last executing test programs:

1m22.758191388s ago: executing program 3 (id=85):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async, rerun: 32)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 32)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r1 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f00003b9000/0x3000)=nil, 0x3000, 0x3000003, 0x80010, r1, 0x80000000)

1m22.680990475s ago: executing program 3 (id=90):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x51, 0x0, &(0x7f0000000600)="8dcdbd6d42ccdb4d556e7c2df713f0976fa3babb5f759be053e97109c9075d28dd5945ae6cb4e4d7866fe0493fb5c9157fdee7247f8cbf6c4e75526dc08c3ae8609b8760a00535639755c0fd5010ceba2e"})
socket$tipc(0x1e, 0x2, 0x0)
r1 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0x81, 0x9f51})
dup3(r1, r0, 0x80000)

1m21.836995113s ago: executing program 3 (id=103):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'tunl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x8000, 0x0, 0x0, 0xfffffffc, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @empty}}}})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x4000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000280)={0x3c2, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe}}}, 0x0, 0x1, [{{0x2, 0x8, @multicast1}}]}, 0x110)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$sock_buf(r3, 0x1, 0x1f, 0x0, &(0x7f0000000000))
write(r0, &(0x7f0000001c00)="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", 0xfffffdbf)

1m21.686106285s ago: executing program 3 (id=104):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x401, 0x0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x153, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x5df}}}}}]}}]}}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0xc70, 0xf011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7f, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0x9, 0x2, 0x3, 0x1, 0x0, 0x8, {0x9, 0x21, 0xf, 0x6, 0x1, {0x22, 0x2c9}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0xe, 0x8}}}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x19, &(0x7f00000001c0)=ANY=[@ANYBLOB="040f190001140000ff00"]})
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000200)={0xfffffffffffffe22, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x5}, 0x0}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0)
r3 = epoll_create(0x6)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000200)={0xb0000017})
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x20, &(0x7f0000000240)={[{@index_off}, {@redirect_dir_off}, {@nfs_export_on}], [{@seclabel}, {@appraise_type}, {@dont_hash}, {@pcr={'pcr', 0x3d, 0x2f}}, {@obj_role={'obj_role', 0x3d, '^:'}}]})
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
close_range(r4, 0xffffffffffffffff, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0\x00')
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000100)=[@clear_death={0x400c630f, 0x3}], 0xffffffc8, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"})

1m20.02252408s ago: executing program 3 (id=119):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)
openat$rnullb(0xffffffffffffff9c, 0x0, 0x20002, 0x0)
ioctl$BLKROGET(0xffffffffffffffff, 0x125e, &(0x7f0000000040))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000))
setpriority(0x2, 0x0, 0xd2f4)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x7cab6ced6415608, 0x3})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r2, &(0x7f0000000280)=[{{&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="140000000000000000fff000070000008902000000000000"], 0x18}}], 0x1, 0xf00)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1800, 0x0)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000100)={0x4, 0xe7, 0x6, 0xfffffffe, 0x9, "ea7174ddb80fc7000002f7ffffffffd2a2d975", 0x4, 0x4})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0xcf, 0x0, &(0x7f0000000400)="359cc05e0d25f1223ceba02e764206b6acc06e8c4308c32b780549151a3996aaa0bf646c54d43843bff3d4eaf135b2369fbe86ae6ea1cc9efad79deedbd935accc5552cbc5f0eddf2c1f33c081d624b7004b7122953b81f61a7abf43c208e08687933f43daef89fab28153b5b0926d8f9ab80e35cbcc50955079f2d466bf212d3c3247da2fd881443bdc5c253d8198a1a000b37b51628f6d180ecd840fc90d1c43ccbff95540da11363897d6b193b25f2e77578202e3b2fc8d6e1adb6f34ae5e5ec138aabcf6c63f794badac80773c"})

1m19.839253934s ago: executing program 3 (id=120):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
ioctl$FIOCLEX(r3, 0x5451)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000000140)=0x4)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0)
ioctl$TCSETAF(r5, 0x5408, &(0x7f00000007c0)={0x0, 0x0, 0xf440, 0x0, 0x0, "95bff5627804ada2"})
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r6, 0x5452, 0x0)
write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[], 0xffdd) (async)
write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[], 0xffdd)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

1m19.831592495s ago: executing program 32 (id=120):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
ioctl$FIOCLEX(r3, 0x5451)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000000140)=0x4)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0)
ioctl$TCSETAF(r5, 0x5408, &(0x7f00000007c0)={0x0, 0x0, 0xf440, 0x0, 0x0, "95bff5627804ada2"})
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$int_in(r6, 0x5452, 0x0)
write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[], 0xffdd) (async)
write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[], 0xffdd)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

48.85391046s ago: executing program 2 (id=275):
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@ignoreqv}], [], 0x6b}})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x2191, 0x67}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x84}, 0x800)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0)
splice(r3, 0x0, r6, 0x0, 0x25a5, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]})
close_range(r7, 0xffffffffffffffff, 0x0)
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0)

48.773880307s ago: executing program 2 (id=280):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setreuid(0x0, r2)
stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$unix(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0)
sendmmsg$unix(r7, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='+', 0x1}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}], 0x1, 0x11)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c)
setsockopt$packet_int(r6, 0x107, 0xc, &(0x7f0000000040), 0x4)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
r8 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000180)=r8)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x14880, &(0x7f0000000580)={[{@xino_off}, {@default_permissions}, {@verity_on}, {@redirect_dir_on}, {@volatile}, {@metacopy_off}, {@index_on}, {@xino_off}, {@default_permissions}], [{@defcontext={'defcontext', 0x3d, 'root'}}, {@uid_eq={'uid', 0x3d, r2}}, {@pcr={'pcr', 0x3d, 0x37}}, {@dont_appraise}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@fowner_gt={'fowner>', r3}}]})
setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f00000000c0)=0x401, 0x4)
get_robust_list(0xffffffffffffffff, 0x0, 0x0)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BTRFS_IOC_FS_INFO(r9, 0x8400941f, &(0x7f0000000680))
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r9, 0x0)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x0, 0x0, 0x36}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

48.209950622s ago: executing program 2 (id=287):
r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r0, &(0x7f0000000040)={'c', ' *:* ', 'r\x00'}, 0x8) (async)
write$cgroup_devices(r0, &(0x7f0000000040)={'c', ' *:* ', 'r\x00'}, 0x8)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f00000000c0)={{0x1, 0x8}, {0x80000001, 0x9000000}, 0xd9f}) (async)
ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f00000000c0)={{0x1, 0x8}, {0x80000001, 0x9000000}, 0xd9f})
write$P9_RLCREATE(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0xf, 0x2, {{0x20, 0x2, 0x2}, 0x4}}, 0x18)
chdir(&(0x7f0000000140)='./file0\x00')
socketpair(0x27, 0x6, 0x5, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socket$can_raw(0x1d, 0x3, 0x1) (async)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
recvmsg$can_raw(r5, &(0x7f0000001740)={&(0x7f00000001c0)=@isdn, 0x80, &(0x7f0000001640)=[{&(0x7f0000000240)=""/107, 0x6b}, {&(0x7f00000002c0)=""/77, 0x4d}, {&(0x7f0000000340)=""/195, 0xc3}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/71, 0x47}, {&(0x7f00000014c0)=""/239, 0xef}, {&(0x7f00000015c0)=""/54, 0x36}, {&(0x7f0000001600)}], 0x8, &(0x7f00000016c0)=""/92, 0x5c}, 0x1)
mknod(&(0x7f0000001780)='./file0\x00', 0x1, 0x1)
r6 = open_tree(r2, &(0x7f00000017c0)='./file1\x00', 0x1)
poll(&(0x7f0000001800)=[{r6}, {r4, 0xc011}], 0x2, 0x0)
syz_clone(0x200, &(0x7f0000001840)="7d2862f01285de69be03e3c571f5f5667529536134d888469d6a20e79e1114abb6314420c1", 0x25, &(0x7f0000001880), &(0x7f00000018c0), &(0x7f0000001900)="12def36a9b6835fda96feb8f255bbce1e1b1bb2f5388c126cbdace965aa4c4daeefd2afb0a8510df867506b7c89662cc6349c9fe331d89e204f589b05aee33ea60a665ac12fa6cf821ec7e05")
syz_genetlink_get_family_id$nl80211(&(0x7f00000019c0), r3) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000019c0), r3)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r5, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x44, r7, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}]}, 0x44}, 0x1, 0x0, 0x0, 0x24004000}, 0x1)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001b00), &(0x7f0000001b40)=0xc)
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000001b80)={'veth1_to_hsr\x00', @broadcast})
ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000001bc0)={{r5}, "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"})
ioctl$PTP_EXTTS_REQUEST(r2, 0x40103d02, &(0x7f0000002bc0)={0x6, 0x2})
socket$xdp(0x2c, 0x3, 0x0) (async)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000002cc0)={&(0x7f0000002c00)=""/136, 0x0, 0x1000, 0x4, 0x2}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000002cc0)={&(0x7f0000002c00)=""/136, 0x0, 0x1000, 0x4, 0x2}, 0x20)
getsockname$packet(r6, &(0x7f0000002d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002d40)=0x14) (async)
getsockname$packet(r6, &(0x7f0000002d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002d40)=0x14)
r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000002d80)='./file1\x00', &(0x7f0000002dc0)={0x161500, 0x0, 0x1c}, 0x18)
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000002e00)={'vcan0\x00', @random="c80884a46baa"}) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000002e00)={'vcan0\x00', @random="c80884a46baa"})
accept(r8, &(0x7f0000002e40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000002ec0)=0x80)
getdents64(r9, &(0x7f0000002f00)=""/47, 0x2f)
madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
openat$cgroup_devices(r6, &(0x7f0000002f40)='devices.deny\x00', 0x2, 0x0) (async)
r10 = openat$cgroup_devices(r6, &(0x7f0000002f40)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r10, &(0x7f0000002f80)={'a', ' *:* ', 'r\x00'}, 0x8)

47.37022817s ago: executing program 2 (id=290):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="e41100001e00010a000000000000000007000000cf1143800800c700", @ANYRES32, @ANYBLOB="08003600ac"], 0x11e4}}, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a05004, 0x0)
mount(&(0x7f0000000140)=@md0, &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='pstore\x00', 0x1800000, &(0x7f0000000200)='--^}*&+++,@\x00')
ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000100)={0x2, 0x0, [{0x40000080, 0x0, 0x2}, {0x979, 0x0, 0x8000}]})

47.354650511s ago: executing program 2 (id=291):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x36, 0x0, &(0x7f0000000580)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8"}) (async)
sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010400000001000000000a0000070900010073797a31000000005800048054000180090001006d6574610000000044000280080001400000000f080003400000000008006139af8c6a8c4f67a663de139d5f397203400000000a0800024000000009080001400000000b08000340"], 0x78}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) (async, rerun: 64)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = socket$inet6(0xa, 0x3, 0xff)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e21, 0x2a, @mcast1, 0x8}, 0x1c)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x24044844}, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10001)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x80000c, 0x10012, r0, 0x0) (async)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, 0x0) (async, rerun: 32)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d2c26003, 0x13, r0, 0x22e7c000) (rerun: 32)

47.296397506s ago: executing program 2 (id=292):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5444000) (async)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) (async)
write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2046) (async)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00003ae000/0x400000)=nil) (async)
madvise(&(0x7f0000363000/0x4000)=nil, 0x4000, 0x17) (async)
clock_gettime(0x4, &(0x7f00000004c0))

47.24527742s ago: executing program 33 (id=292):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe5444000) (async)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) (async)
write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2046) (async)
syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00003ae000/0x400000)=nil) (async)
madvise(&(0x7f0000363000/0x4000)=nil, 0x4000, 0x17) (async)
clock_gettime(0x4, &(0x7f00000004c0))

2.038636555s ago: executing program 0 (id=863):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4}) (async)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000000)={0x1, 0x2, 0x817}) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

2.038196246s ago: executing program 0 (id=864):
lsetxattr$security_selinux(&(0x7f0000000180)='.\x00', 0x0, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000000c0)="0fc76f0d8f0868ef9631cac366bd660f388242423e0f01f86a0064266465400f01ca0f20a566ba400066b8008066ef36f00fc064b60ec402d1064a00"}], 0x1, 0x5c, 0x0, 0x5)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x9)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_expedited', 0x161b82, 0x0)
write$cgroup_int(r4, &(0x7f0000000040), 0x12)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, &(0x7f0000000080))
sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, 0x13, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c005}, 0x20004010)
fcntl$getflags(r3, 0xb)
readv(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2)

2.037820206s ago: executing program 0 (id=865):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x0, 0x0)
futex_waitv(&(0x7f0000001480)=[{0x800, 0x0, 0x56f77dbfbcc63790}], 0x1, 0x0, 0x0, 0x1)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r2 = dup(r1)
connect$inet(r2, &(0x7f0000000040)={0x27, 0x4e20, @rand_addr=0x64010100}, 0x10)
r3 = socket$packet(0x11, 0x3, 0x300)
syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1)
r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000100)="240000001e005f1814fffffffffffff807000000b800000000000000080009000d000000", 0x24)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'})
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x2000}, 0x4)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000180)={'veth0_to_team\x00', {0x2, 0x4e20, @multicast2}})
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x2, 0xffffffff}]}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

1.996112599s ago: executing program 0 (id=866):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0xc84c1, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$FUSE(r1, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x30ac20, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@posixacl}], [{@dont_measure}]}})
ioctl$ASHMEM_GET_NAME(r0, 0x81007702, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='cpuset\x00')
read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020)
setreuid(0xee00, 0x0)
r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
process_vm_writev(r3, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/152, 0x98}], 0x1, &(0x7f00000015c0)=[{&(0x7f0000001340)=""/189, 0xbd}], 0x1, 0x0)
epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, 0xffffffffffffffff)

1.942169303s ago: executing program 0 (id=867):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0})
r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000180)={{{@in=@multicast1, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6}, 0x0, @in6=@ipv4={""/10, ""/2, @remote}}}, &(0x7f0000000100)=0xe8)
quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000901, r3, &(0x7f0000000280))
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0xfffffffa)
pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x880)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x2010, r5, 0x0)
ioctl$ASHMEM_SET_NAME(r4, 0x40087708, &(0x7f0000000ac0)='\x00\x00\x03\x06\x00\x00\xda\xfb\x8c#\x8cI\x8d\xaa^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\x00\x00\x00\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\xe5\x8b\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9}\xf7\xa9\x96P\x920Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\xd3\xfc\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xce\x1c\xb5\x85maJ\x0f\xf7+Y\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+W\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xdb\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc2]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\xb1\x12K\\\xf2\xd5\b^[')

1.941566483s ago: executing program 0 (id=868):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x10b, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r2)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001e80), r4)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001ec0)={'wpan1\x00', <r6=>0x0})
sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PAGE={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan0\x00', <r7=>0x0})
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x34, r3, 0x118, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40005}, 0x40000)
r8 = socket$packet(0x11, 0x2, 0x300)
creat(&(0x7f0000000180)='./file0\x00', 0xf0)
r9 = creat(&(0x7f0000000080)='./file0\x00', 0x2a)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r9, @ANYRES64=r8], 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0)
write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x32600)
r11 = dup3(r1, r0, 0x0)
r12 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000d80), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r12, 0x40345410, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000040)=[@enter_looper, @request_death], 0x50, 0x0, &(0x7f0000000580)="05de66730879c09a3dad5fda5a11568bd6fdffdb8a6c55bad3ce0e7d04883d574b211f9860bc1a93ac458aca9afb423d03bb15483d60c14ac6fee5f3fae5d384e42707be029a067801fd291926efc34a"})
r13 = socket(0x28, 0x5, 0x0)
setsockopt$sock_linger(r13, 0x1, 0x3c, &(0x7f0000000180)={0x0, 0x5}, 0x8)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3)
epoll_ctl$EPOLL_CTL_DEL(r11, 0x2, r1)

1.193010874s ago: executing program 5 (id=891):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x4, @remote, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
r1 = socket$inet6(0x10, 0x2, 0x4)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0x0)
sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00ac055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x3c, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={<r2=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000000)=@ethtool_gfeatures})
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0)

