473][T13396] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4425'.
[  294.076786][T13400] tipc: Enabling of bearer <ib:geneve0> rejected, media not registered
[  294.156089][T13418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4433'.
[  294.363375][T13457] 9pnet_fd: Insufficient options for proto=fd
[  294.473310][T13464] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4449'.
[  294.541669][T13477] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  294.595092][T13485] overlayfs: failed to clone upperpath
[  294.620325][T13490] sock: sock_set_timeout: `syz.5.4460' (pid 13490) tries to set negative timeout
[  294.621437][T13491] netlink: 'syz.0.4459': attribute type 46 has an invalid length.
[  294.637626][   T36] audit: type=1400 audit(1757077056.965:729): avc:  denied  { execheap } for  pid=13489 comm="syz.5.4460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  294.780362][T13508] futex_wake_op: syz.0.4467 tries to shift op by -1; fix this program
[  294.895175][T13528] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4473'.
[  295.234152][    T9] kernel read not supported for file inotify (pid: 9 comm: kworker/0:0)
[  295.266965][T13596] netlink: 'syz.6.4498': attribute type 2 has an invalid length.
[  295.295228][T13598] batadv_slave_1: entered promiscuous mode
[  295.314036][T13597] batadv_slave_1: left promiscuous mode
[  295.708180][T13633] netlink: 'syz.0.4508': attribute type 28 has an invalid length.
[  296.777749][   T36] audit: type=1400 audit(1757077059.095:730): avc:  denied  { rename } for  pid=13684 comm="syz.7.4525" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1
[  296.922305][T13717] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  296.922331][T13717] rust_binder: Read failure Err(EFAULT) in pid:374
[  297.100445][T13768] rust_binder: 402: no such ref 3
[  297.135984][T13773] netlink: 'syz.5.4556': attribute type 28 has an invalid length.
[  297.199972][T13785] /dev/loop0: Can't lookup blockdev
[  297.223427][T13787] binder: Bad value for 'stats'
[  297.261211][T13797] overlayfs: failed to clone upperpath
[  297.271605][   T36] audit: type=1400 audit(1757077059.595:731): avc:  denied  { create } for  pid=13795 comm="syz.6.4564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  297.305392][   T36] audit: type=1326 audit(1757077059.625:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13794 comm="syz.5.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17af98ebe9 code=0x7ffc0000
[  297.330427][   T36] audit: type=1326 audit(1757077059.625:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13794 comm="syz.5.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f17af98ebe9 code=0x7ffc0000
[  297.371832][   T36] audit: type=1326 audit(1757077059.625:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13794 comm="syz.5.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17af98ebe9 code=0x7ffc0000
[  297.374418][T13810] rust_binder: Write failure EFAULT in pid:421
[  297.396931][   T36] audit: type=1326 audit(1757077059.625:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13794 comm="syz.5.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f17af98d550 code=0x7ffc0000
[  297.426910][   T36] audit: type=1326 audit(1757077059.625:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13794 comm="syz.5.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f17af98d550 code=0x7ffc0000
[  297.456478][   T36] audit: type=1326 audit(1757077059.625:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13794 comm="syz.5.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17af98ebe9 code=0x7ffc0000
[  297.482502][T13814] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  297.482637][   T36] audit: type=1326 audit(1757077059.625:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13794 comm="syz.5.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f17af98ebe9 code=0x7ffc0000
[  297.512915][T13814] rust_binder: Error in use_page_slow: ESRCH
[  297.512911][   T36] audit: type=1326 audit(1757077059.625:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13794 comm="syz.5.4563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17af98ebe9 code=0x7ffc0000
[  297.549198][T13814] rust_binder: use_range failure ESRCH
[  297.549230][T13814] rust_binder: Failed to allocate buffer. len:1072, is_oneway:false
[  297.556401][T13814] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  297.565349][T13814] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:423
[  297.631445][T13832] selinux_netlink_send: 23 callbacks suppressed
[  297.631471][T13832] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=13832 comm=syz.0.4574
[  297.662511][T13834] syz.6.4576 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  297.711995][T13844] incfs: Options parsing error. -22
[  297.723611][T13844] incfs: mount failed -22
[  297.737153][T13843] netlink: 'syz.0.4579': attribute type 27 has an invalid length.
