last executing test programs:

4m26.323664963s ago: executing program 1 (id=152):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x804, 0x0)
syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$inet6_mreq(r3, 0x29, 0x1d, 0x0, 0x0)
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
readv(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/2, 0x2}], 0x1)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
lseek(r1, 0x400, 0x2)
socket$netlink(0x10, 0x3, 0x8000000004)
r5 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e22, 0x8, @loopback={0x0, 0xac1414ca}}, 0x1c)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000000)={0xd5, 0x0, 0xbf})
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4m26.169481356s ago: executing program 1 (id=153):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x739001, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x389883)
ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000140)=""/106)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00')
ioctl$VHOST_VDPA_SET_STATUS(r2, 0x4001af72, 0x0)
write$UHID_INPUT(r2, &(0x7f0000000500)={0x8, {"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", 0x66}}, 0x1006)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200))
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005280), 0x0, 0x4008000)
syz_open_dev$loop(&(0x7f0000006200), 0xb3, 0x82403)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x14, 0xc, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16, @ANYBLOB="11060000"], 0x174}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x8010, r3, 0x6f25e000)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = dup(r6)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2)

4m26.119710217s ago: executing program 1 (id=154):
r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14, 0x80000)
ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000080))
r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f00000000c0)={r0})
r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2)
ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, &(0x7f0000000140)=0xed91)
ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f0000000180)=0x21)
setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f00000001c0)=0x8, 0x4)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_OURS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x800)
ioctl$RTC_UIE_OFF(r2, 0x7004)
r4 = openat$cgroup_ro(r2, &(0x7f0000000300)='cpuset.memory_pressure\x00', 0x0, 0x0)
recvfrom$packet(r2, &(0x7f0000000340)=""/68, 0x44, 0x10141, &(0x7f00000003c0)={0x11, 0x4, r1, 0x1, 0x9, 0x6, @local}, 0x14)
r5 = dup3(r3, r4, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000400)={{{@in=@dev, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000500)=0xe8)
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000600)={0x1, &(0x7f0000000540)=[{}]})
ioctl$F2FS_IOC_SEC_TRIM_FILE(r5, 0x4018f514, &(0x7f0000000640)={0x1, 0x8, 0x3})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r5)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000000780)={&(0x7f0000000680), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x28, r6, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x3b}, @void, @val={0xc, 0x99, {0xa8a9, 0x2a}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x400}, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
dup3(r7, r7, 0x0)
ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f00000007c0)={{0xeeef0000, 0x3000, 0x4, 0x0, 0x1, 0x5, 0x8, 0x8, 0x96, 0x8, 0xe, 0xe5}, {0x2, 0x100000, 0xb, 0x6, 0xff, 0xd0, 0x9, 0x6, 0x7, 0x3, 0xf, 0x5}, {0x4000, 0x2000, 0x0, 0x39, 0xb, 0xfe, 0x8, 0xcb, 0x7, 0x6, 0x4, 0xc}, {0x6000, 0xd000, 0x3, 0x8, 0x9, 0x5, 0x6, 0x6, 0x9, 0x4, 0x81, 0x9b}, {0x0, 0x8000000, 0x9, 0x6, 0x6, 0x0, 0x4, 0xc2, 0x2, 0x0, 0x5, 0x10}, {0xeeee0000, 0x1bba90004, 0xd, 0x0, 0x7, 0xf9, 0x4, 0x2, 0x1, 0x9, 0x3, 0x9}, {0x8000000, 0x8080000, 0xb, 0xe, 0x6, 0xd, 0x7f, 0xf, 0x4, 0x6, 0x6, 0x4}, {0x8080000, 0x80a0000, 0x1, 0x2, 0x3, 0x46, 0x1, 0x10, 0xe1, 0xf, 0xa, 0x3}, {0x80a0000, 0x2}, {0xdddd0000, 0xc}, 0x10, 0x0, 0x2000, 0x100043, 0xb, 0x4001, 0x10000, [0x5f2, 0x7ff, 0x1, 0xfffffffffffffff8]})
fcntl$addseals(r0, 0x409, 0x9)
r8 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000940)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0)
splice(r2, &(0x7f0000000900)=0x58736a33, r8, &(0x7f0000000980)=0x2f7, 0x8, 0x8)
mount$overlay(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x2024, &(0x7f0000000a40)={[{@index_off}], [{@fsuuid={'fsuuid', 0x3d, {[0x25614c2bbb72c11b, 0x30, 0x62, 0x61, 0x62, 0x37, 0x33, 0x34], 0x2d, [0x38, 0x36, 0x32, 0x39], 0x2d, [0x54, 0x38, 0x31, 0x64], 0x2d, [0x31, 0x31, 0x38, 0x30], 0x2d, [0x61, 0x35, 0x36, 0x38, 0x32, 0x64, 0x36, 0xa]}}}]})
sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)={0x90, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x44}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x10}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x8001}, 0x4000001)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000d00)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000c00)="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", 0xfe, r4}, 0x68)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d80), 0x402000, 0x0)
ioctl$TUNGETDEVNETNS(r9, 0x54e3, 0x0)

4m26.063649418s ago: executing program 1 (id=155):
mkdir(&(0x7f00000002c0)='./bus\x00', 0x21)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x820009408200a5fe)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0}], 0x3, 0x200, 0xd, 0x9)

4m26.063368048s ago: executing program 1 (id=156):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='bfs\x00', 0x2800408, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00')
read$FUSE(r0, &(0x7f0000003800)={0x2020}, 0x2020)

4m25.939693731s ago: executing program 1 (id=160):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
recvmmsg(r1, &(0x7f0000009080), 0x0, 0x2, 0x0)
setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000)
eventfd(0x5)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
keyctl$search(0xa, 0x0, &(0x7f00000003c0)='asymmetric\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x2)

4m25.921261711s ago: executing program 32 (id=160):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = socket(0xa, 0x3, 0x3a)
recvmmsg(r1, &(0x7f0000009080), 0x0, 0x2, 0x0)
setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000)
eventfd(0x5)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0)
keyctl$search(0xa, 0x0, &(0x7f00000003c0)='asymmetric\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x2)

3m52.663762144s ago: executing program 0 (id=731):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x102, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3b)
ioctl$KVM_CAP_MEMORY_FAULT_INFO(r2, 0x4068aea3, &(0x7f00000000c0))
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
fstat(r4, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, <r5=>0x0})
setuid(r5)
setgroups(0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000001c0)={0xc7, 0x0, 0x1})
close_range(r0, 0xffffffffffffffff, 0x0)

3m52.621462085s ago: executing program 0 (id=732):
r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000))
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000040)={0x0, "b0ddac551ea92e4ddfb572b973679736"})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001040)={"fb70aa4e1da398bf396c0862f3d2b219", 0x0, <r1=>0x0, {0x8}, {0x7, 0x3}, 0x5, [0x4, 0x1, 0x8000, 0x9, 0x0, 0x8, 0x1, 0x7, 0x1ba7515d, 0xffffffff00000001, 0x7ff, 0x4, 0xa, 0x0, 0x4, 0x8]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000001140)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r2=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001340)={"4e288e73c73d1594dbaa30fe214209e5", r1, r2, {0x8, 0x80}, {0x6, 0x10}, 0x6, [0x4, 0x6, 0x3, 0x0, 0x2, 0xffffffff, 0x5df, 0xc6d6, 0x0, 0xf9f, 0x2, 0x5f21, 0x7, 0x6, 0xc01c, 0x1]}) (async)
quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) (async)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000001440)='pimreg1\x00', 0x10) (async)
write(r3, &(0x7f0000001480)="b65a3af53569bd85284cd348b347ce0e755716f53608b50d02535fcc7bcea0977eaf93a1c7cfa80688db1adf56a04eae86f75a53eeacf3662e8affef967ea35a750baa1b5a70c3efb52caedb2e7e3836ab3915d2868fd84f061c1e08dc9fdc355d5355b2bb5436fe0fdefa267d285113c4409b63a4dea19558881e9adcf7002ac52ec02c4f329272034af9ebc84b3f65f44ae9f93977fdd633227a74e9f9e75026d133e112b631bee114b8d75a", 0xad) (async)
r4 = openat2(0xffffffffffffffff, &(0x7f0000001540)='./file0\x00', &(0x7f0000001580)={0x100, 0x104, 0x6}, 0x18) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001600)={'erspan0\x00', &(0x7f00000015c0)={'gretap0\x00', <r5=>0x0, 0x40, 0x700, 0x7, 0x89, {{0x8, 0x4, 0x1, 0x1c, 0x20, 0x66, 0x0, 0x6, 0x2f, 0x0, @multicast2, @local, {[@rr={0x7, 0xb, 0xe9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast]}]}}}}})
sendmsg$xdp(r4, &(0x7f00000016c0)={&(0x7f0000001640)={0x2c, 0x1, r5, 0x28}, 0x10, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x4004000}, 0x800) (async)
waitid$P_PIDFD(0x3, r4, &(0x7f0000001700), 0x1000000, &(0x7f0000001780))
getsockopt$IP_SET_OP_GET_FNAME(r4, 0x1, 0x53, &(0x7f0000001840)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000001880)=0x2c) (async)
write(r4, &(0x7f00000018c0)="9fb2a49ad2fb91207c68e74fae76bb7767876dff3ecbcfa00dbf0bb426e7a542f14e524c5683e363e7e4b34a44b027495145682ebf8350da21cb247a63e0d790915cdf36a33ae53b2e4625804f5e7f717bd3770b3b55353bf84cdc983f7878e2bfc3a70dfc65233cb7fd9d2ef809e2ccc780375e3ec7e049661fe5aec4e51c1b0eb84ec022dd30aa6886735da010", 0x8e) (async)
write(r4, &(0x7f0000001980)="9e44af60f9d844ac57d29d86567929836e9e341ab06413", 0x17) (async)
r6 = epoll_create1(0x80000)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000019c0)={0x9, 0x8, 0x4, 0x0, 0x0, [{{r0}, 0x6}, {{r4}, 0xcd}, {{r4}}, {{r6}}]}) (async)
fchmod(r6, 0x20) (async)
r7 = eventfd2(0x0, 0x800)
fcntl$setstatus(r7, 0x4, 0x0) (async)
ioctl$KVM_SET_GSI_ROUTING(r4, 0x4008ae6a, &(0x7f0000001a80)={0x5, 0x0, [{0x3, 0x4, 0x1, 0x0, @msi={0x3, 0xfffffffc, 0x2, 0x8}}, {0x400, 0x1, 0x1, 0x0, @irqchip={0x3, 0x770}}, {0x3, 0x5, 0x0, 0x0, @adapter={0x7, 0xffffffffffffffff, 0xfffffffffffffffc, 0x44a5, 0xf6}}, {0x3d, 0x2, 0x0, 0x0, @adapter={0x3, 0x3, 0x6, 0x8f, 0x2}}, {0x400, 0x550a4f5b5e13d432, 0x0, 0x0, @adapter={0x800, 0xf572, 0x0, 0x1, 0x3}}]})
write$FUSE_POLL(r4, &(0x7f0000001b80)={0x18, 0x0, 0x0, {0xfbf}}, 0x18) (async)
ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f0000001bc0)={0xe, 0x7fffffff, 0x3})
fsetxattr$security_evm(r6, &(0x7f0000001c00), &(0x7f0000001c40)=@ng={0x4, 0x1, "e17c06b62c9a1679d49c25619ceb5dee"}, 0x12, 0x0) (async)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_sco_SCO_CONNINFO(r8, 0x11, 0x2, &(0x7f0000001c80)=""/48, &(0x7f0000001cc0)=0x30) (async)
pwritev(r0, &(0x7f0000003240)=[{&(0x7f0000001d00)="b75c53b074040c2ffdc447ac3d0bafe635b837860595f15e7513740d9f2cefcce6a1b45282d3f250477ecac060630abdb84339ebeaf393781a1189ffd969d56cb32c21c22fbdeb6810d3ff886820c145f705b0bfc9751a4d6c9763099ca5bd6e8cc601ae3aac8ac9ee8c3600c0a0a615867f5f41fb8caa1fe80135f5f33c5329651f2ad3559a53b28c543878d716ffb0df461966d8ebc9a16b9224916e7d4b", 0x9f}, {&(0x7f0000001dc0)="a710bc", 0x3}, {&(0x7f0000001e00)="26c687485d35203afe591e2a4c034234bdab9cbfecb8454d570fd70f72ad461b5fb0a7d7f3ab13dfeb654985b8883d1e483caa879144b6ed3083725255bf772c11a708374c9fd6bbdeeac65b24b93d5a7f4d49160757b89299bf93705b7bfcc84b262ff14e1fb0020e630b7bfa1d983ad95e8597c8d85ce9de6f8c40a250e188215f5a372860774cde26c613b5b1056df7aaa2fbb8c8a665126ae39da5397e0cf55987555cf53cced77eeddb8aae92665e77a7db78cb05a05cb2e6ca4d47129d311c5758552ea623f3982254512d749617db748dcf2822ae56258eb995fb2ed9", 0xe0}, {&(0x7f0000001f00)="91cefacc44932ab1b9c7b4c859ea9485fafb562dbaf97f29dfbd3f3b45f6bcdf0a2bffd966a28ecaf6fa7452ff68b648410b48", 0x33}, {&(0x7f0000001f40)="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", 0x1000}, {&(0x7f0000002f40)="434c85a38a63272522702c9e7eb580f09b636cda66d06cb8f3e8b32e4f2a9bc28b8cbd17", 0x24}, {&(0x7f0000002f80)="280265ce06a634e5a7d75034ff11075b6679da915093fb186ae6329269fd1ea7658659f9b86605cceceeaa968b76e341a157fd50d94036aa3f3ea348da4e11c5d922b23b76c3ccd6875b8e671a6dc54d0aa0d69eae19ac1c7fe0daefe6b196032e", 0x61}, {&(0x7f0000003000)="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", 0xfe}, {&(0x7f0000003100)="1ac9be85056184825928e1748783f0f8abfe4421248fb4a5ff3f29448cfb9bb11d35d2e235c8c7bbc6468241ff852934787b9aa520003c9e79995b", 0x3b}, {&(0x7f0000003140)="3236f98c2c69c999f9385985303c7c13f2256fbf2ee0daaf51cb6a16c58bfb568ef5d3ea2fae60e5a2c936481b31f35fe1e5a91b4eb4966ba7443baaa59fe13d713a95811c8346f874304c118c59e5ce9ed2c476ffeadcf814e648c8beba45687bc4c1f1585ea40914d30e7707bd71887a020e32c349908794cb6ca089546a9e99f8288e74e917d0742bcedb553af88c23e84a89460089821d8bf0e68bd2661df96f11479a47cd6540f8114b2ea965a7c3f14a61998defed333e52ae03f86b7a9e07265c094a9e", 0xc7}], 0xa, 0x1, 0x8) (async)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000033c0)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000034c0)=0xe8)
mount$fuseblk(&(0x7f0000003300), &(0x7f0000003340)='./file0\x00', &(0x7f0000003380), 0x12, &(0x7f00000035c0)={{'fd', 0x3d, r4}, 0x2c, {}, 0x2c, {'user_id', 0x3d, r9}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@max_read={'max_read', 0x3d, 0x373}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xfffffffffffffffa}}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}})

3m52.572272316s ago: executing program 0 (id=733):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) (async)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup3(r2, r3, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x29, 0x0, &(0x7f0000001380))
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002cc0), 0xffffffffffffffed) (async)
keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002cc0), 0xffffffffffffffed)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000180))
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x1000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x11}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/167, 0xa7, 0x0, 0x1e}}, &(0x7f00000001c0)={0x0, 0x24, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x11}, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/167, 0xa7, 0x0, 0x1e}}, &(0x7f00000001c0)={0x0, 0x24, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$KDSKBLED(r1, 0x4b65, 0x1)

3m52.323309381s ago: executing program 0 (id=740):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[])
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
setxattr$incfs_size(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280), &(0x7f00000002c0)=0x2, 0x8, 0x1)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000047c0)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8)
getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}}, {{@in6=@mcast1}, 0x0, @in=@private}}, &(0x7f0000000380)=0xe8)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50)
syz_fuse_handle_req(r3, &(0x7f0000006200)="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", 0x2000, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x90, 0x0, 0x65f, {0x0, 0x0, 0xa, 0x9, 0x5, 0xfffffffd, {0x1, 0x9, 0xffffffffffffffff, 0x0, 0x3ff, 0x7f, 0x5, 0x1, 0xaa, 0x2000, 0xfff, r5, r6, 0x7, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
fstat(r0, &(0x7f0000004740)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
read$FUSE(r0, &(0x7f0000002600)={0x2020, 0x0, 0x0, 0x0, <r8=>0x0}, 0x2020)
fstat(r0, &(0x7f0000004640)={0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f00000046c0)=ANY=[@ANYBLOB="02000000010001000000000002000100", @ANYRES32=r1, @ANYBLOB="02000200", @ANYRES32=0x0, @ANYBLOB="02000600", @ANYRES32=r2, @ANYBLOB="728ecae7785c2a71604f0000", @ANYRES32=r6, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="08000500", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=0x0, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=0xee01, @ANYBLOB="08000100", @ANYRES32=0xee00, @ANYBLOB="10000200000000002000010000000000"], 0x7c, 0x3)
read$FUSE(r0, &(0x7f00000005c0)={0x2020}, 0x2020)

3m51.530603166s ago: executing program 0 (id=761):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff}) (async)
io_setup(0x2, &(0x7f0000000500)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x2, r1, 0x0, 0x0, 0x20000000}]) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="400000001800150000000000ffffffff0a0000000202000000000000240009801c00000000000000140005"], 0x40}], 0x1}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000000)={0x0, <r4=>0x0})
prlimit64(r4, 0xd, &(0x7f00000000c0)={0x8, 0x8}, &(0x7f0000000100))
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) (async)
ioprio_set$uid(0x3, 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x7ffff000)

3m51.515172976s ago: executing program 0 (id=762):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49de, 0x6, 0xfffb, 0x773, 0x1c, "ec28a144f13d7607"})
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffc, 0x0, 0x0, 0x10, "0062ba5d8200"})
r3 = syz_open_pts(r2, 0x20800)
dup3(r3, r2, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x44)
syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

3m51.471811497s ago: executing program 33 (id=762):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@my=0x1})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0)
ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49de, 0x6, 0xfffb, 0x773, 0x1c, "ec28a144f13d7607"})
write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffc, 0x0, 0x0, 0x10, "0062ba5d8200"})
r3 = syz_open_pts(r2, 0x20800)
dup3(r3, r2, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000100)=0x44)
syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r4, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)

3m6.639688324s ago: executing program 3 (id=1790):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
getsockopt(0xffffffffffffffff, 0x200, 0x2, 0x0, 0x0)
ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0xf0, 0x1c, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback}, {@in=@private, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {}, {}, 0x0, 0x0, 0x2}}, 0xf0}}, 0x0)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001d00)=ANY=[@ANYRES16=r2, @ANYRES8=r1, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffff", @ANYBLOB="852bd390684411afb58a0d9f269860c81b3b35ad8abdf348d70abbcddace715987e9928817bad0885f77d8af3d2df791b8683a43d7dbd07947b12e368ee2e791", @ANYRESOCT=r1, @ANYRES16=r0, @ANYRES32=r2, @ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRES16, @ANYRESDEC=r1, @ANYRES32=r0, @ANYRESOCT=r1], 0x21c}}, 0x6044000)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="796100000000000000027e000000330003"], 0x1c}}, 0x4000054)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d01"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0)
bind$tipc(r1, &(0x7f0000000380)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x40008, 0x1}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0x0, 0xbbb, 0x7, 0xc2}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000100}, 0xc000)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r6, 0x0, 0x21, &(0x7f0000000000)=0x2, 0x4)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
setsockopt(r4, 0x735387c9, 0xd, &(0x7f0000000d00)="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", 0x1000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x380, 0x2})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0xfffffffffffffffa)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4, 0x0, &(0x7f0000000380)=[@enter_looper], 0x52, 0x0, &(0x7f0000000540)="70d07134252032fdd3365ef96b919649b1b13c6f6f6f7aaa12b1c0578b26dfe3b2b741205d28752ac5acbb5a5b0d2b225871a4b865d995f95d6aa99c4901dbf986b562794f45f28d37773ab5417f62829ea8"})

3m6.637689824s ago: executing program 3 (id=1791):
r0 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$restrict_keyring(0xa, r0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:\x88\xfe\xf7\x01') (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_int(r1, 0x1, 0xb, 0x0, &(0x7f0000000040)) (async)
r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000080)={'ip6tnl0\x00', 0x1}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r3 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async)
r4 = socket$tipc(0x1e, 0x5, 0x0)
listen(r4, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000200)=0x87) (async)
accept4(r4, 0x0, 0x0, 0x80000) (async)
r5 = fsmount(0xffffffffffffffff, 0x0, 0x77)
socket$nl_generic(0x10, 0x3, 0x10) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x0, 0x1, 0x11, r5, 0x0)
r6 = syz_usb_connect$uac1(0x3, 0xa5, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000b14e35dac309253f82b16e00000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd0924030000030004020629a9308f231b2405044d278bcbad6ee76345e1"], 0x0) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
r7 = memfd_create(0x0, 0x2)
ftruncate(r7, 0x10000)
syz_usb_control_io$uac1(r6, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000304003f0004030204"]}, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) (async)
r8 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0)
close(0xffffffffffffffff) (async)
close(r8) (async)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0) (async)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file0\x00', 0x8000, 0x0)