353.077152ms ago: executing program 5 (id=912):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x36)
ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f0000002100)={{0x1, 0x0, 0x80, {0x2, 0xd000, 0x3}}, "d55fea491ef9ff281a786b545a4709ec7eac8bb04706984c72b0d3246f5361839fccb3e0c936ce5ae4b5a111758013afa70bb6444265493f633817fc653e32aeb07843df8b50b25fd95e8a35c31459e7ce1a356d276fa58d0b81189d7c4dd743db8e398fff059278568d3ded0f6bd7ddd5fff6dbf38bae99d55faed3f22735d488c7277c830d7e8f74c3859094885bc3a29f57b58150af47d6886e1c373b51c3e7e9af1f0a4e189789898892ab8563dc29b6647902d60b40778141d6a8eb453a1fcc65193fbc51ff327d5e008110b8319a85eccffc8446a5270f80487f567e9d4bc2a6699af54069c85825175bd2f5d8168744326b233c8feb84a16e1fdab3fd8eecb9d65b5bf9c8ce3e80ded95731cca7119ff3e34f74da453629a2a8ab7e6441d610073b86c92363ad8a2c557aaabee8b58969c330bf0948c2b88ac54aea84720be299dcce934d4b970dd976cf047c1affab9f8cd6a0e6f07f53cb411d0b3961ae70eedf595a2177d601d3b2e5be1751e3a4327dd454bbc64c06a47e863193f7befe58da5bcff6bcd52bb84368dbde29dd400a0c113daf4dd6aac0af8826b2b3d8b93633114de380ff8dff302f41160f011af41d017845f7746530029950b3b3430c3eff15b1f439fa4a17e8024f76d7797bec95b24adde07e105d3e39f3153a492babedb2345ab5fe9f48148bf65222fab751b3c39ddf850e6e49cbdf77cb712b47b7115d478e6c8773477d2189fca3d73447aa9ea1fbe008c1005bfb77db8bfce400b8556d750833c41c9e9d732fd0fe25b98079249c4f631dcea53f144dbf9b771b50ad2ff1f3dacf37e53aff16bd7f43b9118eca5842a6ba05b67a9ddadb0549c9988bfeba5f5cd3ae134a0a89e5ec5fb8f478a6cdd24afb712613685ee405c36d684b2e3871675d7c249236d89ead0241bd249b322ed4d291f676178c576dbdcc5bbe70170dd80b6ed5096ff5cce846e1a5d89f5965989d094d08721da448911afab07aced23462759bd97625b3a91effcaaeaf8654e8ce3d3e1ed6d83efff5fff91342bfa0650ea5e699fc95b491feadfb9dfa0be2241bd684664edd3cd219c2a0cb5a26680ea11ace2fbba181d5a54a8d1c9ebe0fad5d1b33c25ca9c809f07403fb9dd3793e094310142d126077cbe185fffa9585887c43721d3abff27667c0aec1e2edf4757b79a19b172bd503cde33e8d3c1b769549ef1198388e0376569e150a579897c284935de74745eb7af82c190c6644f089ff7c5991af4b5ff5f49a3fbe9c097a5c7750ebd1d251146d6e879e275476fb2af123c70e17a8e48147df0f5171e6c93cad4861fbf2318b020c49a2fca5609661a34d8ce043d1a33cd7253b00fa1630676b4fef0c20c400497a0eee4f6c401ad9d9e0fccd6c6ee3b101f95b99a56c5c7fa111a61afcffb67e0a011037c290954b26bd2d0d4bb06e6ec831bf49817a0b70234c06c67c5ddf57c737c41810529ace3ea3b31fe26ee48e13a45f3f11d8b95ac5461d8338342243f685274ed97e51899c487c0429675b8c22b994ba59b09424d190ce686f5cb9aac81a844ba067fc63be4758196688571dbbde40861ba9a2e9dcc6119b94dc6537bd013cb60637a158c2e08fd5c3d241d07bb18286826e78b5a59d19cdc17f4985ae7513645aeb6d972b1c90001f91ec8c88bf35ce184851cb61d75ec725d527283a596ed9a9b48c844264c3fed6cd36d4cca4d4a0b604bd6a0fb797966a28be03f5cc9ee1cdcd602bd89263586a04c9c3b7e25a1c88dda77856fe7332a60b1ce6f3bf1ef6ccd3402e119888bda6546d734a66c0804ed068a1bafbc79c031799b44f6d0a5ea3e713a879715579e321a57171c1e73ee7e387fc43da7d2a449518038ede530fc565c188970364f35b77331742f098690d7ae4602e82e1799adef95a3a1e568ec53cd5b0fb55f61d46ac2fd36c68e6df7209759d7d8d7614bae85efc6749fbdf452a57000410886d445ce656abc1fdda8a7f75ab9cd3f5bde7234a0cb100b07d1c08f7f4f918ba538cb4f6b1465d36f6514f60e810cdb8a72bf595b96fc74c72e98fdd9aba72709655284c7ec65064c57241761118a04b0b44c1482f01e6b13be5a78ebce6684947e2ca1eb39d348a3aea472ad77cc46435a97f71384b5509af938307999b1d0d8ada8a8c64c602108fdd9610ee7772937aef325779bced6266e1e5310cee47dc0a6ea75470da8a6e0574d34f7ff7687d753de36a1f805f10537e02bd61dd40a7ea9928471afde977f87b21e562993d1d61f312f53d1952285bfaa3c50a1e5c902c2a084cc18cfa68d809d0acf9fc011c727a2503f60a3080f7310cd7b44131ac58839f7672a0c7880cb8ff841c462293c1a167a0dddcd20fd658dc0911f318d71f2543b06cc545ba0a2db02dc884c8812ab0465ebecccaa8d75e4db21f2f69e61f3082125098b04d671b8b78ba60cb0e0473bb600a7f03066afc139939f2a8750edd8591c3e0836d33aa5d5c335aff350ac62c4fcc28b198e52558df55f40cc483c7950bfaf7802422f8e44e6871fae5326002b2c7bd34dcba43691a53523b7169472506231e918e196b9e4f41c386de47332caa493d786b3bd3d5ff27125ac0e87a07a72102da7c9931267a145f51724ef5b50f3ad91be043ccbb50f7fa21fbc3b5608540a4dad3762b62448006e5f99344c3bd9c2f97580bbf1c78266a527aff94209674b7f16e68dbb9091b8ebe5bf1ed9ba30450f4d64d7279871c1faa16ef38d57ee3ce753c1d503c3c3894d49271fd1e9eea8b1cd37f470360281e7be5c7d6df19cb26b3a91be1d4eb2faca57ea1078f7e7a9a938f9391738c7dcae839536159120ccb7ddd90ea71bf360ce7655d32289243c49101893ba152554c1453c2bfbdde95295fa7ea348640f022adb4ef785c4f7bc143f30db1d57e09dbe1903a5bac80791721fa4efbba7b32f39e46b62b9055080ad0cd73c0f95b36a90ccdc11151df477ec8b25683fdad7beb76906a67ec3ff2770c8a0f1c38bf16316cdc4cd8811ad63deaabbddadca9c86a8e9ceaf60cda422d0640b45b5c6e33c8e3f0673a993497269d9dcdde0e9c6f8ee8c8b8e2fe4016d4c845ed6a981ae75b35a8f51a35b6a1eec8ec526f58dc21593d0b0a012e139836f6d036c016475a942401bc7a4ae02be5f3f5dc50f3fc5d2a3aee5fecd9d523fba7aadb27b9882c6159fe01417e011f4222a04892168fd2a05daadbba0237efdfdb53366df383b24fe4068aa1e39458887f9c2e396869d71dcd3f03091d7baa60d2370538e7a6705a09cce5728bade82b0fab0e992a8fded5eae504f6bbb6007d1d8bf66295f36ddb69ac233bbc53368c770377d11d2db536df1794ee601e07f916aed8ae6353a288b0f9570073e637739b2e82f36ba13010169f3c4f8b48d70b19a5ef27f430fb03dbf8e410fd30f9d4bb20ab53ab9d31b9a62a2393e5e3711092d970a3dd36afca4fd042c0892042f150617613e4ac7938ce839dab296f90bcce0bb80dc04fd6435501c16a876fb773096dfb9905974e3f8db8467f37e60fc23dfeb4f9c81967afa5398280834e8d156a10859431d416ebbc4aeb9de4835114187013c11932af7db64ce3b039e505641bf8a372a92c1787e15604a83fce20755cffe3329a918852039415e222e8a25e09ed18da23175216d8aad474f105477cbba23c8125a859c70e3d475e08c7817d5bae756821cc005540c7df4ccdff18c78d003f19237379c989a2d652ccf64867a001e35fef54764f3da072b450eea87a66a9e05771757d11a151fae8d0055ff80568a1a9a22723994991237465053ac9a12fe0a4aee1473e87683b74732d613ac2e95d6e515922255aba382eff7c984e7b5f7eafd3fbdee6141b5c1fc5ffad7a688ce595b788b965df3ff7cd45c99cbeb3bec95807385f312ff5f2e0b4cf0cad600bdcc39638a84f775d1c81c09922555a587a1eae18304c93b2652053857119006be06b9d3b8cec89c04e11c3d11bfb3552b8baba04c03c889ed04e886bb3136a384fd72ef7bbc2416381efb846e44a08e415d1625078ac14d9eb527511476a1d03345311f849b772e9f74995f7a65cd1911c69ecd31be45bca68c2e126889763bc3aa883fb9146088cabf4ce77561b9ea639ca0560ae7f1c2212fd62381ab72575420be7504a67f7a547b69ed0827d84fbca379d10028d466dcde0c79c91b1cd1800fed1631727551c569c937b2678e89b97c0c1f3e1d21fb2baac1536f0347dfd52e950040bf585506ae8689c0ac62057b3dac5b38b955dc350f4fd3f9d58de5f1174f639f2065c5388d8c325df9f86d1aebafa4503f81fba1da6a2038b73b7d16b5fcb2750fed0315d8e90e3424025b979a0ba747ee1ee4a2bd5807a44246831ecbe5108444ef4cf1e0834982ef0121f3218f096a760fcc4e3043e455c4f5a8e7846a6793b35f70077d0d5c72560da30c54e85c175ff035599302f9a5cc2557504c595035afc3b6073a890019be49647eed4390b4e94db1e6fcedd70d56009b7805ce15776862af0960403a9b4d65962f767b3401759a43f03507e1f4edd2cfa64ec039e65425426b99be0e0631fb20d3224714b2da1c92c6e2292dbe2c67acbfa871537431f7291660a9bbdb157dd5e55c45ecd16ac4780393aedc895102fc1015602e94dd5278137b5f938083f88bf03bf563d77796e98c7fc05255fa288e33fff131c6a5eb258e91d233a5206d235803f5aaa0e65192c51228e3d5eaacc0b4e302974d95d21e518719e1d39f8e23189f3f6b03a7344e7afd2d741458efcefe2c95199e51ebe1946a39e619bb7a7d5ad275fd6c5cfe75c21ca5647e126cbba9c628911aeffc051675d024a9591150e2fbec95640e39a0baefb134315051de61e1dccf5ce8ff75c0e2815c1bbde451e88e3ad59038a6016420c164b14d1d98eb6095ffcf789429c899848257c1f6e496450c01e83c10dbce89ac16977c7dbedb5b51f0291362e75203c9ae9f6816db395ffe7c3b65f41858ec843b575d7cd20693c14a9350d528f36d70b6f46190bf9f99f6604769442f461ff518be9d65789bdd5226e65cd96c5345a772b9e483d1fa400f3f5ef89106d04fe54136fcf04251fd04366a093b68415b9be99047e017fe614e4b509372071d915b03c761857f4a6802de9b797c7ccbf73f8b7e0cb5faaa9dd0e549205d9dcc0e8a729d452881334784fb0d5960144eab1ae998807df455b57d707f39c49ec27e8d8476ffec201cc80c70da534b2b813e394423427244ffe0fb37356cb54da604c6d7211166cbe652e5ce88efb8bd8e718d43cabee029edd3bcad5fcfbdfdccdb833a4e8d194730efa541a1bbe218065799b5c4d0e0fcac2efc06e966c549d44fdad6f49ff38ed1077565e4ae14fd88a9272f78bcf3ac4871d7d2c02d94d55e0b5f7594d731470e6fc3ecc47cabafb9042dfb5ab9ce389ad2f204f0f2ff904e7c73659f2181337a7ba383614621b76779fbc056b4c2d5ae97e9e5913e713efbe028153a9344003d5e8fe318a30b85826d34eb97bfed75bb3fdbea563262f8fc9c498585969af9faabdfa79b2445dc2fae323f930a68709528f235d16efc3526679ef0c4354122d7584cbb1651481625ec505114052304cf5c3310281e91b628beb25d9d0301607184fa8989214e49a7effad082ab9eb19e5c50522b87557aca23d60b56277a99e01674d79d4bd4d463ad003c836fedfc432d85094feb6cad07c78bdb0626bf42de88ee58efd8ec962c65abf684d8f1ec0d1bdd05ae9abf792e5a0dd", "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"})
syz_open_dev$ttys(0xc, 0x2, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYBLOB="123aad4b4cc72a2a85f917eb8d7cee7ce4447ea99154a5ed52b7db115b5789dabf80c922848117d2788b83b55f54c8da3b400999317bdb1d1cb1375350375a5558637c8a3fc38b173ad959300a575d6516bcb5e267893aedde02e9b4d46970c263d7e3988b2d030c33d5c2796ac6496b4e335bac4a4f3491a5f4410b59f7df7adf56", @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1)
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x38, r4, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0x79, 0x7}, {0xff, 0x3}, {0x7, 0x4}, {0x62, 0x6}, {0xf5}, {0x0, 0x6}], "14bf72dff22451dd"}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
read$FUSE(r2, &(0x7f0000006300)={0x2020}, 0x2020)
close_range(r0, 0xffffffffffffffff, 0x0)

339.911973ms ago: executing program 5 (id=913):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB="7365636c6162656c2c00d603ae28d072a2794e4228ff010b7de975452dfbfdebb0260f7e6301094d24358709dc05d6bcaed498d6b9edde3479576459313fe9088d13af9f0adc8f167a7fbf00ec937a80fecca9066df82a596361f4f622c0e08d51ec316baa17589844f36ddf79fdafd2dfad3dfbd281ca5fdf2e529ddf7d3211d6bf470d938a9c5853cfd0344f0d6823c907cec5a3e2bf2bac928b8c79aac74ae3f999fa96fefafc8da83eceaa2115da4a8d32167e87547fb80306cb421e3a1e54ae288a4755"])
mkdir(&(0x7f0000000080)='./file0\x00', 0x52)

286.283557ms ago: executing program 5 (id=914):
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000080)=ANY=[@ANYBLOB='ro,audit,seclabel%\x00'])

284.326067ms ago: executing program 5 (id=915):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
r2 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e28, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
write(r2, &(0x7f0000000200)="89", 0x3f80)
r3 = epoll_create1(0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x54, 0x1, 0x400, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4c504}, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0x1, <r8=>r4, 'id1\x00'})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r8, &(0x7f0000000040))
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
r9 = syz_open_dev$ptys(0xc, 0x3, 0x1)
r10 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r10, &(0x7f0000000040), 0x10)
sendmsg$netlink(r10, &(0x7f0000005d80)={&(0x7f0000000440)=@proc={0x1d, 0x0, 0x25dfdbfc, 0x2000}, 0xc, &(0x7f0000000300)=[{&(0x7f0000000f40)={0x48, 0x27, 0x400, 0x70bd2b, 0x25dfdbfd, "", [@typed={0x4, 0x3f17, 0x0, 0x0, @binary}, @generic="6ddd6613eedc98322ca127287b9cd431e9c3a3b543ae27a43ff0f56426784b4a8d8b250d76c4856865089fc5133ba4c076"]}, 0x48}, {0x0}], 0x2, 0x0, 0x0, 0x44011}, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0x3)
close_range(r0, r1, 0x0)