[  297.853857][T13861] __nla_validate_parse: 2 callbacks suppressed
[  297.853881][T13861] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4586'.
[  298.006672][T13888] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  298.036159][T13893] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  298.045098][T13892] netlink: 'syz.0.4599': attribute type 4 has an invalid length.
[  298.045354][T13893] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  298.064132][T13892] netlink: 'syz.0.4599': attribute type 4 has an invalid length.
[  298.252796][T13925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4612'.
[  298.435298][T13952] overlayfs: failed to clone upperpath
[  298.457325][T13955] netlink: 57 bytes leftover after parsing attributes in process `syz.5.4624'.
[  299.355163][T13988] overlayfs: failed to clone lowerpath
[  299.734917][T14033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=14033 comm=syz.6.4651
[  299.747995][T14033] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4651'.
[  299.814033][T14039] cgroup: none used incorrectly
[  299.819558][T14039] overlayfs: failed to resolve './file1': -2
[  299.949612][T14049] vcan0: entered allmulticast mode
[  299.964521][T14049] No source specified
[  300.450302][T14096] bridge0: port 3(macsec0) entered blocking state
[  300.456856][T14096] bridge0: port 3(macsec0) entered disabled state
[  300.463338][T14096] macsec0: entered allmulticast mode
[  300.468740][T14096] veth1_macvtap: entered allmulticast mode
[  300.474974][T14096] macsec0: entered promiscuous mode
[  300.480389][T14096] bridge0: port 3(macsec0) entered blocking state
[  300.486876][T14096] bridge0: port 3(macsec0) entered forwarding state
[  300.494732][T14096] 9pnet_fd: Insufficient options for proto=fd
[  300.540434][T14104] netlink: 'syz.0.4678': attribute type 28 has an invalid length.
[  300.765481][T14135] overlayfs: failed to resolve './file1': -2
[  300.864555][T14146] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  300.871750][T14146] rust_binder: Write failure EINVAL in pid:441
[  300.913983][T14152] netlink: 'syz.6.4692': attribute type 4 has an invalid length.
[  300.991613][T14157] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4694'.
[  300.994972][T14158] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4694'.
[  301.010677][T14157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  301.020616][T14157] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  301.931361][T14235] overlayfs: failed to clone upperpath
[  301.939167][T14235] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=14235 comm=syz.5.4720
[  303.895153][T14293] overlayfs: failed to clone upperpath
[  303.903348][T14293] netlink: 'syz.0.4743': attribute type 16 has an invalid length.
[  303.911248][T14293] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.4743'.
[  304.016229][T14303] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  304.452915][   T36] kauditd_printk_skb: 33 callbacks suppressed
[  304.452936][   T36] audit: type=1326 audit(1757077330.777:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14313 comm="syz.6.4751" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdb1478ebe9 code=0x0
[  304.721600][T14348] cgroup: Bad value for 'name'
[  304.764940][T14354] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  304.881094][T14368] netlink: 57 bytes leftover after parsing attributes in process `syz.7.4771'.
[  304.891501][T14368] overlayfs: failed to clone upperpath
[  304.897899][T14368] netlink: 57 bytes leftover after parsing attributes in process `syz.7.4771'.
[  304.941707][T14379] overlayfs: failed to clone upperpath
[  305.377654][T14392] netlink: 'syz.5.4779': attribute type 28 has an invalid length.
[  305.460369][T14405] 9pnet_fd: Insufficient options for proto=fd
[  305.482162][T14407] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4784'.
[  305.528540][T14416] bridge0: port 3(veth0_to_bridge) entered blocking state
[  305.535942][T14416] bridge0: port 3(veth0_to_bridge) entered disabled state
[  305.543200][T14416] veth0_to_bridge: entered allmulticast mode
[  305.549876][T14416] veth0_to_bridge: entered promiscuous mode
[  305.555977][T14416] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  305.568358][T14416] bridge0: port 3(veth0_to_bridge) entered blocking state
[  305.575544][T14416] bridge0: port 3(veth0_to_bridge) entered forwarding state
[  305.596266][T14419] netlink: 9100 bytes leftover after parsing attributes in process `syz.5.4788'.
