last executing test programs:

2m49.744270873s ago: executing program 3 (id=327):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x280c0, 0x0)
ioctl$TIOCSPGRP(r0, 0x5410, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x3, &(0x7f0000001140)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001380)=[&(0x7f0000001200)={0x0, 0x0, 0x0, 0x8, 0x1, r1, 0x0, 0x0, 0x3, 0x0, 0x2}])
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x240, 0x0)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x6)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$ASHMEM_GET_NAME(r3, 0x81007702, 0x0)

2m49.700173754s ago: executing program 3 (id=328):
r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00')
move_mount(r0, &(0x7f0000000280)='./cgroup\x00', r1, &(0x7f00000002c0)='./cgroup\x00', 0x1) (async)
move_mount(r0, &(0x7f0000000280)='./cgroup\x00', r1, &(0x7f00000002c0)='./cgroup\x00', 0x1)
read$FUSE(r1, &(0x7f0000000140)={0x2020}, 0x2020) (async)
read$FUSE(r1, &(0x7f0000000140)={0x2020}, 0x2020)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1f0}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1f0}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb601288763"], 0xffdd) (async)
write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb601288763"], 0xffdd)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000300000000050005000000cc580a"], 0x80}}, 0x24000000)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r5, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
recvmmsg(r7, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}, 0xffff}, {{&(0x7f0000000b00)=@hci, 0x80, &(0x7f0000001080)=[{0x0}], 0x1}, 0x8}, {{0x0, 0x0, 0x0}, 0xc9}, {{0x0, 0x0, 0x0}, 0x3}], 0x4, 0x100, 0x0)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000040)=0x1b3a, 0x4)
utimensat(r1, &(0x7f0000002180)='./file1\x00', &(0x7f00000021c0)={{0x0, 0xea60}}, 0x0)
sendmmsg$inet(r7, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000a40)}], 0x1}}], 0x2, 0x40001)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) (async)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000100)=0xfffffffc)
socket$nl_netfilter(0x10, 0x3, 0xc)

2m49.645810355s ago: executing program 3 (id=329):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0)
ioctl$TCSETSW(r1, 0x5403, &(0x7f00000000c0)={0xffffff01, 0x10002, 0x4, 0x3, 0x1b, "48b4299abf3991c75ba90fd2ee13ed2ee2f419"})
ioctl$TIOCPKT(r1, 0x5420, &(0x7f00000026c0)=0x3d)
ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0xffffffef, 0xee3, 0x9, 0x7ffd, 0x90, "9900010000000000008000"})
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x640542, 0x0)
r2 = getgid()
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/if_inet6\x00')
preadv2(r3, &(0x7f0000002600)=[{&(0x7f0000000000)=""/33, 0x21}], 0x1, 0x1, 0x8, 0x8)
read$FUSE(r3, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose}, {@dfltgid={'dfltgid', 0x3d, r2}}, {@cachetag}, {@directio}], [{@hash}]}})
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000380)={0xb, {{0x2, 0x0, @multicast2}}}, 0x88)
getsockopt$inet_buf(r6, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192)
preadv(r6, &(0x7f0000000580)=[{&(0x7f0000000300)=""/196, 0xc4}, {&(0x7f0000000400)=""/95, 0x5f}, {&(0x7f0000000480)=""/230, 0xe6}], 0x3, 0x1, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60)
r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0)
fcntl$setlease(r7, 0x400, 0x0)
write$FUSE_GETXATTR(r7, 0x0, 0x0)
r8 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00')
pread64(r8, &(0x7f0000000140)=""/120, 0x78, 0x7)
ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000040))
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_IDENTITY_MAP_ADDR(r5, 0x4008ae48, &(0x7f0000000080))
mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2800009)

2m49.569200076s ago: executing program 3 (id=330):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x400080, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7)
r1 = getpid()
madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x9)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x1}}], 0x3, 0x240080e4)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r5 = open$dir(&(0x7f0000000180)='./file0\x00', 0x400000, 0x80)
mknodat$null(r5, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, 0x103)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000440)=@ethtool_regs={0x4, 0x0, 0x15, "f42a637b0000dda5b89a02db8deea00b06ee73e9da"}})
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00')
getdents64(r7, &(0x7f00000046c0)=""/4096, 0x1000)
move_mount(r7, &(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
close_range(r0, 0xffffffffffffffff, 0x0)

2m49.305586741s ago: executing program 3 (id=331):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0xeeee0000, 0x2000, &(0x7f000000f000/0x2000)=nil})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x2515, 0x0, 0x0, 0x1000, &(0x7f0000fec000/0x1000)=nil})
r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="594b41a7ce73", 0x6, 0xffffffffffffffff)
sync_file_range(0xffffffffffffffff, 0xfffffffffffff800, 0x10001, 0x5)
keyctl$revoke(0x3, r3)
keyctl$read(0xb, r3, &(0x7f0000002a80)=""/110, 0x6e)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$inet(r4, &(0x7f0000000280)=[{{&(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x89, 0x2}]}}}], 0x18}}], 0x1, 0xf00)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r3, r3}, &(0x7f00000007c0)=""/4096, 0x1000, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

2m49.205789034s ago: executing program 3 (id=332):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newsa={0x13c, 0x1a, 0x413, 0x0, 0x25dfdbfb, {{@in6=@remote, @in=@loopback, 0x0, 0x4be6, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x11}, 0xf, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffffffffffc, 0x20000000008}, {0x38, 0x8, 0xcc}, {0xf5, 0x0, 0x1000}, 0x0, 0x4, 0xa, 0x2, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/netfilter\x00')
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000000140))
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x0, @remote}}, 0x1e)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000200)=ANY=[@ANYBLOB="54110000100001000000000000000000fe880000000000000000000000000101ac1414bb000000000000000000000000000e0000000000000a0010006400000055b9c9351cd304292c4ce4a4a16d592d1d3d48261442fc617cecad8c42eab6353f1eded8e2fc1725d9795483e09f3473aa4a03887e8d76022f4bef", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreq(r8, 0x0, 0x20, &(0x7f00000001c0)={@empty, @loopback}, 0x8)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)
pread64(r1, &(0x7f0000002280)=""/4096, 0x1000, 0xd33)

2m49.194435184s ago: executing program 32 (id=332):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newsa={0x13c, 0x1a, 0x413, 0x0, 0x25dfdbfb, {{@in6=@remote, @in=@loopback, 0x0, 0x4be6, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@dev={0xac, 0x14, 0x14, 0x11}, 0xf, 0x32}, @in=@dev, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffffffffffc, 0x20000000008}, {0x38, 0x8, 0xcc}, {0xf5, 0x0, 0x1000}, 0x0, 0x4, 0xa, 0x2, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x40}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/netfilter\x00')
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_tcp_int(r2, 0x6, 0x17, 0x0, &(0x7f0000000140))
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bind$pptp(r1, &(0x7f00000000c0)={0x18, 0x2, {0x0, @remote}}, 0x1e)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000200)=ANY=[@ANYBLOB="54110000100001000000000000000000fe880000000000000000000000000101ac1414bb000000000000000000000000000e0000000000000a0010006400000055b9c9351cd304292c4ce4a4a16d592d1d3d48261442fc617cecad8c42eab6353f1eded8e2fc1725d9795483e09f3473aa4a03887e8d76022f4bef", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreq(r8, 0x0, 0x20, &(0x7f00000001c0)={@empty, @loopback}, 0x8)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef)
pread64(r1, &(0x7f0000002280)=""/4096, 0x1000, 0xd33)

2m47.093180524s ago: executing program 4 (id=371):
getrandom(&(0x7f0000000000)=""/76, 0xfffffe55, 0x2)
madvise(&(0x7f0000fef000/0x11000)=nil, 0x11000, 0x12)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3314)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
shutdown(r3, 0x1)
ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

2m46.924616618s ago: executing program 4 (id=373):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0)
fsync(r0)
mremap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil)