3m6.633017475s ago: executing program 3 (id=1792):
ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000000)=0xffffffffffff0001)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x1, 0x3, 0x86, 0x10}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)={<r1=>0x0, <r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000140)={r1, 0x0, 0xffffffffffffffff, 0x2, 0x80000})
ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000180))
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', <r4=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000200)={r1, 0x2, r3, 0x100, 0x80000})
r5 = socket$inet(0x2, 0x1, 0x6)
getsockopt$inet_int(r5, 0x0, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0x4)
pipe(&(0x7f00000002c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$OSF_MSG_REMOVE(r6, &(0x7f0000000d00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000340)={0x964, 0x1, 0x5, 0x0, 0x0, 0x0, {0xa, 0x0, 0x7}, [{{0x254, 0x1, {{0x1, 0xff}, 0x5, 0xfd, 0x0, 0x7, 0x1e, 'syz0\x00', "7972f3688c8e286be587b1d50f987b7e7e933ddb2468dd86e55893b1bee1a975", "3f26134f3e7186d0a6d3b00a68b7ba419f1070394a14f13798397f4f57632133", [{0x3, 0x4, {0x0, 0x1}}, {0x8001, 0x8}, {0x0, 0x7, {0x2}}, {0x481, 0x9, {0x1, 0x1000}}, {0xa, 0x8, {0x2}}, {0x5, 0x0, {0x0, 0x5}}, {0xc428, 0x1000, {0x1, 0xf4}}, {0x6, 0x2, {0x1, 0x6}}, {0x7, 0x81, {0x0, 0xae}}, {0x3, 0x3, {0x3, 0x200}}, {0x400, 0x2, {0x3, 0x2}}, {0x3, 0x9, {0x3, 0x8}}, {0x7, 0x7, {0x1, 0x7}}, {0x6, 0x8, {0x2, 0x100}}, {0x6f, 0x1ff, {0x0, 0x2}}, {0xfffa, 0xff, {0x1, 0x5}}, {0x3, 0x8, {0x0, 0x8}}, {0x1c, 0xf, {0x3, 0x1}}, {0x4, 0x8, {0x2, 0x1}}, {0xd, 0x6, {0x3}}, {0x6, 0x1, {0x2, 0xfffff568}}, {0x1, 0x1000, {0x2, 0x400}}, {0x1, 0x6, {0x0, 0x1}}, {0x8, 0x1000, {0x1, 0x7a14}}, {0x3, 0x7, {0x0, 0x6}}, {0xe5a5, 0xf, {0x0, 0xc}}, {0x6, 0xc, {0x1, 0x9}}, {0x4, 0x8, {0x1, 0x5b9d}}, {0x5, 0xff81, {0x2, 0x2}}, {0x0, 0x8, {0x3, 0x3}}, {0x8, 0xaa8, {0x1, 0x9}}, {0xc, 0xe75, {0x3}}, {0xb3, 0x7, {0x0, 0x8}}, {0x9, 0xaf0a, {0x0, 0x4}}, {0x42a, 0xeda, {0x1, 0x7}}, {0xb273, 0x4, {0x2, 0xfe000000}}, {0x270, 0x5, {0x3, 0xfffffff1}}, {0x4, 0x9, {0x0, 0x8}}, {0x8e7, 0xfcfd, {0x1, 0x4}}, {0x7bfd, 0xfffc, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x1, 0x3d}, 0x8, 0x9, 0xffb, 0x4, 0x14, 'syz0\x00', "8c385b7faab6cae83812a988bfdb695e77d1b8ad06e5971fd0e38615a4ab40a0", "7ef7fa6bc720b17439cd580ba592dc04b5f1fea28c82d077550b436b6e9d6d4e", [{0xc, 0x3, {0x3, 0xfffffffc}}, {0x9, 0x2, {0x3, 0x2}}, {0x5, 0xe113, {0x2, 0xc}}, {0x9, 0xff, {0x1, 0x9}}, {0x5, 0x8000, {0x3, 0x2}}, {0x1, 0x563, {0x2, 0x6}}, {0xb37, 0x4, {0x2, 0x1000}}, {0x9, 0xc2e, {0x2, 0xb545}}, {0x1, 0x3, {0x1, 0x55}}, {0x817a, 0xc402, {0x2, 0xa}}, {0x3, 0x8, {0x1, 0x1}}, {0xe, 0x7fff, {0x0, 0x3}}, {0x8c8, 0xeb, {0x3, 0x2}}, {0xc700, 0x5, {0x2, 0x4}}, {0x2, 0x4, {0x1, 0x1}}, {0xc, 0x405}, {0x0, 0x2, {0x2, 0x2}}, {0x7, 0xfffa, {0x3, 0xcd}}, {0x8, 0x8001, {0x1, 0xe}}, {0x0, 0x400, {0x0, 0x10001}}, {0x9, 0x10, {0x2, 0x1000}}, {0x3, 0x66, {0x2, 0xa}}, {0x0, 0x8, {0x0, 0x6a77}}, {0x92, 0x9, {0x2, 0x3}}, {0x7, 0x6, {0x3, 0xdcfe}}, {0x7fff, 0x2, {0x1, 0x3}}, {0x5, 0x5, {0x1, 0x6}}, {0x2, 0x78, {0x1, 0x7}}, {0x4000, 0x0, {0x3, 0x6}}, {0x1, 0xfff7, {0x2}}, {0x1000, 0x9, {0x0, 0x9}}, {0x0, 0x1, {0x1, 0x7}}, {0x2, 0x5, {0x1, 0x4e8}}, {0xfff, 0x7, {0x0, 0x8}}, {0x2, 0xd, {0x1, 0x8000}}, {0x3, 0x1b, {0x3, 0x5}}, {0x0, 0x4, {0x2, 0x3}}, {0x0, 0x6, {0x3, 0x8}}, {0xf99e, 0x3, {0x2, 0x3}}, {0x3, 0x1, {0x0, 0x6c9}}]}}}, {{0x254, 0x1, {{0x1, 0x3ff}, 0x3, 0x2, 0xffff, 0x0, 0xc, 'syz1\x00', "9989dbedfe0c9568333990b0c5ed2043869c6feaa6978cdb522b14b0c457b7c9", "42b7c45611060759a28cf742a481699575acc8ab399a253aae63f265059c6102", [{0x8, 0x9, {0x3}}, {0x3, 0x4, {0x3, 0x3}}, {0x8, 0x5, {0x1, 0x1}}, {0x411, 0x100, {0x2, 0x8d6}}, {0xd60, 0x8, {0x2, 0x6}}, {0x4, 0x3ff}, {0x3, 0xd, {0x2, 0xa}}, {0x9, 0x2, {0x1, 0x2}}, {0x8f, 0xffff, {0x2, 0x5}}, {0x1, 0xffff, {0x0, 0x3}}, {0x1, 0x8, {0x1}}, {0x3, 0x8000, {0x2, 0xffffffff}}, {0x2, 0x0, {0x3, 0x6}}, {0x5, 0x5, {0x0, 0x7c50}}, {0x9, 0x6, {0x0, 0xb2f}}, {0x8, 0x8, {0x2, 0x6}}, {0x7a, 0x6, {0x1, 0xd56}}, {0xe, 0xfff8, {0x2, 0x6}}, {0x6, 0xfffd, {0x0, 0xd9}}, {0x400, 0x0, {0x3, 0x3}}, {0x9, 0x1ad, {0x0, 0x47a38512}}, {0x1, 0x0, {0x3, 0x6}}, {0x1, 0x5, {0x3, 0x8}}, {0x4, 0x90dc, {0x3, 0x1}}, {0xfffe, 0x9, {0x0, 0x3}}, {0xffff, 0x6, {0x1, 0x4}}, {0x0, 0xb, {0x1, 0x4}}, {0x5, 0x4, {0x0, 0x1}}, {0xfffb, 0x7, {0x1, 0x927}}, {0x4, 0x1, {0x3, 0xfffffff4}}, {0x5, 0x7, {0x1, 0x1}}, {0x4, 0x8000, {0x2, 0x5}}, {0x2, 0x9, {0x3, 0x4}}, {0x0, 0x1, {0x3, 0x101}}, {0x2, 0x2, {0x3, 0x9}}, {0x8, 0xcd5, {0x2, 0x7}}, {0x3, 0x1ff, {0x2, 0x3}}, {0x1, 0x6, {0x1, 0xa}}, {0xa99d, 0x8, {0x3, 0xfffffff7}}, {0xb, 0x5, {0x2, 0x4d3f}}]}}}, {{0x254, 0x1, {{}, 0x8, 0x0, 0x7, 0x7, 0x25, 'syz1\x00', "6e8c36b3cbe14311522477bd0acbbd4ce8582d5f8e56cc3b9c696fdb4853d7e5", "29810ba58ca5a3649ca53b7f2b265afcafa38593214eb371c8fc671a494b3720", [{0xfb4a, 0x1000, {0x3, 0x80000001}}, {0x280, 0x4, {0x0, 0x5}}, {0x6, 0x5, {0x3, 0x6}}, {0x1, 0xfc00, {0x2, 0x48000000}}, {0xa237, 0xb135, {0x1, 0x2}}, {0x2, 0x7, {0x1, 0x598}}, {0x1, 0x0, {0x2, 0x3}}, {0x1, 0xfff9, {0x1, 0x2}}, {0x3, 0x5, {0x1, 0x1fc3}}, {0x425, 0x2b56, {0x1, 0xa}}, {0x1, 0x8, {0x2, 0x80000001}}, {0x5, 0x4, {0x3, 0x6}}, {0x8a, 0x800, {0x1, 0x6}}, {0xb, 0xf6, {0x0, 0xf56}}, {0x1000, 0x9, {0x1, 0x2}}, {0xffff, 0x800, {0x0, 0x6}}, {0xb1a, 0x921e, {0x1, 0x2}}, {0x4, 0x1000, {0x3, 0x1}}, {0x8001, 0x6, {0x1, 0x6}}, {0x1, 0xd, {0x0, 0x9}}, {0x5, 0x5, {0x2, 0x9}}, {0x800, 0x6, {0x2, 0x2}}, {0x9, 0x400, {0x2, 0x51e}}, {0x3, 0x4, {0x2, 0x8}}, {0x0, 0xff, {0x0, 0x9}}, {0x8, 0x0, {0x3, 0x12000000}}, {0xff00, 0x400, {0x3, 0x9d}}, {0x1, 0x2, {0x0, 0x8}}, {0x4, 0x401, {0x1, 0x80000001}}, {0x9, 0xa09d, {0x1, 0x89}}, {0xfffc, 0x3, {0x2, 0x3}}, {0x2, 0x2563, {0x0, 0x3}}, {0x5, 0x80, {0x2, 0xaa}}, {0x101, 0x1, {0x3, 0x10001}}, {0xfffd, 0xde, {0x1}}, {0x8, 0x8, {0x0, 0x400}}, {0x2, 0x8001}, {0x7, 0x1, {0x3, 0x1000}}, {0x0, 0x3, {0x2, 0x6849}}, {0x0, 0x3, {0x0, 0x101}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
r8 = accept4$packet(r6, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000d80)=0x14, 0x0)
sendto$packet(r8, &(0x7f0000000dc0)="7f55456fdd368c454d69fa1322c1e09bd1f8f1a61eea62b7fb8739a1b05f323ba0efc6161c04bfe45f28356be81d3f28eee852a9bbde31ade21255cdf23952f69c21810f8f7faa92c51013925475313bdc7fe4bd9b19dce2ea6e335e8d3f043557991eb0573afe17170ce4581e64a82b15b3d42883432852ef45a7e40421d609fb4ee5bc44fb99741455f4c6", 0x8c, 0x8000, &(0x7f0000000e80)={0x11, 0x17, r4, 0x1, 0x4}, 0x14)
r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000ec0), 0x800, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000f00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r10=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000001100)={"75ec1c04bb4e0294f9530498f5d28154", <r11=>0x0, 0x0, {0xb, 0x6c}, {0x0, 0x7fffffff}, 0x13, [0x1, 0x0, 0xffff, 0x9, 0x4, 0xffff, 0x1ff, 0x1000, 0xa7, 0x7ff, 0x1ff, 0x8, 0x80000001, 0x7ff, 0x2, 0xfffffffffffff001]})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r9, 0xc0c89425, &(0x7f0000001200)={"02b6553d27fa9acbf7109e8542abe0e7", r10, r11, {0x6, 0x1}, {0x200, 0x5}, 0x7fffffffffffffff, [0x6, 0x9, 0xe0, 0x4, 0xb1, 0xfffffffffffffff6, 0x8, 0x6800000, 0x6, 0x4, 0x0, 0xfffffffffffffff9, 0x93c, 0x5963, 0x7fffffffffffffff, 0xee8]})
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001340), r7)
sendmsg$NL80211_CMD_TDLS_OPER(r7, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x28, r12, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0xb}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x52}, 0x20000045)
ioctl$SNDRV_TIMER_IOCTL_CREATE(r6, 0xc02054a5, &(0x7f0000001440)={0x8000000000000000, <r13=>r7, 'id0\x00'})
ioctl$UI_ABS_SETUP(r13, 0x401c5504, &(0x7f00000014c0)={0x2, {0x3ff, 0x7, 0x8001, 0x8aad, 0x7, 0x5}})
setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000001500)={0x2, 'xfrm0\x00', 0x2}, 0x18)
getsockopt$EBT_SO_GET_ENTRIES(r13, 0x0, 0x81, &(0x7f0000001600)={'nat\x00', 0x0, 0x3, 0x61, [0x1, 0x800000, 0x9, 0x482, 0x5, 0x2], 0x3, &(0x7f0000001540)=[{}, {}, {}], &(0x7f0000001580)=""/97}, &(0x7f0000001680)=0x78)
connect$inet6(r6, &(0x7f00000016c0)={0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c)
r14 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001740), 0x408422, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001700), r14)
ioctl$KVM_X86_SET_MCE(r7, 0x4040ae9e, &(0x7f0000001780)={0x180000000000000, 0x8000000, 0x8000000000000000, 0x8, 0x1b})
fcntl$lock(r7, 0x26, &(0x7f00000017c0)={0x0, 0x4, 0x4, 0x6, r2})
ioctl$int_out(r13, 0x5460, &(0x7f0000001800))

3m6.614464114s ago: executing program 3 (id=1794):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
lsetxattr(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)=@random={'btrfs.', 'mountinfo\x00'}, &(0x7f00000001c0)='!\xaa@*\x1d:q:\x00', 0x9, 0x1)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
r0 = open$dir(&(0x7f00000002c0)='./file0/file0\x00', 0x10000, 0x40)
openat(r0, &(0x7f0000000300)='./file0/../file0\x00', 0x40, 0x0) (async)
openat(r0, &(0x7f0000000300)='./file0/../file0\x00', 0x40, 0x0)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
chmod(&(0x7f0000000040)='.\x00', 0x35e)
setuid(0xee01)
utimes(&(0x7f0000000080)='./file0\x00', 0x0) (async)
utimes(&(0x7f0000000080)='./file0\x00', 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) (async)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async)
move_mount(r2, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
getsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async)
getsockopt$inet_udp_int(r2, 0x11, 0x65, &(0x7f0000000240), &(0x7f0000000280)=0x4)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
socket$packet(0x11, 0x3, 0x300)
sendmmsg$inet(r1, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)="0f2f", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000005c40)=[{&(0x7f00000000c0)='_', 0xfe3c}], 0x1}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000000100)="19", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000025c0), 0x1}}], 0x4, 0x608d8d0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
unshare(0x22020600)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020)

3m6.595360075s ago: executing program 3 (id=1795):
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuseblk(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="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"])
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
read$FUSE(r1, &(0x7f0000002480)={0x2020}, 0x2020)

3m6.503933636s ago: executing program 3 (id=1797):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
io_setup(0x3ff, &(0x7f0000000500)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x2, r1, 0x0}])
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000052be23b6e2dfe8af50c890380b9d32cf1200030028bd7000fadbdf250000000000000013"], 0x28}, 0x1, 0x0, 0x0, 0x24000004}, 0x40040d0) (async)
io_cancel(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x203, 0xffffffffffffffff, 0x0, 0x0, 0x1ff}, 0x0) (async)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = dup3(r5, r0, 0x0) (async)
ppoll(&(0x7f0000000000)=[{r0, 0x60}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000100)={[0x400]}, 0x8) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0})
setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) (async)
r7 = socket(0x10, 0x3, 0x0) (async)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000140)=<r8=>0x0)
prlimit64(r8, 0xd, 0x0, &(0x7f0000000180)) (async)
bind$bt_hci(r7, 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000280)=[@request_death], 0x0, 0x0, 0x0})

3m6.463892668s ago: executing program 34 (id=1797):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) (async)
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async)
io_setup(0x3ff, &(0x7f0000000500)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x2, r1, 0x0}])
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000052be23b6e2dfe8af50c890380b9d32cf1200030028bd7000fadbdf250000000000000013"], 0x28}, 0x1, 0x0, 0x0, 0x24000004}, 0x40040d0) (async)
io_cancel(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x203, 0xffffffffffffffff, 0x0, 0x0, 0x1ff}, 0x0) (async)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r6 = dup3(r5, r0, 0x0) (async)
ppoll(&(0x7f0000000000)=[{r0, 0x60}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000100)={[0x400]}, 0x8) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x10, 0x0, &(0x7f0000000240)=[@request_death], 0x0, 0x0, 0x0})
setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) (async)
r7 = socket(0x10, 0x3, 0x0) (async)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000140)=<r8=>0x0)
prlimit64(r8, 0xd, 0x0, &(0x7f0000000180)) (async)
bind$bt_hci(r7, 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000003c0)={0x10, 0x0, &(0x7f0000000280)=[@request_death], 0x0, 0x0, 0x0})

1m33.244888817s ago: executing program 6 (id=3249):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f00000000c0)=0x100000001, 0x4)
recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0)
r2 = dup(r1)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x3f0, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd6)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
futex(&(0x7f00000040c0), 0x1, 0x0, 0x0, 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1c81, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2})
ioctl$TUNSETGROUP(r5, 0x400454ce, 0x0)
connect$pptp(0xffffffffffffffff, 0x0, 0x0)
r6 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3)
fcntl$addseals(r6, 0x409, 0x8)
mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x3000008, 0x13, r6, 0xf38aa000)
close_range(r4, 0xffffffffffffffff, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f00000000c0)=0x100000001, 0x4) (async)
recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) (async)
dup(r1) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0xe8, 0x1f8, 0xe8, 0x308, 0x3f0, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) (async)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xd6) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x802, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) (async)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
futex(&(0x7f00000040c0), 0x1, 0x0, 0x0, 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1c81, 0x0) (async)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) (async)
ioctl$TUNSETGROUP(r5, 0x400454ce, 0x0) (async)
connect$pptp(0xffffffffffffffff, 0x0, 0x0) (async)
memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+  \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) (async)
fcntl$addseals(r6, 0x409, 0x8) (async)
mmap(&(0x7f0000fec000/0x4000)=nil, 0x4000, 0x3000008, 0x13, r6, 0xf38aa000) (async)
close_range(r4, 0xffffffffffffffff, 0x0) (async)

1m33.059695141s ago: executing program 6 (id=3254):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0})
r2 = socket$nl_audit(0x10, 0x3, 0x9)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$FITHAW(r2, 0xc0045878)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)={0x78, 0x1a, 0x1, 0x70bd2a, 0x0, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x5c, 0x1b, 0x0, 0x1, [@typed={0x57, 0x0, 0x0, 0x0, @str='}\x00\xc6&\x17\xdd\xe4\xc8\x8f\xa6\x0f\x1aTu\xda\xc6\x13\xfc\xa9\xb5\xf01\x06O\x06-H\xb3\xfb\xd7\xd0\xe7\x10\xa6O\x92\xe3\xdd\xb6X\xcd\xc7\x91R\xe5\x00\xe3\x00\xa3jDJ\xbd)\xd8\xf0&c\xff\xff\xff\xff\xff\xff\xff\xf9\xde\x83\xd2%\xadY\x1e\xfa\xa6v\x87\xdb\xf9w\x01\x01\xe0'}]}]}, 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000004c0)={'veth0_to_batadv\x00', &(0x7f00000003c0)=@ethtool_dump={0x40, 0x9, 0x9f}})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000400)=[@request_death={0x400c630e, 0x2}], 0x0, 0x1000000, 0x0})

1m33.059358601s ago: executing program 6 (id=3255):
pipe2$9p(0x0, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x138)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G'])
ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000000c0)=<r1=>0x0)
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000080)=@sg0, r1, &(0x7f0000000140)={0x7, 0x2, 0x7, 0x30, 0x6, 0x3, 0xfffffffffffffff1, 0x2, 0xffffffff})
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0xe)
read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)

1m33.036390301s ago: executing program 6 (id=3256):
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ext3\x00', 0x2208008, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000020c0)={@ipv4={'\x00', '\xff\xff', @empty}, 0x6, r3})
r4 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x7, 0x88140)
ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, &(0x7f0000000380)=0x7)
ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r3})
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002180)='/proc/stat\x00', 0x0, 0x0)
read(r5, &(0x7f0000000080)=""/122, 0x7a)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000000000000ca89b29181b7b2320ca89f"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r7 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r8 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r8, &(0x7f0000000440), 0x10)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r9, 0x401c5820, &(0x7f0000000080)={0x8})
link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00')
listen(r8, 0x0)
add_key$fscrypt_provisioning(&(0x7f00000000c0), 0x0, 0x0, 0xfffffffffffffe4e, 0x0)
ioperm(0x3, 0x7, 0x7)
ioperm(0x8, 0x5, 0x4)
r10 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r10, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r10, 0x1)
r11 = accept$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r10, 0x28, 0x0, &(0x7f0000000400)=0x79, 0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000003c0)={'batadv0\x00', <r12=>0x0})
sendmsg$nl_route_sched_retired(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x140020}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=@newtclass={0xf8, 0x28, 0x800, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x5, 0xa}, {0x10, 0xd}, {0x2, 0x3d5396b7b14c0ba3}}, [@c_cbq={{0x8}, {0x4}}, @c_atm={{0x8}, {0xb4, 0x2, [@TCA_ATM_HDR={0x44, 0x3, "5aab3ccc2cc7daf0dda35884d1f8e68da383ec8e44325e05c72e6cd316dd790a1c3f28eebb7369673ff0b64113a2587ed655e15f1956efdb9e077c8900000000"}, @TCA_ATM_FD={0x8, 0x1, r7}, @TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_HDR={0x3e, 0x3, "4f1e2177558bcd8f3f71abece0e695a6a11504001d43af8870ec2908f7c0e9ce3d70ae2ea9f4e58a619abcc70336e600"/58}, @TCA_ATM_HDR={0x1c, 0x3, "c20a7921fa8d764d542323841ecf43b6214f8750448de12e"}]}}, @c_atm={{0x8}, {0x4}}]}, 0xf8}, 0x1, 0x0, 0x0, 0xc044}, 0x4000)

1m32.984471272s ago: executing program 6 (id=3257):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x0, 0x2})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x100480, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x6c)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="c7"})
mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r4 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_int(r4, 0x29, 0x1000000000021, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
r5 = openat$incfs(r3, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r5, 0xc058671e, &(0x7f00000000c0))
r6 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000001c0))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000600))
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0)
dup(r7)
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000200)={0x4376ea830d4d549b, 0x0, [0xdd, 0x8, 0x400000000000000, 0x8, 0xfffe, 0x8000000000000a, 0x1000000006, 0x10007ffffe]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m32.891311244s ago: executing program 6 (id=3260):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x8a)
openat(r0, &(0x7f000000c380)='./file0\x00', 0x404482, 0x100) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c00, 0xa) (async)
io_setup(0x2, &(0x7f0000000200)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000380)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x7, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
close_range(r3, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)

1m32.792629755s ago: executing program 35 (id=3260):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80000, 0x8a)
openat(r0, &(0x7f000000c380)='./file0\x00', 0x404482, 0x100) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c00, 0xa) (async)
io_setup(0x2, &(0x7f0000000200)=<r2=>0x0)
io_submit(r2, 0x2, &(0x7f0000000380)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x7, 0x0, r1, 0x0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x802, 0x0) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0) (async)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async)
close_range(r3, 0xffffffffffffffff, 0x0) (async)
ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)

5.388777856s ago: executing program 2 (id=5025):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x10, 0x0, &(0x7f0000000180)=[@increfs, @decrefs={0x40046307, 0x3}], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0xfffffd88, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xd, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r4)
syz_usb_connect(0x2, 0x49e, &(0x7f0000000980)={{0x12, 0x1, 0x250, 0x22, 0xd3, 0x4c, 0xff, 0x921, 0x1000, 0x2693, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48c, 0x2, 0x3, 0x5, 0xe0, 0x7, [{{0x9, 0x4, 0xec, 0x1, 0xc, 0x23, 0x89, 0x86, 0x4, [@cdc_ncm={{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x80, 0x1, 0x4}, {0x6, 0x24, 0x1a, 0xfff, 0x20}, [@country_functional={0x8, 0x24, 0x7, 0x3, 0x4, [0x0]}, @dmm={0x7, 0x24, 0x14, 0x1, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0xfc, 0xff7f}, @acm={0x4, 0x24, 0x2, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x93, 0x74, 0xff, 0xb}]}], [{{0x9, 0x5, 0x7, 0x10, 0x0, 0x9, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xa, 0x1}, @generic={0x31, 0x31, "9558cf37e77440456f4c1252cecc64bd21f660003588f96f10a8af048c3908b35460e324d93cb600038229d807ece9"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0xe, 0xc2, 0x5, [@generic={0x63, 0x3c, "9fae151127187ed659e9259f5d61d399985c17039fe5c0348e6afade874e586bbe78a42a16c25f4d510687c01fa144325f02f06ab2478ed8dc7d76683d0fb7e15de681f35363c37be670bb7158da16a7405fc23b2e7695e285111e91e99dab15c5"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x101}]}}, {{0x9, 0x5, 0x5, 0x1a, 0x8, 0x4, 0x2e, 0x4e}}, {{0x9, 0x5, 0xf, 0x1, 0x20, 0x9, 0x1, 0x57, [@generic={0x3d, 0x31, "81425ed78056a91c5b1bbc5ada05d4ab036e6d6023b4f809ce8c87dc74b966f161879b00d554b9ccb4baec6591a258c1c34f9a8efb3ccbfbeb6066"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x8, 0x8, 0x5, 0x42}}, {{0x9, 0x5, 0x3, 0x1, 0x20, 0x2, 0x9c, 0x35, [@generic={0x3c, 0x9, "a37e3237cd8fd2bb3907c8925718e3b53b09f5b1b613435ae0c634e6f637c7f7f25cf3066ab03b096db3c15bcdc615b2e4d0247ff42e4cf1060a"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x3ff, 0x4, 0x8, 0x5}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x2, 0xb, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x1, 0x4}]}}, {{0x9, 0x5, 0x5, 0x8, 0x8, 0x4, 0x50, 0x5, [@generic={0x3a, 0x3, "cf872569199e1b25be473e0066501d7906a80ae1caeaee58a1ac22ffd16e7dc288a90437c9bba2ada0a9854553a2095f5b7812a564e9c542"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x8, 0x81, 0xc9, 0x9}}, {{0x9, 0x5, 0xd, 0x0, 0x200, 0xff, 0x24, 0x7, [@generic={0xc8, 0xf, "e9a675dacae388cda42744a7d07cac3990aeab5fd8ee06b847f150b4ce3528240f9cf716fb35440ddc2560db7d538b5c32832996aa71edac9d35fe433f26c97d27288ac29d1201a290db2f26687400656128e63e3df2d7ea21614ac4b8eea5251d797a35b3e6c00b8d1b5825da8dcf75c10e3c0acfcc658022b64fb7a9ebe26465eac156bbea8c63754286196e2097a4dbf99eb9a1c493dc913a41a700a61680bdf939d4226464bcd0be995c10198223866787901431e0ab8322940e2844851ba75cd6141565"}, @generic={0x5d, 0x31, "5bb4b844b51c7a582c7c8beca990c7977695c64958f495f43cf23700a27fa8250a74573ef1920a88cbb16ebfdc614bc531102079727a4ee9e0383a34e0b7ab41ccad77063ec18dad5032e82503b37ac96369e466a0805ed12aa68c"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x8, 0xff, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf2, 0x3ff}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x6}]}}]}}, {{0x9, 0x4, 0xa7, 0x3, 0x6, 0xe7, 0xc9, 0x6b, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0x80}, [@processing_unit={0xb, 0x24, 0x7, 0x1, 0x3, 0x8, "444798cf"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x304, 0x6, 0x2, 0xd}, @selector_unit={0xa, 0x24, 0x5, 0x4, 0x7, "3d0f697195"}, @selector_unit={0x6, 0x24, 0x5, 0x5, 0x2f, "95"}, @extension_unit={0x7, 0x24, 0x8, 0x3, 0x4, 0x9}]}, @generic={0xaa, 0x22, "4dad356b5af3052f0455258c89321fd763132c521563abc547630eb0fd48c655549b36f2752c524bfd6f72b4fc77568eb2144ae2f45f24d09b34315784470d5ee1b9cbc37f050c098b758108e45705b4e9a8da0ccc26e6788f64214ee47455c2f3141c269bcc995ba209585c5edcdaf20e61b0735774b53ed2b09fb48c60acaf0e22309800399c6ab9b95a70194d47df73bbb0c81576c2ac170b0c006e731a4d1b3bc96baf0ccf5f"}], [{{0x9, 0x5, 0x8e, 0x3, 0x40, 0xa, 0x6, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x5}]}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0x4d, 0x80, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x5}]}}, {{0x9, 0x5, 0xd, 0x3, 0x20, 0x3, 0xc0, 0x3}}, {{0x9, 0x5, 0x2, 0xc, 0x10, 0x9, 0x6, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xfff4}]}}, {{0x9, 0x5, 0x4, 0x3, 0x20, 0xbf, 0x7f, 0xde, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf1, 0x1020}]}}, {{0x9, 0x5, 0xd, 0x3, 0x3b7, 0x8, 0x55, 0x7}}]}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x0, 0xad, 0x8, 0x3, 0x10, 0xa7}, 0x1c, &(0x7f0000000340)={0x5, 0xf, 0x1c, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x8, 0x0, 0x0, 0xf0f, 0x4}, @wireless={0xb, 0x10, 0x1, 0x4, 0x91, 0x0, 0x90, 0x3}]}, 0x4, [{0x59, &(0x7f0000000380)=@string={0x59, 0x3, "c075be89dd7c1f07f9302a49c03903ab2c3370bac2f2ace37ada0a112325b61b41c1a2e4f22bc033646a19bfdaadc278fbd67e3ef170a6d6c4278be5a0b38de6fff97949009c7b80b92bddaefd6bb1f5ac8af48d7e455f"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x2409}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x44b}}]})
rmdir(&(0x7f0000000040)='./control\x00')
r5 = openat$cgroup_freezer_state(r4, &(0x7f00000002c0), 0x2, 0x0)
sendfile(r5, r5, 0x0, 0x8000002)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000))
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000100)='\x00')
clock_adjtime(0x0, &(0x7f0000000000)={0xfffc, 0x24, 0xb0000000004, 0x3, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x81, 0xffffffffffffffff, 0x2000000000000000, 0x5a6c101, 0x3, 0x1, 0x0, 0x0, 0x2, 0x0, 0x800000000, 0x1ff, 0x4})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
fstat(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
setresuid(0x0, 0x0, r7)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}})
newfstatat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x1000)
socket$unix(0x1, 0x1, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00')
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f00000001c0)={0x3, 0x28, '\x00', 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0]})