[  305.640645][T14425] overlayfs: failed to clone upperpath
[  307.065705][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  307.078064][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  307.090239][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  307.102469][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  307.114590][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  307.126733][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  307.138926][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  307.151052][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  307.163147][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  307.175261][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  312.422451][    C0] net_ratelimit: 108829 callbacks suppressed
[  312.422469][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  312.440658][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  312.452859][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  312.465060][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  312.477208][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  312.489309][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  312.501459][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  312.513734][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  312.525883][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  312.537991][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  317.780054][    C0] net_ratelimit: 109055 callbacks suppressed
[  317.780073][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  317.798252][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  317.810396][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  317.822543][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  317.834691][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  317.846814][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  317.858939][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  317.871054][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  317.883172][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  317.895268][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  322.627597][T14472] 9pnet_fd: p9_fd_create_tcp (14472): problem connecting socket to 127.0.0.1
[  322.657062][T14470] fuse: Unknown parameter 'root-od'
[  322.711973][T14480] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4807'.
[  322.728457][T14484] devpts: called with bogus options
[  322.734046][T14485] devpts: called with bogus options
[  322.798996][T14493] netlink: 188 bytes leftover after parsing attributes in process `syz.7.4812'.
[  322.845257][T14500] vlan0: entered promiscuous mode
[  322.852830][T14500] vlan0: entered allmulticast mode
[  322.861307][   T36] audit: type=1400 audit(1757077348.043:774): avc:  denied  { mounton } for  pid=14492 comm="syz.5.4811" path="/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="rootfs" ino=71189 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1
[  322.907501][T14500] veth0_vlan: entered allmulticast mode
[  322.918562][T14504] netlink: 'syz.5.4816': attribute type 4 has an invalid length.
[  323.137627][    C0] net_ratelimit: 101688 callbacks suppressed
[  323.137652][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  323.155844][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  323.168111][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  323.180290][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  323.192480][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  323.204698][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  323.205961][T14524] veth1: entered allmulticast mode
[  323.216914][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  323.230943][T14526] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=14526 comm=syz.0.4822
[  323.234303][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  323.249134][T14523] veth1: left allmulticast mode
[  323.259168][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  323.264400][T14526] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=62 sclass=netlink_tcpdiag_socket pid=14526 comm=syz.0.4822
[  323.276047][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  323.288980][T14526] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=53 sclass=netlink_tcpdiag_socket pid=14526 comm=syz.0.4822
[  323.483682][T14548] 9pnet_fd: Insufficient options for proto=fd
[  324.265445][T14584] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4840'.
[  325.004933][T14638] incfs: Options parsing error. -22
[  325.016033][T14638] incfs: mount failed -22
[  325.245502][T14647] netlink: 324 bytes leftover after parsing attributes in process `syz.0.4861'.
[  325.531152][T14663] 9pnet_fd: Insufficient options for proto=fd
[  325.563221][T14666] overlayfs: conflicting options: userxattr,verity=require
[  325.590081][T14668] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4869'.
[  325.599469][T14668] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4869'.
[  326.142782][T14677] SELinux:  Context system_u:object_r:udev_rules_t:s0 is not valid (left unmapped).
[  326.154936][T14678] 9pnet_fd: p9_fd_create_unix (14678): problem connecting socket: ./file0/file0: -20
[  326.164690][   T36] audit: type=1400 audit(1757077351.157:775): avc:  denied  { relabelto } for  pid=14676 comm="syz.5.4873" name="file0" dev="tmpfs" ino=1582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:udev_rules_t:s0"
[  326.203637][   T36] audit: type=1400 audit(1757077351.157:776): avc:  denied  { associate } for  pid=14676 comm="syz.5.4873" name="file0" dev="tmpfs" ino=1582 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:udev_rules_t:s0"
[  326.218378][T14680] 9pnet_fd: p9_fd_create_unix (14680): problem connecting socket: ./file0/file0: -20
[  326.235491][   T36] audit: type=1400 audit(1757077351.157:777): avc:  denied  { mounton } for  pid=14676 comm="syz.5.4873" path="/287/file0" dev="tmpfs" ino=1582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:udev_rules_t:s0"
[  326.279593][   T36] audit: type=1400 audit(1757077351.269:778): avc:  denied  { unlink } for  pid=12385 comm="syz-executor" name="file0" dev="tmpfs" ino=1582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:udev_rules_t:s0"
[  326.321932][   T36] audit: type=1400 audit(1757077351.288:779): avc:  denied  { map } for  pid=14679 comm="syz.7.4874" path="socket:[70357]" dev="sockfs" ino=70357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  326.526772][T14696] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4881'.