233.091502ms ago: executing program 5 (id=916):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) (async, rerun: 32)
r2 = socket$key(0xf, 0x3, 0x2) (async, rerun: 32)
creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) (async, rerun: 32)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async, rerun: 32)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = creat(&(0x7f0000000080)='./file0\x00', 0x2a)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r4, @ANYRES64=r3], 0x0) (async)
sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x10}}, 0x40) (async)
r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0xeeef0000, 0x5fa, 0x8, 0x1ff, 0x0, [{0x6d, 0x6, 0x9, '\x00', 0xa}, {0x6, 0xb, 0x72, '\x00', 0x3}, {0x1, 0xfe, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x6, 0x7f, '\x00', 0x5c}, {0x0, 0x4, 0x6, '\x00', 0x8}, {0x6, 0x9, 0x8, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x9}, {0x2, 0x9, 0x0, '\x00', 0xa}, {0x7, 0x5, 0x0, '\x00', 0x6}, {0x40, 0x4, 0xa, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x1, 0x86, 0xc, '\x00', 0xfe}, {0x4, 0x4f}, {0x4, 0x4, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x7, '\x00', 0x7f}, {0x10, 0x5, 0x1, '\x00', 0x3}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x5, 0x9e, 0xc1, '\x00', 0x2}, {0x3e, 0x4c, 0xa, '\x00', 0x3}, {0x7, 0x1, 0x2, '\x00', 0x11}, {0x3, 0x0, 0x6, '\x00', 0x4}, {0x93, 0x4, 0x4, '\x00', 0xe9}, {0x3, 0x7f, 0xdf, '\x00', 0x47}]}}) (async, rerun: 32)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) (async, rerun: 32)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x0, 0x25, 0x0, "a386bcb957f6ee650a88e8065cb3b0852da5b6b12cf6fffdffffff0f392be7124f3883ab73ec229f5fab90b052c3572cb8ed729eed0700000000000000de12709700"}, 0xd8)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x14, 0x32, 0xa01, 0x70bd25, 0xfffffffe, {0x1e}}, 0x14}}, 0x0) (async)
ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000740)={"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"}) (async, rerun: 64)
ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x0, 0x3, 0x93, 0x0, 0x0, 0x1, 0xbb, 0x2, 0xc0, 0x4d, 0x9, 0x61, 0x7, 0x90, 0xd}}) (rerun: 64)
ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 64)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 64)
syz_clone3(0x0, 0x0) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_GET(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x2c, r9, 0xb60aebde7ebb79ef, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000848}, 0x4000010)
ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000180)={'wlan1\x00', {0x2, 0x4e21, @remote}}) (async)
r10 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8)
r11 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r10)
keyctl$setperm(0x5, r11, 0x1000008)

161.520787ms ago: executing program 1 (id=920):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r0, &(0x7f00000021c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe)
r1 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r1, &(0x7f0000000640)={0xa, 0x4e23, 0xfffffffc, @local, 0x20000009}, 0x1c)
r2 = dup(r1)
bind$inet6(r2, &(0x7f0000000240)={0xa, 0x2, 0x10000, @empty}, 0x1c)
ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f0000000000))
listen(r0, 0x9)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
close_range(r3, r2, 0x0)

161.321837ms ago: executing program 1 (id=921):
r0 = getpid()
r1 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r1, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
syz_pidfd_open(r0, 0x0)
r2 = getpid()
r3 = syz_open_procfs$namespace(r2, 0x0)
io_setup(0x8f0, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',debug=C'])
r6 = syz_open_dev$loop(&(0x7f0000000500), 0x7, 0x880)
ioctl$BLKBSZSET(r6, 0x40081271, &(0x7f0000000540)=0x8)
setns(r3, 0x80)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]})
umount2(&(0x7f0000000040)='.\x00', 0x2)

143.170089ms ago: executing program 4 (id=922):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000000), r0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x2, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0xc4)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x8000)
sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x16c, 0x2, 0x2, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}]}, @CTA_EXPECT_HELP_NAME={0xe, 0x6, 'sip-20000\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_MASTER={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x28}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x16}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xffff}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x15}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xe2c}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x38, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x24000000}, 0x20040001)
getrandom(&(0x7f0000000500)=""/91, 0x5b, 0x1)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, r3, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20064014}, 0x4004)
r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
getsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f0000000700), &(0x7f0000000740)=0x4)
r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000780), 0x8400, 0x0)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r3, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x10}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1be}], @NL80211_ATTR_MAC={0xa}, @chandef_params]}, 0x30}}, 0x20040051)
close_range(r4, r0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000900)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r5, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, r3, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x404a881)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'batadv_slave_0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000a80), r4)
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000b80)={&(0x7f0000000a40), 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, r8, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x66e819545bf7fecb}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1c81}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20008001)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000c00), r5)
sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000dc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d80)={&(0x7f0000000c40)={0x118, r9, 0x20, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x7fffffff}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x93}, @ETHTOOL_A_RINGS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}, @ETHTOOL_A_RINGS_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @ETHTOOL_A_RINGS_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0xf56f}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x2}]}, 0x118}}, 0x4)
sendmsg$NL80211_CMD_ADD_TX_TS(r4, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x20, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r0)
sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x44, r10, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x1, 0xc}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x40000)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001080), r5)
r11 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$BTRFS_IOC_RM_DEV_V2(r11, 0x5000943a, &(0x7f0000001140)={{r4}, 0x0, 0x0, @inherit={0x58, &(0x7f00000010c0)={0x1, 0x2, 0x80, 0x5, {0xc, 0x7, 0x7, 0xca1, 0x8}, [0x0, 0x2]}}, @name="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"})
sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000002200)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x10)
sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f0000002340)={&(0x7f0000002240), 0xc, &(0x7f0000002300)={&(0x7f00000022c0)={0x38, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x48040}, 0x40)

128.67739ms ago: executing program 4 (id=923):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000740)={0x4, 0x5, 0x0, {0x0, 0x6}}, 0x30)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
select(0x40, &(0x7f0000000040)={0x2, 0xf0, 0x5d1, 0x5, 0xffffffffffffffff, 0xf3, 0x8, 0x1}, 0x0, 0x0, &(0x7f00000001c0))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x100})
ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r3 = getpid()
ioctl$KVM_CAP_X86_GUEST_MODE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000))
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_buf(r4, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192)
r5 = syz_pidfd_open(r3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0xedb, 0x4)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000180)=0x221a, 0x4)
close_range(r7, 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0x28, 0x2, 0x4}, @fd={0x66642a85, 0x0, r5}, @fda={0x66646185, 0x0, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

94.895283ms ago: executing program 4 (id=924):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x40000100000200)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0) (async, rerun: 64)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0xc0180, 0x0) (async, rerun: 64)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0xa8ca3411d3c2600c, 0x12, r0, 0x22fb5000)
pipe2$9p(0x0, 0x0)

94.028073ms ago: executing program 1 (id=925):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x10}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x807, 0x83, 0x6, 0xfffa}, 0x2000001d, [0x8000, 0xc95a, 0x12, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x49, 0x39cc191b, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x4, 0x8, 0x2, 0x4, 0x3c5b, 0x90, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x2, 0x4c74, 0x80000000, 0x242, 0x0, 0xe, 0x1000, 0x71, 0x7, 0x7, 0x1, 0x7, 0x0, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x0, 0x8, 0x0, 0x5, 0x0, 0x5, 0x6, 0xb, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x8000012d, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcd, 0xe, 0x9, 0x2bf, 0x6c9, 0x8, 0xfffffffc, 0x3, 0x0, 0x7, 0xeb, 0x5573, 0xe, 0x316, 0x78, 0xea4, 0x0, 0xda7a, 0x4, 0x8000, 0x2009, 0x400, 0x401, 0x6, 0x7, 0x4, 0x5, 0x5, 0x5f2e, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x0, 0x6, 0x7, 0x8000, 0x0, 0xfe000000, 0xffff, 0x2, 0x7f, 0x5, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x142, 0x2], [0x7, 0x3, 0x0, 0x4, 0xfffffffe, 0x9, 0x8d2, 0x8, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x20004, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x401, 0x3, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x3, 0xd, 0x4, 0x6d01, 0x5, 0x9, 0x800000, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x5, 0x5, 0x5, 0xac8, 0x7, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xffff, 0x3, 0x4, 0x1c, 0x120000, 0x3, 0x3, 0xa2ed, 0x404, 0x25], [0x9, 0xbb31, 0x296, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x53f53814, 0x0, 0xa, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x207fff, 0xffff, 0x2, 0x2, 0x5, 0x1, 0x2, 0x148, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0x7, 0xfffff000, 0xffff, 0x3, 0x7e, 0x20100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x50080, 0x5, 0x8, 0x1000, 0xa1f, 0xc, 0x7, 0x1, 0x6c1b, 0x8000, 0x4, 0x5, 0xb1e, 0x9, 0x200, 0xffff3441, 0x7]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r4 = socket$tipc(0x1e, 0x5, 0x0)
syz_open_dev$rtc(&(0x7f0000000080), 0x9, 0x80)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff})
fstat(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
setreuid(r6, r6)
ioprio_set$uid(0x3, r6, 0x4000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff})
fstat(r7, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
setreuid(0x0, r8)
lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500))
prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0)
memfd_create(&(0x7f0000000740)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c\xfa\xb4q\xbb\x7fN\xd1\r%;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\x12?\xc7zL\x01\r-\x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc\xbe\xb6\xa7w\x9d\xf1\xe5V\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca', 0x8)
getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000580)={{{@in6=@mcast2, @in6=@dev}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000680)=0xe8)

50.240666ms ago: executing program 4 (id=926):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000200)=[@enter_looper], 0x50, 0x0, &(0x7f00000004c0)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=@newsa={0x158, 0x10, 0x633, 0x200, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@loopback, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x33}, {@in6=@mcast1, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x1fe, 0x0, 0x2, 0x2dcd, 0x8, 0x0, 0x400000, 0x8000}, {}, {0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd25, 0x70bd29, 0x70bd2d, 0x70bd26, 0x10, [0x7ff]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x20008000}, 0x4048040)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x58, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x8, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @free_buffer={0x40086303, r1}], 0x0, 0x0, 0x0})

49.786677ms ago: executing program 1 (id=927):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x981941, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0xdf, 0x0, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

48.635796ms ago: executing program 4 (id=928):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x2a, @mcast1, 0x8}, 0x1c)
readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/72, 0x48}, {0x0}], 0x2)

47.116747ms ago: executing program 4 (id=929):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
write$binfmt_elf32(r2, &(0x7f00000014c0)=ANY=[], 0x46b)
r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000180))
sendmmsg$inet(r2, &(0x7f0000000f40)=[{{0x0, 0xfffffffffffffdeb, &(0x7f0000000500), 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000100)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xfffffffffffffffd)
r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
write$vga_arbiter(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='decodes mem'], 0xc)
unshare(0x22020600)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f00000001c0)=0x1)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000140)={&(0x7f0000000480)=""/254, 0xfe, 0x400, 0x2})
close_range(r1, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)

19.771189ms ago: executing program 1 (id=930):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000) (async, rerun: 64)
futex(&(0x7f0000001cc0), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x8ffffff8)
renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000000)=0x1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async)
r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0)
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000080)=0x4)

0s ago: executing program 1 (id=931):
mmap(&(0x7f000047e000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x4000) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 32)
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 32)
socketpair(0xf, 0x3, 0xb83e, &(0x7f0000000040)) (async)
dup3(r0, 0xffffffffffffffff, 0x0) (async)
setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0xc, {{0xa, 0x4e23, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x10000000}}}, 0x88) (async)
epoll_create1(0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) (async)
munmap(&(0x7f000045e000/0x1000)=nil, 0x1000)
mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x0, &(0x7f0000721000/0x4000)=nil)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) (async)
listen(r1, 0x0) (async, rerun: 64)
r2 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 64)
stat(0x0, 0x0)
chown(0x0, 0x0, 0x0) (async)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) (async)
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) (async, rerun: 64)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) (rerun: 64)
vmsplice(r3, &(0x7f0000001540)=[{&(0x7f0000000280)="66f1a0241465214f95cd97412d4cb9f33c3290344ed84d3bc3285b00000000cfa0636aae206eb459c09e56e303eab54a3375bfb89b997d24623d847ad0868b68d9b4df4cfb08af69370fd390c0dcd5df2e507368c5efeaa1709a110a573b0897cb3f993da438f30d2ebadff9518915daa9229432a39e89a69532e05107f5e4dad153906a9ae79e", 0x87}, {&(0x7f0000000340)="d72ab9a257050762742682961b725619da1b6dcab4aa090089c85c14dd1171c599c1f4e4318adf6eca8bef86791de35332767471c01ee5d4cfb294536f2ea5fecc381a554948860e3df44f7a5179e8bdf40b3cdf22c66ad990c78fe1c9f6cea99042d091ab26823ec7566276cfcc4d584706b9c5f187a2ee8add5b415ba2d6879db7d1e86985386b1ab1958bf30bfa3e78a4734ff97a5e86f9e5347b970e", 0x9e}, {&(0x7f0000000180)="be13d97acf4a28723f604163c79dd03cd27f05c591ddb140deb7b5e425672b6aa93d0d3884bae56e8c2f5850b3e88f18971fb0b6c33e1605e9331775686e7d6f3b035497d3f8cbdb307e28796f694339cc8ff1c31d0ed55f45539a9cbba939ffa70f6395790cc824553454612b6dfe7b6fa17c150c5368", 0x77}, {&(0x7f0000000400)="b046044656f79e12813a443a112be118a578c1df46006aba0ddfb8c1f6fc429dc0393fbdb410eee54677df7025f7ead0bddee181849a89b6d3272fdaf9f4b1670de0ef6e4b206512826aa2fff0e9cc2137c1e0348162257e9970d4817f7d36ff50005bca2f230ced48ff420cb0c797b44d3d2673c2795a2527b231acdfdd66dbce00664e0df5aa3f0370fa294b616d750020", 0x92}, {&(0x7f00000015c0)="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", 0x1071}, {&(0x7f00000004c0)="0460326fb56140956c78c3b4c55086d0284c4e058605113666591d07cb9c9b89416bedcba9f76bbecaa592b1b315cab72c108aae0520e894af94cde37ba261d676520ff09a97dbeb838d4e1e64b176b692ae7e9e1dd1d2635e9956fa486f3ad3d0a70b80a52d712acbe4f93f7e9154f055eab7234c4f1e5c691cf1449100000000b58394c857bd2750be36bfbf90d918f9b8d4618f907166773025ba662a8e7f2eb4838a50150c07c2143f5bfde9546318c3050bd554ad839adbf037b646ea76e4a13ded164ed0e2bbc94d077bdf71624450f0d3d8ec531648734149641ef198a9073f8a6dd3cccf0b02890fc25f7dabf58b8a9a712b4a1d2dd30c12f817c16a777b53af453b1d635ea8e9df287c7648e35b56c41261d8785c64d77cf6648a2f3b9406734bbeffe799e8343dabb2c5994564d3f1a50ffbc4ad27ea2b0fe832eae24f29526e9dca2a854d532f0c70add18edf14bb585eada184d69ebdab7a84e6ddd3f1b8", 0x164}], 0x6, 0x4) (async, rerun: 32)
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) (async, rerun: 32)
sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x2}, 0xfffffffe}}, 0x10, 0x0}, 0x0) (async, rerun: 32)
close(r2) (async, rerun: 32)
r4 = accept4(r1, 0x0, 0x0, 0x80800)
getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000200)) (async, rerun: 64)
munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) (async, rerun: 64)
madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12)

kernel console output (not intermixed with test programs):