2.148162988s ago: executing program 2 (id=5088):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
read(r0, &(0x7f0000000200)=""/1, 0x1)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x3}}]}, 0x1c}}, 0x850)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={0x14, 0x3, 0x3, 0x101}, 0x14}}, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
mount(&(0x7f0000000080)=@filename='./file0\x00', 0x0, 0x0, 0x8800, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f0000000240)={@empty, @multicast1, 0xffffffffffffffff, "0f939542826c51ec1f8fc67bd4dad8941475eba3223c9cb4ae15b3b11b043f82", 0xf, 0x5, 0x4, 0x1}, 0x3c)
r4 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d00010000600209040010050300010009210000360122050009058103"], 0x0)
syz_usb_control_io(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000000300)={0x24, &(0x7f0000000940)={0x0, 0x10, 0x5, {0x5, 0xe, "751cd0"}}, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0xfe, 0x1, {0x22, 0x5f4}}}}, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0)
setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8)
close_range(r3, 0xffffffffffffffff, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x14, 0x2, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x20040000)

1.866424504s ago: executing program 4 (id=5092):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="10000000000000001401afc3c6d3d40cd1d2fb4e6b69a847f702b46fc427c10dc2fd1a59e55dd657d70340659b8032408d76b1282cb5b00466716503e553de372d34e6b9d2ccd4336065ce58f53410a3e35da8dcab8fdc07ee849de87f4d7821abd0e728fa8da6d11ace28be8074bf71e23a75cc90e5de774f586088aa93912b16664ac96d2f3584fe167e0e48284e19a76e9f4154d11635a2dc042d13dce8d4de0370422673a3f4ffc82583c3"], 0x10}, 0xc4)
r2 = socket$inet6(0xa, 0x3, 0xff)
close_range(r2, 0xffffffffffffffff, 0x2)
socket$tipc(0x1e, 0x5, 0x0) (async)
r3 = socket$tipc(0x1e, 0x5, 0x0)
ioctl$sock_inet6_udp_SIOCINQ(r2, 0x89e0, &(0x7f0000000040))
r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x1, 0x20010, r4, 0x0) (async)
mmap$KVM_VCPU(&(0x7f0000ffc000/0x4000)=nil, 0x0, 0x1, 0x20010, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000280)={0x10200, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000002c0)="660f3806e266baf80cb8dc3e628def66bafc0c66b8df7866efc4c1011684b5a31b0000c4e2699c4808f33e0f09c744240099400000c744240206000000c7442406000000000f0114240f28fe66b829010f00d8cd0067263e660f388214", 0x5d}], 0x1, 0x74, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000002c0)="660f3806e266baf80cb8dc3e628def66bafc0c66b8df7866efc4c1011684b5a31b0000c4e2699c4808f33e0f09c744240099400000c744240206000000c7442406000000000f0114240f28fe66b829010f00d8cd0067263e660f388214", 0x5d}], 0x1, 0x74, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r4, &(0x7f0000000b40)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c", @ANYRESDEC=r1, @ANYBLOB="1d2342b00e1c27b1d6e3342ce570d4da5e727d777311eb17ef4e14efde268da31e6b98836cf667fb1b9b85ef46f96c56685758bcc09a8e9ee47cb4d480812c257df42959691065ff4c9317da119117ff1068a320f49d8e9a1a6a1121d01daac314a68c3214815eef", @ANYRES16=r8, @ANYRES32=r3], 0x15)
r10 = dup(r9)
write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) (async)
write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) (async)
write$FUSE_DIRENTPLUS(r10, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138)
writev(r10, &(0x7f00000008c0)=[{&(0x7f0000000480)="29df39c95fca69fde7c289692887fc162661883b674f5e53398f1418a2513c8e6048cddfaf6c5ee9067d27c69ac55664b64aa78eaaff17b6f0e98f0737a1c325a75ee49e1e830588c24eacfb5d180a3ca19f01a93242fb6599484966147ecb542c302e37dbca44f401c0507deec8f196e828", 0x72}, {&(0x7f0000000200)="9cf5564af0b0105bd4762001365cbf84f028be512f7f9cccb6a6e1a213f25777d1df350142ff9c645a95da82", 0x2c}, {&(0x7f0000000280)="fbdc22e893c4e570547b7430", 0xc}, {&(0x7f0000000500)="f1892e49e3f65f13045a3c499d9d750313a11e0f2dffaf5716113d6701414ebfff24f1d14248d1f807a5b9ccd21120846707f342677ea2f17bd0f11954ec65526f99eef2a33151f79c49cb08c6ffe14015e58e50e951204bf0feb58e4d7be9fadfad6dc229d4bee9a46e2ae89bc9f3163272bffea8293b7951184dd20fe0fd5e3b829e4ce601145a06635af3bf1f19b45c49c20197cf8add3601a4b770d251da9d953b7f2adf6874c35bb90296b44d1a2a6af1e5d4bb", 0xb6}, {&(0x7f00000005c0)="ca65d0671382421f92f0dea19fb6b75f034c5f8441d4460f35a4577ebe9cf5061fa08e528f10ed577e85af2e2258084005bb0812d3454189b436b918db99ad4d4576700fe4b63cad70725b1b0a9c63181ac68a3485b7eb2a6e66e21bd7713c7e06e987f8c4568f5dc9925735fd8522729aa43d12a1179325160a8cc18901596140b19b7ca8f50e3f341dbbeff1c3f9e8357058283d0ba8", 0x97}, {&(0x7f0000000680)="ff5f8a8f412b04977851077a25457c6f0acc1accfe5a06dfd34398defadbd6451bd3f24bbf86c81710d04ccc7e72c2454bfe40b9d1d88e8bb2b54f", 0x3b}, {&(0x7f00000006c0)="c2539c5c0fded9520754b54cb487c5b0caf7304dc3b1686d2fce16e0500b1a3968fe3966ed69d19c4a58d029f73c888279c8451f63d05f67e907f331b0e061f28cf0d9e4", 0x44}, {&(0x7f0000000740)="522459b116cfe962f00f4c5a47674ea42da7e2c635b074af0cda840e717dce5365580ff7a9b1d4ee0200000000000000c2cc10ca9c3f13ee1877b5675cdc5a1a51e10b5c735d72a817c764bd2c0c878198527c0a882e1d16134ef250a8647d21ef294185df26936e0bf6f5408e03889ebdbbd58b1d9eb1010a1c5706", 0x7c}, {&(0x7f00000007c0)="344e64aaa0d5b8f4fd31a1501ff6bf9d949b684e3516c70a8dc6648b9c097c71e20f976de0159157dd1fcda88763a5ea53653f95e922f0d033856505accaa13135a1c9a8e09f1ba19f5133b4f7cead067a231e101ab52ef59dab3f1ae1826d0ea26723be1b91ca4beac8a62a280d25d60e40c633f3991d0d6ffb4177706e5bdc2178b4bc16d42e0e1ce390d8d7dbf879cddfac1819d0308345acb210e42ad24584a6d15e5398868a1144485aaeeed9f291af1e5ba5abf7cbfe5866b084589a25bdca279d78de1e823281085656061393b91d9e41909e", 0xd6}], 0x9)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@flat=@weak_binder, @fda={0x66646185, 0x6, 0x1, 0x2e}, @flat=@handle={0x73682a85, 0xa}}, &(0x7f0000000000)={0x0, 0x18, 0x38}}}], 0x0, 0x0, 0x0})
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)

1.731615056s ago: executing program 4 (id=5093):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, 0x16, 0xa01, 0x0, 0x25dfdbfb, {0xa}, [@nested={0x18, 0xca, 0x0, 0x1, [@nested={0x14, 0x2, 0x0, 0x1, [@nested={0x4, 0x4}, @generic="a0c5021f3bb0029844d377f2"]}]}]}, 0x2c}}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000080)="260fae079a65cb071000000f01c4b8c30000000f23c80f21f8350400e0000f23f80fc76e00660f3a0dd1000f9b13b8010000000f01d966ba6100b800000000ef66b82f008ee8", 0x46}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0xffff8000)

1.54384089s ago: executing program 4 (id=5096):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x207, 0x1e07d5abc0d18c87)
ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_netfilter(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000840)=ANY=[@ANYBLOB="280000001200010101000000000000000000000008000000", @ANYRES32, @ANYBLOB="0c000080080031001caff8c2"], 0x28}}, 0x0)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000001100)={0x5b279f6196f49b8d, 0x17, 0x5, 0x9, 0x0, 0xfffffffe, 0x0})
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r3, &(0x7f0000002780)={0x2020}, 0x5ecfb203)

1.53401052s ago: executing program 4 (id=5097):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_open_procfs(0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000001a80)={0x0, [{0x3, 0xfffffffffffffd76, 0x3, 0x0}, {0x0, 0x80, 0x3, &(0x7f0000000180)="562b2636313db4d8e4453578267668e9"}, {0x0, 0x0, 0x0, 0x0}, {0x5, 0x0, 0xfffffffb, 0x0}, {0x1, 0x0, 0x7fff, 0x0}, {0x2, 0x0, 0x7fff, 0x0}, {0x0, 0x0, 0x3, &(0x7f0000000400)}, {0x2, 0x2c0, 0x3, &(0x7f0000000200)="cf2c78e9790cee49dd060032bfbca8eb1a506f21fcb3427e341076df77469fb270164d81e9948a5fe955be9c466d1573eb92fa28d4cd0e024c3e2400ccc2f0634802ac94ca0800000000000000e5e093df70190ebf0f0b2d"}, {0x2, 0x0, 0x0, &(0x7f0000000600)}, {0x3, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x80, 0x0}]}) (async)
ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000001a80)={0x0, [{0x3, 0xfffffffffffffd76, 0x3, 0x0}, {0x0, 0x80, 0x3, &(0x7f0000000180)="562b2636313db4d8e4453578267668e9"}, {0x0, 0x0, 0x0, 0x0}, {0x5, 0x0, 0xfffffffb, 0x0}, {0x1, 0x0, 0x7fff, 0x0}, {0x2, 0x0, 0x7fff, 0x0}, {0x0, 0x0, 0x3, &(0x7f0000000400)}, {0x2, 0x2c0, 0x3, &(0x7f0000000200)="cf2c78e9790cee49dd060032bfbca8eb1a506f21fcb3427e341076df77469fb270164d81e9948a5fe955be9c466d1573eb92fa28d4cd0e024c3e2400ccc2f0634802ac94ca0800000000000000e5e093df70190ebf0f0b2d"}, {0x2, 0x0, 0x0, &(0x7f0000000600)}, {0x3, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x3, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x8, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x3, 0x0, 0x80, 0x0}]})
getpid() (async)
r2 = getpid()
r3 = syz_pidfd_open(r2, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0) (async)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = pidfd_getfd(r3, r3, 0x0)
setns(r4, 0x66020000) (async)
setns(r4, 0x66020000)
mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0)
syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0)
umount2(&(0x7f0000000040)='.\x00', 0x2)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x100, 0x0, &(0x7f00000013c0)="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"})
mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0) (async)
mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r6 = openat$incfs(r5, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r6, 0xc058671e, &(0x7f00000000c0))
r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x1, {[@local=@item_012={0x0, 0x2, 0x2}]}}, 0x0}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000006c"], 0xb4}}, 0x0)
syz_usb_control_io(r7, 0x0, 0x0) (async)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_ep_write(r7, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084")
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x109000, 0x0)
ioctl$LOOP_CLR_FD(r8, 0x4c01) (async)
ioctl$LOOP_CLR_FD(r8, 0x4c01)
pwrite64(r8, 0x0, 0x0, 0x7)
openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)

1.53208522s ago: executing program 7 (id=5098):
prctl$PR_MCE_KILL(0x35, 0x0, 0x8)
prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x2)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0x3})
r1 = syz_open_procfs(0x0, &(0x7f0000000200)='oom_adj\x00')
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
munlock(&(0x7f00004bb000/0x3000)=nil, 0x3000)
mlock2(&(0x7f0000f69000/0x1000)=nil, 0x1000, 0x1)
munlockall()
r3 = socket$netlink(0x10, 0x3, 0x0)
preadv(r2, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x6}], 0x3e8, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$tcp_mem(r1, &(0x7f0000000140), 0x48)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
tee(r5, r6, 0xbfff, 0x5)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r7, 0x0, 0x6, &(0x7f0000000140)=0x400032, 0x4)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
ioctl$TUNSETLINK(r6, 0x400454cd, 0x339)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="00626c6b696f202d667265657a6572202d70696473202b706572665f6576656e74202d6d656d6f727920ec7a03352d6d656d6f727920"], 0x32)
close_range(r0, 0xffffffffffffffff, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)

1.492201501s ago: executing program 5 (id=5099):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x138a, 0x1000000003})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000009800)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000003740)=""/4097, 0x1001}, {&(0x7f00000032c0)=""/246, 0xf6}, {&(0x7f00000033c0)=""/231, 0xe7}, {&(0x7f0000003640)=""/217, 0xd9}, {&(0x7f00000035c0)=""/76, 0x4c}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000680)=""/148, 0x94}, {&(0x7f0000000780)=""/83, 0x53}, {&(0x7f0000000800)=""/127, 0x7f}], 0x9}, 0x4}], 0x3, 0x2100, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000040)={'erspan0\x00', <r4=>0x0, 0x40, 0x40, 0x7fff, 0x2, {{0x8, 0x4, 0x2, 0x0, 0x20, 0x66, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0x34}, {[@cipso={0x86, 0xa, 0x3, [{0x1, 0x4, "ceaf"}]}]}}}}})
ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x44, r4})
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@remote, 0x2000, 0x3c}, 0x2, @in6=@dev}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x4000)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc010000000000000000000000000000ac1414aa00000000000000000000000000000000000002090200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe"], 0xec}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x89b1, &(0x7f0000000900)={'wg1\x00', @remote})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x35}, @fda={0x66646185, 0x4, 0x0, 0x25}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

1.303707154s ago: executing program 5 (id=5100):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1) (async)
ptrace(0x10, r1)
ptrace$setregs(0xf, r1, 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f80)=0x1, 0x4) (async)
setsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000f80)=0x1, 0x4)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f00000001c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000240)={@ptr={0x70742a85, 0x1, &(0x7f0000000000), 0x0, 0x2}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x0, 0x0, 0x0})

1.296709765s ago: executing program 7 (id=5101):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async)
r3 = eventfd(0x3)
ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x0, r3}) (async)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4)
sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000d0000000500070012000000050018007f00000005001a0005000000051c7c000000000006000a00ffff0000050019000400000005001b00080000000600080000000000"], 0x54}, 0x1, 0x0, 0x0, 0x18000}, 0x0) (async)
creat(&(0x7f0000000000)='./bus\x00', 0x0) (async)
ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000100)={0xffffffffffffffff, 0xfffffff9, 0x1}) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

1.269771185s ago: executing program 5 (id=5102):
r0 = socket$packet(0x11, 0x2, 0x300)
syz_io_uring_setup(0x3a6c, &(0x7f0000000000)={0x0, 0x2904, 0x10, 0x0, 0x107}, 0x0, 0x0) (async, rerun: 32)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) (async)
ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000040)={0x1, 0x30, [0x21e3, 0x200, 0xbbb9, 0x100], &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB='defcontext=\"'])

1.207724346s ago: executing program 7 (id=5103):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000080)=0x6e, 0x80800)
listen(r1, 0xb46)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0xfe9, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @flat=@weak_binder={0x77622a85, 0x1000, 0x3}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x2, 0x28}}, &(0x7f0000000180)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0})

1.207489946s ago: executing program 5 (id=5104):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$unix(0xffffffffffffffff, 0x0, 0xd0)
sendmsg$sock(r1, &(0x7f0000000500)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @private=0xa010102}, 0x4, 0x3, 0x2, 0x4}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000280)="6a9900ffdb1ec11377e7fe21474b09456b567654822ea242b5d7af64595326bb1c714f5b5baf892598f3273980ce847274d694ecb7937beb2f08c507b7d24efa4831c88e76d1cf2741512ca463c6e4172cf8eddacf747ee5898d52229340307fbb222e2ee11ca7ec89ce054c1a91174d483525c908da1b4c2317d10d23de47c48a7b0930cc992fc3bf76a0447340267813f3da230af828994496854b097629314a6dbb8dd853547a283c6dbdec6fbc3f1a2c26116f7387e10caacc066d0ff6429f1681e106891aa8ee8e578598a1b2a4153f05b2908faf0f1b065c3486a2e1fed88768e9f7fb128d944f4f9ab05f44", 0xef}, {&(0x7f0000000380)="1c9c42613c82f340a1e0bde7931e4446613ed5f9de99c247853f865dcc64b708edf1de35cd17744f416c9f87a6d57b5c9092c5244018e6e67714acf084d62746b9b8e5935d04a9659f9b02cb2945cd4a20d179449c75483942324beb9c7bbdaa3f67395f2a8efba21e6df655cb6cbf9007cef9b224dd3e37b23fe0e4c7a823f1bf7de9994d422ee9a86d96fd1010b02e4c9e5a1d12f8dc7a513612addccf917fe0e804f67d571b11adccf396c80c858083210f4e4ba4e058a18ee72d42cc36a6a9352602c695c6d0de3f8c6d2110a62e1fbc7030810d2c3e0d39", 0xda}, {&(0x7f0000000140)="ca32e02efb54087c526bdb0a5578f1f3c5039d28bb8bcebefa670f61a00aea22cbcf62adba45713f1e9b697826a156756793989bf6d66e45e4816c1dfb62afc22412", 0x42}], 0x3, &(0x7f0000000480)=[@mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x2}}], 0x60}, 0x20004085)
r2 = memfd_create(&(0x7f00000001c0)='\xc9\xf0\x1d\x05\v\xaf\xa9\xb8\xc6[\v\xdbX\xae[\x1a\xa9\xfd\x16\xae\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xads\x8a\x00\x00\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcbE\t\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9\xdb\xd3\xcd\xfd\xbdn', 0x3)
fsetxattr$security_ima(r2, &(0x7f0000000080), 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

1.206077836s ago: executing program 7 (id=5105):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
openat$kvm(0xffffffffffffff9c, 0x0, 0x2040, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
socket(0x2a, 0x4, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@flat=@weak_binder={0x77622a85, 0x100, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/4096, 0x1000, 0x2, 0x2}, @fda={0x66646185, 0x8, 0x1, 0x7}}, &(0x7f0000000080)={0x0, 0x18, 0x40}}, 0x40}], 0x98, 0x0, &(0x7f0000000280)="5a8b2d2b7358f7876b0cf16d76ad924e1fa5bdf094d22395fe3bd98fce3ca50755906734de93cb05f3cd26f7674e2294963f7452642b7746acc1b4241ec04d1e6c926a5a5c4dc3cb52391fa9ed8c4f968b96c8103519c656553ff5bdfb0650a1368aa4a253dc7e611c47f5a682f5b632db89f7cc975425f8a6fc1fec0f279b9783e1924a1f17d430579f5eec7f88569fa90b5e694f5d23f3"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})

1.172657337s ago: executing program 5 (id=5106):
setregid(0x0, 0xffffffffffffffff)
flistxattr(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080))
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00')
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000001180)={0x71f, 0x4, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']})
fsetxattr$trusted_overlay_upper(r2, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1bfb15050d6e1994616a5da7db7d35cec7ccf564d3"], 0x15, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000002004e21e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b7000000000000000000000000000000000100000001000000020000"], 0x110)
connect$pppl2tp(r6, &(0x7f0000001080)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x41, 0x0, @multicast2}, 0x20020003, 0x0, 0x1}}, 0x2e)
setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000000)=0x100, 0x3)
ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f00000000c0)={0x6, 0x0, [{0xc0000000, 0x0, 0x1, 0x9, 0xe, 0x2, 0x4790}, {0xc0000001, 0x0, 0x2, 0x9, 0x3, 0x4, 0x8000}, {0x1, 0x6, 0x0, 0x100, 0x3, 0x9, 0x6}, {0x0, 0x0, 0x6, 0x7, 0x0, 0x1f, 0x8}, {0xc0000001, 0x80000000, 0x4, 0x1, 0x7ff, 0x1, 0x8}, {0x7, 0x9, 0x6, 0x5, 0x3f8904e1, 0x7fffffff, 0x7f}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0xffffc000)

1.169987607s ago: executing program 7 (id=5107):
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0)
syz_io_uring_setup(0x3b48, &(0x7f0000000000)={0x0, 0xc5fa, 0x1, 0x1, 0xc3}, 0x0, 0x0)
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d73792274656d5f75dd47d0b90b893a03ffdf"])

808.550384ms ago: executing program 4 (id=5108):
syz_clone3(&(0x7f0000000440)={0x40020000, 0x0, 0x0, 0x0, {0x3e}, &(0x7f0000000280)=""/251, 0xfb, 0x0, 0x0}, 0x58)
r0 = socket$key(0xf, 0x3, 0x2)
recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400})
setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4)
sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, 0x0, 0x0)
utimes(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)={{0x77359400}})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f00000003c0)=[@clear_death={0x400c630f, 0x1}, @increfs={0x40046304, 0x1}, @request_death={0x400c630e, 0x3}, @decrefs, @release, @acquire_done], 0x0, 0x0, 0x0})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x8, &(0x7f0000000000)=0xfffffffd, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, &(0x7f0000000440)=0xc00)
getsockopt$inet6_tcp_buf(r3, 0x6, 0x8, 0x0, &(0x7f0000001040))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x44, 0x0, &(0x7f0000001400)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000340)={@flat=@weak_handle={0x77682a85, 0x1000, 0x1}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x1f}, @fd={0x66642a85, 0x0, r2}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0})

200.436596ms ago: executing program 5 (id=5109):
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
splice(r0, 0x0, r1, 0x0, 0x9, 0x8)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
mmap(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x0, 0x8031, 0xffffffffffffffff, 0x30500000)
mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil)
mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01800000000000ce9c0003000000400001802c00040014000100020000005f0000010000000000001c001400020002000000e000000200000000000000000d0001007564703a73"], 0x54}}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x3fffffffffffffff, 0x0, 0x11}, @fda={0x66646185, 0x6, 0x0, 0x200000000000024}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0})