[  326.641472][T14701] overlayfs: failed to clone upperpath
[  326.777151][T14718] overlayfs: failed to clone upperpath
[  327.415533][T14731] overlayfs: failed to clone upperpath
[  327.786101][T14765] fuseblk: Bad value for 'user_id'
[  327.793255][T14765] fuseblk: Bad value for 'user_id'
[  327.839314][T14760] sit0: entered promiscuous mode
[  327.846006][T14760] netlink: 'syz.5.4905': attribute type 1 has an invalid length.
[  327.855171][T14760] netlink: 'syz.5.4905': attribute type 3 has an invalid length.
[  327.927300][T14780] fuse: Bad value for 'rootmode'
[  327.958694][T14782] overlayfs: failed to clone upperpath
[  327.965061][T14782] overlayfs: failed to clone upperpath
[  327.975659][T14782] overlayfs: failed to clone upperpath
[  327.986447][T14782] overlayfs: failed to clone upperpath
[  328.004750][T14782] overlayfs: failed to clone upperpath
[  328.014741][T14782] overlayfs: failed to clone upperpath
[  328.022978][T14784] overlayfs: failed to clone lowerpath
[  328.028981][T14782] overlayfs: failed to clone upperpath
[  328.038837][T14782] overlayfs: failed to clone upperpath
[  328.051037][T14782] overlayfs: failed to clone upperpath
[  328.063270][T14782] overlayfs: failed to clone upperpath
[  328.077680][T14782] overlayfs: failed to clone upperpath
[  328.085049][T14782] overlayfs: failed to clone upperpath
[  328.102260][T14782] overlayfs: failed to clone upperpath
[  328.122012][T14782] overlayfs: failed to clone upperpath
[  328.139360][T14782] overlayfs: failed to clone upperpath
[  328.150806][T14782] overlayfs: failed to clone upperpath
[  328.165140][T14782] overlayfs: failed to clone upperpath
[  328.172661][T14782] overlayfs: failed to clone upperpath
[  328.182535][T14782] overlayfs: failed to clone upperpath
[  328.196349][T14782] overlayfs: failed to clone upperpath
[  328.205423][T14782] overlayfs: failed to clone upperpath
[  328.218511][T14782] overlayfs: failed to clone upperpath
[  328.228475][T14782] overlayfs: failed to clone upperpath
[  328.237179][T14782] overlayfs: failed to clone upperpath
[  328.251409][T14782] overlayfs: failed to clone upperpath
[  328.263487][T14782] overlayfs: failed to clone upperpath
[  328.271185][T14782] overlayfs: failed to clone upperpath
[  328.281658][T14782] overlayfs: failed to clone upperpath
[  328.290469][T14782] overlayfs: failed to clone upperpath
[  328.306913][T14782] overlayfs: failed to clone upperpath
[  328.322521][T14782] overlayfs: failed to clone upperpath
[  328.337479][T14782] overlayfs: failed to clone upperpath
[  328.349466][T14782] overlayfs: failed to clone upperpath
[  328.359212][T14782] overlayfs: failed to clone upperpath
[  328.391826][T14782] overlayfs: failed to clone upperpath
[  328.399670][T14782] overlayfs: failed to clone upperpath
[  328.409166][T14782] overlayfs: failed to clone upperpath
[  328.417254][T14782] overlayfs: failed to clone upperpath
[  328.426856][T14782] overlayfs: failed to clone upperpath
[  328.436766][T14782] overlayfs: failed to clone upperpath
[  328.446845][T14782] overlayfs: failed to clone upperpath
[  328.463639][T14782] overlayfs: failed to clone upperpath
[  328.474775][T14782] overlayfs: failed to clone upperpath
[  328.495245][    C0] net_ratelimit: 77595 callbacks suppressed
[  328.495268][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  328.502037][T14782] overlayfs: failed to clone upperpath
[  328.513427][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  328.530916][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  328.543126][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  328.555333][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  328.567522][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  328.579715][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  328.592264][T14782] overlayfs: failed to clone upperpath
[  328.593716][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  328.609878][T14818] EXT4-fs: dax option not supported
[  328.609963][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  328.627324][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  328.642121][T14782] overlayfs: failed to clone upperpath
[  328.662460][T14782] overlayfs: failed to clone upperpath
[  328.671809][T14824] fuse: Bad value for 'rootmode'
[  328.690644][T14782] overlayfs: failed to clone upperpath
[  328.709788][T14782] overlayfs: failed to clone upperpath
[  328.733943][T14782] overlayfs: failed to clone upperpath
[  328.770643][T14782] overlayfs: failed to clone upperpath
[  328.786268][T14782] overlayfs: failed to clone upperpath
[  328.796624][T14782] overlayfs: failed to clone upperpath
[  328.806188][T14782] overlayfs: failed to clone upperpath
[  328.818132][T14782] overlayfs: failed to clone upperpath
[  328.835784][T14782] overlayfs: failed to clone upperpath
[  328.956980][T14860] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4939'.