syzkaller
syzkaller login: [   12.096879][   T36] kauditd_printk_skb: 48 callbacks suppressed
[   12.096896][   T36] audit: type=1400 audit(1755749038.649:59): avc:  denied  { transition } for  pid=230 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   12.101014][   T36] audit: type=1400 audit(1755749038.649:60): avc:  denied  { noatsecure } for  pid=230 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   12.103726][   T36] audit: type=1400 audit(1755749038.659:61): avc:  denied  { write } for  pid=230 comm="sh" path="pipe:[2846]" dev="pipefs" ino=2846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1
[   12.106848][   T36] audit: type=1400 audit(1755749038.659:62): avc:  denied  { rlimitinh } for  pid=230 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[   12.109778][   T36] audit: type=1400 audit(1755749038.659:63): avc:  denied  { siginh } for  pid=230 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.1.208' (ED25519) to the list of known hosts.
[   19.844305][   T36] audit: type=1400 audit(1755749046.399:64): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   19.845325][  T281] cgroup: Unknown subsys name 'net'
[   19.847340][   T36] audit: type=1400 audit(1755749046.399:65): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   19.850991][   T36] audit: type=1400 audit(1755749046.399:66): avc:  denied  { unmount } for  pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   19.851128][  T281] cgroup: Unknown subsys name 'devices'
[   19.930648][  T281] cgroup: Unknown subsys name 'hugetlb'
[   19.936281][  T281] cgroup: Unknown subsys name 'rlimit'
[   20.128033][   T36] audit: type=1400 audit(1755749046.679:67): avc:  denied  { setattr } for  pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   20.151259][   T36] audit: type=1400 audit(1755749046.679:68): avc:  denied  { mounton } for  pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   20.158519][  T283] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   20.176168][   T36] audit: type=1400 audit(1755749046.679:69): avc:  denied  { mount } for  pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   20.206253][  T281] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   20.208136][   T36] audit: type=1400 audit(1755749046.749:70): avc:  denied  { relabelto } for  pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   20.242034][   T36] audit: type=1400 audit(1755749046.749:71): avc:  denied  { write } for  pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   20.267668][   T36] audit: type=1400 audit(1755749046.759:72): avc:  denied  { read } for  pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   20.293156][   T36] audit: type=1400 audit(1755749046.759:73): avc:  denied  { open } for  pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   21.463406][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.475087][  T288] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.482220][  T288] bridge_slave_0: entered allmulticast mode
[   21.488637][  T288] bridge_slave_0: entered promiscuous mode
[   21.495093][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.502297][  T288] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.509419][  T288] bridge_slave_1: entered allmulticast mode
[   21.515560][  T288] bridge_slave_1: entered promiscuous mode
[   21.632964][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.640013][  T293] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.647049][  T293] bridge_slave_0: entered allmulticast mode
[   21.653281][  T293] bridge_slave_0: entered promiscuous mode
[   21.660690][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.667712][  T293] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.674795][  T293] bridge_slave_1: entered allmulticast mode
[   21.681040][  T293] bridge_slave_1: entered promiscuous mode
[   21.698134][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.705185][  T294] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.712280][  T294] bridge_slave_0: entered allmulticast mode
[   21.718405][  T294] bridge_slave_0: entered promiscuous mode
[   21.724644][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.731670][  T294] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.738753][  T294] bridge_slave_1: entered allmulticast mode
[   21.744957][  T294] bridge_slave_1: entered promiscuous mode
[   21.788127][  T295] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.795237][  T295] bridge0: port 1(bridge_slave_0) entered disabled state
[   21.802601][  T295] bridge_slave_0: entered allmulticast mode
[   21.808987][  T295] bridge_slave_0: entered promiscuous mode
[   21.815944][  T295] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.823057][  T295] bridge0: port 2(bridge_slave_1) entered disabled state
[   21.830138][  T295] bridge_slave_1: entered allmulticast mode
[   21.836236][  T295] bridge_slave_1: entered promiscuous mode
[   21.864056][  T288] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.871214][  T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.878480][  T288] bridge0: port 1(bridge_slave_0) entered blocking state
[   21.885533][  T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[   21.979780][  T293] bridge0: port 2(bridge_slave_1) entered blocking state
[   21.986824][  T293] bridge0: port 2(bridge_slave_1) entered forwarding state
[   21.994096][  T293] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.001127][  T293] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.011122][  T294] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.018137][  T294] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.025393][  T294] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.032427][  T294] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.043957][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.051185][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.058557][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.065780][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.073024][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   22.080236][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   22.100310][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.107346][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.114981][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.122196][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.159771][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.166815][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.174311][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.181572][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.208724][  T288] veth0_vlan: entered promiscuous mode
[   22.219688][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.226716][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.235134][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   22.242174][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   22.250040][  T290] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.257048][  T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.265851][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   22.272888][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   22.286331][  T288] veth1_macvtap: entered promiscuous mode
[   22.326435][  T294] veth0_vlan: entered promiscuous mode
[   22.342754][  T288] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   22.343064][  T295] veth0_vlan: entered promiscuous mode
[   22.375862][  T293] veth0_vlan: entered promiscuous mode
[   22.385184][  T295] veth1_macvtap: entered promiscuous mode
[   22.394415][  T294] veth1_macvtap: entered promiscuous mode
[   22.414045][  T293] veth1_macvtap: entered promiscuous mode
[   22.482637][  T338] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   22.498296][  T343] fuse: Unknown parameter 'Yd'
[   22.524078][  T355] FAT-fs (rnullb0): bogus number of reserved sectors
[   22.531752][  T355] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[   22.563300][  T359] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:2
[   22.563767][  T359] rust_binder: Error while translating object.
[   22.597122][  T364] SELinux: security_context_str_to_sid () failed with errno=-22
[   22.611710][  T359] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   22.611745][  T359] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:2
[   22.621928][  T367] rust_binder: Error in use_page_slow: ESRCH
[   22.640971][  T367] rust_binder: use_range failure ESRCH
[   22.649761][  T367] rust_binder: Failed to allocate buffer. len:4248, is_oneway:false
[   22.650493][  T376] rust_binder: Write failure EFAULT in pid:18
[   22.663229][  T367] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   22.663252][  T367] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:9
[   22.672514][  T378] Zero length message leads to an empty skb
[   22.714005][  T384] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:19
[   22.761628][  T381] SELinux: failed to load policy
[   22.889729][  T402] binder: Unknown parameter 'fscontext?}'
[   22.960396][  T405] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   22.962978][  T412] rust_binder: 407 RLIMIT_NICE not set
[   22.969905][  T411] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   23.294984][  T423] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   23.295017][  T423] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:18
[   23.820638][  T445] rust_binder: 33: no such ref 0
[   23.834764][  T445] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:33
[   23.918872][   T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   24.079882][   T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   24.090831][   T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   24.100843][   T45] usb 3-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00
[   24.109976][   T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   24.118951][   T45] usb 3-1: config 0 descriptor??
[   24.177470][  T329] rust_binder: 0: removing orphan mapping 0:24
[   24.186635][  T329] rust_binder: 0: removing orphan mapping 24:1120
[   24.330199][   T45] usb 3-1: string descriptor 0 read error: -71
[   24.353714][   T45] usbhid 3-1:0.0: can't add hid device: -71
[   24.360113][   T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   24.372980][   T45] usb 3-1: USB disconnect, device number 2
[   24.686812][  T463] rust_binder: Error while translating object.
[   24.686846][  T463] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   24.693267][  T463] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:41
[   24.717051][  T465] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   24.734627][  T465] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[   24.743367][  T465] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[   24.751455][  T465] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[   24.761175][  T465] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   24.795524][  T469] fuse: Unknown parameter 'rootmod'
[   24.856590][   T36] kauditd_printk_skb: 161 callbacks suppressed
[   24.856608][   T36] audit: type=1400 audit(1755749051.409:235): avc:  denied  { create } for  pid=473 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   24.882156][   T36] audit: type=1400 audit(1755749051.409:236): avc:  denied  { write } for  pid=473 comm="syz.0.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   24.904862][  T482] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[   24.912171][  T482] rust_binder: Write failure EINVAL in pid:37
[   24.928896][   T36] audit: type=1400 audit(1755749051.489:237): avc:  denied  { setopt } for  pid=483 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   24.954473][   T36] audit: type=1400 audit(1755749051.489:238): avc:  denied  { mounton } for  pid=483 comm="syz.2.45" path="/11/file0" dev="tmpfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   24.976800][   T36] audit: type=1400 audit(1755749051.489:239): avc:  denied  { unmount } for  pid=483 comm="syz.2.45" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[   25.008159][   T36] audit: type=1400 audit(1755749051.559:240): avc:  denied  { execute } for  pid=486 comm="syz.0.46" path="/15/cpu.stat" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   25.030992][   T36] audit: type=1400 audit(1755749051.569:241): avc:  denied  { bind } for  pid=486 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   25.058887][   T36] audit: type=1400 audit(1755749051.579:242): avc:  denied  { create } for  pid=486 comm="syz.0.46" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   25.089832][   T36] audit: type=1400 audit(1755749051.579:243): avc:  denied  { ioctl } for  pid=486 comm="syz.0.46" path="socket:[4536]" dev="sockfs" ino=4536 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   25.120498][  T496] rust_binder: 494 RLIMIT_NICE not set
[   25.128733][   T36] audit: type=1400 audit(1755749051.679:244): avc:  denied  { read write } for  pid=490 comm="syz.2.48" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[   25.158216][   T45] rust_binder: 0: removing orphan mapping 0:1192
[   25.190112][  T503] process 'syz.2.51' launched './file0' with NULL argv: empty string added
[   25.588735][   T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   25.718755][   T45] usb 1-1: device descriptor read/64, error -71
[   25.958724][   T45] usb 1-1: device descriptor read/64, error -71
[   26.098138][  T519] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   26.180702][  T533] syzkaller0: entered promiscuous mode
[   26.186176][  T533] syzkaller0: entered allmulticast mode
[   26.192624][   T46] syzkaller0: tun_net_xmit 48
[   26.195162][  T533] syzkaller0: create flow: hash 4210878732 index 1
[   26.198843][   T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   26.249538][  T533] syzkaller0 (unregistered): delete flow: hash 4210878732 index 0
[   26.268087][  T537] netlink: 16 bytes leftover after parsing attributes in process `syz.1.62'.
[   26.277664][  T537] netlink: 17 bytes leftover after parsing attributes in process `syz.1.62'.
[   26.286776][  T537] tipc: Invalid UDP bearer configuration
[   26.286796][  T537] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   26.302373][  T537] /dev/rnullb0: Can't open blockdev
[   26.319404][  T539] netlink: 'syz.1.63': attribute type 33 has an invalid length.
[   26.327173][  T539] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'.
[   26.338026][  T539] xt_NFQUEUE: number of total queues is 0
[   26.349025][   T45] usb 1-1: device descriptor read/64, error -71
[   26.397195][  T553] syzkaller0: entered promiscuous mode
[   26.402818][  T553] syzkaller0: entered allmulticast mode
[   26.408723][  T449] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   26.564810][  T449] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   26.575630][  T449] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   26.586477][  T449] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[   26.595505][   T45] usb 1-1: device descriptor read/64, error -71
[   26.601834][  T449] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   26.612832][  T449] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   26.623516][  T449] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   26.632565][  T449] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   26.640557][  T449] usb 3-1: Product: syz
[   26.644695][  T449] usb 3-1: Manufacturer: syz
[   26.650739][  T449] cdc_wdm 3-1:1.0: skipping garbage
[   26.655947][  T449] cdc_wdm 3-1:1.0: skipping garbage
[   26.662158][  T449] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[   26.668138][  T449] cdc_wdm 3-1:1.0: Unknown control protocol
[   26.718861][   T45] usb usb1-port1: attempt power cycle
[   26.852275][  T449] usb 3-1: USB disconnect, device number 3
[   26.888724][   T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   26.955187][  T561] cgroup: fork rejected by pids controller in /syz2
[   27.057064][   T10] usb 2-1: config 0 has no interfaces?
[   27.064083][   T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[   27.068879][   T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   27.075015][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   27.099673][   T45] usb 1-1: device descriptor read/8, error -71
[   27.110689][   T10] usb 2-1: Product: syz
[   27.116323][   T10] usb 2-1: Manufacturer: syz
[   27.129904][   T10] usb 2-1: SerialNumber: syz
[   27.141395][   T10] usb 2-1: config 0 descriptor??
[   27.250015][   T45] usb 1-1: device descriptor read/8, error -71
[   27.375975][   T10] usb 2-1: USB disconnect, device number 2
[   27.488785][   T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   27.509901][   T45] usb 1-1: device descriptor read/8, error -71
[   27.528281][  T634] mmap: syz.2.79 (634) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   27.639834][   T45] usb 1-1: device descriptor read/8, error -71
[   27.748873][   T45] usb usb1-port1: unable to enumerate USB device
[   27.846514][  T639] SELinux: failed to load policy
[   28.373643][  T641] =======================================================
[   28.373643][  T641] WARNING: The mand mount option has been deprecated and
[   28.373643][  T641]          and is ignored by this kernel. Remove the mand
[   28.373643][  T641]          option from the mount to silence this warning.
[   28.373643][  T641] =======================================================
[   28.532132][  T556] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   28.564672][  T556] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   28.579145][  T659] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:59
[   28.700021][  T676] binder: Unknown parameter 'context�'
[   28.742837][  T667] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   28.742868][  T667] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:130
[   28.753093][  T686] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   28.814550][  T694] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 4248, size: 18446744073709551560)
[   28.821096][  T694] rust_binder: Error while translating object.
[   28.833939][  T694] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   28.840459][  T694] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:65
[   28.903973][  T696] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   28.913147][  T696] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:75
[   28.988773][  T556] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   29.151345][  T556] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[   29.160611][  T556] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   29.172023][  T556] usb 3-1: Product: syz
[   29.176227][  T556] usb 3-1: Manufacturer: syz
[   29.180877][  T556] usb 3-1: SerialNumber: syz
[   29.407045][  T710] netlink: 393 bytes leftover after parsing attributes in process `syz.3.103'.
[   29.673997][  T719] binder: Bad value for 'defcontext'
[   29.719706][  T723] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   29.720751][  T723] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   29.727253][  T723] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:77
[   29.758784][   T64] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   29.908560][  T734] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[   29.908582][  T734] rust_binder: Read failure Err(EFAULT) in pid:88
[   29.918720][   T64] usb 4-1: Using ep0 maxpacket: 16