200.132156ms ago: executing program 7 (id=5110):
r0 = socket(0x10, 0x4, 0x1)
socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000040))
accept4$inet6(r0, 0x0, 0x0, 0x0)
rt_sigqueueinfo(0x0, 0x13, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x1002, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0xa7)
r6 = socket$netlink(0x10, 0x3, 0x6)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r6)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000380)={0x2ac, r7, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x18}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_NODE={0x188, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xad4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "e783f805628b782d5d3eb3898658b4fb2d1310cc7de1275cca3a69e61a7f3eb5b2dd"}}, @TIPC_NLA_NODE_ID={0x8e, 0x3, "dcede467a2bad5111e28c0d83a8897df6de8be37eff5c9ee8fc8553c1fa97125297d0779e7dbf969425860ccae17f51abae32eb0ad6480224ee99acb58c99ef09ca68a71bad99714b6e956a2327fa30169a1f63fbb3d6eeee1864d0532cbd39a34dcd6018cccc258ce72575f128eb38071789307354eb8a77446c32f8c8eedad16146f0360dff96c5df8"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "965d11ea103f7ccb43fb18087d3c2f4cb7f27d7959"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_ID={0x56, 0x3, "43f7add92376a1e9fc2d4467752166c3b8eb79459dce22851460f4df866838ca52e4acf55035461eede14237ab82186aeabf0648cd7ce4ed814f69f8ae773f0c48cdb7e192c1715612e1f842ece45b7aff8a"}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "09d2055906e78f9825e668ad91ee0cd4186f58a036cc4d09d4b96e136c0447799954"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x8000}, 0x84)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010d0000000708b5192100c7980000000109021b00022000ac00090400000107000009090585"], 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f00000057c0)={0x0, 0x0, &(0x7f0000005780)={&(0x7f0000003f00)={0x14, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
r8 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_GET_XCRS(r8, 0x8188aea6, &(0x7f00000000c0))
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000740)={'gre0\x00', &(0x7f00000006c0)={'syztnl1\x00', <r9=>0x0, 0x10, 0xa0, 0x7, 0x0, {{0x12, 0x4, 0x2, 0x1, 0x48, 0x66, 0x0, 0x2, 0x2f, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x7, 0xd, "e746b7baac9a6a8ad80f2c"}, @end, @timestamp_addr={0x44, 0xc, 0xfb, 0x1, 0x1, [{@private=0xa010100, 0x6}]}, @rr={0x7, 0x17, 0x46, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0xa}, @remote]}]}}}}})
bind$packet(r0, &(0x7f0000000780)={0x11, 0x10, r9, 0x1, 0x9, 0x6, @local}, 0x14)
r10 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in6=@remote, 0x8, 0x8, 0xfffc, 0x10, 0xa, 0x0, 0x80, 0x21}, {0x5, 0x2000000000000003, 0xfffffffffffffffe, 0x0, 0xa89b, 0x0, 0x80000000000000, 0xfffffffffffffffe}, {0x400, 0x3, 0x0, 0x800}, 0x8, 0x6e6bb7, 0x1, 0x0, 0x2, 0x2}, {{@in6=@private1, 0x10000000, 0x2b}, 0x2, @in6=@local, 0xffffffff, 0x3, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe}}, 0xe8)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r13, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000010000"])

154.828496ms ago: executing program 2 (id=5111):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000380)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x1, 0x3, 0x0, 0x1, 0x3ff}, 0x20)

125.839377ms ago: executing program 2 (id=5112):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffff3)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000022c0)='\x00\x00\x03\x01\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x02\x00g\x00\x00\x00\x80\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-\xac\x99\xb8\xd2<Z l\xdfDh\xa1\x99Bj<\r\x87\xa3\xd1?$\x8b\x02\x00\x00\x00h\x1b\x01\x00\x00\x00\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc4\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0HdO\xb9\xa2\x1d\x13\x8fCha\xb3\x95wl},\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xf6<\xbfB\xe7\x80Z\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9\x13f=\xbd\x03\xe8\xbex:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13\xba\x00|g]7\xdc\xe9=\"\xe4\x90[<Y4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6\x8f\x85fGGV&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xbay\xa0s<\x92k\vJTRW\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146\'Z\x83H\xabF\x18<\x86h\x01=\x03\\\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&@\x00\x00\x00rT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\xd7c\t(\xf2\x93\x8d\\\x91\xef\xab(Jck\xdf\xa3 \x16\x9bH=\x01\x7f\x02\x1dF3\x7f\xd15\xa8\xd2\x94\xa7\xe9\xbd\xdc\x16\xe1Z\x9c\xe3\xeb9\x8f\xfdC\x0e\xd3]\xb5\xfdB\\\xd2\xfe\xf6H\x8ai}kDM\xbd\xfcJ{T{@i/\xb7x\xc5z\xfds\x85\xef\x1f\xf0t\xf5\xaf\xb21F\x01\xe0\x86\xde\x88\xb8\x8f \xfc\xcd\xba\xea\x16\xc1J\xb7\xe3\x04m\x0e\xaf\xd6\x88\xd6XX\xba\x8a\xdb\xeda\x83.H\xe3\x86\x03\t\xcb\xdc\x80\xee\x0ec\x12\x8a\x92\x11\xb6\xcc#\x10\xec\xfd\xbb\xd3\\\xc8\x88\x04,\'\x14\xbf\x84\x16\xb3\x8f,6\xc6D\xae\xa1\xf9\xe7@\xac\xaa\x104\x8b\x8eQ8\x11\xa7|\x87\xe2\xccrj%\xc4r&\r\a\xa7\xda\xf5\'V\x89\xe6\xa4\x05\xde\xf5\xaa@\xec\xe2\xf6\xb5x\xa1w\n\xda\xf2\xd67\xc6%\x0f[sF\xb6\xaeS>\xe9^\xd4\xf03\xe9.\xc4\xd5\xe0\r\xa1Q\xa8\xf2\xa2`zs\'k\xd4pV\xab&%\xf8\x8a\x80\x9d\"\xf3\xcc\xd2i\xc8\xd8\xc6\xbeD\xda\x86?\xf9\x13\xe5L`R\xe8Vq\xa3\nD\x9f\xe4M\xe6\xab\xdd!=%\x06z$\x99\';O\xfc\xf0u\x83\v<H\x8cmD\x8e\x9e\x18\xf7\xac\xa5\x17\x89\xc6\x88\x86\xe9\x15\x87WV\xfbF\xb1\x1fo\x85t\xf1\r\x8a\x9c\xe8\xac^\x19cp\xcceJ\xa6\x0e_\aE\bZ\x9f\xfa\xdf$\xad\xf0\xa5E\xeb\xd6\x80\xb7 \rd\xcc\x92\b\x01\x1bG\xb4su\x90\xcfs\x18LQ\x81^\x17\x80\xca\xdc\xe2\xb3\x01\x85\xa4r\x87G\xb8\x92\xdaJt\xa2g\xb7Azy+\x8f\xee\xb9\xa9\xa6\x04\xd1a\xca1~\x03\xbc\x87\xd1\xbaY\xf3\x8ai\xff[\xde\xde\xc6\xb1\xb9T{\xe2>\x83\a8\xfe<\x9e\xa8\xfe\xca`D\x91\x81!QT$\x05T\x85\xd6\xe9!\xb9wfL\x12\xa8\xb0\xb0\x86\xc2\xa1\xf7\x05i\xf5\xf0\r\xe7h\xdaD\xcb\xd4\x87\x84\xe5\xc7r;.\xf0\xed\x17\x83Nn\xb7\x0f!u}J)\xa1\xa1\x16\xc5`Z,\xa3\xcf\xfdy\aH\x06\x14l\x92x\xdbB=\xcc\xcdfpi\xe5\x04=HQ\xeaE-v\x02\x0eY\x8e\xbf\xec\x16\xc4G\xea\x8bS\x8e\xd5f\xdcj\xe1\x86\xf9s\x90\xe5\xf9\x89\xc0\xf3\xcd;r4j]\x9b\xdf\xf5\xe9\x82\xe1\xdb\x11\xb3\b\xa2Y\xdb\\\xc1H\xc3\xcf\xb1W\xe9(\xee\x18\xca\xda\xf5p,\x16\xbc\x17\xfe\xd8\n\xe1\xa1&=+)\xf9Vd\x11\xf6hX\xbe\x85O=\xe2\x9f~I\xa1\"\xa9\xd9\x19\xa2\\\xb8>f\xe2Jh+u\x90\x13\x94\x12\xc8X\xd7\xb4\xf1JS0FN\xa0\xda\xb6ez`\x9a\xea\xcf^\xa5\x17{\v\xe8n\xe9 \xc0/D\t\x7f\xd8\xad\xf2e\xff\x8b\x16p\x0f\xe4\x1a/\xe1\x96\xd2\xae\x94\x0e5\xb0b+\xac\x14\xaa\xb0\xb7\xa5.\x15\x8a\xca\xb5~=D-\x90\xc1\xbf\x05\xb9\xd5\x86\xeb\xd2#\xda\xc132\'\xfc!%\x94\x1f\xbfL)\xc2c\xa8\xef\x152\x8d\xef\xde\xbe\xab\xf5g\x80\x02G>\xf5\x04a-\xff\x06X+\xc1\xd3\xb1\xcdn\x15p\xdf\xd8.\x89\x95{\xb6+:`\x9c\xcf2\x01\x1d1\xf7\xe6\x7f\x1f\xf5\xb0\xb9\t2\x14\x81\x99\xb8@7y\xb4\xce\xf1]\a\x03y\xc5F\xfa\xae\xd1O\x7f7\xa7\xc1\xb2.~B\xe8@G\xd1\xd9R~\x1b\xf7\xa8\x86\xa7\xc1\b\x9ej\x01\xf4\xb7\xd2\x0e\xc2\x15S\x19\xd7\xd4\xe6\xaf!\xf8_\x8aEOp@>4\xd7\xcf\x11\xe0;\x99}QmE\xdd\xa69)Q\x9e\xb9\'\x97\x9b\xe7\xa4?Ed\x9c\x7fE\xba5\x90\xc07\x96S\x9d\xe1\x84\xfa\x1a\xd6\x9a\x15\xd1o \xc0\xd28\x01\xa7\x99\x85q\xbd\x80\x00\x00\x00\x00\x00\x00\x00H\x0f\xbbT\xd5\xb3\xf4\xcd<\x8a\x01\x19\xd0|B\f0\xf8i\xd3\x1bJke\t\x8b7Q\x1dQ&\x96H\x05\xec\x80\xf0\xab\x8f\x94{\x9d+\xefs\x1c\xfck\xf7q\x10\xf6\x16\xbc\xe7\x93\x0f\x7f\xcd\xa7b\xbe\x88\xcc\xb6^\x93\xa9P\xf3\xa3\xe4Az=\xe0+Q\x9e\xb5\x11\xb3\xc1\xa8P0+\xc9\xa1\xdbU~J$\xa4\x03\x11\x1aa~\x9du\x8f\x8d\xbcI\x85k\xa0\xae\xf6\xa0\x94r\xfb\xe3\xaa\xd4\xf0\x99\x06\xe1i\x1f\xfa\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x13\\\xb2/R\xedI2e5\x88(\xc0+^\xe7G\x17\x03^\xd7g\xb9n\x8c2\xb3\x12\x91\x86b\t\xd0R\x01\xda$Y\x85\x02&\x95FC\xc8\xd9') (async)
ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0)
ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, 0x0) (async, rerun: 32)
ioctl$ASHMEM_SET_NAME(r1, 0x40087707, &(0x7f0000000000)='\x00\x000\x10\x00\x00\a\x00\x00\x00\x00\x00\x00\x00^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcbgQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xe3\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x00\xfe\xff\xffo \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x8e\x04\x00\x00\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94@\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00y\xd2\x88s\xd1~}\x10\xffR<j6\xcdq;\xbf/}\xc5\x83\x18\xbc}\x9a\x03\xbd\xab\x94]\x9a\xcf\xf49\x93\bbZ\xc9\xc4\xf4v-g+m\x1d\x87\x10G\xb3M\xd3\x92)\x99&\n;\x95\xc0\x85\x1ar\xfa\xdf\xed73\x84\xd6\xc2/\x91l\\\x7fN\x11B\xab\\\x03?\xfa\xdc\xee\x99\x94\xc8:sA\xb1\x1eJ;\x16V\xf0w< O?\xf0\xb2\xcd?|(Ma\xab\x82\xef\xfc\xf3\xf3\xec\xa1\xcaJ\xdf\x80c\x92A\x8c\x1b\xe0\xc2\xa3\xe22\x9a\x99u\vo\x18F\xdc\x8f\xee\x05\xc8R\xd9\x18\xdb|\xeb\x88\b\x0f\xe5\x91\x85\v\x04;\xce}\x84\"tl\xcf\b\x01K|\x16\xf6)\xe7\x10W-\x87h\x05\xfc\xd1\xda\xae.L\xc2\x80\x14\xfb\x1cg\x9d\xf1\xfa]MO\x06%5A\x9b\x01\x85\xba\xab\x9d\x87\xa6.\xc3L\\|,+\x89\x00H\x14\xc0\x98\'\xf2z\xbcE\xfc\x7f\x0e\x93\x1b\xe6S\xf2\xf6\xfb>\xbbt\xf0:>\xe7\xfd(\xad\xacS\x0f\xa5\xa4\xcfN\xdd\xc0\xf3\xc5\n3\xa6*\x97\xf7\xdb\xccT\x02\x9f\x96D\x85_\xfc\xf8?\xbc\x00\x00\x00\x00\x00\x00') (async, rerun: 32)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r0, 0x45809000)
write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff}) (async, rerun: 32)
r3 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32)
getsockopt$inet6_int(r3, 0x29, 0x4, 0x0, &(0x7f0000000000)=0xfffffffffffffe26) (async)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005280), 0x0, 0x4008041) (async)
syz_open_dev$loop(&(0x7f0000006200), 0xb3, 0x82403)
ioctl$BLKRRPART(r0, 0x125f, 0x0) (async, rerun: 64)
ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)) (rerun: 64)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

43.831779ms ago: executing program 2 (id=5113):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000000c0)={0x3000, 0x19000, 0x1})
close_range(r0, 0xffffffffffffffff, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

43.513629ms ago: executing program 4 (id=5114):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
fsetxattr$trusted_overlay_upper(r0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00fb15050d6e1994616a5da7db7d35cec7ccf564d33f78a10d3698b18d627ef221b1b3de1f976326bf0af7d9e287d2ee247cd3e23618bc494d2fd9ba09e461a89a05cbaecf53db7712e2f263f53455c85b31753bb4944e8f0178a74e440c5f7d2d9f1fdd406854a33cfa607dd129edecf5fb875385fbc6"], 0x15, 0x0)
r1 = openat$kvm(0x0, &(0x7f0000000000), 0x101400, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r2, 0x4068aea3, &(0x7f00000000c0)={0xed, 0x0, 0x7fff})
r3 = syz_open_dev$usbmon(&(0x7f0000000140), 0xf0f, 0x100)
ioctl$MON_IOCG_STATS(r3, 0x80089203, &(0x7f0000000180))
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ec0), r4)
sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f00)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x96}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000008c}, 0x8010)
mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x110, r0, 0xffff8000)

0s ago: executing program 2 (id=5115):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001002bbd70000400000000000000000000000000ffffac1414aa6401010200000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000040000002000000000000000002000000000ffffffffffffffff00006400000000000000000000000000000000000000000000000a000000000000fe"], 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000020c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002100)={0x1c, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
r7 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r7, 0x0, 0x4, &(0x7f0000000000)="8908030400", 0x5)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="6a030000", @ANYRES16=r6, @ANYBLOB="08002abd7000fedbdf257a00000008000300", @ANYRES32=r8, @ANYBLOB="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"], 0x368}}, 0x20044890)
fsetxattr$security_evm(r3, &(0x7f0000000380), &(0x7f00000003c0)=@md5={0x1, "a641f05748b8955db854a1bc635c74f4"}, 0x11, 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x9)
r10 = openat$incfs(r9, &(0x7f00000001c0)='.pending_reads\x00', 0x101402, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r10, 0x40106726, &(0x7f00000000c0))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009104"])
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r11 = socket$can_raw(0x1d, 0x3, 0x1)
writev(r3, &(0x7f0000000a80)=[{&(0x7f0000000440)="c0ff08ce138ac2354d966ae6df2656c0ddfbe3bdb1fec01317ca114ea7f361395a5f", 0x22}, {&(0x7f00000008c0)="e150d98fece98aecee51fcb461381b3dbc1bf2f561188ce42484cf7e6b69ed7f0d0c9175189f14f4002698ea163d04296a5aedeb5e4a23397f3ee14241a670fcd27e78bae53c6f5c47d68bb66f0467bd3f7abe390fb74a900f871eff4aae45a97b2be403cc9b77c68bb4345392e6d28ae18dcee91744d1ff58c3dd798b22c658ca566d761c6644f583a9c320856a", 0x8e}, {&(0x7f0000000980)="e76cc215ad03a8e875512b84ba9e58e6b2ad64c02dc0317aa5911e032039ab5b16ad420e92d1d6651638ce54d84192ad092f8b833d346357102e0130b0001be3db963165e3c8850b469cf785dcaf3e2b2ec3e4ad6782d687a56838dcec0e4d1066dfc253ef6e753bdf35f259ccaae1a7afc9524b18d38ff4455c48c205b9fa611dfe23b61670f15c95fa0305084849a72410952b692cb955f7e10bd01199923a068830db19ff3b73a99cfcbb205b999d132eec5b1f69efe67442d8fd04564bee51a0798ea9b2e0ee6f", 0xc9}], 0x3)
r12 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x109101, 0x0)
close_range(r11, r12, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x1e}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x40}], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