[  328.981908][T14860] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4939'.
[  329.863317][T14894] netlink: 'syz.7.4950': attribute type 1 has an invalid length.
[  329.997325][T14907] netlink: 'syz.5.4953': attribute type 12 has an invalid length.
[  331.425093][T14966] fuse: Unknown parameter 'group_id�00000000000000000000'
[  331.703886][T14972] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14972 comm=syz.0.4980
[  332.234717][T15022] netlink: 'syz.6.4997': attribute type 27 has an invalid length.
[  332.264022][T15022] bridge0: port 2(bridge_slave_1) entered disabled state
[  332.271418][T15022] bridge0: port 1(bridge_slave_0) entered disabled state
[  332.314203][T15022] veth1_to_team: left promiscuous mode
[  332.350899][T15022] vlan0: left promiscuous mode
[  332.355916][T15022] vlan0: left allmulticast mode
[  332.361113][T15022] veth0_vlan: left allmulticast mode
[  332.403748][T15025] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4998'.
[  333.039229][T15041] overlayfs: failed to clone upperpath
[  333.196237][T15058] incfs: Options parsing error. -22
[  333.207132][T15058] incfs: mount failed -22
[  333.236367][T15060] netlink: 'syz.7.5011': attribute type 4 has an invalid length.
[  333.619372][T15079] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock
[  333.691369][T15083] erofs: (device erofs): erofs_read_superblock: cannot find valid erofs superblock
[  333.854036][    C0] net_ratelimit: 71728 callbacks suppressed
[  333.854059][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  333.872164][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  333.884425][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  333.896616][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  333.908780][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  333.920933][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  333.933082][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  333.945440][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  333.957606][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  333.969779][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  337.689109][T15147] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  337.697366][    C0] sched: DL replenish lagged too much
[  338.673152][T15145] fuse: Unknown parameter './binderfs2/binder0'
[  338.948054][   T36] audit: type=1400 audit(1757077362.816:780): avc:  denied  { read } for  pid=15146 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[  339.031825][T15137] netlink: 'syz.5.5039': attribute type 2 has an invalid length.
[  339.213041][    C0] net_ratelimit: 105016 callbacks suppressed
[  339.213066][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  339.213123][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  339.219240][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  339.231098][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  339.243340][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  339.255153][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  339.267027][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  339.278898][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  339.291117][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  339.302929][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  344.572007][    C0] net_ratelimit: 91158 callbacks suppressed
[  344.572048][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  344.572430][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  344.578666][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  344.590587][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  344.602535][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  344.615491][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  344.627586][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  344.639495][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  344.651454][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  344.663287][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  349.930999][    C1] net_ratelimit: 103234 callbacks suppressed
[  349.931022][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  349.931046][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  349.937125][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  349.949141][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  349.961046][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  349.973033][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  349.984861][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  349.996999][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  350.008916][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  350.020784][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  355.289968][    C0] net_ratelimit: 105932 callbacks suppressed
[  355.289993][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  355.290061][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  355.296322][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  355.308175][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  355.320318][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  355.332182][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  355.344107][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  355.355969][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  355.368099][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  355.379945][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  360.648953][    C1] net_ratelimit: 104611 callbacks suppressed
[  360.648976][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  360.649050][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  360.655120][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  360.667090][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  360.678911][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  360.691143][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
[  360.703003][    C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  360.715124][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  360.726904][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[  360.738947][    C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:8e:fc:41:d4:65:72, vlan:0)
serialport: VM disconnected.