[   29.931432][   T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   29.942530][   T64] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1503, setting to 1024
[   29.953785][   T64] usb 4-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00
[   29.954709][   T36] kauditd_printk_skb: 65 callbacks suppressed
[   29.954723][   T36] audit: type=1400 audit(1755749056.519:310): avc:  denied  { setopt } for  pid=735 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   29.963010][   T64] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   29.969095][   T36] audit: type=1400 audit(1755749056.519:311): avc:  denied  { bind } for  pid=735 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   29.989217][   T64] usb 4-1: config 0 descriptor??
[   30.007617][   T36] audit: type=1400 audit(1755749056.549:312): avc:  denied  { shutdown } for  pid=735 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   30.016016][  T712] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   30.248999][  T712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   30.257550][  T712] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   30.467125][   T64] kye 0003:0458:0153.0002: unknown main item tag 0x0
[   30.473892][   T64] kye 0003:0458:0153.0002: unknown main item tag 0x1
[   30.480594][   T64] kye 0003:0458:0153.0002: unknown main item tag 0x7
[   30.487825][   T64] kye 0003:0458:0153.0002: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.3-1/input0
[   30.557847][  T740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   30.566520][  T740] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   30.673349][   T36] audit: type=1400 audit(1755749057.229:313): avc:  denied  { block_suspend } for  pid=711 comm="syz.3.104" capability=36  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   30.673472][  T712] tmpfs: Unknown parameter 'index'
[   30.704494][   T45] usb 4-1: USB disconnect, device number 2
[   30.788719][    T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   30.939814][    T9] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 223, changing to 11
[   30.951044][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[   30.957655][    T9] usb 1-1: New USB device found, idVendor=056a, idProduct=030e, bcdDevice= 0.00
[   30.966725][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   30.975228][    T9] usb 1-1: config 0 descriptor??
[   31.048837][  T556] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   31.200527][  T556] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[   31.209324][  T556] usb 2-1: config 1 has an invalid descriptor of length 248, skipping remainder of the config
[   31.215387][   T36] audit: type=1400 audit(1755749057.769:314): avc:  denied  { unmount } for  pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   31.219645][  T556] usb 2-1: config 1 interface 0 altsetting 181 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   31.252433][  T556] usb 2-1: config 1 interface 0 has no altsetting 0
[   31.265590][  T556] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   31.274757][  T556] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   31.282794][  T556] usb 2-1: Product: ˝憒㑆ఠ㷆乖䢋듖略鲈䘈苬㿓鈓ꊐݜㄿ↦裌莡ꉳ咆纥㉸從ழ讧걿⨔亓뉭얄슀葋䤝빗馿㞘톷注栴享◗◧報ꓨ莏藷⢞덥ﯕ좢떸枱嘯떦摵﹧겥鈐ᜇ䤬漳
[   31.304341][  T556] usb 2-1: SerialNumber: syz
[   31.355668][   T46] bridge_slave_1: left allmulticast mode
[   31.361446][   T46] bridge_slave_1: left promiscuous mode
[   31.367140][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.375160][   T46] bridge_slave_0: left allmulticast mode
[   31.380945][   T46] bridge_slave_0: left promiscuous mode
[   31.391104][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.406946][  T740] rust_binder: 92: no such ref 0
[   31.419175][  T740] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   31.466502][   T36] audit: type=1400 audit(1755749058.019:315): avc:  denied  { mounton } for  pid=752 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[   31.487861][  T741] rust_binder: 92: no such ref 0
[   31.523713][   T36] audit: type=1400 audit(1755749058.079:316): avc:  denied  { create } for  pid=749 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   31.543120][   T36] audit: type=1400 audit(1755749058.099:317): avc:  denied  { checkpoint_restore } for  pid=749 comm="syz.1.118" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   31.565954][  T556] cdc_ether 2-1:1.0: skipping garbage
[   31.571413][  T556] cdc_ether 2-1:1.0: skipping garbage
[   31.577017][  T556] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[   31.588290][  T556] usb 2-1: USB disconnect, device number 3
[   31.597266][   T46] veth1_macvtap: left promiscuous mode
[   31.602864][   T64] usb 3-1: USB disconnect, device number 4
[   31.603227][   T46] veth0_vlan: left promiscuous mode
[   31.660237][  T752] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.667447][  T752] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.674823][  T752] bridge_slave_0: entered allmulticast mode
[   31.681461][  T759] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   31.681490][  T759] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:133
[   31.681557][  T752] bridge_slave_0: entered promiscuous mode
[   31.706793][  T752] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.714143][  T752] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.722147][  T752] bridge_slave_1: entered allmulticast mode
[   31.729238][  T752] bridge_slave_1: entered promiscuous mode
[   31.795261][  T290] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.802402][  T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.811713][  T389] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.818786][  T389] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.844764][  T752] veth0_vlan: entered promiscuous mode
[   31.856427][  T752] veth1_macvtap: entered promiscuous mode
[   31.874875][   T36] audit: type=1400 audit(1755749058.429:318): avc:  denied  { mounton } for  pid=752 comm="syz-executor" path="/root/syzkaller.P03uoy/syz-tmp" dev="sda1" ino=2043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   31.899552][   T36] audit: type=1400 audit(1755749058.429:319): avc:  denied  { mount } for  pid=752 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   32.368784][  T456] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   32.378744][   T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   32.508757][   T10] usb 2-1: device descriptor read/64, error -71
[   32.518758][  T456] usb 5-1: Using ep0 maxpacket: 16
[   32.525815][  T456] usb 5-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   32.538715][  T456] usb 5-1: config 1 interface 0 has no altsetting 0
[   32.546858][  T456] usb 5-1: New USB device found, idVendor=0c70, idProduct=f011, bcdDevice= 0.40
[   32.556249][  T456] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   32.564397][  T456] usb 5-1: Product: syz
[   32.568572][  T456] usb 5-1: Manufacturer: syz
[   32.573202][  T456] usb 5-1: SerialNumber: syz
[   32.748765][   T10] usb 2-1: device descriptor read/64, error -71
[   32.780595][  T774] rust_binder: Failed to allocate buffer. len:144, is_oneway:false
[   32.785272][  T456] usbhid 5-1:1.0: can't add hid device: -71
[   32.799609][  T456] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[   32.808699][  T456] usb 5-1: USB disconnect, device number 2
[   33.008869][   T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   33.138779][   T10] usb 2-1: device descriptor read/64, error -71
[   33.179420][  T796] /dev/rnullb0: Can't open blockdev
[   33.199433][  T798] netlink: 'syz.2.133': attribute type 4 has an invalid length.
[   33.209302][  T798] netlink: 'syz.2.133': attribute type 4 has an invalid length.
[   33.388781][   T10] usb 2-1: device descriptor read/64, error -71
[   33.411494][  T815] netlink: 'syz.2.139': attribute type 4 has an invalid length.
[   33.419543][  T815] rust_binder: Write failure EFAULT in pid:167
[   33.508800][   T10] usb usb2-port1: attempt power cycle
[   33.541759][  T829] kvm: MONITOR instruction emulated as NOP!
[   33.543262][  T456] rust_binder: 818: removing orphan mapping 0:24
[   33.562473][  T456] rust_binder: 0: removing orphan mapping 24:1024
[   33.568716][    T9] usbhid 1-1:0.0: can't add hid device: -71
[   33.575894][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   33.584975][    T9] usb 1-1: USB disconnect, device number 6
[   33.868927][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   33.889756][   T10] usb 2-1: device descriptor read/8, error -71
[   33.918772][  T456] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   34.008732][    T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   34.029649][   T10] usb 2-1: device descriptor read/8, error -71
[   34.048714][  T456] usb 3-1: device descriptor read/64, error -71
[   34.138785][    T9] usb 5-1: device descriptor read/64, error -71
[   34.268732][   T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[   34.288748][  T456] usb 3-1: device descriptor read/64, error -71
[   34.289792][   T10] usb 2-1: device descriptor read/8, error -71
[   34.378771][    T9] usb 5-1: device descriptor read/64, error -71
[   34.429712][   T10] usb 2-1: device descriptor read/8, error -71
[   34.528731][  T456] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   34.538875][   T10] usb usb2-port1: unable to enumerate USB device
[   34.618743][    T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   34.658736][  T456] usb 3-1: device descriptor read/64, error -71
[   34.758793][    T9] usb 5-1: device descriptor read/64, error -71
[   34.898776][  T456] usb 3-1: device descriptor read/64, error -71
[   34.998745][    T9] usb 5-1: device descriptor read/64, error -71
[   35.008861][  T456] usb usb3-port1: attempt power cycle
[   35.108855][    T9] usb usb5-port1: attempt power cycle
[   35.185029][   T36] kauditd_printk_skb: 16 callbacks suppressed
[   35.185045][   T36] audit: type=1400 audit(1755749061.739:336): avc:  denied  { sqpoll } for  pid=854 comm="syz.1.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   35.270830][  T860] rust_binder: Write failure EFAULT in pid:106
[   35.348728][  T456] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   35.380702][  T456] usb 3-1: device descriptor read/8, error -71
[   35.448743][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[   35.461071][  T868] rust_binder: 115: no such ref 0
[   35.466113][  T868] rust_binder: Write failure EINVAL in pid:115
[   35.467181][  T868] rust_binder: Write failure EFAULT in pid:115
[   35.474516][    T9] usb 5-1: device descriptor read/8, error -71
[   35.509717][  T456] usb 3-1: device descriptor read/8, error -71
[   35.609838][    T9] usb 5-1: device descriptor read/8, error -71
[   35.748789][  T456] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   35.769818][  T456] usb 3-1: device descriptor read/8, error -71
[   35.848735][    T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[   35.869816][    T9] usb 5-1: device descriptor read/8, error -71
[   35.899945][  T456] usb 3-1: device descriptor read/8, error -71
[   36.002057][    T9] usb 5-1: device descriptor read/8, error -71
[   36.009765][  T456] usb usb3-port1: unable to enumerate USB device
[   36.027315][   T36] audit: type=1400 audit(1755749062.579:337): avc:  denied  { getopt } for  pid=877 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   36.077910][   T36] audit: type=1400 audit(1755749062.629:338): avc:  denied  { setattr } for  pid=877 comm="syz.1.161" name="secretmem" dev="secretmem" ino=6975 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   36.109005][    T9] usb usb5-port1: unable to enumerate USB device
[   36.639409][   T36] audit: type=1400 audit(1755749063.199:339): avc:  denied  { create } for  pid=888 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   36.659402][   T36] audit: type=1400 audit(1755749063.199:340): avc:  denied  { write } for  pid=888 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   36.680319][   T36] audit: type=1400 audit(1755749063.199:341): avc:  denied  { connect } for  pid=888 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   36.700322][   T36] audit: type=1400 audit(1755749063.199:342): avc:  denied  { write } for  pid=888 comm="syz.2.164" path="socket:[6986]" dev="sockfs" ino=6986 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   36.802345][   T36] audit: type=1400 audit(1755749063.359:343): avc:  denied  { setopt } for  pid=894 comm="syz.4.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   36.826800][  T897] netlink: 'syz.2.168': attribute type 4 has an invalid length.
[   36.834803][  T897] rust_binder: Error while translating object.
[   36.834833][  T897] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   36.841032][  T897] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:186
[   36.956878][   T36] audit: type=1400 audit(1755749063.509:344): avc:  denied  { setattr } for  pid=910 comm="syz.2.173" path="/dev/ttyS3" dev="devtmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1
[   36.998220][    T9] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[   37.116426][  T920] fuseblk: Unknown parameter 'gr�up_id'
[   37.133877][   T36] audit: type=1400 audit(1755749319.687:345): avc:  denied  { ioctl } for  pid=924 comm="syz.2.178" path="/dev/input/event1" dev="devtmpfs" ino=193 ioctlcmd=0x457f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[   37.179747][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   37.190007][    T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[   37.201986][    T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x18, changing to 0x8
[   37.213588][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 10
[   37.225041][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[   37.234886][    T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[   37.254202][    T9] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[   37.263479][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   37.271622][    T9] usb 1-1: Product: syz
[   37.275909][    T9] usb 1-1: Manufacturer: syz
[   37.280702][    T9] usb 1-1: SerialNumber: syz
[   37.287043][    T9] usb 1-1: config 0 descriptor??
[   37.325611][  T935] 9pnet_virtio: no channels available for device ./file0
[   37.496884][  T941] sit0: entered promiscuous mode
[   37.516022][  T941] netlink: 'syz.2.182': attribute type 1 has an invalid length.
[   37.523973][  T941] netlink: 1 bytes leftover after parsing attributes in process `syz.2.182'.
[   37.620669][   T64] usb 1-1: USB disconnect, device number 7
[   38.222004][  T990] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[   38.235924][  T990] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:42
[   38.259200][  T994] 9pnet_fd: Insufficient options for proto=fd
[   38.353587][ T1001] rust_binder: Error while translating object.
[   38.353637][ T1001] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   38.360144][ T1001] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:264
[   38.453993][ T1009] overlayfs: missing 'lowerdir'
[   38.611017][ T1020] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   38.675912][ T1039] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:142
[   39.178514][  T456] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[   39.339585][  T456] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   39.349751][  T456] usb 2-1: config 1 interface 0 has no altsetting 0
[   39.356686][  T456] usb 2-1: language id specifier not provided by device, defaulting to English
[   39.366784][  T456] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.40
[   39.375861][  T456] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   39.383865][  T456] usb 2-1: Product: syz
[   39.388020][  T456] usb 2-1: Manufacturer: ޿ṕ즒꡴婵皰磈㠁缥鉓堫췟芄嶦ꓡ᧼啠㌂座∺티먌ꭖ쓻╝㈺﵁債隥굄糶䵎孜
[   39.401163][  T456] usb 2-1: SerialNumber: syz
[   39.660843][ T1076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   39.669387][ T1076] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   39.815890][  T456] usbhid 2-1:1.0: couldn't find an input interrupt endpoint
[   39.823937][  T456] usb 2-1: USB disconnect, device number 8
[   56.274636][   T36] kauditd_printk_skb: 10 callbacks suppressed
[   56.274653][   T36] audit: type=1400 audit(1755749338.829:356): avc:  denied  { map } for  pid=1087 comm="syz.2.217" path="socket:[8514]" dev="sockfs" ino=8514 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1
[   56.328568][ T1097] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   56.328603][ T1097] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:272
[   56.358505][ T1102] SELinux:  Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped).
[   56.398222][ T1100] fuse: Unknown parameter 'rootmode-00000000000I�0000040000'
[   56.402488][   T36] audit: type=1400 audit(1755749338.949:357): avc:  denied  { relabelto } for  pid=1101 comm="syz.2.221" name="cgroup" dev="tmpfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0"
[   56.414131][ T1102] rust_binder: 274: no such ref 0
[   56.432524][   T36] audit: type=1400 audit(1755749338.949:358): avc:  denied  { associate } for  pid=1101 comm="syz.2.221" name="cgroup" dev="tmpfs" ino=378 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_var_log_t:s0"
[   56.494464][ T1107] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   56.494496][ T1107] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:66
[   56.519147][  T449] rust_binder: 1111: removing orphan mapping 0:1048
[   56.536995][ T1117] tipc: Started in network mode
[   56.541947][ T1117] tipc: Node identity ac141413, cluster identity 4711
[   56.548884][ T1117] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   56.557412][ T1118] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[   56.583266][ T1122] rust_binder: 80: no such ref 0
[   56.588385][ T1122] rust_binder: 80: no such ref 2
[   56.594734][   T36] audit: type=1400 audit(1755749339.149:359): avc:  denied  { read } for  pid=1121 comm="syz.4.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   56.746395][   T64] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   56.906350][   T64] usb 3-1: Using ep0 maxpacket: 32
[   56.912681][   T64] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[   56.921221][   T64] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   56.929850][   T64] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[   56.938835][   T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   56.948484][   T64] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   56.958148][   T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   56.967914][   T64] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   56.977688][   T64] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   56.990780][   T64] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   56.999839][   T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.008410][   T64] usb 3-1: config 0 descriptor??
[   57.124649][ T1132] /dev/rnullb0: Can't open blockdev
[   57.215470][   T64] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   57.231255][   T64] usb 3-1: USB disconnect, device number 9
[   57.243118][   T64] usblp0: removed
[   57.257893][   T36] audit: type=1400 audit(1755749339.819:360): avc:  denied  { remount } for  pid=1147 comm="syz.1.233" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   57.446401][   T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   57.456864][ T1156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.466200][ T1156] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.546324][    T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   57.596305][   T10] usb 1-1: Using ep0 maxpacket: 16