2m46.873736598s ago: executing program 4 (id=374):
ftruncate(0xffffffffffffffff, 0x398a0bdb)
add_key$user(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCGPTPEER(r0, 0x5441, 0x1)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
r1 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r1, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000001000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0xfc, 0xfffff030}, {0x6, 0x0, 0x0, 0x3}]})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1000, 0x0)
syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r5)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r5)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0100212026bd8900fddbdf250f00"], 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000fc3bc6f3bd54f582e529412742e41b665836dc64c1ae11f6b03a296e458e9c97cd0125e286a7488710e9e2831b9e3b917004905f45bc8418f1442c0c6115dab041d7b01e826b3aa9b98b2b2e1ff6e3820beb5a6fc943b9fac9fe24802e23f5d2ea061eb1e8c379f46e07ef5b2cda", @ANYRES16=r7, @ANYBLOB="47880010000000000000060000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24044815}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000340)={'wpan1\x00', <r9=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r7, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x80000)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x25dfdbff, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@private2, 0x0, 0xfffd, 0x0, 0x0, 0x2, 0x180}, {0x0, 0x0, 0x0, 0x8000001, 0x0, 0xffffffffffffffff, 0x5}, {0x1, 0x0, 0x1}, 0x6}}, 0xb8}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0)
r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r12, 0x4188aec6, &(0x7f0000003e00)={0x0, [{0x2, 0x20, 0x3, &(0x7f0000000080)="8977fabe"}, {0x2, 0x430, 0x400, &(0x7f0000000280)="5ce77968abf2ce25724377e2a799f2579aee43b5209bfc7665e87e06d70011a05fab6f5ca3ac860f9a9f9fbe6daf591b6b44c03d1ed43df302a88bb30ffae14cfea9929f949c2e7a0a89a4ad3138301beeba018b9ad3d54990668488564c6227614835b71086507a6ed60987efb0ebf6dc29f9a8c78f768f09b8b5dbcbd5e6bda5cce7c904d9"}, {0x0, 0x3d0, 0x9, &(0x7f0000000100)="43ae38f0755c98e2d0fbaf4d922e96bdc21d63a901cad930a9a9cd4e03227122f599a773dc6add490c53175878d3fffb060cc4293572644ab1f80e46695789210346e5ace3e5d2698bb0890af5a1ad0f188018c3dec47f6ab3bfc2cf1def3a82062dca870dad91b696e5a9ddda0e4b6953d2f01f0a679c32df21"}, {0x2, 0x0, 0x3ff, 0x0}, {0x2, 0x38, 0x0, &(0x7f0000000840)="b5438a8b392a43"}, {0x2, 0x0, 0x7, 0x0}, {0x0, 0x0, 0x672, 0x0}, {0x2, 0x0, 0x101, 0x0}, {0x2, 0x0, 0x3cc9, 0x0}, {0x0, 0x0, 0x8, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x4, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x8, 0x0}, {0x1, 0xfffffffffffffe7e, 0x7f1b, 0x0}, {0x2, 0x0, 0xfffffffd, 0x0}]})
close_range(r3, 0xffffffffffffffff, 0x0)

2m46.179771452s ago: executing program 4 (id=386):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x400080, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x260)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20181, 0x0)
ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000080)="f7790066baa00066b86b4266ef66ba420066b8e200f30fc7f80f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x4b}], 0x1, 0x48, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) (async)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
close_range(r0, 0xffffffffffffffff, 0x0)

2m45.943582907s ago: executing program 4 (id=392):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r1 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async, rerun: 32)
listen(r1, 0x0) (async, rerun: 32)
accept4$unix(r1, 0x0, 0x0, 0x0) (async)
setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, &(0x7f0000000000)={@multicast1, @empty, 0xffffffffffffffff, "b052a5b70088345cf0dfe3601193f1bb0cf2f3332b7e1bb3f92f446b63be69ab", 0x3ff, 0x8, 0x9b36, 0x1}, 0x3c)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000001c0)=[@clear_death={0x400c630f, 0x2}, @decrefs={0x40046307, 0x1}, @register_looper, @register_looper], 0x0, 0x0, 0x0})

2m45.936196097s ago: executing program 4 (id=393):
epoll_pwait(0xffffffffffffffff, 0xfffffffffffffffc, 0x1afb072, 0x0, 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0)
close(r0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000)
capset(0x0, 0x0)
r2 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r2}, &(0x7f0000000300)={0x8, 0x9, 0x4, 0xe1f0, 0x0, 0x6})
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c40)={0x2c, r3, 0x1, 0x70bd2c, 0x3, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x2c}}, 0x0)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_GET_STATS_FD_vm(r7, 0xaece)
preadv(r8, &(0x7f0000000080)=[{&(0x7f0000000100)=""/200, 0xc8}, {&(0x7f0000000200)=""/161, 0xa1}], 0x2, 0x9, 0xfffffff7)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000100)={'gretap0\x00', <r9=>0x0, 0x1, 0x700, 0x6, 0x8, {{0x14, 0x4, 0x0, 0x20, 0x50, 0x67, 0x0, 0xf9, 0x4, 0x0, @remote, @loopback, {[@rr={0x7, 0x13, 0xcc, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast2]}, @generic={0x83, 0x5, "a0fad2"}, @generic={0x86, 0x5, "035eb8"}, @ssrr={0x89, 0x1f, 0xcf, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x2d}, @rand_addr=0x64010101]}]}}}}})
recvfrom$inet_nvme(r8, &(0x7f00000000c0)=""/50, 0x32, 0x40000100, &(0x7f00000001c0)=@xdp={0x2c, 0x1, r9, 0x20}, 0x80)
ioctl$BLKRRPART(r5, 0x125f, 0x0)

2m45.835345369s ago: executing program 33 (id=393):
epoll_pwait(0xffffffffffffffff, 0xfffffffffffffffc, 0x1afb072, 0x0, 0x0, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0)
close(r0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x11, r1, 0x45809000)
capset(0x0, 0x0)
r2 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r2}, &(0x7f0000000300)={0x8, 0x9, 0x4, 0xe1f0, 0x0, 0x6})
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c40)={0x2c, r3, 0x1, 0x70bd2c, 0x3, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}]}]}]}]}, 0x2c}}, 0x0)
r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1cbd81, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_GET_STATS_FD_vm(r7, 0xaece)
preadv(r8, &(0x7f0000000080)=[{&(0x7f0000000100)=""/200, 0xc8}, {&(0x7f0000000200)=""/161, 0xa1}], 0x2, 0x9, 0xfffffff7)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000100)={'gretap0\x00', <r9=>0x0, 0x1, 0x700, 0x6, 0x8, {{0x14, 0x4, 0x0, 0x20, 0x50, 0x67, 0x0, 0xf9, 0x4, 0x0, @remote, @loopback, {[@rr={0x7, 0x13, 0xcc, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast2]}, @generic={0x83, 0x5, "a0fad2"}, @generic={0x86, 0x5, "035eb8"}, @ssrr={0x89, 0x1f, 0xcf, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @broadcast, @multicast1, @dev={0xac, 0x14, 0x14, 0x2d}, @rand_addr=0x64010101]}]}}}}})
recvfrom$inet_nvme(r8, &(0x7f00000000c0)=""/50, 0x32, 0x40000100, &(0x7f00000001c0)=@xdp={0x2c, 0x1, r9, 0x20}, 0x80)
ioctl$BLKRRPART(r5, 0x125f, 0x0)

31.885175863s ago: executing program 0 (id=2872):
r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r1 = add_key$fscrypt_provisioning(&(0x7f0000001340), &(0x7f0000001380)={'syz', 0x2}, &(0x7f00000013c0)={0x2, 0x0, @d}, 0x18, 0xfffffffffffffffe)
keyctl$revoke(0x3, r1)
write$selinux_access(r0, 0x0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0}, 0xfffffffffffffff9}], 0x0, 0x0, 0x0})

31.880519672s ago: executing program 0 (id=2874):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x4048000)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400})
socket$key(0xf, 0x3, 0x2)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r1, 0x0, 0x0)
read$FUSE(r1, &(0x7f0000003800)={0x2020}, 0x2020)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x400000a, 0xfffffefc, 0x6}, 0x10)
sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"/1092], 0x444}, 0x1, 0x0, 0x0, 0x15}, 0x4c805)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a00", @ANYRESDEC=r2], 0x1c}}, 0x804)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00')
pread64(r2, &(0x7f0000002280)=""/4096, 0x1000, 0xd33)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x4048000) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) (async)
socket$key(0xf, 0x3, 0x2) (async)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) (async)
write$cgroup_int(r1, 0x0, 0x0) (async)
read$FUSE(r1, &(0x7f0000003800)={0x2020}, 0x2020) (async)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) (async)
syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') (async)
socket(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x400000a, 0xfffffefc, 0x6}, 0x10) (async)
sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"/1092], 0x444}, 0x1, 0x0, 0x0, 0x15}, 0x4c805) (async)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a00", @ANYRESDEC=r2], 0x1c}}, 0x804) (async)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) (async)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00') (async)
pread64(r2, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) (async)