90
[  197.974651][T10092]  ? __cfi_dump_stack_lvl+0x10/0x10
[  197.974684][T10092]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  197.974722][T10092]  dump_stack+0x19/0x20
[  197.974752][T10092]  warn_alloc+0x1bc/0x2a0
[  197.974781][T10092]  ? stack_depot_save_flags+0x38/0x800
[  197.974806][T10092]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  197.974842][T10092]  ? __cfi_warn_alloc+0x10/0x10
[  197.974869][T10092]  ? kasan_save_track+0x4f/0x80
[  197.974891][T10092]  ? __kmalloc_cache_noprof+0x1a5/0x3c0
[  197.974941][T10092]  ? xskq_create+0x68/0x2a0
[  197.974964][T10092]  ? xsk_init_queue+0xb6/0x120
[  197.974987][T10092]  ? xsk_setsockopt+0x43f/0x6f0
[  197.975007][T10092]  ? do_sock_setsockopt+0x26d/0x400
[  197.975031][T10092]  ? __x64_sys_setsockopt+0x1b8/0x250
[  197.975053][T10092]  ? x64_sys_call+0x2adc/0x2ee0
[  197.975089][T10092]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  197.975119][T10092]  __vmalloc_node_range_noprof+0x135/0x1420
[  197.975156][T10092]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  197.975189][T10092]  ? avc_has_perm+0x1f2/0x220
[  197.975219][T10092]  ? kasan_save_alloc_info+0x40/0x50
[  197.975247][T10092]  ? __kasan_kmalloc+0x96/0xb0
[  197.975271][T10092]  vmalloc_user_noprof+0x77/0x90
[  197.975299][T10092]  ? xskq_create+0xdb/0x2a0
[  197.975321][T10092]  xskq_create+0xdb/0x2a0
[  197.975344][T10092]  xsk_init_queue+0xb6/0x120
[  197.975366][T10092]  xsk_setsockopt+0x43f/0x6f0
[  197.975387][T10092]  ? __cfi_xsk_setsockopt+0x10/0x10
[  197.975409][T10092]  ? do_futex+0x309/0x500
[  197.975431][T10092]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[  197.975458][T10092]  ? security_socket_setsockopt+0x33/0xd0
[  197.975480][T10092]  ? __cfi_xsk_setsockopt+0x10/0x10
[  197.975509][T10092]  do_sock_setsockopt+0x26d/0x400
[  197.975533][T10092]  ? __cfi_do_sock_setsockopt+0x10/0x10
[  197.975559][T10092]  __x64_sys_setsockopt+0x1b8/0x250
[  197.975583][T10092]  x64_sys_call+0x2adc/0x2ee0
[  197.975615][T10092]  do_syscall_64+0x58/0xf0
[  197.975646][T10092]  ? clear_bhb_loop+0x50/0xa0
[  197.975673][T10092]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  197.975699][T10092] RIP: 0033:0x7fb43f78eba9
[  197.975726][T10092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  197.975746][T10092] RSP: 002b:00007fb440661038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  197.975772][T10092] RAX: ffffffffffffffda RBX: 00007fb43f9d5fa0 RCX: 00007fb43f78eba9
[  197.975789][T10092] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  197.975804][T10092] RBP: 00007fb43f811e19 R08: 0000000000000004 R09: 0000000000000000
[  197.975819][T10092] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  197.975834][T10092] R13: 00007fb43f9d6038 R14: 00007fb43f9d5fa0 R15: 00007ffdf0c3c248
[  197.975854][T10092]  </TASK>
[  197.975864][T10092] Mem-Info:
[  198.274757][T10095] netlink: 'syz.4.3073': attribute type 28 has an invalid length.
[  198.280418][T10092] active_anon:5566 inactive_anon:3 isolated_anon:0
[  198.280418][T10092]  active_file:9673 inactive_file:14601 isolated_file:0
[  198.280418][T10092]  unevictable:16379 dirty:86 writeback:0
[  198.280418][T10092]  slab_reclaimable:5489 slab_unreclaimable:75204
[  198.280418][T10092]  mapped:23817 shmem:184 pagetables:1308
[  198.280418][T10092]  sec_pagetables:0 bounce:0
[  198.280418][T10092]  kernel_misc_reclaimable:0
[  198.280418][T10092]  free:1501651 free_pcp:3052 free_cma:0
[  198.339191][T10092] Node 0 active_anon:22212kB inactive_anon:12kB active_file:38692kB inactive_file:58404kB unevictable:65516kB isolated(anon):0kB isolated(file):0kB mapped:95268kB dirty:344kB writeback:0kB shmem:736kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6408kB pagetables:5100kB sec_pagetables:0kB all_unreclaimable? no
[  198.371800][T10092] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965952kB mlocked:0kB bounce:0kB free_pcp:5740kB local_pcp:68kB free_cma:0kB
[  198.402802][T10092] lowmem_reserve[]: 0 3921 3921
[  198.407845][T10092] Normal free:3047988kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22252kB inactive_anon:12kB active_file:38692kB inactive_file:58404kB unevictable:65516kB writepending:344kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:4816kB local_pcp:0kB free_cma:0kB
[  198.441099][T10092] lowmem_reserve[]: 0 0 0
[  198.447331][T10092] DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[  198.468030][T10092] Normal: 436*4kB (UME) 607*8kB (UME) 481*16kB (UME) 465*32kB (UME) 475*64kB (UME) 206*128kB (UME) 125*256kB (UME) 34*512kB (UME) 25*1024kB (UME) 17*2048kB (UME) 696*4096kB (UM) = 3046584kB
[  198.487343][T10092] 40839 total pagecache pages
[  198.496781][T10092] 6 pages in swap cache
[  198.501041][T10092] Free swap  = 124268kB
[  198.505313][T10092] Total swap = 124996kB
[  198.509733][T10092] 2097051 pages RAM
[  198.514214][T10092] 0 pages HighMem/MovableOnly
[  198.519125][T10092] 351533 pages reserved
[  198.523379][T10092] 0 pages cma reserved
[  198.530503][T10092] Memory allocations:
[  198.534616][T10092]          0 B        0 init/main.c:1370 func:do_initcalls
[  198.542252][T10092]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  198.550441][T10092]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  198.558504][T10092]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  198.570879][T10092]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  198.580185][T10092]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  198.589159][T10092]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  198.597378][T10092]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  198.605502][T10092]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  198.613699][T10092]          0 B        0 init/initramfs.c:101 func:find_link
[  198.668676][T10114] SELinux:  Context system_u:object_r:apt_var_log_t:s0 is not valid (left unmapped).
[  198.784188][T10129] futex_wake_op: syz.5.3086 tries to shift op by 144; fix this program
[  198.885883][T10145] fuse: Unknown parameter '6������S[G��-���Nj�L��
[  198.885883][T10145] ���Lk��4�}nGn��3��1�
[  198.885883][T10145] G���-7�b�`����֣e��
w`�R�i<�?���xɿ�5�D$�_�1��^/�u�`�Y
[  198.885883][T10145] R�ߖ���S���O_Z�VV�Or�7���'+��^`]C�5����->0z�'
[  198.954795][T10154] overlayfs: failed to clone upperpath
[  198.963377][T10154] SELinux:  Context system_u:object_r:apt_exec_t:s0 is not valid (left unmapped).
[  199.263550][T10193] batadv_slave_1: entered promiscuous mode
[  199.275073][T10191] batadv_slave_1: left promiscuous mode
[  199.443007][T10227] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10227 comm=syz.2.3117
[  199.458023][T10227] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10227 comm=syz.2.3117
[  199.861973][   T36] kauditd_printk_skb: 569 callbacks suppressed
[  199.861993][   T36] audit: type=1400 audit(200.302:35117): avc:  denied  { create } for  pid=10243 comm="syz.4.3124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  199.887500][   T36] audit: type=1400 audit(200.302:35118): avc:  denied  { create } for  pid=10243 comm="syz.4.3124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  199.906989][   T36] audit: type=1400 audit(200.302:35119): avc:  denied  { setopt } for  pid=10243 comm="syz.4.3124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  199.927118][   T36] audit: type=1400 audit(200.302:35120): avc:  denied  { setopt } for  pid=10243 comm="syz.4.3124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  199.947649][   T36] audit: type=1400 audit(200.302:35121): avc:  denied  { create } for  pid=10243 comm="syz.4.3124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  199.967683][   T36] audit: type=1400 audit(200.302:35122): avc:  denied  { setopt } for  pid=10243 comm="syz.4.3124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  199.987015][   T36] audit: type=1400 audit(200.302:35123): avc:  denied  { ioctl } for  pid=10243 comm="syz.4.3124" path="socket:[45313]" dev="sockfs" ino=45313 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  200.012326][   T36] audit: type=1400 audit(200.302:35124): avc:  denied  { sys_module } for  pid=10243 comm="syz.4.3124" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  200.033019][   T36] audit: type=1400 audit(200.302:35125): avc:  denied  { write } for  pid=10243 comm="syz.4.3124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  200.136862][   T36] audit: type=1400 audit(200.573:35126): avc:  denied  { mounton } for  pid=10249 comm="syz.2.3126" path="/176/file1" dev="tmpfs" ino=953 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  200.137695][T10250] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  200.167837][T10250] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  200.176998][T10250] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  200.186254][T10250] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  200.431895][T10266] devtmpfs: Unknown parameter 'fuse'
[  200.629223][T10282] tmpfs: Invalid uid '0x00000000ffffffff'
[  201.410627][T10321] EXT4-fs: Ignoring removed check option
[  201.422885][T10321] No source specified
[  201.590851][T10323] >: renamed from veth0_vlan
[  202.178025][T10366] fuseblk: Unknown parameter 'fd?�'
[  202.357471][T10381] fuse: Unknown parameter 'arouP_id'
[  202.458320][T10390] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3171'.
[  203.780755][T10440] overlayfs: failed to clone upperpath
[  204.391603][T10483] 9pnet_fd: Insufficient options for proto=fd
[  204.575991][T10497] overlayfs: unescaped trailing colons in lowerdir mount option.
[  204.872251][T10511] overlayfs: failed to clone upperpath
[  204.896811][   T36] kauditd_printk_skb: 346 callbacks suppressed
[  204.896831][   T36] audit: type=1400 audit(205.335:35473): avc:  denied  { mount } for  pid=10510 comm="syz.2.3211" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  205.005868][   T36] audit: type=1400 audit(205.445:35474): avc:  denied  { name_bind } for  pid=10513 comm="syz.6.3212" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  205.039198][   T36] audit: type=1400 audit(205.465:35475): avc:  denied  { mounton } for  pid=10513 comm="syz.6.3212" path="/394/file0" dev="tmpfs" ino=2166 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  205.069500][   T36] audit: type=1400 audit(205.475:35476): avc:  denied  { mount } for  pid=10513 comm="syz.6.3212" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  205.092129][   T36] audit: type=1400 audit(205.475:35477): avc:  denied  { mount } for  pid=10513 comm="syz.6.3212" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  205.114814][   T36] audit: type=1400 audit(205.475:35478): avc:  denied  { create } for  pid=10513 comm="syz.6.3212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  205.139557][   T36] audit: type=1400 audit(205.475:35479): avc:  denied  { setopt } for  pid=10513 comm="syz.6.3212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  205.159845][   T36] audit: type=1400 audit(205.475:35480): avc:  denied  { create } for  pid=10513 comm="syz.6.3212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  205.180925][   T36] audit: type=1400 audit(205.475:35481): avc:  denied  { setopt } for  pid=10513 comm="syz.6.3212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  205.200645][   T36] audit: type=1400 audit(205.475:35482): avc:  denied  { ioctl } for  pid=10513 comm="syz.6.3212" path="socket:[45580]" dev="sockfs" ino=45580 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  205.770828][T10527] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3218'.
[  206.143412][T10570] 9pnet_fd: Insufficient options for proto=fd
[  206.825708][T10627] /dev/loop0: Can't lookup blockdev
[  206.891365][T10634] netlink: 'syz.6.3254': attribute type 27 has an invalid length.
[  207.077076][ T2903] bridge_slave_1: left allmulticast mode
[  207.097226][ T2903] bridge_slave_1: left promiscuous mode
[  207.102989][ T2903] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.118734][ T2903] bridge_slave_0: left allmulticast mode
[  207.130220][ T2903] bridge_slave_0: left promiscuous mode
[  207.140299][ T2903] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.284065][ T2903] veth1_macvtap: left promiscuous mode
[  207.301174][ T2903] veth0_vlan: left promiscuous mode
[  207.373068][ T2903] vcan0 (unregistering): left allmulticast mode
[  207.479996][T10651] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.487133][T10651] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.496335][T10651] bridge_slave_0: entered allmulticast mode
[  207.503609][T10651] bridge_slave_0: entered promiscuous mode
[  207.512626][T10651] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.521205][T10651] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.529084][T10651] bridge_slave_1: entered allmulticast mode
[  207.536315][T10651] bridge_slave_1: entered promiscuous mode
[  207.668475][T10651] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.675574][T10651] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.682916][T10651] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.689986][T10651] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.765120][ T2903] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.774503][ T2903] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.791601][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.798780][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  207.813650][ T2903] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.820767][ T2903] bridge0: port 2(bridge_slave_1) entered forwarding state
[  207.928971][T10690] 9pnet_fd: Insufficient options for proto=fd
[  207.929443][T10651] veth0_vlan: entered promiscuous mode
[  207.983597][T10651] veth1_macvtap: entered promiscuous mode
[  207.991274][T10692] overlayfs: failed to clone upperpath
[  208.166682][T10701] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3261'.
[  208.187905][T10701] rust_binder: Write failure EFAULT in pid:2
[  208.201073][T10710] /dev/rnullb0: Can't lookup blockdev
[  208.231183][T10710] tmpfs: Bad value for 'size'
[  208.236456][T10711] tmpfs: Bad value for 'size'
[  208.316384][T10716] 9pnet_fd: Insufficient options for proto=fd
[  208.562571][T10730] overlayfs: failed to clone lowerpath
[  209.258864][T10751] random: crng reseeded on system resumption
[  209.301595][T10751] tipc: Started in network mode
[  209.306509][T10751] tipc: Node identity b218d60918c2, cluster identity 4711
[  209.313783][T10751] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  209.321676][T10751] +
: renamed from syzkaller0
[  209.327268][T10751] tipc: Disabling bearer <eth:syzkaller0>
[  209.336574][T10751] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[  210.091027][   T36] kauditd_printk_skb: 396 callbacks suppressed
[  210.091048][   T36] audit: type=1400 audit(210.395:35879): avc:  denied  { create } for  pid=10780 comm="syz.5.3299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  210.142547][   T36] audit: type=1400 audit(210.414:35880): avc:  denied  { write } for  pid=10780 comm="syz.5.3299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  210.172646][   T36] audit: type=1400 audit(210.414:35881): avc:  denied  { execmem } for  pid=10780 comm="syz.5.3299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  210.274635][   T36] audit: type=1400 audit(210.564:35882): avc:  denied  { create } for  pid=10785 comm="syz.2.3301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  210.306051][   T36] audit: type=1400 audit(210.582:35883): avc:  denied  { setopt } for  pid=10785 comm="syz.2.3301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  210.326198][   T36] audit: type=1400 audit(210.582:35884): avc:  denied  { ioctl } for  pid=10785 comm="syz.2.3301" path="socket:[47108]" dev="sockfs" ino=47108 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  210.351509][   T36] audit: type=1400 audit(210.582:35885): avc:  denied  { write } for  pid=10785 comm="syz.2.3301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  210.421172][   T36] audit: type=1326 audit(210.704:35886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10780 comm="syz.5.3299" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb43f78eba9 code=0x0
[  210.444994][T10790] 9pnet_fd: Insufficient options for proto=fd
[  210.467166][   T36] audit: type=1400 audit(210.723:35887): avc:  denied  { mounton } for  pid=10789 comm="syz.2.3302" path="/201/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1095 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  210.514862][   T36] audit: type=1400 audit(210.760:35888): avc:  denied  { create } for  pid=10780 comm="syz.5.3299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  210.636570][T10799] rust_binder: Fixups oob 165 172 361 173
[  210.636600][T10799] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL }
[  210.653316][T10799] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  210.662605][T10799] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17
[  210.831164][T10807] rust_binder: Write failure EFAULT in pid:20
[  211.488474][T10855] random: crng reseeded on system resumption
[  211.553704][T10858] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3324'.
[  211.630350][T10860] overlayfs: failed to clone upperpath
[  211.938354][T10878] fuse: Unknown parameter 'fd-0x000000000000000b'
[  212.055535][T10895] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3336'.
[  212.080145][T10895] overlayfs: failed to clone upperpath
[  212.097837][T10901] overlayfs: failed to clone upperpath
[  212.112534][T10895] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3336'.
[  212.121600][T10895] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3336'.
[  212.133441][T10901] overlayfs: failed to clone upperpath
[  212.369181][T10923] veth1: entered allmulticast mode
[  212.475404][T10912] veth1: left allmulticast mode
[  212.484013][T10930] overlayfs: failed to clone upperpath
[  212.553985][T10935] netlink: 'syz.5.3349': attribute type 15 has an invalid length.
[  212.683127][T10941] /dev/loop0: Can't lookup blockdev
[  213.000920][T10950] overlayfs: failed to clone upperpath
[  213.432196][T10992] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3364'.
[  213.992413][T11001] netlink: 72 bytes leftover after parsing attributes in process `syz.7.3368'.
[  214.522259][T11028] cgroup: Bad value for 'name'
[  215.550100][   T36] kauditd_printk_skb: 531 callbacks suppressed
[  215.550155][   T36] audit: type=1400 audit(215.494:36420): avc:  denied  { create } for  pid=11071 comm="syz.4.3393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  215.576896][   T36] audit: type=1400 audit(215.504:36421): avc:  denied  { setopt } for  pid=11071 comm="syz.4.3393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  215.596835][   T36] audit: type=1400 audit(215.504:36422): avc:  denied  { setopt } for  pid=11071 comm="syz.4.3393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  215.618610][   T36] audit: type=1400 audit(215.504:36423): avc:  denied  { create } for  pid=11071 comm="syz.4.3393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  215.639017][   T36] audit: type=1400 audit(215.504:36424): avc:  denied  { bind } for  pid=11071 comm="syz.4.3393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  215.640529][T11074] /dev/rnullb0: Can't lookup blockdev
[  215.664838][   T36] audit: type=1400 audit(215.504:36425): avc:  denied  { sys_module } for  pid=11071 comm="syz.4.3393" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  215.687261][   T36] audit: type=1400 audit(215.578:36426): avc:  denied  { mounton } for  pid=11071 comm="syz.4.3393" path="/syzcgroup/unified/syz4" dev="tmpfs" ino=543 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  215.762620][T11080] overlayfs: failed to clone upperpath
[  215.762794][   T36] audit: type=1400 audit(215.691:36427): avc:  denied  { mounton } for  pid=11079 comm="syz.5.3395" path="/577/bus" dev="tmpfs" ino=3168 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  215.848911][   T36] audit: type=1400 audit(215.775:36428): avc:  denied  { mounton } for  pid=11083 comm="syz.5.3397" path="/578/bus" dev="tmpfs" ino=3176 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  215.848986][T11084] overlayfs: failed to clone upperpath
[  215.910098][   T36] audit: type=1400 audit(215.831:36429): avc:  denied  { create } for  pid=11083 comm="syz.5.3397" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  216.170274][T11108] 9pnet_fd: p9_fd_create_unix (11108): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  216.530746][T11129] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3413'.
[  216.954687][T11146] tmpfs: Unknown parameter '�'
[  216.985166][T11151] /dev/rnullb0: Can't lookup blockdev
[  217.229625][T11182] 9pnet_fd: Insufficient options for proto=fd
[  217.251339][T11171] netlink: 1351 bytes leftover after parsing attributes in process `syz.4.3426'.
[  217.355281][T11196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3437'.
[  218.033009][T11207] fuse: Bad value for 'group_id'
[  218.038009][T11207] fuse: Bad value for 'group_id'
[  218.906645][T11231] netlink: 596 bytes leftover after parsing attributes in process `syz.2.3449'.
[  218.920517][T11231] fuse: Bad value for 'fd'
[  219.192516][T11258] fuse: Bad value for 'fd'
[  219.267768][T11266] /dev/rnullb0: Can't lookup blockdev
[  219.333298][T11268] SELinux:  Context system_u:object_r:audisp_var_run_t:s0 is not valid (left unmapped).
[  219.454932][T11278] cgroup: Bad value for 'name'
[  219.538861][T11291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3473'.
[  219.553451][T11291] netlink: 'syz.4.3473': attribute type 3 has an invalid length.
[  219.561522][T11291] netlink: 944 bytes leftover after parsing attributes in process `syz.4.3473'.
[  220.114833][  T331] usb 6-1: USB disconnect, device number 13
[  220.197633][T11308] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.227295][T11308] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.236051][T11308] bridge_slave_0: entered allmulticast mode
[  220.242509][T11308] bridge_slave_0: entered promiscuous mode
[  220.250376][  T329] bridge_slave_1: left allmulticast mode
[  220.257108][  T329] bridge_slave_1: left promiscuous mode
[  220.265405][  T329] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.273111][  T329] bridge_slave_0: left allmulticast mode
[  220.280142][  T329] bridge_slave_0: left promiscuous mode
[  220.286311][  T329] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.457654][T11308] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.464777][T11308] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.471936][T11308] bridge_slave_1: entered allmulticast mode
[  220.478610][T11308] bridge_slave_1: entered promiscuous mode
[  220.484803][  T329] tipc: Disabling bearer <udp:syz2>
[  220.490169][  T329] tipc: Left network mode
[  220.497685][  T329] veth1_macvtap: left promiscuous mode
[  220.503342][  T329] veth0_vlan: left promiscuous mode
[  220.619537][T11329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=11329 comm=syz.4.3485
[  220.739442][T11308] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.746661][T11308] bridge0: port 2(bridge_slave_1) entered forwarding state
[  220.753997][T11308] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.761106][T11308] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.864125][ T2903] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.883804][ T2903] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.896140][   T36] kauditd_printk_skb: 433 callbacks suppressed
[  220.896157][   T36] audit: type=1400 audit(220.500:36863): avc:  denied  { sys_module } for  pid=11308 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  220.927116][   T36] audit: type=1400 audit(220.500:36864): avc:  denied  { create } for  pid=11357 comm="syz.7.3493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  220.947234][   T36] audit: type=1400 audit(220.500:36865): avc:  denied  { setopt } for  pid=11357 comm="syz.7.3493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  220.948185][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.968173][   T36] audit: type=1400 audit(220.509:36866): avc:  denied  { create } for  pid=11357 comm="syz.7.3493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  220.973436][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.974386][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.995859][   T36] audit: type=1400 audit(220.519:36867): avc:  denied  { setopt } for  pid=11357 comm="syz.7.3493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  220.999655][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  221.007843][   T36] audit: type=1400 audit(220.593:36868): avc:  denied  { create } for  pid=11355 comm="syz.2.3492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  221.052309][   T36] audit: type=1400 audit(220.621:36869): avc:  denied  { write } for  pid=11355 comm="syz.2.3492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  221.075501][   T36] audit: type=1400 audit(220.621:36870): avc:  denied  { listen } for  pid=11355 comm="syz.2.3492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  221.096690][   T36] audit: type=1400 audit(220.687:36871): avc:  denied  { name_bind } for  pid=11361 comm="syz.2.3494" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1
[  221.118141][   T36] audit: type=1400 audit(220.687:36872): avc:  denied  { sys_module } for  pid=11308 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  221.168501][T11308] veth0_vlan: entered promiscuous mode
[  221.205030][T11308] veth1_macvtap: entered promiscuous mode
[  221.320235][T11365] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  221.426672][T11372] rust_binder: Write failure EFAULT in pid:4
[  221.427174][T11371] rust_binder: Write failure EFAULT in pid:4
[  221.612008][T11388] 9p: Unknown Cache mode or invalid value C��F���fscache
[  221.791360][T11406] incfs: Options parsing error. -22
[  221.796873][T11406] incfs: mount failed -22
[  221.962778][T11417] fuse: Bad value for 'fd'
[  222.006292][   T10] usb 6-1: new low-speed USB device number 14 using dummy_hcd
[  222.190931][   T10] usb 6-1: No LPM exit latency info found, disabling LPM.
[  222.207960][   T10] usb 6-1: config 2 has an invalid interface number: 137 but max is 0
[  222.217723][   T10] usb 6-1: config 2 contains an unexpected descriptor of type 0x2, skipping
[  222.228503][   T10] usb 6-1: config 2 contains an unexpected descriptor of type 0x1, skipping
[  222.241678][   T10] usb 6-1: config 2 contains an unexpected descriptor of type 0x1, skipping
[  222.251713][   T10] usb 6-1: config 2 has no interface number 0
[  222.259488][   T10] usb 6-1: config 2 interface 137 altsetting 1 endpoint 0x6 is Bulk; changing to Interrupt
[  222.270203][   T10] usb 6-1: config 2 interface 137 altsetting 1 endpoint 0x9 has invalid maxpacket 1024, setting to 8
[  222.282218][   T10] usb 6-1: config 2 interface 137 altsetting 1 has an endpoint descriptor with address 0xCC, changing to 0x8C
[  222.294643][   T10] usb 6-1: config 2 interface 137 altsetting 1 endpoint 0x8C has invalid maxpacket 61297, setting to 8
[  222.311668][   T10] usb 6-1: config 2 interface 137 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  222.332958][   T10] usb 6-1: config 2 interface 137 altsetting 1 endpoint 0x86 has an invalid bInterval 167, changing to 4
[  222.355689][   T10] usb 6-1: config 2 interface 137 altsetting 1 endpoint 0x86 has invalid maxpacket 11978, setting to 0
[  222.367499][   T10] usb 6-1: config 2 interface 137 altsetting 1 endpoint 0xB has invalid maxpacket 512, setting to 8
[  222.379055][   T10] usb 6-1: config 2 interface 137 altsetting 1 endpoint 0x7 has invalid maxpacket 32, setting to 0
[  222.390499][   T10] usb 6-1: config 2 interface 137 altsetting 1 endpoint 0xF has invalid maxpacket 1023, setting to 8
[  222.402163][   T10] usb 6-1: config 2 interface 137 altsetting 1 endpoint 0x5 has invalid maxpacket 40, setting to 8
[  222.414858][   T10] usb 6-1: config 2 interface 137 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  222.426313][   T10] usb 6-1: config 2 interface 137 altsetting 1 has a duplicate endpoint with address 0xB, skipping
[  222.437915][   T10] usb 6-1: config 2 interface 137 altsetting 1 endpoint 0x4 has invalid maxpacket 64, setting to 8
[  222.449782][   T10] usb 6-1: config 2 interface 137 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  222.461469][   T10] usb 6-1: config 2 interface 137 altsetting 1 endpoint 0x8 is Bulk; changing to Interrupt
[  222.472335][   T10] usb 6-1: config 2 interface 137 altsetting 1 has 14 endpoint descriptors, different from the interface descriptor's value: 16
[  222.486368][   T10] usb 6-1: config 2 interface 137 has no altsetting 0
[  222.499546][   T10] usb 6-1: New USB device found, idVendor=0543, idProduct=152e, bcdDevice= 6.3b