[   57.602432][   T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   57.612652][   T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   57.622925][   T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   57.632260][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   57.640337][   T10] usb 1-1: Product: syz
[   57.644516][   T10] usb 1-1: Manufacturer: syz
[   57.649218][   T10] usb 1-1: SerialNumber: syz
[   57.666290][  T449] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   57.706636][   T64] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[   57.714191][    T9] usb 2-1: Using ep0 maxpacket: 32
[   57.720479][    T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[   57.728607][    T9] usb 2-1: config 0 has no interface number 0
[   57.736073][    T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   57.745142][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   57.753150][    T9] usb 2-1: Product: syz
[   57.757320][    T9] usb 2-1: Manufacturer: syz
[   57.761916][    T9] usb 2-1: SerialNumber: syz
[   57.767404][    T9] usb 2-1: config 0 descriptor??
[   57.773227][    T9] smsc95xx v2.0.0
[   57.816243][  T449] usb 3-1: Using ep0 maxpacket: 32
[   57.822473][  T449] usb 3-1: config index 0 descriptor too short (expected 29220, got 36)
[   57.831006][  T449] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   57.839648][  T449] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81
[   57.848651][  T449] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   57.858366][  T449] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   57.868210][  T449] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   57.876225][   T64] usb 5-1: Using ep0 maxpacket: 32
[   57.878001][  T449] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   57.884543][   T64] usb 5-1: config 4 has an invalid interface number: 228 but max is 0
[   57.892796][  T449] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[   57.892837][  T449] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   57.901360][   T64] usb 5-1: config 4 has no interface number 0
[   57.913959][  T449] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.915051][  T449] usb 3-1: config 0 descriptor??
[   57.923406][   T64] usb 5-1: config 4 interface 228 altsetting 68 endpoint 0x7 has invalid wMaxPacketSize 0
[   57.952021][   T64] usb 5-1: config 4 interface 228 has no altsetting 0
[   57.960328][   T64] usb 5-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8
[   57.969423][   T64] usb 5-1: New USB device strings: Mfr=1, Product=25, SerialNumber=3
[   57.978140][   T64] usb 5-1: Product: syz
[   57.982319][   T64] usb 5-1: Manufacturer: syz
[   57.986954][   T64] usb 5-1: SerialNumber: syz
[   58.136549][  T449] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[   58.178141][    T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61
[   58.188923][    T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   58.342994][   T36] audit: type=1400 audit(1755749340.899:361): avc:  denied  { read write } for  pid=1101 comm="syz.2.221" name="lp0" dev="devtmpfs" ino=472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   58.366464][   T36] audit: type=1400 audit(1755749340.899:362): avc:  denied  { open } for  pid=1101 comm="syz.2.221" path="/dev/usb/lp0" dev="devtmpfs" ino=472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1
[   58.395164][ T1159] rust_binder: 274: no such ref 0
[   58.401376][   T10] usb 1-1: 0:2 : does not exist
[   58.406378][   T36] audit: type=1400 audit(1755749340.949:363): avc:  denied  { nlmsg_read } for  pid=1155 comm="syz.4.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   58.427126][   T36] audit: type=1400 audit(1755749340.959:364): avc:  denied  { mount } for  pid=1101 comm="syz.2.221" name="/" dev="configfs" ino=2456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[   58.427908][   T10] usb 1-1: unit 6 not found!
[   58.460865][   T64] usb 5-1: USB disconnect, device number 7
[   58.470904][ T1161] udevd[1161]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:4.228/sound/card1/controlC1/../uevent} for writing: No such file or directory
[   58.475014][   T10] usb 1-1: USB disconnect, device number 8
[   58.496363][ T1160] udevd[1160]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   58.561208][ T1163] syzkaller0: entered promiscuous mode
[   58.566773][ T1163] syzkaller0: entered allmulticast mode
[   58.572800][   T46] syzkaller0: tun_net_xmit 48
[   58.589734][ T1166] incfs: ino conflict with backing FS 1
[   58.595700][ T1166] incfs: ino conflict with backing FS 2
[   58.596188][ T1152] capability: warning: `syz.1.235' uses deprecated v2 capabilities in a way that may be insecure
[   58.624171][    T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   58.636124][    T9] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71
[   58.645538][    T9] usb 2-1: USB disconnect, device number 9
[   59.136876][ T1174] SELinux: security_context_str_to_sid (sytem_u�Gй�:��) failed with errno=-22
[   59.246097][  T456] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[   59.386053][    T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   59.397104][  T456] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   59.407309][  T456] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   59.424210][  T449] usb 3-1: USB disconnect, device number 10
[   59.434501][  T456] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   59.449175][   T36] audit: type=1400 audit(1755749341.999:365): avc:  denied  { unlink } for  pid=294 comm="syz-executor" name="cgroup" dev="tmpfs" ino=378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_var_log_t:s0"
[   59.476690][  T456] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.484882][  T456] usb 5-1: Product: syz
[   59.489966][  T449] usblp0: removed
[   59.495086][  T456] usb 5-1: Manufacturer: syz
[   59.500115][  T456] usb 5-1: SerialNumber: syz
[   59.506576][  T456] cdc_mbim 5-1:1.0: skipping garbage
[   59.531536][ T1184] usb usb1: check_ctrlrecip: process 1184 (syz.0.246) requesting ep 01 but needs 81
[   59.548250][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   59.565963][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.574484][ T1187] rust_binder: 173: no such ref 0
[   59.585997][    T9] usb 2-1: Product: syz
[   59.596014][    T9] usb 2-1: Manufacturer: syz
[   59.604663][    T9] usb 2-1: SerialNumber: syz
[   59.609703][ T1181] binder: Bad value for 'stats'
[   59.619344][ T1191] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 352, limit: 1192, size: 18446744073709551443)
[   59.619366][ T1191] rust_binder: Error while translating object.
[   59.631796][ T1191] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   59.638259][ T1191] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:178
[   59.648063][ T1181] binder: Bad value for 'stats'
[   59.915976][  T449] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   60.065995][  T449] usb 3-1: Using ep0 maxpacket: 32
[   60.072171][  T449] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[   60.080401][  T449] usb 3-1: config 0 has no interface number 0
[   60.086535][  T449] usb 3-1: config 0 interface 184 has no altsetting 0
[   60.094719][  T449] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   60.103817][  T449] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.111957][  T449] usb 3-1: Product: syz
[   60.116152][  T449] usb 3-1: Manufacturer: syz
[   60.120751][  T449] usb 3-1: SerialNumber: syz
[   60.126021][  T449] usb 3-1: config 0 descriptor??
[   60.131787][  T449] smsc75xx v1.0.0
[   60.221556][    T9] cdc_ncm 2-1:1.0: failed to get mac address
[   60.229836][    T9] cdc_ncm 2-1:1.0: bind() failure
[   60.238394][    T9] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71
[   60.246649][    T9] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[   60.258193][    T9] usb 2-1: USB disconnect, device number 10
[   60.312623][ T1172] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   60.312659][ T1172] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:92
[   60.323202][ T1172] fuse: Unknown parameter 'gro'
[   60.456357][  T456] cdc_mbim 5-1:1.0: SET_NTB_FORMAT failed
[   60.494118][  T456] cdc_mbim 5-1:1.0: bind() failure
[   60.500256][  T456] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[   60.507261][  T456] cdc_ncm 5-1:1.1: bind() failure
[   60.513789][  T456] usb 5-1: USB disconnect, device number 8
[   60.772704][ T1218] /dev/rnullb0: Can't open blockdev
[   60.985657][  T456] rust_binder: 1171: removing orphan mapping 0:24
[   61.255826][   T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[   61.340629][  T449] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71
[   61.353735][  T449] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA
[   61.363420][  T449] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[   61.374234][  T449] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[   61.384048][  T449] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[   61.386066][   T10] usb 5-1: device descriptor read/64, error -71
[   61.394703][  T449] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[   61.410349][  T449] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[   61.423832][  T449] usb 3-1: USB disconnect, device number 11
[   61.655861][   T10] usb 5-1: device descriptor read/64, error -71
[   61.747643][ T1236] overlayfs: failed to clone upperpath
[   61.902618][   T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[   61.924192][   T36] kauditd_printk_skb: 8 callbacks suppressed
[   61.924209][   T36] audit: type=1400 audit(1755749344.480:374): avc:  denied  { bind } for  pid=1239 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   61.927071][ T1240] fuseblk: Unknown parameter '$++�P���'
[   61.930385][   T36] audit: type=1400 audit(1755749344.480:375): avc:  denied  { listen } for  pid=1239 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   61.952452][ T1240] batadv_slave_1: entered promiscuous mode
[   61.955525][   T36] audit: type=1400 audit(1755749344.480:376): avc:  denied  { write } for  pid=1239 comm="syz.2.265" path="socket:[8979]" dev="sockfs" ino=8979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   61.975855][ T1239] batadv_slave_1: left promiscuous mode
[   61.980867][   T36] audit: type=1400 audit(1755749344.480:377): avc:  denied  { accept } for  pid=1239 comm="syz.2.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[   62.035734][   T10] usb 5-1: device descriptor read/64, error -71
[   62.275773][   T10] usb 5-1: device descriptor read/64, error -71
[   62.303791][   T36] audit: type=1400 audit(1755749344.860:378): avc:  denied  { getopt } for  pid=1256 comm="syz.1.272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   62.332516][ T1260] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=1260 comm=syz.1.273
[   62.358808][ T1263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.276'.
[   62.385792][   T10] usb usb5-port1: attempt power cycle
[   62.410602][ T1265] /dev/rnullb0: Can't open blockdev
[   62.725687][   T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[   62.735744][    C0] syzkaller0: tun_net_xmit 48
[   62.746635][   T10] usb 5-1: device descriptor read/8, error -71
[   62.797972][ T1277] kvm: pic: non byte write
[   62.876788][   T10] usb 5-1: device descriptor read/8, error -71
[   62.919903][ T1284] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[   62.919931][ T1284] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:190
[   62.987837][   T36] audit: type=1400 audit(1755749345.550:379): avc:  denied  { read } for  pid=1291 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   63.041698][   T36] audit: type=1400 audit(1755749345.600:380): avc:  denied  { accept } for  pid=1291 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   63.115629][   T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[   63.136627][   T10] usb 5-1: device descriptor read/8, error -71
[   63.266750][   T10] usb 5-1: device descriptor read/8, error -71
[   63.375739][   T10] usb usb5-port1: unable to enumerate USB device
[   63.832359][   T36] audit: type=1400 audit(1755749346.390:381): avc:  denied  { mount } for  pid=1303 comm="syz.2.290" name="/" dev="pstore" ino=1330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[   63.879958][   T36] audit: type=1400 audit(1755749346.440:382): avc:  denied  { unmount } for  pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1
[   63.938321][  T389] bridge_slave_1: left allmulticast mode
[   63.944111][  T389] bridge_slave_1: left promiscuous mode
[   63.949913][  T389] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.957664][  T389] bridge_slave_0: left allmulticast mode
[   63.963314][  T389] bridge_slave_0: left promiscuous mode
[   63.969202][  T389] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.026828][ T1315] rust_binder: Error while translating object.
[   64.026873][ T1315] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   64.033246][ T1315] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:98
[   64.068063][  T389] veth1_macvtap: left promiscuous mode
[   64.082685][  T389] veth0_vlan: left promiscuous mode
[   64.168969][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.176050][ T1318] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.183134][ T1318] bridge_slave_0: entered allmulticast mode
[   64.189495][ T1318] bridge_slave_0: entered promiscuous mode
[   64.196046][ T1318] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.203126][ T1318] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.210238][ T1318] bridge_slave_1: entered allmulticast mode
[   64.217417][ T1318] bridge_slave_1: entered promiscuous mode
[   64.258216][ T1318] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.265281][ T1318] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.272577][ T1318] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.279619][ T1318] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.299885][  T859] bridge0: port 1(bridge_slave_0) entered disabled state
[   64.307407][  T859] bridge0: port 2(bridge_slave_1) entered disabled state
[   64.317026][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.324090][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.332983][ T1338] 9pnet_fd: Insufficient options for proto=fd
[   64.333807][  T859] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.346103][  T859] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.353932][   T36] audit: type=1400 audit(1755749346.900:383): avc:  denied  { setopt } for  pid=1337 comm="syz.4.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   64.393935][ T1318] veth0_vlan: entered promiscuous mode
[   64.404113][ T1318] veth1_macvtap: entered promiscuous mode
[   65.311962][ T1375] rust_binder: Got transaction with invalid offset.
[   65.312076][ T1375] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   65.319163][ T1375] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:122
[   65.391315][ T1388] kvm: user requested TSC rate below hardware speed
[   65.418619][ T1388] syzkaller0: entered promiscuous mode
[   65.424145][ T1388] syzkaller0: entered allmulticast mode
[   65.430298][  T859] syzkaller0: tun_net_xmit 48
[   65.625453][ T1403] rust_binder: Error while translating object.
[   65.625490][ T1403] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[   65.631872][ T1403] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:17
[   65.756778][ T1419] netlink: 2 bytes leftover after parsing attributes in process `syz.4.326'.
[   65.776198][ T1419] overlayfs: failed to resolve './file1': -2
[   65.879373][ T1426] overlayfs: failed to clone upperpath
[   66.497758][ T1450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   66.506514][ T1450] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   66.703513][ T1458] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:31
[   66.750165][ T1473] netlink: 132 bytes leftover after parsing attributes in process `syz.1.343'.
[   66.793267][ T1480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.346'.
[   66.803794][ T1480] overlayfs: failed to resolve './file0': -2
[   67.281053][ T1485] TCP: out of memory -- consider tuning tcp_mem
[   67.422617][ T1494] rust_binder: Write failure EFAULT in pid:37
[   67.487938][   T36] kauditd_printk_skb: 12 callbacks suppressed
[   67.487949][   T36] audit: type=1400 audit(1755749350.040:396): avc:  denied  { nlmsg_write } for  pid=1518 comm="syz.1.358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1
[   67.527407][   T36] audit: type=1400 audit(1755749350.040:397): avc:  denied  { audit_write } for  pid=1518 comm="syz.1.358" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[   67.552188][   T36] audit: type=1107 audit(1755749350.040:398): pid=1518 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   67.555225][   T36] audit: type=1400 audit(1755749350.110:399): avc:  denied  { getopt } for  pid=1526 comm="syz.5.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   67.678054][   T36] audit: type=1400 audit(1755749350.210:400): avc:  denied  { setopt } for  pid=1531 comm="syz.5.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[   67.726426][ T1535] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.364'.
[   67.746103][   T36] audit: type=1400 audit(1755749350.310:401): avc:  denied  { lock } for  pid=1534 comm="syz.4.364" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[   67.773121][ T1541] rust_binder: Write failure EFAULT in pid:50
[   67.784090][   T36] audit: type=1400 audit(1755749350.340:402): avc:  denied  { setopt } for  pid=1542 comm="syz.5.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[   67.784610][ T1543] netlink: 'syz.5.367': attribute type 16 has an invalid length.
[   67.817530][ T1543] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.367'.
[   67.827687][ T1544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1544 comm=syz.5.367
[   67.827707][ T1543] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1543 comm=syz.5.367
[   67.840123][ T1544] netlink: 168 bytes leftover after parsing attributes in process `syz.5.367'.
[   67.866740][ T1543] __vm_enough_memory: pid: 1543, comm: syz.5.367, bytes: 18014402804453376 not enough memory for the allocation
[   67.878737][ T1544] __vm_enough_memory: pid: 1544, comm: syz.5.367, bytes: 18014402804453376 not enough memory for the allocation
[   67.911337][ T1555] netlink: 44 bytes leftover after parsing attributes in process `syz.5.370'.
[   67.923641][ T1555] 9pnet_fd: Insufficient options for proto=fd
[   67.953990][ T1558] x_tables: unsorted underflow at hook 4
[   67.960240][   T36] audit: type=1400 audit(1755749350.520:403): avc:  denied  { create } for  pid=1557 comm="syz.5.371" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   67.987245][   T36] audit: type=1400 audit(1755749350.540:404): avc:  denied  { write } for  pid=1557 comm="syz.5.371" name="file2" dev="tmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   68.022012][ T1562] 9p: Unknown access argument : -22
[   68.025481][   T36] audit: type=1400 audit(1755749350.540:405): avc:  denied  { open } for  pid=1557 comm="syz.5.371" path="/20/file2" dev="tmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[   68.119636][ T1570] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   68.119950][ T1570] rust_binder: Read failure Err(EAGAIN) in pid:73