31.866108623s ago: executing program 0 (id=2875):
connect$pppl2tp(0xffffffffffffffff, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001a0001002abd7000000000000a"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
userfaultfd(0x80000)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8991, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x4c, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

31.808087754s ago: executing program 0 (id=2876):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'sit0\x00', 0x800})
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
ioctl$UI_DEV_CREATE(r1, 0x5501)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async)
ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'sit0\x00', 0x800}) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async)
move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0) (async)
ioctl$UI_DEV_CREATE(r1, 0x5501) (async)

31.768410375s ago: executing program 0 (id=2878):
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
r2 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32)
ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000140)={@mcast2, @empty, @loopback, 0x9, 0xa53, 0x7f, 0x400, 0x400, 0x5180000}) (async)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x20040840) (async)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000a40)='./file0\x00') (async, rerun: 64)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) (async, rerun: 64)
read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x2020)

31.758110125s ago: executing program 0 (id=2881):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) (async)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) (async)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) (async)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000036c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001840)={<r4=>0x0, <r5=>0x0}, &(0x7f0000001880)=0xc) (async)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendmmsg$unix(r3, &(0x7f0000008280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003700)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r6, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001"], 0xb0}}], 0x2, 0x0) (async)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4)
sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) (async)
recvmsg(r0, 0x0, 0x104)

31.709551446s ago: executing program 34 (id=2881):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x100, 0x0) (async)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) (async)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) (async)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000036c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001840)={<r4=>0x0, <r5=>0x0}, &(0x7f0000001880)=0xc) (async)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
sendmmsg$unix(r3, &(0x7f0000008280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003700)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r6, @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=0x0, @ANYBLOB="000000002c000000000000000100000001"], 0xb0}}], 0x2, 0x0) (async)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4)
sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) (async)
recvmsg(r0, 0x0, 0x104)

23.297219739s ago: executing program 6 (id=3011):
pipe2$9p(0x0, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x138)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00')
mkdir(&(0x7f0000000000)='./file0\x00', 0x2)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=G'])
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0xe)
read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020)
accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0)

23.296899979s ago: executing program 6 (id=3012):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0))
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000008c0)={0x18, 0x1, 0x2, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048081}, 0x4000084)
ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000040)={0x577d800000000, 0x20, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]})
r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
pipe2(&(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r4, 0x407, 0x5)
vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0)
dup2(r3, r4)
r6 = socket$inet6(0xa, 0x80002, 0x0)
fgetxattr(r6, &(0x7f0000000040)=@known='system.sockprotoname\x00', &(0x7f0000000180)=""/133, 0x85)
ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x4)
close_range(r0, 0xffffffffffffffff, 0x0)

23.265822579s ago: executing program 6 (id=3013):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00')
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
pread64(r0, &(0x7f0000000440)=""/4099, 0x1003, 0x0)

23.25528635s ago: executing program 6 (id=3014):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0) (async)
r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0)
preadv2(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/129, 0x81}, {0x0}], 0x2, 0xffffffff, 0x8, 0xd)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r3, 0x4068aea3, &(0x7f00000000c0)={0xd5, 0x0, 0x44})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000000)="0f01c866baf80cb8ee594085ef66bafc0c66edc443a55d1300430f3566baf80cb83ff6d08def66bafc0cb0f1ee400fc72c5cc7442400ebd40000c7442402dcdd0000c7442406000000000f011424c4823d02100f20c035000001000f22c0c744240029010000c744240224684eb4ff1c24", 0x71}], 0x1, 0x19, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000015b000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000080)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa6426660f35c4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0e476e04b8200fae82ef66bafc0c66b8004066ef66b8296c", 0x5d}], 0x1, 0x10, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000015b000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000080)="65660fc736b9230200000f320fc5b0040000000f0f10970fe8fa6426660f35c4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0e476e04b8200fae82ef66bafc0c66b8004066ef66b8296c", 0x5d}], 0x1, 0x10, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file0\x00', 0x111)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) (async)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r5, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x3})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x20, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x1}, @request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0})

23.126510143s ago: executing program 6 (id=3016):
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000) (async)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x32, 0xffffffffffffffff, 0x2ec37000)
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
ioctl$PPPIOCGNPMODE(r1, 0xc008744c, &(0x7f0000000000)={0x8029})
ioctl$ASHMEM_GET_NAME(r1, 0x40087708, 0x0) (async)
ioctl$ASHMEM_GET_NAME(r1, 0x40087708, 0x0)

23.108091152s ago: executing program 6 (id=3017):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
r2 = socket(0x11, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r4=>0x0})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x8993, &(0x7f0000000440)={'sit0\x00', 0x0})
bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x1, 0x6, @multicast}, 0x14)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x200}], 0x1, 0x0, 0x0, 0x20000001}, 0x20040051)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f00000001c0)=0x4)
ioctl$TUNSETLINK(r6, 0x400454cd, 0x305)
sendmmsg$inet(r1, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000009c0)="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", 0x188}, {&(0x7f0000000740)="97d17744aa9566d244b4a6a7bac3043aad7ead0625c7a01517485ca1171e2d8b21659736b5247ad8288fdd48f9bc2cdf7ab29c70255fbab7766e6e0d0d3fa89bad35b4aed5a0965fe952f739534fd4b4af3050df9aa7d23396b9d8f3b227083db9ab8c639c9ee9792923dcfe9d05a323c7984d2e7a6fa33748b6729b3ff9b59edf8f98e8ae7521b231410b752a4b3bdc57b6dc866405f0", 0x97}, {&(0x7f0000000280)="d0dc81753ef03a796b2a22ba029070ad1380604c9fc692ef42cff0e4d191", 0x1e}, {&(0x7f00000002c0)="6d2657493131db30447fce55af67ac7f10106db6d5cacd06cd9a77b8", 0x1c}], 0x4}}], 0x1, 0x14008094)
close_range(r0, 0xffffffffffffffff, 0x0)

23.094060033s ago: executing program 35 (id=3017):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
r2 = socket(0x11, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r4=>0x0})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x8993, &(0x7f0000000440)={'sit0\x00', 0x0})
bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x1, 0x6, @multicast}, 0x14)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x200}], 0x1, 0x0, 0x0, 0x20000001}, 0x20040051)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r3, 0x40049366, &(0x7f00000001c0)=0x4)
ioctl$TUNSETLINK(r6, 0x400454cd, 0x305)
sendmmsg$inet(r1, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000009c0)="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", 0x188}, {&(0x7f0000000740)="97d17744aa9566d244b4a6a7bac3043aad7ead0625c7a01517485ca1171e2d8b21659736b5247ad8288fdd48f9bc2cdf7ab29c70255fbab7766e6e0d0d3fa89bad35b4aed5a0965fe952f739534fd4b4af3050df9aa7d23396b9d8f3b227083db9ab8c639c9ee9792923dcfe9d05a323c7984d2e7a6fa33748b6729b3ff9b59edf8f98e8ae7521b231410b752a4b3bdc57b6dc866405f0", 0x97}, {&(0x7f0000000280)="d0dc81753ef03a796b2a22ba029070ad1380604c9fc692ef42cff0e4d191", 0x1e}, {&(0x7f00000002c0)="6d2657493131db30447fce55af67ac7f10106db6d5cacd06cd9a77b8", 0x1c}], 0x4}}], 0x1, 0x14008094)
close_range(r0, 0xffffffffffffffff, 0x0)