[  222.508712][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.516784][   T10] usb 6-1: Product: ␁
[  222.521097][   T10] usb 6-1: Manufacturer: 맳燉缨풇赸┌馄벐捭閞쯞趛韃뤋Ꝩꈱ钪鯍뺳ᛱゃꋌ뿠샾⏆䋀⾹𧻓巃⒦౥㘐ꏂㆭ괏䚈觟轵鷚鄶Ȉ᭱⩊綺氖ꃎ곜╖乷묺⹧꫄ꖷྫྷ廿켒埵덕䲐墁᪣珼ఢ螒挋✺⃆璀蔹簰㵳憇侌瞾꺆徥幠
[  222.547094][   T10] usb 6-1: SerialNumber: 섄莾뽘埙䶜⁃੄Ɱ箸ˆ輳횿鎊탭ꝇ힙墶爘ﺎ썩˞뙜⣲訅鷁聛∓꥕꧃櫷抷濨牧쵅鬍謰⢸脎鎽㦳툡擺誾桚量쥡䳦ڜꖁ僯噴쳼‥ᓸıో⬸൯⾬ﵬ㩿슏숂扤⡍褃焱펛Ɯ獮䆭剞軎聩ᩁ䛑廅뽵ꥎﰔ뉘
[  222.580140][T11392] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  222.596782][T11392] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  223.496542][T11479] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3537'.
[  223.677305][T11495] overlayfs: failed to clone upperpath
[  223.828596][T11507] overlay: Unknown parameter 'fsmagic'
[  224.127540][T11526] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3552'.
[  224.138414][T11527] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3552'.
[  224.149732][T11526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11526 comm=syz.2.3552
[  224.875897][T11590] fuse: Bad value for 'fd'
[  224.988413][   T10] usb 6-1: USB disconnect, device number 14
[  225.230161][T11616] overlay: Unknown parameter 'smackfstransmute'
[  225.350856][T11639] fuse: Bad value for 'fd'
[  225.458525][   T10] usb 6-1: new full-speed USB device number 15 using dummy_hcd
[  225.493930][T11657] /dev/loop4: Can't lookup blockdev
[  225.535972][T11662] tipc: Started in network mode
[  225.541025][T11662] tipc: Node identity ac14140f, cluster identity 4711
[  225.548542][T11662] tipc: New replicast peer: 255.255.255.255
[  225.554781][T11662] tipc: Enabled bearer <udp:syz2>, priority 10
[  225.617097][T11669] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3596'.
[  225.630839][T11669] tipc: Disabling bearer <udp:syz2>
[  225.638657][   T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  225.650710][   T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  225.662446][   T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  225.678043][   T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  225.688214][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.696922][   T10] usb 6-1: Product: syz
[  225.701193][   T10] usb 6-1: Manufacturer: syz
[  225.706715][   T10] usb 6-1: SerialNumber: syz
[  225.719812][T11619] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  225.737952][   T10] cdc_mbim 6-1:1.0: skipping garbage
[  225.745060][   T10] usb 6-1: selecting invalid altsetting 1
[  225.797723][T11679] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  225.956552][   T10] cdc_mbim 6-1:1.0: bind() failure
[  225.982779][   T10] usb 6-1: USB disconnect, device number 15
[  226.033212][T11685] fuse: Bad value for 'fd'
[  226.042562][T11685] overlayfs: failed to clone upperpath
[  226.249764][   T36] kauditd_printk_skb: 693 callbacks suppressed
[  226.249780][   T36] audit: type=1400 audit(225.515:37566): avc:  denied  { create } for  pid=11701 comm="syz.7.3610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  226.276591][   T36] audit: type=1400 audit(225.515:37567): avc:  denied  { write } for  pid=11701 comm="syz.7.3610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  226.297006][   T36] audit: type=1400 audit(225.515:37568): avc:  denied  { read } for  pid=11701 comm="syz.7.3610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  226.319926][   T36] audit: type=1400 audit(225.515:37569): avc:  denied  { read } for  pid=11701 comm="syz.7.3610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  226.339944][   T36] audit: type=1400 audit(225.515:37570): avc:  denied  { create } for  pid=11701 comm="syz.7.3610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  226.360869][   T36] audit: type=1400 audit(225.515:37571): avc:  denied  { write } for  pid=11701 comm="syz.7.3610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  226.381676][   T36] audit: type=1400 audit(225.515:37572): avc:  denied  { read } for  pid=11701 comm="syz.7.3610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  226.402345][   T36] audit: type=1400 audit(225.515:37573): avc:  denied  { read } for  pid=11701 comm="syz.7.3610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  226.429756][   T36] audit: type=1400 audit(225.515:37574): avc:  denied  { create } for  pid=11701 comm="syz.7.3610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  226.450862][   T36] audit: type=1400 audit(225.515:37575): avc:  denied  { write } for  pid=11701 comm="syz.7.3610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  226.536220][T11717] netlink: 'syz.7.3616': attribute type 64 has an invalid length.
[  227.196546][T11736] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3623'.
[  227.272412][T11739] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11739 comm=syz.4.3624
[  227.285108][T11739] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11739 comm=syz.4.3624
[  227.302055][T11739] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11739 comm=syz.4.3624
[  227.358778][T11745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11745 comm=syz.4.3624
[  227.483408][T11749] devpts: called with bogus options
[  227.732113][T11761] __vm_enough_memory: pid: 11761, comm: syz.5.3632, bytes: 18014402804453376 not enough memory for the allocation
[  227.812182][T11763] incfs: Options parsing error. -22
[  227.817627][T11763] incfs: mount failed -22
[  227.833272][T11765] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  227.841271][T11765] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  227.849812][T11765] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  227.857756][T11765] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  227.868083][T11765] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  227.876119][T11765] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  227.884608][T11765] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  227.892602][T11765] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  228.025092][T11779] kvm: pic: non byte write
[  228.038512][T11779] rust_binder: Write failure EFAULT in pid:35
[  228.336440][T11811] futex_wake_op: syz.4.3650 tries to shift op by -1; fix this program
[  228.419131][   T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  228.582382][   T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  228.592513][   T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  228.603136][   T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  228.612218][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  228.620237][   T10] usb 6-1: SerialNumber: syz
[  228.710795][T11820] netlink: 37 bytes leftover after parsing attributes in process `syz.2.3653'.
[  228.863511][T11793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  228.878414][T11793] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.148504][   T10] usb 6-1: 0:2 : does not exist
[  229.156593][   T10] usb 6-1: unit 5 not found!
[  229.171234][   T10] usb 6-1: USB disconnect, device number 16
[  229.264819][T11314] udevd[11314]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  229.546763][T11866] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  229.547115][T11866] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  229.558347][T11867] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  229.565773][T11868] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  230.236075][  T944] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  230.435547][  T944] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  230.452922][  T944] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  230.462024][  T944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.470105][  T944] usb 6-1: Product: syz
[  230.474349][  T944] usb 6-1: Manufacturer: syz
[  230.478956][  T944] usb 6-1: SerialNumber: syz
[  230.693438][T11939] fuseblk: Bad value for 'fd'
[  230.804135][T11950] fuse: Bad value for 'fd'
[  231.581814][  T944] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42
[  231.588397][  T944] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[  231.596824][  T944] cdc_ncm 6-1:1.0: setting rx_max = 2048
[  231.796351][   T36] kauditd_printk_skb: 589 callbacks suppressed
[  231.796384][   T36] audit: type=1400 audit(230.689:38165): avc:  denied  { ioctl } for  pid=11899 comm="syz.5.3683" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5507 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  231.934849][   T36] audit: type=1400 audit(230.820:38166): avc:  denied  { create } for  pid=11969 comm="syz.7.3708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  231.954046][   T36] audit: type=1400 audit(230.829:38167): avc:  denied  { setopt } for  pid=11969 comm="syz.7.3708" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  231.974884][   T36] audit: type=1400 audit(230.829:38168): avc:  denied  { setopt } for  pid=11969 comm="syz.7.3708" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  231.996087][   T36] audit: type=1400 audit(230.829:38169): avc:  denied  { create } for  pid=11969 comm="syz.7.3708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  232.017002][   T36] audit: type=1400 audit(230.829:38170): avc:  denied  { write } for  pid=11969 comm="syz.7.3708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  232.038265][   T36] audit: type=1400 audit(230.829:38171): avc:  denied  { read } for  pid=11969 comm="syz.7.3708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  232.053264][T11902] binder: Unknown parameter ''
[  232.059423][   T36] audit: type=1400 audit(230.829:38172): avc:  denied  { read } for  pid=11969 comm="syz.7.3708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  232.076104][  T944] cdc_ncm 6-1:1.0: setting tx_max = 88
[  232.089668][   T36] audit: type=1400 audit(230.829:38173): avc:  denied  { create } for  pid=11969 comm="syz.7.3708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  232.103891][  T944] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  232.121254][   T36] audit: type=1400 audit(230.829:38174): avc:  denied  { write } for  pid=11969 comm="syz.7.3708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  232.137816][  T944] usb 6-1: USB disconnect, device number 17
[  232.149094][  T944] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP)
[  232.163865][T11974] SELinux:  Context system_u:object_r:netcontrol_device_t:s0 is not valid (left unmapped).
[  232.252747][T11976] veth0_virt_wifi: entered allmulticast mode
[  232.342519][T11975] veth0_virt_wifi: left allmulticast mode
[  232.739565][T11999] SELinux: security_context_str_to_sid () failed with errno=-22
[  232.861835][T12011] netlink: 'syz.2.3724': attribute type 4 has an invalid length.
[  233.703869][T12047] /dev/loop0: Can't lookup blockdev
[  234.030318][T12053] fuse: Bad value for 'fd'
[  234.041939][T12053] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3738'.
[  234.137062][T12065] fuse: Unknown parameter 'vd'
[  234.300473][T12071] syz.2.3746: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0
[  234.316617][T12071] CPU: 1 UID: 0 PID: 12071 Comm: syz.2.3746 Not tainted syzkaller #0 fee5265d319350b22cf00991634aaaf1de34201c
[  234.316658][T12071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  234.316675][T12071] Call Trace:
[  234.316683][T12071]  <TASK>
[  234.316693][T12071]  __dump_stack+0x21/0x30
[  234.316733][T12071]  dump_stack_lvl+0x10c/0x190
[  234.316764][T12071]  ? __cfi_dump_stack_lvl+0x10/0x10
[  234.316795][T12071]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  234.316833][T12071]  dump_stack+0x19/0x20
[  234.316863][T12071]  warn_alloc+0x1bc/0x2a0
[  234.316892][T12071]  ? stack_depot_save_flags+0x38/0x800
[  234.316916][T12071]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  234.316950][T12071]  ? __cfi_warn_alloc+0x10/0x10
[  234.316978][T12071]  ? kasan_save_track+0x4f/0x80
[  234.317000][T12071]  ? __kmalloc_cache_noprof+0x1a5/0x3c0
[  234.317045][T12071]  ? xskq_create+0x68/0x2a0
[  234.317068][T12071]  ? xsk_init_queue+0xb6/0x120
[  234.317089][T12071]  ? xsk_setsockopt+0x43f/0x6f0
[  234.317111][T12071]  ? do_sock_setsockopt+0x26d/0x400
[  234.317134][T12071]  ? __x64_sys_setsockopt+0x1b8/0x250
[  234.317157][T12071]  ? x64_sys_call+0x2adc/0x2ee0
[  234.317188][T12071]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  234.317217][T12071]  __vmalloc_node_range_noprof+0x135/0x1420
[  234.317253][T12071]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  234.317285][T12071]  ? avc_has_perm+0x1f2/0x220
[  234.317315][T12071]  ? kasan_save_alloc_info+0x40/0x50
[  234.317344][T12071]  ? __kasan_kmalloc+0x96/0xb0
[  234.317368][T12071]  vmalloc_user_noprof+0x77/0x90
[  234.317397][T12071]  ? xskq_create+0xdb/0x2a0
[  234.317419][T12071]  xskq_create+0xdb/0x2a0
[  234.317442][T12071]  xsk_init_queue+0xb6/0x120
[  234.317464][T12071]  xsk_setsockopt+0x43f/0x6f0
[  234.317486][T12071]  ? __cfi_xsk_setsockopt+0x10/0x10
[  234.317508][T12071]  ? do_futex+0x356/0x500
[  234.317532][T12071]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[  234.317559][T12071]  ? security_socket_setsockopt+0x33/0xd0
[  234.317581][T12071]  ? __cfi_xsk_setsockopt+0x10/0x10
[  234.317603][T12071]  do_sock_setsockopt+0x26d/0x400
[  234.317631][T12071]  ? __cfi_do_sock_setsockopt+0x10/0x10
[  234.317658][T12071]  __x64_sys_setsockopt+0x1b8/0x250
[  234.317683][T12071]  x64_sys_call+0x2adc/0x2ee0
[  234.317716][T12071]  do_syscall_64+0x58/0xf0
[  234.317748][T12071]  ? clear_bhb_loop+0x50/0xa0
[  234.317777][T12071]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  234.317803][T12071] RIP: 0033:0x7f4370f8eba9
[  234.317823][T12071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  234.317845][T12071] RSP: 002b:00007f4371e6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  234.317872][T12071] RAX: ffffffffffffffda RBX: 00007f43711d5fa0 RCX: 00007f4370f8eba9
[  234.317890][T12071] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  234.317906][T12071] RBP: 00007f4371011e19 R08: 0000000000000004 R09: 0000000000000000
[  234.317922][T12071] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  234.317937][T12071] R13: 00007f43711d6038 R14: 00007f43711d5fa0 R15: 00007ffd2c208f38
[  234.317958][T12071]  </TASK>
[  234.318025][T12071] Mem-Info:
[  234.631250][T12071] active_anon:5747 inactive_anon:3 isolated_anon:0
[  234.631250][T12071]  active_file:7674 inactive_file:16668 isolated_file:0
[  234.631250][T12071]  unevictable:16380 dirty:129 writeback:0
[  234.631250][T12071]  slab_reclaimable:5746 slab_unreclaimable:75135
[  234.631250][T12071]  mapped:24164 shmem:182 pagetables:1079
[  234.631250][T12071]  sec_pagetables:0 bounce:0
[  234.631250][T12071]  kernel_misc_reclaimable:0
[  234.631250][T12071]  free:1496600 free_pcp:8732 free_cma:0
[  234.676598][T12071] Node 0 active_anon:26240kB inactive_anon:12kB active_file:30696kB inactive_file:66672kB unevictable:65520kB isolated(anon):0kB isolated(file):0kB mapped:96656kB dirty:516kB writeback:0kB shmem:728kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6208kB pagetables:4364kB sec_pagetables:0kB all_unreclaimable? no
[  234.708836][T12071] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965952kB mlocked:0kB bounce:0kB free_pcp:5740kB local_pcp:68kB free_cma:0kB
[  234.739544][T12071] lowmem_reserve[]: 0 3921 3921
[  234.744560][T12071] Normal free:3048540kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26240kB inactive_anon:12kB active_file:30696kB inactive_file:66672kB unevictable:65520kB writepending:516kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:3180kB local_pcp:2856kB free_cma:0kB
[  234.777737][T12071] lowmem_reserve[]: 0 0 0
[  234.783184][T12071] DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[  234.789051][T12090] overlayfs: failed to clone upperpath
[  234.798914][T12071] Normal: 1489*4kB (UME) 2015*8kB (UME) 1081*16kB (UME) 399*32kB (UME) 240*64kB (UME) 157*128kB (UME) 78*256kB (UME) 53*512kB (UME) 27*1024kB (UME) 17*2048kB (UME) 696*4096kB (UM) = 3047980kB
[  234.823923][T12071] 40906 total pagecache pages
[  234.829641][T12071] 6 pages in swap cache
[  234.834661][T12071] Free swap  = 124492kB
[  234.839811][T12071] Total swap = 124996kB
[  234.845719][T12071] 2097051 pages RAM
[  234.849627][T12071] 0 pages HighMem/MovableOnly
[  234.855416][T12071] 351533 pages reserved
[  234.859699][T12071] 0 pages cma reserved
[  234.867748][T12071] Memory allocations:
[  234.871814][T12071]          0 B        0 init/main.c:1370 func:do_initcalls
[  234.880173][T12071]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  234.890386][T12071]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  234.899064][T12071]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  234.907835][T12071]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  234.915864][T12071]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  234.933357][T12071]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  234.942484][T12071]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  234.951248][T12071]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  234.960219][T12071]          0 B        0 init/initramfs.c:101 func:find_link
[  234.986954][T12096] fuse: Unknown parameter 'fuI+E0x0000000000000008'
[  235.159504][T12127] IPv6: Can't replace route, no match found
[  235.899129][T12150] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46478 sclass=netlink_route_socket pid=12150 comm=syz.2.3775
[  236.342036][T12173] rust_binder: Write failure EFAULT in pid:71
[  236.625634][T12192] netlink: 'syz.2.3788': attribute type 28 has an invalid length.
[  236.990823][T12214] overlayfs: failed to clone upperpath
[  237.350929][   T36] kauditd_printk_skb: 410 callbacks suppressed
[  237.350946][   T36] audit: type=1400 audit(235.891:38585): avc:  denied  { unmount } for  pid=11308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  237.384913][   T36] audit: type=1400 audit(235.919:38586): avc:  denied  { read write } for  pid=11308 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  237.408753][   T36] audit: type=1400 audit(235.919:38587): avc:  denied  { read write open } for  pid=11308 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  237.423892][T12216] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3797'.
[  237.433620][   T36] audit: type=1400 audit(235.919:38588): avc:  denied  { ioctl } for  pid=11308 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  237.446883][T12216] rust_binder: Write failure EINVAL in pid:76
[  237.467448][   T36] audit: type=1400 audit(235.947:38589): avc:  denied  { getattr } for  pid=12215 comm="syz.5.3797" path="cgroup:[4026532904]" dev="nsfs" ino=4026532904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  237.497184][   T36] audit: type=1400 audit(235.947:38590): avc:  denied  { read } for  pid=12215 comm="syz.5.3797" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  237.560906][   T36] audit: type=1400 audit(235.947:38591): avc:  denied  { read open } for  pid=12215 comm="syz.5.3797" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  237.587144][   T36] audit: type=1400 audit(235.947:38592): avc:  denied  { map } for  pid=12215 comm="syz.5.3797" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  237.611601][   T36] audit: type=1400 audit(235.947:38593): avc:  denied  { read } for  pid=12215 comm="syz.5.3797" path="/dev/binderfs/binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  237.643884][   T36] audit: type=1400 audit(235.947:38594): avc:  denied  { create } for  pid=12215 comm="syz.5.3797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  237.681657][T12231] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 3
[  237.697962][T12231] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  237.723098][T12236] netlink: 'syz.2.3798': attribute type 4 has an invalid length.
[  237.764661][T12235] 9pnet_fd: Insufficient options for proto=fd
[  238.081964][T12279] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3818'.
[  238.413861][T12298] 9pnet_fd: Insufficient options for proto=fd
[  238.465897][  T686] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  238.639451][  T686] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  238.650937][  T686] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  238.660817][  T686] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  238.674310][  T686] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  238.683457][  T686] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.693829][  T686] usb 6-1: config 0 descriptor??
[  239.140544][  T686] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving
[  239.169002][  T686] plantronics 0003:047F:FFFF.000D: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  239.170801][T12318] /dev/loop0: Can't lookup blockdev
[  239.458281][T12287] rust_binder: Fixups oob 165 172 361 173
[  239.458310][T12287] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EINVAL }
[  239.467315][T12287] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  239.476318][T12287] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:97
[  239.488847][  T686] usb 6-1: USB disconnect, device number 18
[  239.610776][T12341] netlink: 'syz.4.3840': attribute type 16 has an invalid length.
[  239.618773][T12341] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.3840'.
[  240.165308][T12349] rust_binder: Write failure EINVAL in pid:99
[  240.352589][T12368] rust_binder: Error in use_page_slow: ESRCH
[  240.358785][T12368] rust_binder: use_range failure ESRCH
[  240.364876][T12368] rust_binder: Failed to allocate buffer. len:1048, is_oneway:false
[  240.371601][T12368] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ESRCH }
[  240.380315][T12368] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ESRCH } my_pid:114
[  240.590522][T12390] overlayfs: failed to clone upperpath
[  240.701173][T12398] rust_binder: 120: no such ref 2
[  240.719434][T12398] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  240.728539][T12398] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0
[  241.385078][T12410] SELinux:  Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped).
[  241.727721][T12436] fuse: Bad value for 'fd'
[  241.727747][T12437] fuse: Bad value for 'fd'
[  241.746171][T12441] /dev/rnullb0: Can't lookup blockdev
[  241.762900][T12443] binder: Unknown parameter '�zLM����W�ֽmax'
[  241.829547][T12447] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3879'.
[  241.935228][T12464] rust_binder: Error while translating object.
[  241.935255][T12464] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  241.941995][T12464] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:132
[  242.150402][ T2903] Bluetooth: hci0: Frame reassembly failed (-84)
[  242.520377][T12486] overlayfs: failed to clone upperpath
[  242.723693][   T36] kauditd_printk_skb: 556 callbacks suppressed
[  242.723718][   T36] audit: type=1400 audit(240.924:39151): avc:  denied  { execmem } for  pid=12507 comm="syz.4.3898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  242.759901][   T36] audit: type=1400 audit(240.953:39152): avc:  denied  { execmem } for  pid=12507 comm="syz.4.3898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  242.818344][   T36] audit: type=1400 audit(241.009:39153): avc:  denied  { execmem } for  pid=12507 comm="syz.4.3898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  242.868922][   T36] audit: type=1400 audit(241.046:39154): avc:  denied  { create } for  pid=12511 comm="syz.7.3899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  242.909284][   T36] audit: type=1400 audit(241.065:39155): avc:  denied  { write } for  pid=12511 comm="syz.7.3899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  242.954875][   T36] audit: type=1400 audit(241.065:39156): avc:  denied  { write } for  pid=12511 comm="syz.7.3899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  242.986946][   T36] audit: type=1400 audit(241.065:39157): avc:  denied  { write } for  pid=12511 comm="syz.7.3899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  243.027984][   T36] audit: type=1400 audit(241.065:39158): avc:  denied  { write } for  pid=12511 comm="syz.7.3899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  243.082333][   T36] audit: type=1400 audit(241.065:39159): avc:  denied  { write } for  pid=12511 comm="syz.7.3899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  243.115197][   T36] audit: type=1400 audit(241.065:39160): avc:  denied  { write } for  pid=12511 comm="syz.7.3899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  244.082047][T12576] tmpfs: Unknown parameter 'memory.events'
[  244.301585][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  244.301593][  T610] Bluetooth: hci0: command 0x1003 tx timeout
[  245.872737][  T944] usb 6-1: new full-speed USB device number 19 using dummy_hcd
[  245.980328][T12797] overlayfs: failed to resolve './file1': -2
[  246.034932][  T944] usb 6-1: not running at top speed; connect to a high speed hub
[  246.044982][  T944] usb 6-1: config 2 has an invalid interface number: 96 but max is 0
[  246.053140][  T944] usb 6-1: config 2 has no interface number 0
[  246.060696][  T944] usb 6-1: config 2 interface 96 altsetting 7 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  246.072140][  T944] usb 6-1: config 2 interface 96 altsetting 7 endpoint 0x5 has invalid maxpacket 1023, setting to 64
[  246.083146][  T944] usb 6-1: config 2 interface 96 has no altsetting 0
[  246.093457][  T944] usb 6-1: New USB device found, idVendor=0421, idProduct=00b0, bcdDevice=e6.23
[  246.104882][  T944] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.112989][  T944] usb 6-1: Product: syz
[  246.117433][  T944] usb 6-1: Manufacturer: syz
[  246.122126][  T944] usb 6-1: SerialNumber: syz
[  246.130807][T12775] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  246.133297][T12808] tmpfs: Unknown parameter '00000000000000000000000'
[  246.146033][T12775] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  246.188658][T12810] batadv_slave_0: entered promiscuous mode
[  246.197343][T12810] 9pnet_fd: p9_fd_create_tcp (12810): problem connecting socket to 127.0.0.1
[  246.207012][T12809] batadv_slave_0: left promiscuous mode
[  246.402546][  T944] usb 6-1: bad CDC descriptors
[  246.429022][  T944] usb 6-1: USB disconnect, device number 19
[  246.478758][T12829] fuse: Bad value for 'fd'
[  247.044561][T12882] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3982'.
[  247.137443][T12888] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=12888 comm=syz.2.3985
[  247.914130][T12927] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3997'.
[  247.980029][T12936] netlink: 'syz.2.4000': attribute type 4 has an invalid length.
[  247.991471][T12936] netlink: 992 bytes leftover after parsing attributes in process `syz.2.4000'.
[  248.075855][   T36] kauditd_printk_skb: 678 callbacks suppressed
[  248.075874][   T36] audit: type=1400 audit(245.930:39839): avc:  denied  { create } for  pid=12940 comm="syz.7.4002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  248.114148][   T36] audit: type=1400 audit(245.930:39840): avc:  denied  { create } for  pid=12940 comm="syz.7.4002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  248.138131][   T36] audit: type=1400 audit(245.930:39841): avc:  denied  { write } for  pid=12940 comm="syz.7.4002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  248.192548][   T36] audit: type=1400 audit(245.930:39842): avc:  denied  { read } for  pid=12940 comm="syz.7.4002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  248.217556][   T36] audit: type=1400 audit(245.930:39843): avc:  denied  { read } for  pid=12940 comm="syz.7.4002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  248.237566][   T36] audit: type=1400 audit(245.939:39844): avc:  denied  { write } for  pid=12940 comm="syz.7.4002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  248.264107][   T36] audit: type=1400 audit(245.958:39845): avc:  denied  { mounton } for  pid=12939 comm="syz.2.4001" path="/370/file0" dev="tmpfs" ino=2018 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  248.305522][   T36] audit: type=1400 audit(245.958:39846): avc:  denied  { mount } for  pid=12939 comm="syz.2.4001" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1
[  248.360117][   T36] audit: type=1400 audit(246.173:39847): avc:  denied  { read write } for  pid=11308 comm="syz-executor" name="loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  248.415755][   T36] audit: type=1400 audit(246.183:39848): avc:  denied  { read write open } for  pid=11308 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  248.686776][T12960] netlink: 'syz.4.4009': attribute type 40 has an invalid length.
[  248.814854][T12950] overlayfs: failed to resolve './bus': -2
[  248.929559][  T478] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  249.101243][  T478] usb 6-1: Using ep0 maxpacket: 32