[   68.126859][ T1570] rust_binder: got new transaction with bad transaction stack
[   68.133537][ T1570] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:73
[   68.792757][ T1610] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   68.980916][ T1618] rust_binder: Write failure EFAULT in pid:195
[   68.994986][ T1620] rust_binder: Write failure EFAULT in pid:197
[   69.059653][ T1627] netlink: 64 bytes leftover after parsing attributes in process `syz.1.395'.
[   69.075270][ T1627] 9pnet_fd: Insufficient options for proto=fd
[   69.516991][ T1651] 9pnet_fd: Insufficient options for proto=fd
[   69.638647][ T1655] input: syz0 as /devices/virtual/input/input4
[   69.849192][ T1665] rust_binder: Write failure EINVAL in pid:202
[   69.889107][ T1670] rust_binder: Failed to vm_insert_page(35184388857856): vma_addr:35184388853760 i:1 err:EFAULT
[   69.895792][ T1670] rust_binder: Error in use_page_slow: EFAULT
[   69.906520][ T1670] rust_binder: use_range failure EFAULT
[   69.912738][ T1670] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false
[   69.918537][ T1670] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[   69.926743][ T1670] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:205
[   69.978026][ T1677] SELinux: security_context_str_to_sid () failed with errno=-22
[   70.074083][ T1688] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   70.377385][ T1707] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   70.613482][ T1719] batadv_slave_1: entered promiscuous mode
[   70.634682][  T449] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[   70.650114][ T1719] batadv_slave_1: left promiscuous mode
[   70.804770][  T449] usb 5-1: Using ep0 maxpacket: 16
[   70.815477][  T449] usb 5-1: config 0 has an invalid interface number: 235 but max is 6
[   70.827005][  T449] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 7
[   70.844645][  T449] usb 5-1: config 0 has no interface number 0
[   70.850767][  T449] usb 5-1: config 0 interface 235 altsetting 117 bulk endpoint 0x2 has invalid maxpacket 1023
[   70.861411][  T449] usb 5-1: config 0 interface 235 altsetting 117 has an endpoint descriptor with address 0xE2, changing to 0x82
[   70.873456][  T449] usb 5-1: config 0 interface 235 altsetting 117 endpoint 0x82 has an invalid bInterval 20, changing to 8
[   70.889872][  T449] usb 5-1: config 0 interface 235 altsetting 117 endpoint 0x82 has invalid maxpacket 33260, setting to 1024
[   70.901705][  T449] usb 5-1: config 0 interface 235 altsetting 117 has an invalid descriptor for endpoint zero, skipping
[   70.914288][ T1732] /dev/rnullb0: Can't open blockdev
[   70.919674][ T1733] /dev/rnullb0: Can't open blockdev
[   70.919726][  T449] usb 5-1: config 0 interface 235 altsetting 117 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[   70.943427][  T449] usb 5-1: config 0 interface 235 has no altsetting 0
[   70.952093][  T449] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=90.19
[   70.964305][ T1735] SELinux: failed to load policy
[   70.969864][  T449] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.984657][  T449] usb 5-1: Product: syz
[   70.988922][  T449] usb 5-1: Manufacturer: syz
[   70.993515][  T449] usb 5-1: SerialNumber: syz
[   71.020425][  T449] usb 5-1: config 0 descriptor??
[   71.034923][ T1707] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   71.214675][    C0] syzkaller0: tun_net_xmit 48
[   71.373869][ T1751] TCP: out of memory -- consider tuning tcp_mem
[   71.540362][ T1771] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[   71.595110][ T1769] syzkaller0: entered promiscuous mode
[   71.600642][ T1769] syzkaller0: entered allmulticast mode
[   71.606999][   T12] syzkaller0: tun_net_xmit 48
[   71.612024][ T1772] syzkaller0: create flow: hash 4210878732 index 1
[   71.631423][ T1775] incfs: Error accessing: ./file0.
[   71.636631][ T1775] incfs: mount failed -20
[   71.641185][ T1775] incfs: Error accessing: ./file0.
[   71.646365][ T1775] incfs: mount failed -20
[   71.650842][ T1775] incfs: Error accessing: ./file0.
[   71.656001][ T1775] incfs: mount failed -20
[   71.660441][ T1775] incfs: Error accessing: ./file0.
[   71.665594][ T1775] incfs: mount failed -20
[   71.670044][ T1775] incfs: Error accessing: ./file0.
[   71.675203][ T1775] incfs: mount failed -20
[   71.679661][ T1775] incfs: Error accessing: ./file0.
[   71.684807][ T1775] incfs: mount failed -20
[   71.689232][ T1775] incfs: Error accessing: ./file0.
[   71.694344][ T1775] incfs: mount failed -20
[   71.698854][ T1775] incfs: Error accessing: ./file0.
[   71.703987][ T1775] incfs: mount failed -20
[   71.708489][ T1775] incfs: Error accessing: ./file0.
[   71.713622][ T1775] incfs: mount failed -20
[   71.718106][ T1775] incfs: Error accessing: ./file0.
[   71.723243][ T1775] incfs: mount failed -20
[   71.727711][ T1775] incfs: Error accessing: ./file0.
[   71.732851][ T1775] incfs: mount failed -20
[   71.737323][ T1775] incfs: Error accessing: ./file0.
[   71.742445][ T1775] incfs: mount failed -20
[   71.746919][ T1775] incfs: Error accessing: ./file0.
[   71.752048][ T1775] incfs: mount failed -20
[   71.756632][ T1775] incfs: Error accessing: ./file0.
[   71.761765][ T1775] incfs: mount failed -20
[   71.766248][ T1775] incfs: Error accessing: ./file0.
[   71.771367][ T1775] incfs: mount failed -20
[   71.775982][ T1775] incfs: Error accessing: ./file0.
[   71.781118][ T1775] incfs: mount failed -20
[   71.785577][ T1775] incfs: Error accessing: ./file0.
[   71.790707][ T1775] incfs: mount failed -20
[   71.795162][ T1775] incfs: Error accessing: ./file0.
[   71.800282][ T1775] incfs: mount failed -20
[   71.804780][ T1775] incfs: Error accessing: ./file0.
[   71.809994][ T1775] incfs: mount failed -20
[   71.814407][ T1775] incfs: Error accessing: ./file0.
[   71.819563][ T1775] incfs: mount failed -20
[   71.823975][ T1775] incfs: Error accessing: ./file0.
[   71.829133][ T1775] incfs: mount failed -20
[   71.833576][ T1775] incfs: Error accessing: ./file0.
[   71.838730][ T1775] incfs: mount failed -20
[   71.843164][ T1775] incfs: Error accessing: ./file0.
[   71.848321][ T1775] incfs: mount failed -20
[   71.852758][ T1775] incfs: Error accessing: ./file0.
[   71.857973][ T1775] incfs: mount failed -20
[   71.862403][ T1775] incfs: Error accessing: ./file0.
[   71.867565][ T1775] incfs: mount failed -20
[   71.872019][ T1775] incfs: Error accessing: ./file0.
[   71.877193][ T1775] incfs: mount failed -20
[   71.881610][ T1775] incfs: Error accessing: ./file0.
[   71.886775][ T1775] incfs: mount failed -20
[   71.891223][ T1775] incfs: Error accessing: ./file0.
[   71.896381][ T1775] incfs: mount failed -20
[   71.900822][ T1775] incfs: Error accessing: ./file0.
[   71.906016][ T1775] incfs: mount failed -20
[   71.910472][ T1775] incfs: Error accessing: ./file0.
[   71.915636][ T1775] incfs: mount failed -20
[   71.920077][ T1775] incfs: Error accessing: ./file0.
[   71.925220][ T1775] incfs: mount failed -20
[   71.929655][ T1775] incfs: Error accessing: ./file0.
[   71.934820][ T1775] incfs: mount failed -20
[   71.939263][ T1775] incfs: Error accessing: ./file0.
[   71.944387][ T1775] incfs: mount failed -20
[   71.948863][ T1775] incfs: Error accessing: ./file0.
[   71.953982][ T1775] incfs: mount failed -20
[   72.435985][ T1767] syzkaller0 (unregistered): delete flow: hash 4210878732 index 0
[   72.455896][ T1782] incfs: Backing dir is not set, filesystem can't be mounted.
[   72.463391][ T1782] incfs: mount failed -2
[   73.323516][  T449] usb 5-1: USB disconnect, device number 13
[   73.398450][   T36] kauditd_printk_skb: 24 callbacks suppressed
[   73.398466][   T36] audit: type=1400 audit(1755749355.961:430): avc:  denied  { setattr } for  pid=1797 comm="syz.5.449" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   73.430774][ T1803] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   73.483118][ T1810] rust_binder: Error in use_page_slow: ESRCH
[   73.492404][ T1810] rust_binder: use_range failure ESRCH
[   73.498795][ T1810] rust_binder: Failed to allocate buffer. len:24, is_oneway:false
[   73.504603][ T1810] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[   73.513865][ T1810] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:143
[   73.593685][   T36] audit: type=1400 audit(1755749356.151:431): avc:  denied  { getopt } for  pid=1817 comm="syz.0.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[   73.622893][   T36] audit: type=1400 audit(1755749356.171:432): avc:  denied  { ioctl } for  pid=1819 comm="syz.0.457" path="socket:[12228]" dev="sockfs" ino=12228 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   73.659506][ T1822] /dev/rnullb0: Can't open blockdev
[   73.824302][  T449] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[   73.842336][   T36] audit: type=1400 audit(1755749356.401:433): avc:  denied  { read } for  pid=1834 comm="syz.0.461" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   73.865252][   T36] audit: type=1400 audit(1755749356.401:434): avc:  denied  { read } for  pid=1834 comm="syz.0.461" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   73.888274][   T36] audit: type=1400 audit(1755749356.401:435): avc:  denied  { open } for  pid=1834 comm="syz.0.461" path="/dev/snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[   73.984272][  T449] usb 5-1: Using ep0 maxpacket: 8
[   73.991690][  T449] usb 5-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab
[   74.000953][  T449] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   74.009726][  T449] usb 5-1: Product: syz
[   74.014030][  T449] usb 5-1: Manufacturer: syz
[   74.019322][  T449] usb 5-1: SerialNumber: syz
[   74.024835][  T449] usb 5-1: config 0 descriptor??
[   74.042791][ T1849] fuseblk: Unknown parameter '�grou~�%[���'
[   74.215095][ T1858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.467'.
[   74.227420][ T1859] netlink: 'syz.0.467': attribute type 4 has an invalid length.
[   74.255425][ T1815] syzkaller0: entered promiscuous mode
[   74.261203][ T1815] syzkaller0: entered allmulticast mode
[   74.270778][ T1868] netlink: 44 bytes leftover after parsing attributes in process `syz.0.469'.
[   74.274824][   T36] audit: type=1400 audit(1755749356.831:436): avc:  denied  { unmount } for  pid=1318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   74.279783][ T1868] netlink: 43 bytes leftover after parsing attributes in process `syz.0.469'.
[   74.308387][ T1868] netlink: 'syz.0.469': attribute type 6 has an invalid length.
[   74.316105][ T1868] netlink: 'syz.0.469': attribute type 5 has an invalid length.
[   74.318341][ T1870] netlink: 68 bytes leftover after parsing attributes in process `syz.5.470'.
[   74.323782][ T1868] netlink: 43 bytes leftover after parsing attributes in process `syz.0.469'.
[   74.359929][ T1870] rust_binder: Write failure EFAULT in pid:146
[   74.361026][   T36] audit: type=1400 audit(1755749356.921:437): avc:  denied  { ioctl } for  pid=1872 comm="syz.0.471" path="socket:[13170]" dev="sockfs" ino=13170 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   74.423677][  T449] usb 5-1: USB disconnect, device number 14
[   74.431634][   T36] audit: type=1400 audit(1755749356.991:438): avc:  denied  { create } for  pid=1880 comm="syz.5.474" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[   74.487351][ T1160] udevd[1160]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   74.521413][ T1882] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:295
[   74.531036][ T1881] binder: Unknown parameter 'secla�el'
[   74.628028][   T36] audit: type=1400 audit(1755749357.191:439): avc:  denied  { getopt } for  pid=1886 comm="syz.5.476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   74.651599][ T1887] overlayfs: failed to resolve './file0': -2
[   74.931356][ T1913] fuse: Bad value for 'user_id'
[   74.936266][ T1913] fuse: Bad value for 'user_id'
[   75.044157][  T449] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   75.195146][  T449] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   75.206053][  T449] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   75.215931][  T449] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[   75.224996][  T449] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.233560][  T449] usb 6-1: config 0 descriptor??
[   75.305642][ T1933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.493'.
[   75.322083][ T1933] rust_binder: Read failure Err(EAGAIN) in pid:298
[   75.322224][ T1933] rust_binder: got new transaction with bad transaction stack
[   75.328896][ T1933] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:298
[   75.640488][  T449] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0
[   75.657304][  T449] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0
[   75.840287][  T449] cp2112 0003:10C4:EA90.0003: error requesting version
[   75.847778][  T449] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -71
[   75.857834][  T449] usb 6-1: USB disconnect, device number 2
[   75.871408][   T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   75.879558][   T10] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   76.176497][ T1962] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[   76.191324][ T1964] 9pnet_fd: Insufficient options for proto=fd
[   76.199159][ T1962] rust_binder: 309: no such ref 0
[   76.251083][ T1967] fuse: Unknown parameter 'rootmod'
[   76.268596][ T1967] SELinux:  policydb version 2134819135 does not match my version range 15-33
[   76.294858][ T1967] SELinux: failed to load policy
[   76.922350][ T1997] rust_binder: Error while translating object.
[   76.922392][ T1997] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[   76.942788][ T1997] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:315
[   77.386967][ T2007] random: crng reseeded on system resumption
[   77.676426][ T2012] netlink: 168 bytes leftover after parsing attributes in process `syz.1.519'.
[   77.740500][ T2013] netlink: 16 bytes leftover after parsing attributes in process `syz.5.520'.
[   77.862036][ T2017] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[   77.870223][ T2017] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22
[   77.880235][ T2019] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[   77.930758][ T2022] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   77.933968][ T2022] rust_binder: Got transaction with invalid offset.
[   77.940872][ T2022] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   77.949935][ T2022] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:211
[   78.407245][ T2045] 9pnet_fd: Insufficient options for proto=fd
[   78.613719][   T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   79.013684][   T10] usb 6-1: Using ep0 maxpacket: 16
[   79.019829][   T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   79.030112][   T10] usb 6-1: config 0 has no interfaces?
[   79.035621][   T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[   79.044709][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.053150][   T10] usb 6-1: config 0 descriptor??
[   79.304579][   T10] usb 6-1: USB disconnect, device number 3
[   87.852748][    C0] syzkaller0: tun_net_xmit 48
[   94.415453][ T2063] rust_binder: Failed to claim space for a BINDER_TYPE_PTR. (offset: 128, limit: 1152, size: 4096)
[   94.415478][ T2063] rust_binder: Error while translating object.
[   94.433497][ T2063] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   94.440827][ T2063] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender.
[   94.454297][ T2063] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:254
[   94.470988][   T10] rust_binder: 2062: removing orphan mapping 0:24
[   94.495955][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.495974][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.502468][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.508945][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.509852][   T36] kauditd_printk_skb: 10 callbacks suppressed
[   94.509866][   T36] audit: type=1400 audit(1755749377.074:450): avc:  denied  { create } for  pid=2075 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[   94.515726][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.522831][ T2076] rust_binder: Failed to allocate buffer. len:15028190503672509336, is_oneway:true
[   94.528276][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.547393][ T2076] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[   94.547419][ T2076] rust_binder: Failure BR_FAILED_REPLY { source: ENOSPC } during reply - delivering BR_FAILED_REPLY to sender.
[   94.547442][ T2076] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:321
[   94.554230][   T10] rust_binder: 2075: removing orphan mapping 0:24
[   94.563805][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.578210][ T2092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   94.581830][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.602271][ T2092] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   94.620233][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.628539][ T2092] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.635067][ T2096] rust_binder: Got transaction with invalid offset.
[   94.641214][ T2092] futex_wake_op: syz.0.544 tries to shift op by 144; fix this program
[   94.647097][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.654282][ T2092] rust_binder: BC_REQUEST_DEATH_NOTIFICATION death notification already set
[   94.662264][ T2096] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[   94.668622][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.677283][ T2096] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:263
[   94.686849][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.702226][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.708644][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.715097][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.721546][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.727997][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.734452][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.740865][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.747303][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.753736][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.760148][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.766596][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.773040][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.779447][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.786314][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.792767][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.799186][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.805655][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.812082][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.818490][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.824933][ T2088] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   94.840429][   T36] audit: type=1400 audit(1755749377.404:451): avc:  denied  { create } for  pid=2098 comm="syz.4.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   95.006645][ T2110] netlink: 5308 bytes leftover after parsing attributes in process `syz.4.549'.
[   95.024284][ T2110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=2110 comm=syz.4.549