21.052660212s ago: executing program 5 (id=3034):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3}) (async)
fcntl$setpipe(0xffffffffffffffff, 0x8, 0x80000000)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, 0x0) (async)
r1 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x0) (async, rerun: 32)
r2 = socket$inet(0x2, 0x0, 0x0) (async, rerun: 32)
r3 = socket$key(0xf, 0x3, 0x2) (async)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0)
sendmsg$key(r3, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) (async, rerun: 64)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) (async, rerun: 64)
setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f00000000c0)=0x7f, 0x4)
listen(r2, 0x0) (async, rerun: 32)
listen(r1, 0xa) (async, rerun: 32)
r5 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r6 = syz_usb_connect$cdc_ecm(0x5, 0x0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) (async)
r7 = syz_open_procfs(r5, &(0x7f0000000280)='net/unix\x00') (async)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902"], 0x0) (async)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42041, 0x19a) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) (async)
socket$inet6(0xa, 0x80002, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
r10 = socket(0x10, 0x80002, 0x0)
write$P9_RLERRORu(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r10, @ANYRESDEC], 0x52) (async)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="606c6affa205334fed550f23a8bc47c9e8eced01f944323981a51cf6bfc78b94afa296c1db93fd4a8b49f8531a465a257b1d883a853be0c2a17ab85ac98973a12c34afd36407088e3b5789c6aea99da1c0059d120f536bd77c59c05b4ebee06efe24517a0eea51b84729d238fc416d4f2531ab49641bf048596a2ce7d09b6cd15c8aca457a3ec13f54ad394c3f065a25fd5bd9c030d3e1b83dfc9a461de7366814d38e6012e9138e03ec909e2a5b113c480d1f1235aea9a622348983f40ee5500000007c02100bb07dca91d78e0ca5d47482d2af5f9e30c9a4a884f6", @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',version=9p2000.u,\x00'])
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) (async, rerun: 32)
fchdir(r7) (async, rerun: 32)
ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, 0x0)

21.000480794s ago: executing program 5 (id=3035):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) (async)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000100)={0x10001, 0xe7, 0x2000002, 0xff, 0x7, "ea71061d0000000001000200", 0x0, 0xb53})
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000140), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, '\a\x00', "7ae45252c9de55b4bc6a682567b902a1", "5dcf9f49", "c5cab4a5baa61761"}, 0x28) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x11a, 0x4, 0x0, 0x0) (async)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0)
io_setup(0x1fd, &(0x7f0000000480)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x28, 0x3, 0xf0, r3, 0x0, 0x0, 0x9}]) (async)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = dup(r5)
setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000300)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x5, 0x4e21, 0x8, 0xa, 0x90, 0xa0, 0xc, 0x0, 0xee00}, {0x1, 0xf, 0x40000000, 0x6, 0xffffffffffffffff, 0x9, 0x7, 0x8}, {0x80, 0x200007, 0x1, 0x81}, 0x662a, 0x6e6bba, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010101, 0x4d3, 0x32}, 0x2, @in6=@mcast1, 0x3503, 0x2, 0x2, 0xd, 0x9, 0x5, 0x2}}, 0xe8) (async)
r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE(r7, &(0x7f0000000100)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/90, 0x5a, 0x3, 0x8, 0xf, 0x0, 0x3}}, 0x120)
write$UHID_INPUT2(r7, &(0x7f0000000280), 0x6) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001d002100dfff0000000000000700000005000000000007000a0002"], 0x30}}, 0x0) (async)
io_cancel(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x6, 0x7, r1, &(0x7f0000001980)="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", 0x1069, 0x8, 0x0, 0x2, r6}, &(0x7f00000002c0)) (async)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0x2) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done], 0x0, 0x0, 0x0})