[  249.114014][  T478] usb 6-1: config 0 has an invalid interface number: 196 but max is 0
[  249.130656][  T478] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  249.145274][  T478] usb 6-1: config 0 has no interface number 0
[  249.147155][T12978] netlink: 'syz.7.4017': attribute type 4 has an invalid length.
[  249.151737][  T478] usb 6-1: config 0 interface 196 altsetting 65 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  249.173842][  T478] usb 6-1: config 0 interface 196 has no altsetting 0
[  249.185343][  T478] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  249.208797][  T478] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.216890][  T478] usb 6-1: Product: syz
[  249.222283][  T478] usb 6-1: Manufacturer: syz
[  249.226942][  T478] usb 6-1: SerialNumber: syz
[  249.244779][  T478] usb 6-1: config 0 descriptor??
[  249.263843][  T478] ipheth 6-1:0.196: Unable to find alternate settings interface
[  249.477626][T12961] rust_binder: Write failure EFAULT in pid:174
[  249.478105][  T626] usb 6-1: USB disconnect, device number 20
[  249.650740][T13011] cgroup: none used incorrectly
[  249.826533][T13042] netlink: 'syz.2.4037': attribute type 27 has an invalid length.
[  250.340376][  T626] usb 6-1: new low-speed USB device number 21 using dummy_hcd
[  250.479346][  T626] usb 6-1: device descriptor read/64, error -71
[  250.735894][  T626] usb 6-1: device descriptor read/64, error -71
[  250.992329][  T626] usb 6-1: new low-speed USB device number 22 using dummy_hcd
[  251.131312][  T626] usb 6-1: device descriptor read/64, error -71
[  251.312812][T13117] 8021q: VLANs not supported on lo
[  251.349164][T13125] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8228 sclass=netlink_route_socket pid=13125 comm=syz.4.4064
[  251.409170][  T626] usb 6-1: device descriptor read/64, error -71
[  251.458718][T13137] 9pnet_fd: Insufficient options for proto=fd
[  251.474049][T13137] 9pnet_fd: Insufficient options for proto=fd
[  251.481175][T13137] 9pnet_fd: Insufficient options for proto=fd
[  251.526833][  T626] usb usb6-port1: attempt power cycle
[  251.642604][T13152] netlink: 'syz.7.4072': attribute type 13 has an invalid length.
[  251.849295][T13175] overlayfs: failed to clone upperpath
[  251.890133][  T626] usb 6-1: new low-speed USB device number 23 using dummy_hcd
[  251.914720][  T626] usb 6-1: device descriptor read/8, error -71
[  251.949692][T13184] SELinux:  Context system_u:object_r:sshd_var_run_t:s0 is not valid (left unmapped).
[  251.977984][T13184] overlay: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa is not a directory
[  252.074556][  T626] usb 6-1: device descriptor read/8, error -71
[  252.328367][  T626] usb 6-1: new low-speed USB device number 24 using dummy_hcd
[  252.353156][  T626] usb 6-1: device descriptor read/8, error -71
[  252.491375][  T626] usb 6-1: device descriptor read/8, error -71
[  252.606353][  T626] usb usb6-port1: unable to enumerate USB device
[  252.628404][T13198] fuse: Bad value for 'rootmode'
[  253.057311][T13212] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4096'.
[  253.344912][T13238] overlayfs: failed to clone upperpath
[  253.352891][T13241] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[  253.470971][   T36] kauditd_printk_skb: 541 callbacks suppressed
[  253.470989][   T36] audit: type=1400 audit(250.973:40348): avc:  denied  { create } for  pid=13252 comm="syz.4.4110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  253.498542][   T36] audit: type=1400 audit(250.982:40349): avc:  denied  { write } for  pid=13252 comm="syz.4.4110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  253.520291][   T36] audit: type=1400 audit(250.982:40350): avc:  denied  { read } for  pid=13252 comm="syz.4.4110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  253.541328][   T36] audit: type=1400 audit(250.982:40351): avc:  denied  { read } for  pid=13252 comm="syz.4.4110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  253.565123][   T36] audit: type=1400 audit(250.982:40352): avc:  denied  { write } for  pid=13252 comm="syz.4.4110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  253.585766][   T36] audit: type=1400 audit(251.029:40353): avc:  denied  { create } for  pid=13258 comm="syz.4.4111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  253.605512][   T36] audit: type=1400 audit(251.029:40354): avc:  denied  { ioctl } for  pid=13258 comm="syz.4.4111" path="socket:[53804]" dev="sockfs" ino=53804 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  253.658691][   T36] audit: type=1400 audit(251.029:40355): avc:  denied  { bind } for  pid=13258 comm="syz.4.4111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  253.677818][   T36] audit: type=1400 audit(251.076:40356): avc:  denied  { mount } for  pid=13263 comm="syz.4.4112" name="/" dev="ramfs" ino=53810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  253.700043][   T36] audit: type=1400 audit(251.076:40357): avc:  denied  { create } for  pid=13263 comm="syz.4.4112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  254.091416][T13294] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM }
[  254.091453][T13294] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:190
[  254.238997][T13303] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  254.248259][T13303] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:199
[  254.368791][T13306] __vm_enough_memory: pid: 13306, comm: syz.5.4127, bytes: 18014402804453376 not enough memory for the allocation
[  255.349553][T13357] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4146'.
[  255.551419][T13381] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=13381 comm=syz.5.4152
[  255.643240][T13390] overlayfs: failed to clone upperpath
[  256.083571][T13431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30246 sclass=netlink_route_socket pid=13431 comm=syz.2.4174
[  256.584316][T13456] overlay: ./file0 is not a directory
[  256.859494][T13470] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4188'.
[  256.869817][T13470] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4188'.
[  256.907872][T13474] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4189'.
[  256.916905][T13474] bridge_slave_1: left allmulticast mode
[  256.922561][T13474] bridge_slave_1: left promiscuous mode
[  256.928258][T13474] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.935870][T13474] bridge_slave_0: left allmulticast mode
[  256.941519][T13474] bridge_slave_0: left promiscuous mode
[  256.947283][T13474] bridge0: port 1(bridge_slave_0) entered disabled state
[  257.290940][T13500] fuse: Bad value for 'fd'
[  257.420119][T13512] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4202'.
[  257.508384][T13521] fuse: Bad value for 'fd'
[  257.548373][T13525] netlink: 188 bytes leftover after parsing attributes in process `syz.7.4207'.
[  257.916614][T13550] overlayfs: failed to clone upperpath
[  257.969462][T13552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=513 sclass=netlink_route_socket pid=13552 comm=syz.2.4216
[  257.982883][T13552] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4216'.
[  257.994589][T13552] overlayfs: failed to clone upperpath
[  258.564296][T13580] fuseblk: Bad value for 'fd'
[  258.573011][T13580] overlay: ./file0 is not a directory
[  258.581905][T13580] 9pnet_fd: Insufficient options for proto=fd
[  258.664710][T13588] overlayfs: failed to clone upperpath
[  258.816068][   T36] kauditd_printk_skb: 706 callbacks suppressed
[  258.816086][   T36] audit: type=1400 audit(255.979:41064): avc:  denied  { mount } for  pid=13602 comm="syz.2.4237" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  258.861963][T13608] overlayfs: failed to clone upperpath
[  258.867676][   T36] audit: type=1400 audit(256.007:41065): avc:  denied  { create } for  pid=13602 comm="syz.2.4237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  258.898915][   T36] audit: type=1400 audit(256.007:41066): avc:  denied  { ioctl } for  pid=13602 comm="syz.2.4237" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=55106 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  258.907254][T13610] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4240'.
[  258.942448][   T36] audit: type=1400 audit(256.007:41067): avc:  denied  { ioctl } for  pid=13602 comm="syz.2.4237" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=55106 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  258.969679][   T36] audit: type=1400 audit(256.016:41068): avc:  denied  { mounton } for  pid=13607 comm="syz.7.4239" path="/314/bus" dev="tmpfs" ino=1743 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  258.983890][T13612] overlayfs: failed to clone upperpath
[  258.993692][   T36] audit: type=1400 audit(256.053:41069): avc:  denied  { create } for  pid=13607 comm="syz.7.4239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  259.022599][   T36] audit: type=1400 audit(256.053:41070): avc:  denied  { connect } for  pid=13607 comm="syz.7.4239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  259.042713][   T36] audit: type=1400 audit(256.053:41071): avc:  denied  { create } for  pid=13607 comm="syz.7.4239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  259.062827][   T36] audit: type=1400 audit(256.063:41072): avc:  denied  { create } for  pid=13609 comm="syz.2.4240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  259.096842][   T36] audit: type=1400 audit(256.063:41073): avc:  denied  { write } for  pid=13609 comm="syz.2.4240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  259.541863][T13650] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4256'.
[  259.764232][T13674] SELinux:  Context system_u:object_r:iptables_exec_t:s0 is not valid (left unmapped).
[  259.875753][T13686] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  260.557639][T13714] sit0: entered promiscuous mode
[  260.563779][T13714] netlink: 'syz.5.4279': attribute type 1 has an invalid length.
[  260.571573][T13714] netlink: 1 bytes leftover after parsing attributes in process `syz.5.4279'.
[  260.583158][T13714] veth0_to_team: entered promiscuous mode
[  260.588996][T13714] veth0_to_team: entered allmulticast mode
[  260.756713][T13720] overlayfs: missing 'workdir'
[  260.764485][T13720] overlayfs: failed to clone upperpath
[  261.559167][T13764] overlayfs: failed to clone upperpath
[  261.570120][T13768] overlay: ./file1 is not a directory
[  261.618063][T13773] fuse: Unknown parameter '
݀u9b��ukw�h��Dh]{�U!
[  261.618063][T13773] p���_��Z�[ӭ���/�Z��s�A����'
[  261.993617][T13793] incfs: Backing dir is not set, filesystem can't be mounted.
[  262.008447][T13793] incfs: mount failed -2
[  262.337465][T13820] incfs: Backing dir is not set, filesystem can't be mounted.
[  262.354285][T13820] incfs: mount failed -2
[  262.431057][T13826] 9pnet_fd: Insufficient options for proto=fd
[  263.166903][T13893] overlayfs: failed to clone upperpath
[  263.493345][T13950] 9pnet_fd: Insufficient options for proto=fd
[  263.731162][T13963] netlink: 388 bytes leftover after parsing attributes in process `syz.4.4344'.
[  263.733663][T13964] fuse: Bad value for 'fd'
[  263.833275][T13968] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4346'.
[  263.842793][T13968] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4346'.
[  263.852661][T13968] netlink: 'syz.2.4346': attribute type 6 has an invalid length.
[  263.861076][T13968] netlink: 'syz.2.4346': attribute type 5 has an invalid length.
[  263.869243][T13968] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4346'.
[  264.477251][   T36] kauditd_printk_skb: 441 callbacks suppressed
[  264.477270][   T36] audit: type=1400 audit(261.274:41515): avc:  denied  { create } for  pid=14010 comm="syz.7.4361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  264.504050][   T36] audit: type=1400 audit(261.274:41516): avc:  denied  { ioctl } for  pid=14010 comm="syz.7.4361" path="socket:[55778]" dev="sockfs" ino=55778 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  264.574640][   T36] audit: type=1400 audit(261.358:41517): avc:  denied  { create } for  pid=14014 comm="syz.7.4362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  264.594754][   T36] audit: type=1400 audit(261.368:41518): avc:  denied  { mounton } for  pid=14014 comm="syz.7.4362" path="/337/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1875 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  264.644293][   T36] audit: type=1400 audit(261.377:41519): avc:  denied  { mount } for  pid=14014 comm="syz.7.4362" name="/" dev="9p" ino=7016996765293437283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  264.668603][   T36] audit: type=1400 audit(261.433:41520): avc:  denied  { mounton } for  pid=14014 comm="syz.7.4362" path="/337/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1875 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  264.714665][   T36] audit: type=1400 audit(261.480:41521): avc:  denied  { create } for  pid=14014 comm="syz.7.4362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  264.735741][   T36] audit: type=1400 audit(261.480:41522): avc:  denied  { write } for  pid=14014 comm="syz.7.4362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  264.755941][   T36] audit: type=1400 audit(261.480:41523): avc:  denied  { read } for  pid=14014 comm="syz.7.4362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  264.775982][   T36] audit: type=1400 audit(261.480:41524): avc:  denied  { read } for  pid=14014 comm="syz.7.4362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  264.872004][T14029] fuse: blksize only supported for fuseblk
[  265.431919][T14062] syz.4.4374(14062): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  265.491450][T14055] netlink: 'syz.4.4374': attribute type 4 has an invalid length.
[  265.513347][T14067] netlink: 5 bytes leftover after parsing attributes in process `syz.7.4379'.
[  265.616258][T14078] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  265.645295][T14078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14078 comm=syz.7.4383
[  265.842012][T14091] netlink: 393 bytes leftover after parsing attributes in process `syz.7.4387'.
[  265.871881][T14091] overlayfs: failed to clone upperpath
[  265.880498][T14091] overlayfs: failed to clone upperpath
[  266.023178][T14098] overlayfs: failed to clone upperpath
[  266.068169][T14098] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4390'.
[  266.262579][T14127] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4399'.
[  266.267718][T14129] /dev/loop0: Can't lookup blockdev
[  266.285448][T14129] /dev/loop0: Can't lookup blockdev
[  267.112971][T14177] netlink: 'syz.4.4415': attribute type 1 has an invalid length.
[  267.132692][T14178] netlink: 'syz.4.4415': attribute type 1 has an invalid length.
[  267.165723][T14182] IPv6: NLM_F_CREATE should be specified when creating new route
[  267.173639][T14182] IPv6: NLM_F_REPLACE set, but no existing node found!
[  267.310888][T14197] syz.4.4421: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0
[  267.342067][T14197] CPU: 0 UID: 0 PID: 14197 Comm: syz.4.4421 Not tainted syzkaller #0 fee5265d319350b22cf00991634aaaf1de34201c
[  267.342110][T14197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  267.342125][T14197] Call Trace:
[  267.342134][T14197]  <TASK>
[  267.342143][T14197]  __dump_stack+0x21/0x30
[  267.342183][T14197]  dump_stack_lvl+0x10c/0x190
[  267.342320][T14197]  ? __cfi_dump_stack_lvl+0x10/0x10
[  267.342351][T14197]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  267.342388][T14197]  dump_stack+0x19/0x20
[  267.342424][T14197]  warn_alloc+0x1bc/0x2a0
[  267.342453][T14197]  ? stack_depot_save_flags+0x38/0x800
[  267.342478][T14197]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  267.342512][T14197]  ? __cfi_warn_alloc+0x10/0x10
[  267.342543][T14197]  ? kasan_save_track+0x4f/0x80
[  267.342564][T14197]  ? __kmalloc_cache_noprof+0x1a5/0x3c0
[  267.342598][T14197]  ? xskq_create+0x68/0x2a0
[  267.342627][T14197]  ? xsk_init_queue+0xb6/0x120
[  267.342649][T14197]  ? xsk_setsockopt+0x43f/0x6f0
[  267.342674][T14197]  ? do_sock_setsockopt+0x26d/0x400
[  267.342697][T14197]  ? __x64_sys_setsockopt+0x1b8/0x250
[  267.342720][T14197]  ? x64_sys_call+0x2adc/0x2ee0
[  267.342751][T14197]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  267.342781][T14197]  __vmalloc_node_range_noprof+0x135/0x1420
[  267.342817][T14197]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  267.342848][T14197]  ? avc_has_perm+0x1f2/0x220
[  267.342879][T14197]  ? kasan_save_alloc_info+0x40/0x50
[  267.342909][T14197]  ? __kasan_kmalloc+0x96/0xb0
[  267.342932][T14197]  vmalloc_user_noprof+0x77/0x90
[  267.342961][T14197]  ? xskq_create+0xdb/0x2a0
[  267.342984][T14197]  xskq_create+0xdb/0x2a0
[  267.343007][T14197]  xsk_init_queue+0xb6/0x120
[  267.343030][T14197]  xsk_setsockopt+0x43f/0x6f0
[  267.343052][T14197]  ? __cfi_xsk_setsockopt+0x10/0x10
[  267.343074][T14197]  ? do_futex+0x309/0x500
[  267.343102][T14197]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[  267.343130][T14197]  ? security_socket_setsockopt+0x33/0xd0
[  267.343152][T14197]  ? __cfi_xsk_setsockopt+0x10/0x10
[  267.343171][T14197]  do_sock_setsockopt+0x26d/0x400
[  267.343191][T14197]  ? __cfi_do_sock_setsockopt+0x10/0x10
[  267.343218][T14197]  __x64_sys_setsockopt+0x1b8/0x250
[  267.343243][T14197]  x64_sys_call+0x2adc/0x2ee0
[  267.343276][T14197]  do_syscall_64+0x58/0xf0
[  267.343309][T14197]  ? clear_bhb_loop+0x50/0xa0
[  267.343337][T14197]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  267.343363][T14197] RIP: 0033:0x7f2f33f8eba9
[  267.343383][T14197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  267.343411][T14197] RSP: 002b:00007f2f34ef0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  267.343437][T14197] RAX: ffffffffffffffda RBX: 00007f2f341d5fa0 RCX: 00007f2f33f8eba9
[  267.343467][T14197] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  267.343482][T14197] RBP: 00007f2f34011e19 R08: 0000000000000004 R09: 0000000000000000
[  267.343498][T14197] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  267.343531][T14197] R13: 00007f2f341d6038 R14: 00007f2f341d5fa0 R15: 00007ffe29a998f8
[  267.343551][T14197]  </TASK>
[  267.344787][T14197] Mem-Info:
[  267.655290][T14197] active_anon:24072 inactive_anon:5 isolated_anon:0
[  267.655290][T14197]  active_file:7673 inactive_file:16687 isolated_file:0
[  267.655290][T14197]  unevictable:16380 dirty:65 writeback:0
[  267.655290][T14197]  slab_reclaimable:6049 slab_unreclaimable:75650
[  267.655290][T14197]  mapped:37871 shmem:18659 pagetables:1303
[  267.655290][T14197]  sec_pagetables:0 bounce:0
[  267.655290][T14197]  kernel_misc_reclaimable:0
[  267.655290][T14197]  free:1479414 free_pcp:5510 free_cma:0
[  267.700755][T14197] Node 0 active_anon:97188kB inactive_anon:20kB active_file:30692kB inactive_file:66748kB unevictable:65520kB isolated(anon):0kB isolated(file):0kB mapped:150988kB dirty:260kB writeback:0kB shmem:75736kB shmem_thp:4096kB shmem_pmdmapped:4096kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6404kB pagetables:5112kB sec_pagetables:0kB all_unreclaimable? no
[  267.738077][T14197] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965952kB mlocked:0kB bounce:0kB free_pcp:5740kB local_pcp:68kB free_cma:0kB
[  267.813592][T14197] lowmem_reserve[]: 0 3921 3921
[  267.826055][T14197] Normal free:2966116kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:102888kB inactive_anon:20kB active_file:30692kB inactive_file:66748kB unevictable:65520kB writepending:260kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:3644kB local_pcp:2348kB free_cma:0kB
[  267.847071][T14215] 9pnet_fd: p9_fd_create_tcp (14215): problem connecting socket to 127.0.0.1
[  267.872518][T14197] lowmem_reserve[]: 0 0 0
[  267.877053][T14197] DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[  267.895373][T14197] Normal: 13*4kB (UME) 17*8kB (UE) 7*16kB (UE) 83*32kB (UME) 297*64kB (UME) 43*128kB (UME) 32*256kB (UME) 37*512kB (UME) 30*1024kB (UME) 13*2048kB (UME) 696*4096kB (UM) = 2962764kB
[  267.914917][T14197] 62081 total pagecache pages
[  267.919727][T14197] 11 pages in swap cache
[  267.925339][T14197] Free swap  = 124128kB
[  267.930340][T14197] Total swap = 124996kB
[  267.947016][T14197] 2097051 pages RAM
[  267.957807][T14197] 0 pages HighMem/MovableOnly
[  267.970742][T14197] 351533 pages reserved
[  267.982733][T14197] 0 pages cma reserved
[  267.992531][T14218] netlink: 'syz.7.4429': attribute type 13 has an invalid length.
[  268.003348][T14197] Memory allocations:
[  268.012154][T14197]          0 B        0 init/main.c:1370 func:do_initcalls
[  268.022034][T14197]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  268.030284][T14197]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  268.059708][T14197]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  268.067781][T14197]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  268.076046][T14197]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  268.084922][T14197]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  268.093257][T14197]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  268.101356][T14197]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  268.121331][T14197]          0 B        0 init/initramfs.c:101 func:find_link
[  268.254414][T14222] 9pnet_fd: Insufficient options for proto=fd
[  268.832389][T14236] /dev/rnullb0: Can't lookup blockdev
[  268.873637][T14239] overlayfs: failed to clone upperpath
[  268.879844][T14239] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=14239 comm=syz.5.4437
[  269.788469][T14281] fuse: Unknown parameter '��������0x00000000000000031844674407370955161500000000000000000000'
[  269.833857][   T36] kauditd_printk_skb: 375 callbacks suppressed
[  269.833875][   T36] audit: type=1400 audit(266.280:41900): avc:  denied  { mounton } for  pid=14282 comm="syz.5.4454" path="/147/file0" dev="tmpfs" ino=841 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  269.882156][   T36] audit: type=1400 audit(266.299:41901): avc:  denied  { mount } for  pid=14282 comm="syz.5.4454" name="/" dev="incremental-fs" ino=841 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  269.928004][   T36] audit: type=1400 audit(266.299:41902): avc:  denied  { create } for  pid=14282 comm="syz.5.4454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  269.957585][   T36] audit: type=1400 audit(266.299:41903): avc:  denied  { setopt } for  pid=14282 comm="syz.5.4454" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  269.997650][   T36] audit: type=1400 audit(266.299:41904): avc:  denied  { setopt } for  pid=14282 comm="syz.5.4454" lport=5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  270.018680][   T36] audit: type=1400 audit(266.299:41905): avc:  denied  { create } for  pid=14282 comm="syz.5.4454" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  270.054666][   T36] audit: type=1400 audit(266.299:41906): avc:  denied  { ioctl } for  pid=14282 comm="syz.5.4454" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=56161 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  270.089588][   T36] audit: type=1400 audit(266.383:41907): avc:  denied  { create } for  pid=14284 comm="syz.5.4455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  270.109846][   T36] audit: type=1400 audit(266.383:41908): avc:  denied  { create } for  pid=14284 comm="syz.5.4455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  270.130324][   T36] audit: type=1400 audit(266.392:41909): avc:  denied  { create } for  pid=14284 comm="syz.5.4455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[  270.307087][T14306] fuse: Bad value for 'user_id'
[  270.312040][T14306] fuse: Bad value for 'user_id'
[  270.540193][T14329] netlink: 'syz.5.4471': attribute type 4 has an invalid length.
[  270.548777][T14328] netlink: 'syz.5.4471': attribute type 4 has an invalid length.
[  271.420285][T14380] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4487'.
[  271.769886][T14422] netlink: 188 bytes leftover after parsing attributes in process `syz.7.4498'.
[  271.831666][T14428] overlayfs: failed to clone upperpath
[  272.002435][T14452] fuse: Bad value for 'fd'
[  272.040677][T14458] netlink: 165 bytes leftover after parsing attributes in process `syz.7.4509'.
[  272.056092][T14452] veth0_virt_wifi: entered allmulticast mode
[  272.653416][T14464] overlayfs: missing 'lowerdir'
[  272.670077][T14451] veth0_virt_wifi: left allmulticast mode
[  272.934244][T14488] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4521'.
[  272.970434][T14493] overlayfs: failed to clone upperpath
[  273.241110][T14516] fuse: Bad value for 'fd'
[  274.375946][T14607] 9pnet_fd: Insufficient options for proto=fd
[  274.688669][T14649] /dev/sr0: Can't lookup blockdev
[  275.211518][   T36] kauditd_printk_skb: 590 callbacks suppressed
[  275.211538][   T36] audit: type=1400 audit(271.313:42500): avc:  denied  { mounton } for  pid=14664 comm="syz.2.4579" path="/507/file0" dev="tmpfs" ino=2760 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  275.275346][   T36] audit: type=1400 audit(271.313:42501): avc:  denied  { create } for  pid=14666 comm="syz.4.4580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  275.306568][   T36] audit: type=1400 audit(271.323:42502): avc:  denied  { write } for  pid=14666 comm="syz.4.4580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  275.337783][   T36] audit: type=1400 audit(271.323:42503): avc:  denied  { read } for  pid=14666 comm="syz.4.4580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  275.357758][   T36] audit: type=1400 audit(271.323:42504): avc:  denied  { read } for  pid=14666 comm="syz.4.4580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  275.378441][   T36] audit: type=1400 audit(271.351:42505): avc:  denied  { mount } for  pid=14664 comm="syz.2.4579" name="/" dev="incremental-fs" ino=2760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  275.401471][   T36] audit: type=1400 audit(271.360:42506): avc:  denied  { name_bind } for  pid=14664 comm="syz.2.4579" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1
[  275.428153][   T36] audit: type=1400 audit(271.360:42507): avc:  denied  { node_bind } for  pid=14664 comm="syz.2.4579" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[  275.451187][   T36] audit: type=1400 audit(271.388:42508): avc:  denied  { create } for  pid=14670 comm="syz.4.4581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  275.488521][   T36] audit: type=1400 audit(271.388:42509): avc:  denied  { setopt } for  pid=14670 comm="syz.4.4581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  275.601841][T14698] /dev/rnullb0: Can't lookup blockdev
[  276.592900][T14762] overlayfs: failed to clone lowerpath
[  277.169815][T14780] overlayfs: failed to clone upperpath
[  277.176141][T14781] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5652 sclass=netlink_xfrm_socket pid=14781 comm=syz.7.4621
[  277.323729][T14793] bridge0: port 3(veth1_macvtap) entered blocking state
[  277.330907][T14793] bridge0: port 3(veth1_macvtap) entered disabled state
[  277.337982][T14793] veth1_macvtap: entered allmulticast mode
[  277.344493][T14793] veth1_macvtap: left allmulticast mode
[  277.716175][T14816] 9pnet_fd: Insufficient options for proto=fd
[  277.755511][T14818] syz.4.4636 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  277.902381][T14833] overlayfs: conflicting options: userxattr,metacopy=on
[  277.959728][T14837] 9pnet_fd: Insufficient options for proto=fd
[  278.026256][T14844] 9pnet_fd: Insufficient options for proto=fd
[  278.106456][T14856] fuse: Bad value for 'fd'
[  278.232836][T14873] /dev/rnullb0: Can't lookup blockdev
[  278.298982][T14878] overlayfs: failed to clone upperpath
[  278.351858][T14882] fuse: Bad value for 'fd'
[  278.827162][T14908] netlink: 4604 bytes leftover after parsing attributes in process `syz.7.4670'.
[  279.817228][T14977] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4694'.
[  280.014514][T14996] fuse: Bad value for 'fd'
[  280.032873][T14996] 9pnet_fd: Insufficient options for proto=fd
[  280.219408][T15019] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4712'.
[  280.640940][   T36] kauditd_printk_skb: 721 callbacks suppressed