[   95.036940][ T2111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=263 sclass=netlink_route_socket pid=2111 comm=syz.4.549
[   95.049907][ T2110] SELinux: security_context_str_to_sid () failed with errno=-22
[   95.053284][ T2121] syzkaller0: entered promiscuous mode
[   95.064452][ T2121] syzkaller0: entered allmulticast mode
[   95.276059][ T2141] netlink: 'syz.1.557': attribute type 27 has an invalid length.
[   95.334423][ T2163] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   95.336522][ T2155] netlink: 9 bytes leftover after parsing attributes in process `syz.4.561'.
[   95.356563][ T2155] gretap0: entered promiscuous mode
[   95.364119][ T2170] netlink: 'syz.1.565': attribute type 10 has an invalid length.
[   95.364125][ T2155] netlink: 5 bytes leftover after parsing attributes in process `syz.4.561'.
[   95.378399][ T2155] 0��{X��: renamed from gretap0
[   95.392145][ T2155] 0��{X��: left promiscuous mode
[   95.398178][ T2155] 0��{X��: entered allmulticast mode
[   95.404272][ T2155] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[   95.430249][   T36] audit: type=1400 audit(1755749377.994:452): avc:  denied  { write } for  pid=2153 comm="syz.4.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   95.454170][ T2185] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   95.544309][ T2198] netlink: 176 bytes leftover after parsing attributes in process `syz.1.569'.
[   95.761639][  T820] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[   95.927978][ T2205] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   95.931668][  T820] usb 5-1: Using ep0 maxpacket: 8
[   95.944473][  T820] usb 5-1: unable to get BOS descriptor or descriptor too short
[   95.952814][  T820] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   95.963008][  T820] usb 5-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   95.975894][  T820] usb 5-1: config 1 interface 0 has no altsetting 0
[   95.984053][  T820] usb 5-1: New USB device found, idVendor=0525, idProduct=83a1, bcdDevice= 0.40
[   95.993127][  T820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.001109][  T820] usb 5-1: Product: syz
[   96.005297][  T820] usb 5-1: Manufacturer: syz
[   96.009879][  T820] usb 5-1: SerialNumber: syz
[   96.161690][   T31] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   96.219211][  T820] usb 5-1: bad CDC descriptors
[   96.224982][  T820] usb 5-1: USB disconnect, device number 15
[   96.331814][   T31] usb 6-1: Using ep0 maxpacket: 8
[   96.338461][   T31] usb 6-1: unable to get BOS descriptor or descriptor too short
[   96.348328][   T31] usb 6-1: config 172 has an invalid interface number: 246 but max is 0
[   96.357271][   T31] usb 6-1: config 172 has no interface number 0
[   96.365787][   T31] usb 6-1: config 172 interface 246 has no altsetting 0
[   96.374046][   T31] usb 6-1: New USB device found, idVendor=357d, idProduct=c388, bcdDevice= 0.0d
[   96.385702][   T31] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[   96.401888][   T31] usb 6-1: Product: syz
[   96.406841][   T31] usb 6-1: SerialNumber: syz
[   96.772239][   T36] audit: type=1400 audit(1755749379.344:453): avc:  denied  { mount } for  pid=2261 comm="syz.1.593" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[   96.772569][ T2262] overlayfs: failed to clone lowerpath
[   96.887222][   T36] audit: type=1326 audit(1755749379.454:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2271 comm="syz.1.598" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8bf238ebe9 code=0x0
[   96.977295][ T2277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.599'.
[   97.594301][ T2289] rust_binder: 328: no such ref 1
[   97.599387][ T2289] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 2
[   97.606669][ T2289] rust_binder: Error while translating object.
[   97.606700][ T2289] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[   97.612891][ T2289] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:328
[   97.634302][ T2291] netlink: 'syz.0.606': attribute type 30 has an invalid length.
[   97.802123][   T36] audit: type=1326 audit(1755749380.374:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2304 comm="syz.1.611" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8bf238ebe9 code=0x0
[   97.853536][ T2308] fuse: Bad value for 'fd'
[   98.212833][ T2310] fuse: Bad value for 'fd'
[   98.234021][ T2313] overlayfs: failed to clone upperpath
[   98.300370][ T2321] tmpfs: Unknown parameter '18446744073709551615'
[   98.646568][ T2344] netlink: 288 bytes leftover after parsing attributes in process `syz.1.625'.
[   98.737047][ T2353] overlayfs: failed to clone upperpath
[   98.753679][ T2355] netlink: 104 bytes leftover after parsing attributes in process `syz.1.630'.
[   98.937216][   T31] usb 6-1: USB disconnect, device number 4
[   98.976776][ T2367] netlink: 'syz.5.634': attribute type 29 has an invalid length.
[   99.103633][ T2377] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   99.154753][ T2377] rust_binder: BINDER_SET_CONTEXT_MGR already set
[   99.161419][ T2377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:288
[   99.178180][ T2380] overlayfs: failed to clone upperpath
[   99.193217][ T2380] overlayfs: failed to clone upperpath
[   99.198892][ T2380] overlayfs: failed to clone upperpath
[   99.204730][ T2380] overlayfs: failed to clone upperpath
[   99.210431][ T2380] overlayfs: failed to clone upperpath
[   99.216237][ T2380] overlayfs: failed to clone upperpath
[   99.221979][ T2380] overlayfs: failed to clone upperpath
[   99.227657][ T2380] overlayfs: failed to clone upperpath
[   99.233445][ T2380] overlayfs: failed to clone upperpath
[   99.239122][ T2380] overlayfs: failed to clone upperpath
[   99.244906][ T2380] overlayfs: failed to clone upperpath
[   99.250584][ T2380] overlayfs: failed to clone upperpath
[   99.256332][ T2380] overlayfs: failed to clone upperpath
[   99.262016][ T2380] overlayfs: failed to clone upperpath
[   99.267703][ T2380] overlayfs: failed to clone upperpath
[   99.273464][ T2380] overlayfs: failed to clone upperpath
[   99.279267][ T2380] overlayfs: failed to clone upperpath
[   99.285099][ T2380] overlayfs: failed to clone upperpath
[   99.290995][ T2380] overlayfs: failed to clone upperpath
[   99.296798][ T2380] overlayfs: failed to clone upperpath
[   99.302611][ T2380] overlayfs: failed to clone upperpath
[   99.308467][ T2380] overlayfs: failed to clone upperpath
[   99.314282][ T2380] overlayfs: failed to clone upperpath
[   99.319953][ T2380] overlayfs: failed to clone upperpath
[   99.325714][ T2380] overlayfs: failed to clone upperpath
[   99.331468][ T2380] overlayfs: failed to clone upperpath
[   99.337128][ T2380] overlayfs: failed to clone upperpath
[   99.342938][ T2380] overlayfs: failed to clone upperpath
[   99.348828][ T2380] overlayfs: failed to clone upperpath
[   99.354676][ T2380] overlayfs: failed to clone upperpath
[   99.355202][   T36] audit: type=1400 audit(1755749381.924:456): avc:  denied  { setattr } for  pid=2389 comm="syz.4.642" name="NETLINK" dev="sockfs" ino=16625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   99.384375][ T2380] overlayfs: failed to clone upperpath
[   99.390215][ T2380] overlayfs: failed to clone upperpath
[   99.396099][ T2380] overlayfs: failed to clone upperpath
[  100.062536][   T36] audit: type=1400 audit(1755749382.634:457): avc:  denied  { search } for  pid=2428 comm="syz.5.654" name="/" dev="configfs" ino=2456 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  100.245015][   T36] audit: type=1400 audit(1755749382.814:458): avc:  denied  { wake_alarm } for  pid=2458 comm="syz.5.665" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  100.275059][ T2465] 9pnet_fd: Insufficient options for proto=fd
[  100.276178][ T2466] netlink: 12 bytes leftover after parsing attributes in process `syz.5.666'.
[  100.281380][ T2465] 9pnet_fd: Insufficient options for proto=fd
[  100.316119][   T36] audit: type=1400 audit(1755749382.884:459): avc:  denied  { getopt } for  pid=2470 comm="syz.5.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  100.351434][ T2478] overlayfs: failed to clone upperpath
[  100.560172][   T36] audit: type=1400 audit(1755749383.124:460): avc:  denied  { create } for  pid=2522 comm="syz.1.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  100.581468][   T36] audit: type=1400 audit(1755749383.134:461): avc:  denied  { write } for  pid=2522 comm="syz.1.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  100.741084][   T36] audit: type=1400 audit(1755749383.304:462): avc:  denied  { accept } for  pid=2551 comm="syz.1.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  100.819141][ T2554] cgroup: none used incorrectly
[  100.824106][ T2555] cgroup: none used incorrectly
[  100.833265][ T2558] 9p: Unknown access argument : -22
[  100.929510][   T36] audit: type=1400 audit(1755749383.494:463): avc:  denied  { bind } for  pid=2573 comm="syz.1.707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  101.006944][ T2578] overlayfs: failed to clone upperpath
[  101.144966][ T2594] SELinux:  Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped).
[  101.154669][   T36] audit: type=1400 audit(1755749383.724:464): avc:  denied  { relabelto } for  pid=2593 comm="syz.5.715" name="121" dev="tmpfs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0"
[  101.180732][   T36] audit: type=1400 audit(1755749383.724:465): avc:  denied  { associate } for  pid=2593 comm="syz.5.715" name="121" dev="tmpfs" ino=685 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_exec_t:s0"
[  101.207747][   T36] audit: type=1400 audit(1755749383.724:466): avc:  denied  { write } for  pid=1318 comm="syz-executor" name="121" dev="tmpfs" ino=685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_exec_t:s0"
[  101.521149][ T2620] rust_binder: Write failure EFAULT in pid:337
[  103.366966][ T2685] veth0_vlan: left promiscuous mode
[  103.681677][ T2688] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2688 comm=syz.5.746
[  104.226733][ T2721] incfs: Error accessing: ./file0.
[  104.232170][ T2721] incfs: mount failed -20
[  104.275872][ T2729] overlayfs: failed to clone lowerpath
[  104.289698][ T2732] syz.4.761 (2732): attempted to duplicate a private mapping with mremap.  This is not supported.
[  104.315355][ T2735] devpts: called with bogus options
[  104.578548][ T2770] fuse: Bad value for 'group_id'
[  104.583808][ T2770] fuse: Bad value for 'group_id'
[  104.592237][ T2770] 9pnet_fd: p9_fd_create_unix (2770): problem connecting socket: ./file0: -111
[  104.612243][ T2774] block device autoloading is deprecated and will be removed.
[  104.691561][ T2782] rust_binder: Error while translating object.
[  104.691596][ T2782] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  104.697763][ T2782] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:348
[  104.937703][ T2784] 9pnet: p9_errstr2errno: server reported unknown error 
[  105.221374][ T2821] 9pnet_fd: Insufficient options for proto=fd
[  105.493757][   T36] kauditd_printk_skb: 8 callbacks suppressed
[  105.493774][   T36] audit: type=1326 audit(1755749388.055:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2835 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7cd8ebe9 code=0x7ffc0000
[  105.529105][   T36] audit: type=1326 audit(1755749388.055:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2835 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7cd8ebe9 code=0x7ffc0000
[  105.552666][   T36] audit: type=1326 audit(1755749388.085:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2835 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7cd8ebe9 code=0x7ffc0000
[  105.576087][   T36] audit: type=1326 audit(1755749388.085:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2835 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7cd8ebe9 code=0x7ffc0000
[  105.599890][   T36] audit: type=1326 audit(1755749388.085:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2835 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6c7cd8ebe9 code=0x7ffc0000
[  105.623282][   T36] audit: type=1326 audit(1755749388.085:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2835 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7cd8ebe9 code=0x7ffc0000
[  105.646691][   T36] audit: type=1326 audit(1755749388.085:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2835 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7cd8ebe9 code=0x7ffc0000
[  105.670096][   T36] audit: type=1326 audit(1755749388.085:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2835 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7cd8ebe9 code=0x7ffc0000
[  105.693879][   T36] audit: type=1326 audit(1755749388.085:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2835 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6c7cd8ebe9 code=0x7ffc0000
[  105.728285][   T36] audit: type=1326 audit(1755749388.085:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2835 comm="syz.0.796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c7cd8ebe9 code=0x7ffc0000
[  105.857739][ T2850] 9pnet_fd: Insufficient options for proto=fd
[  106.893460][ T2869] overlayfs: failed to clone upperpath
[  106.978507][ T2874] overlayfs: failed to clone upperpath
[  107.003170][ T2878] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  107.010181][ T2878] overlayfs: failed to set xattr on upper
[  107.015928][ T2878] overlayfs: ...falling back to redirect_dir=nofollow.
[  107.022837][ T2878] overlayfs: ...falling back to index=off.
[  107.028732][ T2878] overlayfs: ...falling back to uuid=null.
[  107.034664][ T2878] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  107.482854][ T2897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.820'.
[  107.491743][ T2897] erspan0: entered promiscuous mode
[  107.550240][ T2920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.826'.
[  107.913306][ T2940] netlink: 5308 bytes leftover after parsing attributes in process `syz.5.833'.
[  108.001806][ T2950] ip6_vti0: entered promiscuous mode
[  108.008317][ T2949] ip6_vti0: left promiscuous mode
[  108.975086][ T3015] fuse: Bad value for 'fd'
[  108.997863][ T3017] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  109.016268][ T3019] netlink: 20 bytes leftover after parsing attributes in process `syz.0.859'.
[  109.017325][ T3020] input: syz1 as /devices/virtual/input/input7
[  109.103089][ T3028] syzkaller0: create flow: hash 4210878732 index 3
[  109.341769][ T3058] overlayfs: failed to clone upperpath
[  109.375025][ T3070] IPv6: NLM_F_CREATE should be specified when creating new route
[  109.942694][ T3097] overlay: filesystem on ./bus not supported as upperdir
[  109.978327][ T3100] overlayfs: failed to clone upperpath
[  110.001594][ T3104] netlink: 'syz.5.889': attribute type 5 has an invalid length.
[  110.265282][ T3118] tipc: Can't bind to reserved service type 1
[  110.309928][ T3124] netlink: 24 bytes leftover after parsing attributes in process `syz.1.897'.
[  110.320820][ T3124] sit0: entered promiscuous mode
[  110.331177][ T3124] netlink: 'syz.1.897': attribute type 1 has an invalid length.
[  110.338888][ T3124] netlink: 9 bytes leftover after parsing attributes in process `syz.1.897'.
[  110.438717][ T3133] 9pnet_fd: Insufficient options for proto=fd
[  110.794504][ T3153] 9pnet_fd: Insufficient options for proto=fd
[  110.881676][ T3162] fuse: Bad value for 'fd'
[  111.111668][ T3188] overlay: ./file0 is not a directory
[  111.196761][ T3206] TCP: out of memory -- consider tuning tcp_mem
[  111.210753][ T3206] ------------[ cut here ]------------
[  111.216392][ T3206] WARNING: CPU: 1 PID: 3206 at net/ipv4/af_inet.c:157 inet_sock_destruct+0x681/0x790
[  111.225934][ T3206] Modules linked in:
[  111.229999][ T3206] CPU: 1 UID: 0 PID: 3206 Comm: syz.4.929 Not tainted syzkaller #0 40a6597ee361193aa500bbffa95ee137cbfef8e8
[  111.241527][ T3206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  111.251871][ T3206] RIP: 0010:inet_sock_destruct+0x681/0x790
[  111.257708][ T3206] Code: a3 e8 b3 26 c3 fc 0f 0b e9 53 fe ff ff e8 a7 26 c3 fc 0f 0b e9 92 fe ff ff e8 9b 26 c3 fc 0f 0b e9 c4 fe ff ff e8 8f 26 c3 fc <0f> 0b e9 f6 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 65 fc ff
[  111.277374][ T3206] RSP: 0018:ffffc9000b9d77e8 EFLAGS: 00010293
[  111.283488][ T3206] RAX: ffffffff84c2baf1 RBX: 0000000080000000 RCX: ffff888114303900
[  111.291508][ T3206] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  111.299497][ T3206] RBP: ffffc9000b9d7830 R08: ffff88813286337f R09: 1ffff1102650c66f
[  111.307514][ T3206] R10: dffffc0000000000 R11: ffffed102650c670 R12: ffff888132863200
[  111.315513][ T3206] R13: ffff888132863200 R14: ffff888132863364 R15: 1ffff1102650c642
[  111.323528][ T3206] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  111.332483][ T3206] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  111.339078][ T3206] CR2: 00002000000014c0 CR3: 000000010b348000 CR4: 00000000003526b0
[  111.347107][ T3206] Call Trace:
[  111.350403][ T3206]  <TASK>
[  111.353341][ T3206]  ? __cfi_inet_sock_destruct+0x10/0x10
[  111.358905][ T3206]  __sk_destruct+0x6b/0x6a0
[  111.363458][ T3206]  ? __sk_free+0x304/0x410
[  111.367882][ T3206]  __sk_free+0x313/0x410
[  111.372219][ T3206]  sk_free+0x58/0xb0
[  111.376120][ T3206]  tcp_close+0xc4/0x120
[  111.380329][ T3206]  inet_release+0x1b4/0x2c0
[  111.384842][ T3206]  sock_close+0xdd/0x280
[  111.389100][ T3206]  ? __cfi_sock_close+0x10/0x10
[  111.394008][ T3206]  __fput+0x1fb/0xa00
[  111.397991][ T3206]  ? call_rcu+0x14/0x20
[  111.402203][ T3206]  ____fput+0x20/0x30
[  111.406188][ T3206]  task_work_run+0x1e3/0x250
[  111.410817][ T3206]  ? __cfi_task_work_run+0x10/0x10
[  111.416020][ T3206]  ? free_nsproxy+0x223/0x290
[  111.420737][ T3206]  do_exit+0x9bc/0x2630
[  111.424890][ T3206]  ? __cfi_do_exit+0x10/0x10
[  111.429471][ T3206]  ? futex_wake+0x63a/0x900
[  111.433981][ T3206]  ? futex_setup_timer+0xb4/0xd0
[  111.438922][ T3206]  ? __kasan_check_write+0x18/0x20
[  111.444053][ T3206]  ? _raw_spin_lock_irq+0x8d/0x120
[  111.449159][ T3206]  ? __cfi__raw_spin_lock_irq+0x10/0x10
[  111.454715][ T3206]  do_group_exit+0x22a/0x300
[  111.459307][ T3206]  ? __kasan_check_write+0x18/0x20
[  111.464439][ T3206]  get_signal+0x139d/0x14f0
[  111.468943][ T3206]  arch_do_signal_or_restart+0x96/0x720
[  111.474499][ T3206]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  111.480686][ T3206]  syscall_exit_to_user_mode+0x58/0xb0
[  111.486139][ T3206]  do_syscall_64+0x64/0xf0
[  111.490568][ T3206]  ? clear_bhb_loop+0x50/0xa0
[  111.495242][ T3206]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  111.501259][ T3206] RIP: 0033:0x7fc05758ebe9
[  111.505703][ T3206] Code: Unable to access opcode bytes at 0x7fc05758ebbf.
[  111.512749][ T3206] RSP: 002b:00007fc05838f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  111.521187][ T3206] RAX: fffffffffffffe00 RBX: 00007fc0577b5fa8 RCX: 00007fc05758ebe9
[  111.529144][ T3206] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc0577b5fa8
[  111.537334][ T3206] RBP: 00007fc0577b5fa0 R08: 0000000000000000 R09: 0000000000000000
[  111.545321][ T3206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  111.553313][ T3206] R13: 00007fc0577b6038 R14: 00007ffcc6b7d690 R15: 00007ffcc6b7d778
[  111.561311][ T3206]  </TASK>
[  111.564323][ T3206] ---[ end trace 0000000000000000 ]---
[  113.050228][    C1] syzkaller0: delete flow: hash 4210878732 index 2
[  121.130354][    C0] syzkaller0: tun_net_xmit 48