20.241651498s ago: executing program 5 (id=3039):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
fstat(r1, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
socket$nl_audit(0x10, 0x3, 0x9)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000840)={[{@workdir={'workdir', 0x3d, './file2'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, ':%*'}}, {@dont_appraise}, {@pcr={'pcr', 0x3d, 0x31}}, {@audit}, {@fowner_eq={'fowner', 0x3d, r3}}, {@fowner_gt={'fowner>', r3}}]})
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92)
mknodat(r4, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
chdir(&(0x7f00000000c0)='./bus\x00')
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./bus/file0\x00', 0x20000, 0x80)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000500)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r6=>0x0})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r5, 0x5000943f, &(0x7f0000002080)={{r2}, r6, 0x10, @inherit={0x68, &(0x7f0000000700)=ANY=[@ANYBLOB="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"]}, @name="9a0f9854b1b7792834fe154d38b61776c44f61769411bc36178603b59df04e23d3530fc9a2ce8e74277b0545a6ad07bbd916ced704989decb00662d4f641b8d8bd12c3a030a889fbc111469664d65b04d967da48972f1f02cb40feaaaa1aae5cac35c5b6767a4de3fe383120d35fdcb8634c2c64e3337e8286b92b2be004e847e235c80e0eb15074547d2c4deeaf8f4b60516a98d2b491b471c51a523fa1ea8d045a9b03c8b7eb53f95b859f4e1dbb5e6a30fe442725cb5a52e8c25ed37c7eb1c24a300a0a2ae1ee3e75f94e90207f7e1cf7fff56926626e4414a8eea3e52257dfcc5ef48c399bdb5575016a749c4ce78d405f0b728531ee8c0c0b7f94262c5b93168438dd2db545aa164aefda78627146e333b4ad14e7edaef1bfb8477be628c520f6efb8048b4201d26557977539f230717690458ce5eda8f501ac04dbed8e5867931b9df04f6f4197714612ad9fc0b82bc664af6aec4e50eab33ba5667580c9df9f88a35cf00fdd59d1ffcf59f7bde42be3de27026e7e86e85b29d90bfe5285aaf24bbeb75a6919b44c3fb673de744cf8c068e9ddfd435d83f2dfd61626669aeb3b1bc4d50962d25044b8b43127443059cf95af24a004bc7430dfc9eea271d5b63adf10820726c60964326fed6bd315d017d66e132050757a5ddf9f932e3009f8b8761b50eb6fe4f9186bfd2c1fd5626b5361affa00dac23f75f27bf50382c83c4d46f8cf4e474578b747eb1c4d9cdcc83a640f91cb153099ce5edc066b38e0582f1d845f076e36b88e0ad166399616565069c6d7ce633d5c9cc61e4b504ff8bb3f84c3c0d965e6cf4a1ab414e50f23efaf1f57e0b4daa1f37dc578029439cf5180771c2992214d6538ebf2bcdc39d02b56349a5f930895e10f6ef01d7dcb11f3f486adb67795f98b2d02d7e1c7d8685482f7e35ba30b707b8942806e4c9b871099f01173d8be55a41a56b6321a00cd7533d34be3d7d5a3d1fbefd2638dd47af60f450ffd089e3dee94033fa5a606be011a1d128e058ee0f235443657344d08ddde2688bf8875cea2c84b8f2fdf8f8173918b2aac055c34ff4c580de8ba242ffe6e1c189b4dfa3547dec40f37536db2c781746cc32aa12f07d68ac469cd0fe60cd3448ff0800a8a2ae75f7f5b84872fe04e9943e6ce4c83dfa631f0f4be1863754adca261b323d83fc711626a32dd8f58c7b209f5af6671f24fdf40e16f7926a7288c4c0d255ff1ebe3573edb74db1c03052d8b041741120c1e7f66d9e5a159c71a0e3825a294dafb39a7e32a10ae3c8783391292a4208afb3732dec46f203ffc7020e733cbe5a2e1c29cef1f2e04c74e74485afdc228a908e0bfbd2bb2e3df6dfed7303bf3b52f74d1ca48ca2171ff5dd537487d7b8e8699176e0f3ef82bb1b04dd8d56df81e422c31ecb814cc8146c845c8038503e5f9c1819e62b5957a7abd8f5560330fd7ad78b70189342ceb7dff931e40b99f0a6e6527a7b2b2a82823eda791f774eaf0ab943a45782f3ce2dffee34158af41f585e70987f3ae8c8e80e85669e92f55b2459c4aa45e10c92083b7d6fad7a33b76624e32420665edfb1add9fbf82583cf5de28393bfb8e7d4b41600c381e182356f8c04abf5ea91355334c20898d93734df9a017efe5a070fcf8aa30e0e50689e0f176c257f3347a086a7c0b47faecf78bf0d415ec46c3d3930fef1bc8019b0e6dd91fa63b9f8459fe5548c69071ed1e0f8ee1f4d37c9a65830e36a19837c34389973ee2c1e7c6953264f4e382eebf127519b49cef4fd616618034a831347878689acb6eb25b04b05391dfb9573bdc43588a131838d07cb563efae91da393809b2a9a86789641709a7e18d44a21b4857ddf80269674d58b8672a3e0bb91ffc02cae3e0d9709dad7c45c0be246b01e02510974d3398b6d23d0e0112738015ee8b8ab192f5578c1834f91ef2d3ef95259d71be4112427a5ad3a0c39b520b82acfa6cfdb5b3fda4c99e645714a59b299e23ae80e020ca1be331433581e564705bdff62da0d208e3a3b8d3714287d341992a6220b88824c226110961312f153caa52697d3fb456cdb63cf93a387b68d527faff59bc77e416135f76025b755295882e311cac615aac613cbf4a2944dabeda581e85d0e5c6ecf875d2b9e82df61593e09d7051e67ab3bff6565df0558f64005e1a495c675ed2890977a206281455fd05ed616ad3d563836095d1ed85c1162cee38267a73b05385890805b6c58c2097d6de77107178a545846a187817e026181b44f615cd9184692ec30d068727f104c61fd119ec964d4c4cb7cb9067d4b424c6390268937e8cb903b2f9b11013a8352f0cd6e5e8c5f42383f78d6a2d497f6c9da50037fb2c2ce1ac7e633a56fe4b6a93a9968a671378a771b12c8bebcf93c60d259277453018adc43c8a473d5e767d0f8db052fb8e8ab0212ce700f1b16d799f3092b77aafe44a017e5a47709a81f87df2bfa37cd58e2a6893c222e502e508d628d2349b46fb1c5e34697a092ae047ba49954728d9fa6601df4ec53028e30d1ed072853d2d3d8752064578b8562a726d3739f09807e22b885fbf68979a01740d93ce553e4f70c9076fcb7286bc855ab68577093b5a77e9b8edfce939b44c330df09313ffc04fbca7059ec0a94b599e80b51065c7289535bdbfa2c75dc203355c5033ea51bd1302af3c655c6ba10dbed76fe16af2f7969560e53f3d542c5c0013280f3f4d361dad8aae3598234c4681378186d9a798d9a9266c3c87a657de717b2bf6c9231de5b5b572c3a00c01be1e50beb787cfd1494ca7e22e5d37d28314eecdcec39475e85d50e4c7390b745e67e59de546b51f7882af599200e39938a4a7fed2df6d97b9bf6d9e15a886555dc4fe03c9a43c7feab4f0cf77f04e4bc30ba9db011d6ceaff0c7062117eda6cd335769b0f26db0ae37a818d3fc1e18e7d2572c6f3b1d5ae1a42a28aba35ba2c2330a52a3f2fb0ebb1ac885198104c4496dd793b565ccf2753ecbb71d62ae04e472cd07e42798db27f461204f5f34f0e4bb7b8ca1278c39ab29fac5fc5cbdbb2c00922bebb06bfb5407398802aeb1e82cefbf6fdea551b467d1f9d669c05c974c333df8a3880b8f27ca217a2264c794a6561c62e96536b2c01076c3472c3af975ba4904d44e35f7169326d81032b75c126855853274a065b8b4cffa0933f71df07b320c5b3b78889986c55de4ef5828be0fc0de6d4e172e10025001294e9ff2f04cc4d3d893af3e63f2a70992900771a1c6be9917b0ed5552daef07b17b44fc4c8d3985a2dfcacf69a20385762032f48e5736608538ad5c055e4f9dcd4b05b6287fb18316a708763d883d564ad9f389f34f959785edb76ab070fe0f1cca13a2d8b51260e827e36ca8e54cc0a370653c35b65fc42047fa7cb3ad14d587dae4a7a80b9eef2bbaa7fa6c53bfe6cc75c65dd27cd9cf013f956307e47e363f3b0a7a3dd84816d0625af922f350d9a4fd5b915a8d123729d374007ae23a7b662d097d2e9e516d6935e7b0161bec70ffcd086b3ccb8f5c33796a07374196ed2de6fcc827ffdf43abe1a419cf0ec323edee86bcddf1adb2f0400eda636221a8a777241c80d187d93c07c794b8b27913d9a3a40dda07ff84407ad58d99bf59d343a360136396c29a0194ae01fa2d4911fd94e86d3d8b7a0671dc2719554ea0500906e778eb0cb104c4f08a94e43053e8cddb84a94062efaeb11d80840224622ea0c34f5966433fd221d9b5a615ff8df57e21aedfe38352d272cee6835d7feb6dd88127326f8d2010b68e08a8a45bb5f8c195f3cc8a0f27fe2a491599ae967c5b9a28189880eccf8db20c4e407dc06997b7340f43e8156c0d7cad64d027feba7e3c52f240041784f66ec2aeac04ec1289daab1dee389a1b0294f57f82ea00e1e8cdbd78246bcef76b0caf74be0e60c9999bdfdf19a7e76fade8fd960bfbb8e52ce44a75d2f00bfa514afbdf369484ec441d6f0bda72ad34614e62ba97b53f85c040149d29c8231cd3c27671fc10b0877a05faff828bb91bf51eb20a56b6ca175255e4a2d8e86f87c531fa54c0a01a9c854f513fa588abdb2e52dc1eaaa734417d275dce74e60546b842504be476b93e04beb844e11014dc57830f3f0870f5073f60b31deb5d1d18f5a24d8e503560f5519e0b85a59995edb54963ea0e06f3f97333d75c1c4c4b824ea522bf5311ebecc7359da21bd82674556b6966fec17bdf8651dae6d8090a765425500a0db574bf5deea18f380663eba53e593f524929b19a64cf42c5e9d78946bd3cffebe699f7be5e940b5aa1458df8aaa2027c928ca708d4965a0ce1fffe301043f6c90f4c829a2a4febd05002431424cf0c5a28df00426116ec2a68c41aada72622c0a3a1a0858d487fd9f5577f504d2c7da93db7adb550f2c317725b0cb7e6c2dbc96579ee0530dca180da9622881540d4b822c1b333fc737dc077008507361a70d75d10481b10db6b987ce589972317ddd5a3d08c81a82edba877e2beedec31012925ca1704c459204b76d7139ac1d966d39ee5c10e68858460b25aaaa2a5c3f8ce3e5adcb74ec8709c8f2bea336c25a6c187840a9d9a74f7085f1808a62f211f7cfe5f614da7f0baca6b5bdcf9131be3577da0d297ef15d3eeb53674a2333701d3be0f128330588bccc511d5a39fd2c69e7262f581d6772c9c3770c34ff4e8f2803d0c146e3cd3da32225dfd7aed75241eb7b9caceed1c9feff7e508b1e6d36b11363b58eaed8ef524c483d6afa326a90cd1958a7e32f57ceb98ecb28bffb1ea8c0a07513985301c6b0ee208f5a57ccec7824aa6d24fb6bf919cc4e76d83e477794d1f15c0a3084de06dbb71d379e0a22606e2e0983fbdf533cb99b95c1d9503fe963b4a928ca7a1575183e7ddaff697c7e33d1c6ce9772218bb0e9c5585269a06ee3b6b006f982b0d1c8d78fd8ec46ea0027fd7f4051d3d66a1d5e42c83b81a2d7ab588c945ef56072d3b6f9bb55e299071f59ed200c5ec17e784518f36916c18c872f2709364cb6d84a2ebce061d4508d7b782565a8c64c80847607ad65f25e87a6f2a2b1f888304c2bbc63eb96be7b3fc0c82763913bbe34c98a212daf772e9936717a9607c449653d38a470b1635b43af7d5cdaa3044eefc4dca93dc93028fa6c943e9124e401e3126e55d2df23e7d18b10025dfef4d0e6afd1219399c45de1414e4c1122b870fa3efe91c2c803e90484d6186e78f32a6b4786918f9acb155d7a7686dd0af87fa8b3aea06889b3e41a643e0ab954fbf23b25e4bce907bcffd31c1425d399af80cbedd86b19659deccd8a17f6783ed68a20da184bf17ff9bcbc05a9af8df70a5ba5c3b6d0744619dbdfe074730e82187ddf9dc295bccb6775f5a890a532b310162ef0b1f23689d650afe89816af617d57dc82f5591820eeb7363a46ed11edb28e3f3f28acca08d10ad6c84fcc4a00680e21ccb51e55fc8e8d6136d5a2a76e3ee273f1981c53ebe5ef08a75ff06cf445b09ccc875cd7e1cf9f3c35d7b061635fd1a00d1f16a66932184e29c4b2a503eda878ef466ea4610827b793d1f3d09aa216f5c58780f8e6dbafd97ded3c1eda21b8ee4ac91cfef979174dba1384f05dcb3f72a8b180c3fa2b992fb5225ab534d9b20e73db6d9c863174859078d75dba1bace05bb43e14b5f334247e8938203e92c84d1a63b1a960dc32bebee72127fd1ddc65d7f750e9"})
mkdir(&(0x7f0000000240)='./bus\x00', 0x0)
renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, &(0x7f0000000200)='./bus/file0\x00', 0x0)
r7 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0)
r8 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000581000/0x2000)=nil, 0x2000}})
symlink(&(0x7f0000000300)='./file1/file0\x00', &(0x7f0000000380)='./bus\x00')
setns(r5, 0x2000000)
signalfd4(r2, &(0x7f0000000100)={[0x8000]}, 0x8, 0x800)
getdents64(r7, &(0x7f0000000fc0)=""/224, 0xe0)
r9 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60)
ioctl$KVM_CREATE_PIT2(r9, 0x4040ae77, &(0x7f0000000040))
close_range(r0, 0xffffffffffffffff, 0x0)