[  280.640958][   T36] audit: type=1400 audit(276.394:43231): avc:  denied  { create } for  pid=15042 comm="syz.5.4719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  280.667308][   T36] audit: type=1400 audit(276.403:43232): avc:  denied  { write } for  pid=15042 comm="syz.5.4719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  280.714739][   T36] audit: type=1400 audit(276.403:43233): avc:  denied  { write } for  pid=15042 comm="syz.5.4719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  280.734932][   T36] audit: type=1400 audit(276.403:43234): avc:  denied  { read } for  pid=15042 comm="syz.5.4719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  280.755152][   T36] audit: type=1400 audit(276.403:43235): avc:  denied  { read } for  pid=15042 comm="syz.5.4719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  280.775883][   T36] audit: type=1400 audit(276.403:43236): avc:  denied  { write } for  pid=15042 comm="syz.5.4719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  280.821638][   T36] audit: type=1400 audit(276.403:43237): avc:  denied  { write } for  pid=15042 comm="syz.5.4719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  280.839228][T15054] audit: audit_backlog=65 > audit_backlog_limit=64
[  280.854953][   T36] audit: type=1400 audit(276.459:43238): avc:  denied  { execmem } for  pid=15047 comm="syz.5.4720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  280.855107][T15054] audit: audit_lost=83 audit_rate_limit=0 audit_backlog_limit=64
[  281.181130][T15081] /dev/rnullb0: Can't lookup blockdev
[  281.564008][T15103] overlayfs: failed to clone upperpath
[  282.018938][T15135] netlink: 'syz.7.4750': attribute type 12 has an invalid length.
[  282.080357][T15137] 9pnet_fd: Insufficient options for proto=fd
[  282.335618][T15167] netlink: 'syz.4.4761': attribute type 11 has an invalid length.
[  282.345438][T15167] netlink: 'syz.4.4761': attribute type 2 has an invalid length.
[  282.432783][T15180] tmpfs: Unknown parameter 'no'
[  282.486600][T15184] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  282.639174][T15202] EXT4-fs: dax option not supported
[  282.678963][T15204] 9pnet: p9_errstr2errno: server reported unknown error 184467440
[  282.809692][T15215] overlayfs: failed to clone upperpath
[  283.056943][T15225] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4780'.
[  283.082763][T15227] incfs: Options parsing error. -22
[  283.088045][T15227] incfs: mount failed -22
[  283.104517][T15225] 8021q: VLANs not supported on ip6_vti0
[  283.121831][T15225] netlink: 5308 bytes leftover after parsing attributes in process `syz.5.4780'.
[  283.152653][T15225] tipc: Started in network mode
[  283.157643][T15225] tipc: Node identity ac14142c, cluster identity 4711
[  283.185148][T15225] tipc: New replicast peer: 10.1.1.1
[  283.190653][T15225] tipc: Enabled bearer <udp:syz2>, priority 10
[  283.232233][T15247] netlink: 'syz.2.4787': attribute type 32 has an invalid length.
[  283.968591][T15293] netlink: 'syz.4.4803': attribute type 4 has an invalid length.
[  283.976412][T15293] netlink: 'syz.4.4803': attribute type 21 has an invalid length.
[  283.984233][T15293] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.4803'.
[  284.381943][   T64] tipc: Node number set to 2886997036
[  284.541482][T15339] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4820'.
[  285.264848][T15370] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  285.311781][T15392] /dev/nbd4: Can't lookup blockdev
[  285.388992][T15402] overlayfs: failed to clone upperpath
[  285.616780][T15421] overlay: Unknown parameter 'uid'
[  285.761973][T15430] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4846'.
[  285.972276][T15443] /dev/rnullb0: Can't lookup blockdev
[  286.051748][   T36] kauditd_printk_skb: 514 callbacks suppressed
[  286.051767][   T36] audit: type=1400 audit(281.465:43752): avc:  denied  { execmem } for  pid=15444 comm="syz.7.4853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  286.112335][T15449] incfs: Error accessing: ./file0.
[  286.113377][   T36] audit: type=1400 audit(281.512:43753): avc:  denied  { mounton } for  pid=15447 comm="syz.2.4855" path="/570/file0" dev="tmpfs" ino=3103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  286.117790][T15449] incfs: mount failed -20
[  286.183034][   T36] audit: type=1400 audit(281.577:43754): avc:  denied  { sys_module } for  pid=15450 comm="syz.4.4856" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  286.206728][   T36] audit: type=1400 audit(281.605:43755): avc:  denied  { create } for  pid=15450 comm="syz.4.4856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  286.240652][   T36] audit: type=1400 audit(281.605:43756): avc:  denied  { ioctl } for  pid=15450 comm="syz.4.4856" path="socket:[59309]" dev="sockfs" ino=59309 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  286.266775][   T36] audit: type=1400 audit(281.605:43757): avc:  denied  { sys_module } for  pid=15450 comm="syz.4.4856" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  286.291091][   T36] audit: type=1400 audit(281.605:43758): avc:  denied  { create } for  pid=15450 comm="syz.4.4856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  286.317976][   T36] audit: type=1400 audit(281.605:43759): avc:  denied  { write } for  pid=15450 comm="syz.4.4856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  286.338032][   T36] audit: type=1400 audit(281.605:43760): avc:  denied  { read } for  pid=15450 comm="syz.4.4856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  286.358072][   T36] audit: type=1400 audit(281.605:43761): avc:  denied  { read } for  pid=15450 comm="syz.4.4856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  286.497635][T15478] veth1_vlan: mtu less than device minimum
[  286.700359][T15508] syz.2.4873: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0
[  286.725204][T15508] CPU: 1 UID: 0 PID: 15508 Comm: syz.2.4873 Not tainted syzkaller #0 fee5265d319350b22cf00991634aaaf1de34201c
[  286.725241][T15508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  286.725256][T15508] Call Trace:
[  286.725264][T15508]  <TASK>
[  286.725273][T15508]  __dump_stack+0x21/0x30
[  286.725307][T15508]  dump_stack_lvl+0x10c/0x190
[  286.725336][T15508]  ? __cfi_dump_stack_lvl+0x10/0x10
[  286.725367][T15508]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  286.725403][T15508]  dump_stack+0x19/0x20
[  286.725431][T15508]  warn_alloc+0x1bc/0x2a0
[  286.725459][T15508]  ? stack_depot_save_flags+0x38/0x800
[  286.725482][T15508]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  286.725525][T15508]  ? __cfi_warn_alloc+0x10/0x10
[  286.725551][T15508]  ? kasan_save_track+0x4f/0x80
[  286.725571][T15508]  ? __kmalloc_cache_noprof+0x1a5/0x3c0
[  286.725601][T15508]  ? xskq_create+0x68/0x2a0
[  286.725622][T15508]  ? xsk_init_queue+0xb6/0x120
[  286.725642][T15508]  ? xsk_setsockopt+0x43f/0x6f0
[  286.725661][T15508]  ? do_sock_setsockopt+0x26d/0x400
[  286.725682][T15508]  ? __x64_sys_setsockopt+0x1b8/0x250
[  286.725702][T15508]  ? x64_sys_call+0x2adc/0x2ee0
[  286.725742][T15508]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  286.725769][T15508]  __vmalloc_node_range_noprof+0x135/0x1420
[  286.725804][T15508]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  286.725833][T15508]  ? avc_has_perm+0x1f2/0x220
[  286.725861][T15508]  ? kasan_save_alloc_info+0x40/0x50
[  286.725889][T15508]  ? __kasan_kmalloc+0x96/0xb0
[  286.725911][T15508]  vmalloc_user_noprof+0x77/0x90
[  286.725939][T15508]  ? xskq_create+0xdb/0x2a0
[  286.725961][T15508]  xskq_create+0xdb/0x2a0
[  286.725982][T15508]  xsk_init_queue+0xb6/0x120
[  286.726003][T15508]  xsk_setsockopt+0x43f/0x6f0
[  286.726025][T15508]  ? __cfi_xsk_setsockopt+0x10/0x10
[  286.726045][T15508]  ? do_futex+0x309/0x500
[  286.726066][T15508]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[  286.726092][T15508]  ? security_socket_setsockopt+0x33/0xd0
[  286.726112][T15508]  ? __cfi_xsk_setsockopt+0x10/0x10
[  286.726132][T15508]  do_sock_setsockopt+0x26d/0x400
[  286.726153][T15508]  ? __cfi_do_sock_setsockopt+0x10/0x10
[  286.726177][T15508]  __x64_sys_setsockopt+0x1b8/0x250
[  286.726198][T15508]  x64_sys_call+0x2adc/0x2ee0
[  286.726228][T15508]  do_syscall_64+0x58/0xf0
[  286.726257][T15508]  ? clear_bhb_loop+0x50/0xa0
[  286.726281][T15508]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  286.726304][T15508] RIP: 0033:0x7f4370f8eba9
[  286.726320][T15508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  286.726339][T15508] RSP: 002b:00007f4371e6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  286.726362][T15508] RAX: ffffffffffffffda RBX: 00007f43711d5fa0 RCX: 00007f4370f8eba9
[  286.726379][T15508] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  286.726393][T15508] RBP: 00007f4371011e19 R08: 0000000000000004 R09: 0000000000000000
[  286.726407][T15508] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  286.726421][T15508] R13: 00007f43711d6038 R14: 00007f43711d5fa0 R15: 00007ffd2c208f38
[  286.726462][T15508]  </TASK>
[  286.726471][T15508] Mem-Info:
[  286.933145][T15514] tipc: Enabled bearer <eth:ip6gre0>, priority 10
[  286.938360][T15508] active_anon:11715 inactive_anon:319 isolated_anon:0
[  286.938360][T15508]  active_file:7805 inactive_file:16695 isolated_file:0
[  286.938360][T15508]  unevictable:16379 dirty:220 writeback:0
[  286.938360][T15508]  slab_reclaimable:6352 slab_unreclaimable:75608
[  286.938360][T15508]  mapped:26882 shmem:5941 pagetables:1293
[  286.938360][T15508]  sec_pagetables:0 bounce:0
[  286.938360][T15508]  kernel_misc_reclaimable:0
[  286.938360][T15508]  free:1494481 free_pcp:2257 free_cma:0
[  287.098844][T15508] Node 0 active_anon:37640kB inactive_anon:1276kB active_file:31220kB inactive_file:66780kB unevictable:65516kB isolated(anon):0kB isolated(file):0kB mapped:96124kB dirty:880kB writeback:0kB shmem:12580kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6308kB pagetables:5172kB sec_pagetables:0kB all_unreclaimable? no
[  287.132210][T15508] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965952kB mlocked:0kB bounce:0kB free_pcp:5740kB local_pcp:5672kB free_cma:0kB
[  287.167341][T15508] lowmem_reserve[]: 0 3921 3921
[  287.173722][T15508] Normal free:3010428kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37640kB inactive_anon:1276kB active_file:31220kB inactive_file:66780kB unevictable:65516kB writepending:880kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:19044kB local_pcp:1636kB free_cma:0kB
[  287.206440][T15508] lowmem_reserve[]: 0 0 0
[  287.210829][T15508] DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[  287.228684][T15508] Normal: 11*4kB (UE) 144*8kB (UME) 319*16kB (UME) 290*32kB (UME) 396*64kB (UME) 133*128kB (UME) 93*256kB (UME) 44*512kB (UME) 32*1024kB (UME) 11*2048kB (UME) 696*4096kB (UM) = 3010396kB
[  287.249319][T15508] 44345 total pagecache pages
[  287.254479][T15508] 325 pages in swap cache
[  287.259923][T15508] Free swap  = 123476kB
[  287.264766][T15508] Total swap = 124996kB
[  287.270121][T15508] 2097051 pages RAM
[  287.274444][T15508] 0 pages HighMem/MovableOnly
[  287.280299][T15508] 351533 pages reserved
[  287.284778][T15508] 0 pages cma reserved
[  287.292433][T15508] Memory allocations:
[  287.296471][T15508]          0 B        0 init/main.c:1370 func:do_initcalls
[  287.304611][T15508]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  287.306477][T15535] netlink: 'syz.4.4880': attribute type 63 has an invalid length.
[  287.313721][T15508]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  287.328978][T15508]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  287.337838][T15508]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  287.346904][T15508]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  287.347859][T15535] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4880'.
[  287.356804][T15508]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  287.373233][T15508]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  287.392328][T15508]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  287.405712][T15508]          0 B        0 init/initramfs.c:101 func:find_link
[  287.994528][  T686] tipc: Node number set to 2866468361
[  289.520422][T15656] x_tables: duplicate entry at hook 2
[  289.682512][T15666] overlayfs: failed to clone upperpath
[  290.527318][T15712] netlink: 'syz.5.4943': attribute type 4 has an invalid length.
[  290.535240][T15712] netlink: 17 bytes leftover after parsing attributes in process `syz.5.4943'.
[  290.602495][T15701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4937'.
[  291.144047][T15754] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.151141][T15754] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.158319][T15754] bridge_slave_0: entered allmulticast mode
[  291.164603][T15754] bridge_slave_0: entered promiscuous mode
[  291.173124][T15754] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.180219][T15754] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.187297][T15754] bridge_slave_1: entered allmulticast mode
[  291.193705][T15754] bridge_slave_1: entered promiscuous mode
[  291.281654][T15754] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.288764][T15754] bridge0: port 2(bridge_slave_1) entered forwarding state
[  291.296050][T15754] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.303231][T15754] bridge0: port 1(bridge_slave_0) entered forwarding state
[  291.361900][  T330] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.369484][  T330] bridge0: port 2(bridge_slave_1) entered disabled state
[  291.388354][ T2903] bridge0: port 1(bridge_slave_0) entered blocking state
[  291.395477][ T2903] bridge0: port 1(bridge_slave_0) entered forwarding state
[  291.414191][ T2903] bridge0: port 2(bridge_slave_1) entered blocking state
[  291.421309][ T2903] bridge0: port 2(bridge_slave_1) entered forwarding state
[  291.442553][   T36] kauditd_printk_skb: 696 callbacks suppressed
[  291.442573][   T36] audit: type=1400 audit(286.499:44458): avc:  denied  { mounton } for  pid=15770 comm="syz.5.4960" path="/264/bus" dev="tmpfs" ino=1481 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  291.443077][T15771] overlayfs: failed to resolve './file0': -2
[  291.467117][   T36] audit: type=1400 audit(286.517:44459): avc:  denied  { read write } for  pid=15772 comm="syz.7.4961" name="fuse" dev="tmpfs" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netcontrol_device_t:s0"
[  291.503911][   T36] audit: type=1400 audit(286.536:44460): avc:  denied  { create } for  pid=15770 comm="syz.5.4960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  291.526050][   T36] audit: type=1400 audit(286.536:44461): avc:  denied  { write } for  pid=15770 comm="syz.5.4960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  291.547433][   T36] audit: type=1400 audit(286.536:44462): avc:  denied  { read write } for  pid=15772 comm="syz.7.4961" name="fuse" dev="tmpfs" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netcontrol_device_t:s0"
[  291.595053][   T36] audit: type=1400 audit(286.536:44463): avc:  denied  { read write open } for  pid=15772 comm="syz.7.4961" path="/dev/fuse" dev="tmpfs" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netcontrol_device_t:s0"
[  291.645935][   T36] audit: type=1400 audit(286.536:44464): avc:  denied  { read write open } for  pid=15772 comm="syz.7.4961" path="/dev/fuse" dev="tmpfs" ino=642 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netcontrol_device_t:s0"
[  291.676855][   T36] audit: type=1400 audit(286.536:44465): avc:  denied  { ioctl } for  pid=15772 comm="syz.7.4961" path="/dev/fuse" dev="tmpfs" ino=642 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netcontrol_device_t:s0"
[  291.708828][   T36] audit: type=1400 audit(286.583:44466): avc:  denied  { sys_module } for  pid=15754 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  291.711632][T15754] veth0_vlan: entered promiscuous mode
[  291.735839][   T36] audit: type=1400 audit(286.601:44467): avc:  denied  { sys_module } for  pid=15754 comm="syz-executor" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  291.787682][T15754] veth1_macvtap: entered promiscuous mode
[  291.834724][T15798] overlayfs: failed to clone lowerpath
[  292.311532][T15840] rust_binder: 15838 RLIMIT_NICE not set
[  292.431356][T15844] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=568208745 (2272834980 ns) > initial count (932309172 ns). Using initial count to start timer.
[  292.455669][T15844] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2995060990 (11980243960 ns) > initial count (1840834408 ns). Using initial count to start timer.
[  292.571021][T15850] 9pnet_fd: Insufficient options for proto=fd
[  292.622710][T15854] 9pnet_fd: Insufficient options for proto=fd
[  292.640444][T15854] 9pnet_fd: Insufficient options for proto=fd
[  292.647646][T15854] 9pnet_fd: Insufficient options for proto=fd
[  292.655922][T15854] 9pnet_fd: Insufficient options for proto=fd
[  292.662388][T15854] 9pnet_fd: Insufficient options for proto=fd
[  292.868320][  T686] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[  292.932985][T15872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15872 comm=syz.5.4992
[  293.042755][  T686] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  293.046147][T15884] devpts: called with bogus options
[  293.053036][  T686] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  293.070699][  T686] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  293.093489][  T686] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.101537][  T686] usb 3-1: Product: syz
[  293.115140][  T686] usb 3-1: Manufacturer: syz
[  293.119833][  T686] usb 3-1: SerialNumber: syz
[  293.411093][T15920] overlayfs: failed to clone upperpath
[  293.568962][  T686] usb 3-1: 0:2 : does not exist
[  294.003680][  T944] usb 3-1: USB disconnect, device number 24
[  294.215722][T15950] fuse: Bad value for 'fd'
[  294.293166][T15954] netlink: 'syz.7.5018': attribute type 46 has an invalid length.
[  294.600693][T15972] rust_binder: 13: no such ref 3
[  294.606657][T15972] rust_binder: Write failure EINVAL in pid:13
[  294.877624][  T944] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  295.027252][  T944] usb 3-1: device descriptor read/64, error -71
[  295.230459][T16011] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5040'.
[  295.283775][  T944] usb 3-1: device descriptor read/64, error -71
[  295.431364][T16029] veth0_virt_wifi: entered allmulticast mode
[  295.438024][T16028] veth0_virt_wifi: left allmulticast mode
[  295.540298][  T944] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[  295.689993][  T944] usb 3-1: device descriptor read/64, error -71
[  295.829566][   T12] bridge_slave_1: left allmulticast mode
[  295.835890][   T12] bridge_slave_1: left promiscuous mode
[  295.842599][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.851156][   T12] bridge_slave_0: left allmulticast mode
[  295.856831][   T12] bridge_slave_0: left promiscuous mode
[  295.863957][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.957105][  T944] usb 3-1: device descriptor read/64, error -71
[  295.993050][T16049] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.000266][T16049] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.007428][T16049] bridge_slave_0: entered allmulticast mode
[  296.015933][T16049] bridge_slave_0: entered promiscuous mode
[  296.024601][T16049] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.031761][T16049] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.041102][T16049] bridge_slave_1: entered allmulticast mode
[  296.048558][T16049] bridge_slave_1: entered promiscuous mode
[  296.055544][   T12] tipc: Left network mode
[  296.069067][   T12] veth1_macvtap: left promiscuous mode
[  296.076324][  T944] usb usb3-port1: attempt power cycle
[  296.081835][   T12] veth0_vlan: left promiscuous mode
[  296.322759][T16049] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.329862][T16049] bridge0: port 2(bridge_slave_1) entered forwarding state
[  296.337219][T16049] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.344376][T16049] bridge0: port 1(bridge_slave_0) entered forwarding state
[  296.436723][  T330] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.450030][  T330] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.459595][  T944] usb 3-1: new full-speed USB device number 27 using dummy_hcd
[  296.483694][  T944] usb 3-1: device descriptor read/8, error -71
[  296.491328][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.498419][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  296.527596][  T330] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.534703][  T330] bridge0: port 2(bridge_slave_1) entered forwarding state
[  296.557941][T16084] fuse: Bad value for 'rootmode'
[  296.634329][  T944] usb 3-1: device descriptor read/8, error -71
[  296.676944][T16049] veth0_vlan: entered promiscuous mode
[  296.739910][T16049] veth1_macvtap: entered promiscuous mode
[  296.799190][   T36] kauditd_printk_skb: 791 callbacks suppressed
[  296.799209][   T36] audit: type=1400 audit(291.514:45259): avc:  denied  { mounton } for  pid=16049 comm="syz-executor" path="/root/syzkaller.DG38Rj/syz-tmp" dev="sda1" ino=2061 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[  296.832573][   T36] audit: type=1400 audit(291.514:45260): avc:  denied  { mount } for  pid=16049 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  296.856485][   T36] audit: type=1400 audit(291.514:45261): avc:  denied  { mounton } for  pid=16049 comm="syz-executor" path="/root/syzkaller.DG38Rj/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  296.882245][   T36] audit: type=1400 audit(291.514:45262): avc:  denied  { mounton } for  pid=16049 comm="syz-executor" path="/root/syzkaller.DG38Rj/syz-tmp/newroot/proc" dev="tmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  296.919693][  T944] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[  296.921409][T16104] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  296.937662][T16104] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 1th superblock
[  296.948136][T16104] F2FS-fs (rnullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  296.951581][   T36] audit: type=1400 audit(291.514:45263): avc:  denied  { mount } for  pid=16049 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  296.971142][T16104] F2FS-fs (rnullb0): Can't find valid F2FS filesystem in 2th superblock
[  296.980285][   T36] audit: type=1400 audit(291.523:45264): avc:  denied  { mounton } for  pid=16049 comm="syz-executor" path="/root/syzkaller.DG38Rj/syz-tmp/newroot/selinux" dev="tmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  297.012811][   T36] audit: type=1400 audit(291.523:45265): avc:  denied  { mounton } for  pid=16049 comm="syz-executor" path="/root/syzkaller.DG38Rj/syz-tmp/newroot/selinux" dev="tmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  297.013808][  T944] usb 3-1: device descriptor read/8, error -71
[  297.048578][   T36] audit: type=1400 audit(291.523:45266): avc:  denied  { mounton } for  pid=16049 comm="syz-executor" path="/root/syzkaller.DG38Rj/syz-tmp/newroot/sys" dev="tmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  297.074074][   T36] audit: type=1400 audit(291.523:45267): avc:  denied  { mounton } for  pid=16049 comm="syz-executor" path="/root/syzkaller.DG38Rj/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[  297.079822][T16107] /dev/loop0: Can't lookup blockdev
[  297.101761][   T36] audit: type=1400 audit(291.523:45268): avc:  denied  { mounton } for  pid=16049 comm="syz-executor" path="/root/syzkaller.DG38Rj/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=61784 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[  297.211004][  T944] usb 3-1: device descriptor read/8, error -71
[  297.325988][  T944] usb usb3-port1: unable to enumerate USB device
[  297.379941][T16125] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5075'.
[  298.245707][  T686] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  298.355382][T16178] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5094'.
[  298.429108][  T686] usb 3-1: Using ep0 maxpacket: 32
[  298.445895][  T686] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  298.481004][  T686] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  298.511112][  T686] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  298.521885][  T686] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  298.550190][  T686] usb 3-1: config 0 interface 0 has no altsetting 0
[  298.558043][  T686] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  298.568560][  T686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.592041][  T686] usb 3-1: config 0 descriptor??
[  299.036322][  T686] hid-thrustmaster 0003:044F:B65D.000E: unknown main item tag 0xd
[  299.046422][  T686] hid-thrustmaster 0003:044F:B65D.000E: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.2-1/input0
[  299.059580][  T686] hid-thrustmaster 0003:044F:B65D.000E: Wrong number of endpoints?
[  299.252395][    C0] hid-thrustmaster 0003:044F:B65D.000E: URB to get model id failed with error -71
[  299.252476][  T626] usb 3-1: USB disconnect, device number 29
[  299.754398][T16225] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=16225 comm=syz.7.5110
[  299.834674][T16228] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17
[  300.022406][T16239] ------------[ cut here ]------------
[  300.037052][T16239] WARNING: CPU: 0 PID: 16239 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0
[  300.046630][T16239] Modules linked in:
[  300.050567][T16239] CPU: 0 UID: 0 PID: 16239 Comm: syz.2.5115 Not tainted syzkaller #0 fee5265d319350b22cf00991634aaaf1de34201c
[  300.062333][T16239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  300.072456][T16239] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0
[  300.078432][T16239] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 59 4a ee 05 00 0f 85 be 00 00 00 c6 05 4c 4a ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24
[  300.098121][T16239] RSP: 0018:ffffc900055ff9a0 EFLAGS: 00010246
[  300.104295][T16239] RAX: 0000000000000000 RBX: 0000000000000034 RCX: 0000000000000000
[  300.112331][T16239] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc900055ffa58
[  300.120420][T16239] RBP: ffffc900055ffac8 R08: ffffc900055ffa57 R09: 0000000000000000
[  300.128474][T16239] R10: ffffc900055ffa40 R11: fffff52000abff4b R12: ffffc900055ff9e0
[  300.131460][T16242] rust_binder: Failed to allocate buffer. len:224, is_oneway:true
[  300.136608][T16239] R13: dffffc0000000000 R14: 1ffff92000abff38 R15: 0000000000000000
[  300.136634][T16239] FS:  00007fea3262a6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  300.161619][T16239] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  300.168225][T16239] CR2: 000000110c347679 CR3: 0000000140a66000 CR4: 00000000003526b0
[  300.176369][T16239] Call Trace:
[  300.179694][T16239]  <TASK>
[  300.182667][T16239]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  300.188437][T16239]  ? futex_wait_setup+0x1bc/0x260
[  300.193518][T16239]  ? __futex_wait+0x218/0x2a0
[  300.198241][T16239]  ? pending_reads_dispatch_ioctl+0xc70/0x1fa0
[  300.204459][T16239]  ___kmalloc_large_node+0xb5/0x250
[  300.209708][T16239]  ? pending_reads_dispatch_ioctl+0xc70/0x1fa0
[  300.215924][T16239]  __kmalloc_large_node_noprof+0x1e/0xe0
[  300.221615][T16239]  ? pending_reads_dispatch_ioctl+0xc70/0x1fa0
[  300.227819][T16239]  __kmalloc_noprof+0x26d/0x450
[  300.232709][T16239]  ? __kasan_check_write+0x18/0x20
[  300.237891][T16239]  pending_reads_dispatch_ioctl+0xc70/0x1fa0
[  300.243912][T16239]  ? futex_setup_timer+0xb4/0xd0
[  300.248899][T16239]  ? futex_wait+0x29a/0x7a0
[  300.253441][T16239]  ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10
[  300.259924][T16239]  ? selinux_file_ioctl+0x6e0/0x1360
[  300.265240][T16239]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  300.270854][T16239]  ? do_futex+0x309/0x500
[  300.275215][T16239]  ? __cfi_do_futex+0x10/0x10
[  300.279956][T16239]  ? __fget_files+0x2c5/0x340
[  300.284669][T16239]  ? bpf_lsm_file_ioctl+0xd/0x20
[  300.289665][T16239]  ? security_file_ioctl+0x34/0xd0
[  300.294805][T16239]  ? __cfi_pending_reads_dispatch_ioctl+0x10/0x10
[  300.301276][T16239]  __se_sys_ioctl+0x132/0x1b0
[  300.305993][T16239]  __x64_sys_ioctl+0x7f/0xa0
[  300.310663][T16239]  x64_sys_call+0x1878/0x2ee0
[  300.315413][T16239]  do_syscall_64+0x58/0xf0
[  300.319877][T16239]  ? clear_bhb_loop+0x50/0xa0
[  300.324624][T16239]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  300.330548][T16239] RIP: 0033:0x7fea3178eba9
[  300.335013][T16239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  300.354689][T16239] RSP: 002b:00007fea3262a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  300.363131][T16239] RAX: ffffffffffffffda RBX: 00007fea319d5fa0 RCX: 00007fea3178eba9
[  300.371168][T16239] RDX: 00002000000000c0 RSI: 0000000040106726 RDI: 000000000000000b
[  300.379207][T16239] RBP: 00007fea31811e19 R08: 0000000000000000 R09: 0000000000000000
[  300.387250][T16239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  300.395352][T16239] R13: 00007fea319d6038 R14: 00007fea319d5fa0 R15: 00007ffe9f9e4038
[  300.403403][T16239]  </TASK>
[  300.406540][T16239] ---[ end trace 0000000000000000 ]---