20.16614931s ago: executing program 5 (id=3043):
r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) (async, rerun: 64)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001e40)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000001f40)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x4c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3, 0x8}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44881}, 0x40) (async)
sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r0, 0x0, 0x70bd2a, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x8040)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
sendmmsg(r4, &(0x7f0000001d40)=[{{&(0x7f00000003c0)=@rc={0x1f, @none, 0x80}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000440)="7292d4c2fa56ca90f4066c71083e98f0486c2059a391740024a9bedfb065b4fd144c956867f921428f88ac8bc34944b9a34e5e39b875238a34ee32c2547fd766d40b2fa0bd8b2f8277144327804917b1f22f87fdc10369841ba5d0aa8251ad777e185616438845c30101c9ff8d3008b68b0982613274ccfd9282ae50029910d6bece0c492280514e954d7c975a8c08598af2009073d36e3f1b4fca5df5551cb2a4e59b3a3f4c7f0d7f7d7ac8471f7927238e6d4f473d3024790e33e5b8934c9c", 0xc0}, {&(0x7f0000000500)="2e052da77c6ac8bb74f87e6f1b37e102afc6f84a36076960d6ef930ee5cfe98dcad16ec00b6a203158ee3f424560f70f174cc8b1860b9b498377bcb9f7371dd4f93b82ef369d4c93885e3aeb5eafc983469b6aa36c8d512611ec1a45ec36c8edcf2985099c2fc4202b2dedc36bd28ec6c91b450f3b77d51694734be4868cef34dc4b54dd10311be76c679e0de7ecefd7f2807ca7d52fa2af0c", 0x99}, {&(0x7f0000000600)="413a83d3529d36c9eff9776d72d9f4b5231ba2259d41fec553e90acb5724004148eb55cf39c1fe1cd1091ec1df9ba639d0d7c35de2dfa529abd7578626744c0208d73808da3c5a577de09a86524f8bd98883974df22460ace613e84eeb373ed2b1fe5f36f5f51a270681a07e6cc7728851966e41365e8879972867bbcffb009ff89abe226ee87e9f4a81bf03edbf0bedb8acb467e049dae12286a5e7e70188691770754c546bfedd69583cbcaad36be9a333d451731456e29585c02d9458e7624a", 0xc1}, {&(0x7f0000000700)="af67343c74263f2798fe0218ef011715264612aa9de6a64d0222d6eac73099eca3b3863756a330262006ce100380b5464fe6ca137e9a79e12c5e535e7f79c0b1d2494b0c9cdc9c13b84a83190aae5bdd", 0x50}, {&(0x7f0000000780)="37ee99b7571ed88ef2ca6fb00a8d97634154", 0x12}], 0x5}}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000840)="e4974a8e88aee58851c03ce1165e730c0ddc06641b6e0f28a1bf1a7e076f8bfef5375e35c9dda5de7322b14408a4fc0358a0d9ae907b6a23aee8dce7db1c3ff55ebb80c16969c218ba8830f08006d8484620a3b864b6b0d60fe5a4fe165c045929ea9b4e964256bdba9a4b1cf843dcbe919e47efa72cc9e8609f016d2f067aaf8da6ddc594929c2256778b22743d1f081e97cd0256a0bcd34c5e40342613c702992bdf4717a7b26a44dd8715172c0ce8e8d88fe1e694061d14", 0xb9}, {&(0x7f0000000900)="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", 0xfe}, {&(0x7f0000000a00)="2319c5949c406f2bc07629a4b9a5ff00c3ab7d8cbf0b941c3749cd667fad97880ac563f91c72c8c4d8b46b8671f9c35926c9948fa499ac6f817a61dfd9159bab02eb807166e8c17119a68a950cffbc065cf5632a5e45d92dab0afc42e9511331d7ea8870fc1a1b0da5f00b90324ed4079b13ebd4baaf874230a3b1c1f4572771ed493b7b93568196e538952d9043aefcabf0238fcf04530e53d0949ba44e42d4759542202b42136967efd6545eb9616eff344d85276e99f3a631821bc8e5733afd6154449098bd5330cf0df64f992942688875051b", 0xd5}, {&(0x7f0000000b00)="7e2b8798d830c909e56437e72eae463d7dc6742bd4e776ffc22f0c9242443dba11b52939a0b2306b3480dcaa37a6e490855301963720d9b8b1e1ab63dc8be79cf4a9d7c9a527d5057b7238236a849f26b859a045f1a122d5a813e4fbc61fc86881ab01cac7a51fd6212963bf6febb15421ecbe3e66ee2cc8b8ead3590048cf567737ba48ad0b3bfe6b793f22690f7e4691b94ded2f9eeff0f19c32aac5ac9cede3a7a1d6bf348e3b504d2035d1c1fcc42fe83d9fc4a1", 0xb6}, {&(0x7f0000000bc0)="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", 0x1000}], 0x5, &(0x7f0000001c40)=[{0x100, 0x88, 0x3ff, "9c68f7407e8a9d78e170a4f8cd8b73060e23ab5519576381e067c0514c17781a68f2a0c8e107e28feaecdbc585c2b65baa46cbf9d125445d8feaf4165344fff10bfde302039d45cee6aed7442535357fbbac96ebd037b162ee3308d7450296ed123109d53c95ad1d4c3002a7e46117932985fee1f47f0dac83c8a3b592c10c7785b2c77e5e44775543b9dce037712d9a2c40c6bed2ec77b10539cea527411e4243707bc09cd364012e012bc50c583866bf0255aac25a1ebf0e44f2b1a522a41345e63bc456d5cfc06d45f175522af0fb3840473c5016aaff4105ff79af834610e878f3935f4baa20c42bfd8aa8af"}], 0x100}}], 0x2, 0x20000816)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) (async, rerun: 32)
mount$binderfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='max=0']) (rerun: 32)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f00000000c0)={0x18, 0x69, 0x15, 0x8000000, 0xffffffff, "", [@generic="fdee1438fa"]}, 0x18}], 0x1}, 0x8000)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000040)=ANY=[@ANYRESHEX=r4])

20.1138063s ago: executing program 5 (id=3044):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2c002, 0x0)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000002c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda') (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, 0x0) (async, rerun: 64)
r3 = dup(r2) (async, rerun: 64)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r4, 0x5412, 0x0) (async, rerun: 64)
ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x7fff, 0xfffffffd, 0x407ff, 0x7, "0441900887e8c2b791f19dd026d7677fcb3678", 0x4, 0x200}) (async, rerun: 64)
r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async)
syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB="d4000000000101040000000000000000020000002400018014000180080001007f00000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000080008400000000a0400164008001540000000030400170058000d8014"], 0xd4}}, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async)
ioctl$KVM_RUN(r5, 0xae80, 0x0) (async)
ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000000c0)=""/157) (async)
syz_usb_connect(0x3, 0x8f, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0)

20.10819623s ago: executing program 5 (id=3045):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000c40)={"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"})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000d00070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004001040800", 0x58}], 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

20.056738142s ago: executing program 36 (id=3045):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000010c0), 0x80, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x101)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000c40)={"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"})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000d00070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004001040800", 0x58}], 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

1.391397733s ago: executing program 8 (id=3420):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x3, &(0x7f0000000000)=0x2, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000) (async)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x604ab000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/4080, 0xff0, 0x0, 0x0}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x0, 0x0}, &(0x7f0000000340)=0x40)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28) (async)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "0000000400", "6abc00000000000000000000001000", "f0630400"}, 0x28)
sendto$inet6(r1, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0)
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) (async)
lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0)
shutdown(r1, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

1.259869456s ago: executing program 8 (id=3423):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net\x00')
prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0)
r1 = socket(0x1, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bind$unix(r2, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, 0x0)
exit(0xffff)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x40, 0x23)
r3 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0xfe)
fstat(r0, 0x0)
unshare(0x22020600)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(0xffffffffffffffff, 0xc008aec1, 0x0)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
pipe(&(0x7f00000000c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$P9_RGETLOCK(r6, &(0x7f00000002c0)=ANY=[], 0x200002e6)
fcntl$setpipe(r5, 0x407, 0x7000001)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66)
socket(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x3)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000000c0)=0x1)
fcntl$setlease(r3, 0x400, 0x1)
fchdir(r0)

969.781522ms ago: executing program 1 (id=3428):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) (async)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x1000003, 0x12, r0, 0x0)
mremap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil)

960.478092ms ago: executing program 1 (id=3429):
mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x4})
mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_timeval(r2, 0x1, 0x43, 0x0, &(0x7f0000002140))
close_range(r1, 0xffffffffffffffff, 0x0)

939.601082ms ago: executing program 7 (id=3430):
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x2, 0x1}, 0xe)
ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000080)=0x400)
getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x9, &(0x7f0000000100)=0x4)
r1 = accept4(r0, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000001c0)=0x80, 0x0)
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1)
sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x2, 0x9, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4050}, 0x84)
getpeername$tipc(r2, &(0x7f0000000340), &(0x7f0000000380)=0x10)
ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f00000003c0)={0x80})
fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000480))
r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY(r3, 0x5000940f, &(0x7f0000000500)={{r2}, "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"})
write$snapshot(r3, &(0x7f0000001500)="f3574136281656293d5b947d6f9a96f4d37360548dbddf70a326cc0f94d28ba19458f050f9b04abb5423d4c305db40931e95ac59fe328195a594feb7ba90f985b81eb0c789b0a2b47e9c179496a0f1", 0x4f)
r4 = socket$inet(0x2, 0x1, 0x1)
setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000001580)="cb5247ebac1f666f78e2a4bb3eca89df253ffba52ac253bd4333d024cda0a5537cc7f4304ab79e10c8b62c42234e25570b0e0cd8a71665d8ce529975a04995efcffbbb884e06f893dbd544931fc7e7f1aa90c435b4d809cbb4bd4f78bb3f1db7e1963ee47dce7ca6a6db5b43b65de6aa5e0d26b4fbe4add873739246", 0x7c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001640), r3)
sendmsg$TIPC_NL_BEARER_DISABLE(r5, &(0x7f0000001780)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001740)={&(0x7f0000001680)={0x88, r6, 0x420, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x400}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0x54, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa7a9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x40105}, 0x20008000)
write$P9_RCLUNK(r3, &(0x7f00000017c0)={0x7, 0x79, 0x2}, 0x7)
ioctl$FICLONE(r5, 0x40049409, r0)
write(r4, &(0x7f0000001800)="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", 0xff)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000019c0)={'ip6gre0\x00', &(0x7f0000001940)={'ip6tnl0\x00', <r7=>0x0, 0x2f, 0x7, 0x3, 0xc, 0x11, @empty, @ipv4={'\x00', '\xff\xff', @local}, 0x8000, 0x8, 0x0, 0xf0000000}})
statx(r3, &(0x7f0000001a00)='./file0\x00', 0x3900, 0x80, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
sendmsg$nl_xfrm(r3, &(0x7f0000001cc0)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001b40)=@newpolicy={0x120, 0x13, 0x8, 0x70bd2d, 0x25dfdbff, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, @in6=@loopback, 0x4e21, 0x2, 0x4e23, 0x7, 0xed612cab90873fe, 0xa0, 0x20, 0x8, r7, r8}, {0x1ff, 0xffffffffffffba71, 0x38000000, 0x5, 0x5, 0x1, 0x3, 0x8}, {0x1, 0x8, 0x9, 0x1000000000}, 0x4, 0x0, 0x0, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075c, 0x7}}, @algo_auth_trunc={0x52, 0x14, {{'wp256\x00'}, 0x30, 0x80, "95986af77d66"}}, @replay_thresh={0x8, 0xb, 0x3}]}, 0x120}, 0x1, 0x0, 0x0, 0x20008090}, 0x0)
quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000200, r8, &(0x7f0000001d00)='./file0\x00')
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d80), r3)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001dc0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f0000001e80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x28, r9, 0x4, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xffffffff, 0x8}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x400c0a0)
getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000001ec0)=0xf0cf, &(0x7f0000001f00)=0x4)

805.894024ms ago: executing program 7 (id=3431):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x1830, 0xffffffffffffffff, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000000)='\xd8\x00', &(0x7f0000000040)="15c9", 0x2)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13)
sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x2c, 0x16, 0xa01, 0x0, 0x0, {0xa}, [@nested={0x18, 0xca, 0x0, 0x1, [@nested={0x14, 0x1, 0x0, 0x1, [@nested={0x4, 0x4}, @typed={0x8, 0x76, 0x0, 0x0, @uid}, @generic="334924eb"]}]}]}, 0x2c}}, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000fc0)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

805.724195ms ago: executing program 1 (id=3432):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0)
r1 = socket(0x2, 0x3, 0xff)
connect$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'vcan0\x00', 0x1})
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x1be2)
sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x4020)
socket$inet6_udplite(0xa, 0x2, 0x88)
syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

772.870035ms ago: executing program 7 (id=3433):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x28, &(0x7f00000000c0)={[{@size={'size', 0x3d, [0x30]}}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setreuid(0x0, r2)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0xa000000}, 0xc)
r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x2})
socket$packet(0x11, 0x2, 0x300)
r5 = socket$unix(0x1, 0x1, 0x0)
setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000002900)=0x659c, 0x4)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x1}, 0x4)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3)

720.489836ms ago: executing program 7 (id=3434):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c)
setsockopt$packet_buf(r2, 0x107, 0x5, &(0x7f00000002c0)="a42143ba557fc0f08e9a98c33d9e3a57", 0x10)
r3 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x1f}}}, 0x1e)
connect$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x2, @empty}}, 0x1e)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000500)=[@decrefs={0x40046307, 0x3}], 0x0, 0x0, 0x0})

621.861448ms ago: executing program 7 (id=3435):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x180, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000004, 0x12, r0, 0x56a31000)
r1 = socket(0x10, 0x803, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x8}], 0x1, 0x40001041, 0x0)
sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
bind$packet(0xffffffffffffffff, 0x0, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
getrandom(0x0, 0x0, 0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000001240)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000040)=0x8, 0x12)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

612.227628ms ago: executing program 7 (id=3436):
r0 = socket(0x840000000002, 0x3, 0xff)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000440)={0x3, &(0x7f0000000400)=[{0x4, 0xf, 0xd0, 0x9}, {0x8, 0x3, 0x8, 0x9}, {0x7, 0xeb, 0x9, 0x1}]})
connect$inet(r0, &(0x7f0000000540)={0x2, 0x4e22, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000003b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x4004010)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r2=>0x0})
connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10)
sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="01000000000000000010000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="02000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000000000000005c06440132bb112240fcbcc3fa9d0431575f8614d3538ce09c50eecd6ac579e8e83b944b666113f3afed71231e6653a13532f17b33515bcffb4dfff1dd7e1be1"], 0x80}}, 0x0)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @private1, 0xe}, 0x1c)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc2, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0xfffffffffffffffd)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCMSET(r8, 0x5418, &(0x7f0000000000)=0x8001)
unshare(0xc000400)
ioctl$FS_IOC_SETFSLABEL(r8, 0x5437, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC(r7, 0x4068aea3, 0x0)
ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0800000000000000f2000040"])
r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000008c0), 0x40000, 0x0)
ioctl$TCSETSF2(r9, 0x402c542d, 0x0)
ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000280)={0x7, 0x0, [{0x40000000, 0x2, 0x5, 0x7fffffff, 0x8, 0x1, 0x2}, {0x0, 0x89, 0x8, 0xee3, 0x4, 0xe, 0x3}, {0x80000007, 0x1ff, 0x1, 0x33ea, 0xd786, 0x5, 0x7fffffff}, {0x2, 0xfffffffa, 0x4, 0x2, 0x5, 0x9, 0x7}, {0x80000007, 0xfffffffb, 0x7, 0x739, 0xd19, 0x5, 0xca60}, {0x4, 0xe, 0x1, 0x7ff, 0x8, 0x4, 0xe3}, {0xb, 0x2, 0x4, 0xfff, 0x743a, 0x2, 0x8000}]})
r10 = syz_open_dev$ttys(0xc, 0x2, 0x1)
ioctl$TCSETSF(r10, 0x5404, &(0x7f00000003c0)={0x10, 0x0, 0x1, 0x5, 0x13, "df81471ad0995daad9bd2457b6e6a8c9f22cbc"})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000000c0)={'syz1\x00', {0xfffc, 0x3ff, 0x8, 0x9}, 0x5, [0x3, 0x800, 0x200, 0x100, 0x2, 0x1e52, 0xa3, 0xb, 0x3, 0xfb8e, 0x9, 0x0, 0x3, 0x40, 0x8, 0x2, 0x1ff, 0x2, 0x6ed, 0x7b8, 0x8, 0x6, 0xffffffff, 0x1, 0x2, 0x1ff, 0x1938, 0x5ea5, 0x2, 0xff, 0x1, 0x7, 0x4, 0x0, 0x6, 0x1, 0x400, 0x4, 0xbf, 0x2, 0x80000000, 0x1, 0xfffffffc, 0x2, 0x80000000, 0x0, 0xfffffff7, 0x5, 0x7ed, 0x8, 0xfffffffb, 0x8, 0x7, 0xfffffff7, 0x2, 0x279, 0x7f, 0x80000000, 0x8, 0x2, 0x3, 0x4, 0x5, 0x8], [0x7, 0x9, 0x9, 0x36, 0x981d, 0x75, 0x9f, 0x0, 0x9, 0x4dc, 0x1, 0x4, 0x1, 0x9, 0xb, 0x1, 0x0, 0x4, 0x1, 0x0, 0x3, 0x1, 0xfffffffd, 0x0, 0x9, 0xfffffffb, 0x3, 0xfffff000, 0x2, 0x0, 0x3, 0x3, 0x3, 0x4, 0xff, 0x4, 0xb2c3, 0x15f9, 0xa, 0x4, 0x10001, 0x6, 0x9, 0xff, 0x7, 0x6, 0x9, 0x81, 0xfffffff3, 0x8001, 0x4, 0x9, 0x9, 0x6, 0x3, 0x7, 0xc86d, 0x200, 0x7, 0x7, 0x4, 0xffff3165, 0x9, 0x4], [0x1, 0x2, 0x2, 0xfffffffa, 0x0, 0x9, 0x200, 0x7f, 0x6, 0x2, 0xfffffff7, 0x6, 0x7, 0xca75, 0x6, 0x9, 0x81, 0x7, 0x81, 0x8, 0x1, 0xa, 0x100, 0xf2, 0x6, 0x7, 0x8c, 0x7, 0x10000000, 0x80, 0x81, 0x7, 0x5, 0x8, 0x1, 0x962, 0xf91d, 0x2, 0xae, 0x5, 0x1, 0x8, 0x5, 0x7, 0x0, 0x83b, 0xfff, 0x0, 0x2, 0x4, 0x27d0, 0x9, 0x5, 0x3, 0x4e6, 0x1947, 0x6, 0x6, 0x6, 0x5, 0x8, 0x9, 0x7, 0x10001], [0x20f7, 0x0, 0x101, 0x79e, 0x3, 0x82a, 0x10001, 0xe5, 0x2, 0x2a, 0x0, 0xa0c, 0x6, 0x8, 0x3, 0x1, 0x7ff, 0x5, 0x4, 0x58, 0x5, 0x2, 0x3, 0x81, 0x10000, 0x7f, 0x2, 0x10000, 0x7, 0x40000000, 0x200, 0x9, 0x1, 0x7, 0xfffffe00, 0x9, 0x100, 0x9, 0x2, 0x7, 0xde, 0x200, 0x1, 0xf9, 0x0, 0x53265f23, 0x7, 0x3, 0xe, 0xfffffffa, 0x0, 0x1ff, 0x3, 0x800, 0x931, 0x3, 0x5, 0x8000, 0x0, 0xe, 0x2, 0x1, 0x5]}, 0x45c)
r11 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1, 0x0, 0x0, 0x4000002}, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)

373.880543ms ago: executing program 8 (id=3442):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r2 = dup(r1)
write$FUSE_NOTIFY_STORE(r2, 0x0, 0x2b)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
pivot_root(0x0, 0x0)
ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0)
ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000002030300f366000000000000000000000800010001000000"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000010301010000000000000000000000000c000200fffffffe"], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa)
creat(&(0x7f0000000000)='./file0\x00', 0x10)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x400, @loopback}}}, 0x108)
setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x1000003, 0x12, r0, 0x0)
mmap(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x9, 0x12, r0, 0xa8992000)

315.121674ms ago: executing program 8 (id=3444):
r0 = socket$netlink(0x10, 0x3, 0xf)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0xc080}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x74, r1, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x97}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x4000)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='btrfs\x00', 0x0, 0x0)

312.128314ms ago: executing program 8 (id=3446):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) (async)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000001c40)=0x1) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x9, 0x7ff, 0x3}, 0x21, [0x100, 0x6, 0x5, 0x2, 0xb, 0x6, 0x2, 0x12414dd6, 0xdf, 0x7, 0x1, 0x971, 0x9a, 0x40, 0x0, 0x0, 0x3ff, 0x4, 0x2, 0x0, 0x1000, 0x1, 0x7, 0x100, 0x0, 0x0, 0x5, 0x8001, 0x9, 0xf249, 0x1, 0xfff, 0xb2, 0x2, 0x3, 0x0, 0x8001, 0x0, 0x1, 0x1, 0x2, 0x4, 0x9, 0xf, 0x566, 0x8, 0x7, 0x5, 0x8, 0x7ff, 0x942c, 0xfffffff9, 0x7d3, 0xe, 0x9, 0x1, 0x0, 0x7, 0x1ff, 0x1ff, 0xcb, 0x9, 0x5, 0xfffffffe], [0x1, 0x7, 0x5, 0x3, 0x80000000, 0x0, 0x4, 0x2, 0x3, 0x9, 0x6, 0x7, 0x2a1, 0x2, 0x0, 0x5, 0x4, 0x200, 0x8, 0x4, 0x4, 0x6, 0x3, 0x2, 0xfffff144, 0x9, 0x1, 0x4007f, 0x5, 0xe, 0x7, 0xfffffff7, 0x8, 0xff, 0xfffffe00, 0x4, 0x1, 0x5, 0xffffffff, 0x4, 0x9b, 0x3, 0x7f, 0x9, 0x0, 0x0, 0x2, 0x101, 0x90000, 0x5, 0x80000001, 0x7c0, 0x2, 0x101, 0x40, 0x6, 0x80, 0x2, 0x4, 0xc, 0x6, 0x81, 0x6, 0x7], [0x7, 0x6, 0x8, 0x3, 0x180, 0xe697, 0x1, 0x1, 0x8, 0x47, 0x6, 0x7fffffff, 0x1, 0x5, 0x2, 0x0, 0x6, 0x2001, 0x80, 0x9, 0x7, 0x6, 0x2, 0x5, 0x80000000, 0x4, 0xd, 0xffffffff, 0x8, 0x7, 0x1, 0xc46, 0x6, 0x4fde800, 0xc6f, 0x7fff, 0xad2, 0x7fff, 0x3, 0x1, 0x6, 0x9, 0xff, 0x1, 0x3, 0x1000, 0x2, 0xc, 0x2, 0x66, 0x3, 0xe09, 0x8, 0xfffffffc, 0xffffff80, 0x8, 0x3, 0x5, 0x4, 0x9, 0x1000, 0x3, 0xf744, 0x9], [0x1, 0x3777, 0x5, 0x7f, 0xe, 0x1000, 0x7c1d, 0x9, 0x3, 0x5, 0x6, 0xfffffffb, 0xdd, 0x200, 0x0, 0x7, 0x8, 0x0, 0x7, 0x5, 0x8000, 0x9, 0x1, 0x9, 0x5, 0x24, 0x5, 0x9, 0x5, 0xfffffff7, 0x7, 0x3, 0xd, 0x0, 0x8, 0x4, 0x401, 0x9, 0x4, 0x6810, 0x4, 0x7f9546b8, 0x800, 0xffff, 0x4, 0x2, 0x5, 0x8, 0x3, 0x7fffffff, 0x6, 0x4, 0x2, 0xc1200000, 0x9, 0x1, 0x9, 0x9, 0x7ff, 0x1d0, 0x101, 0x40, 0x3, 0x3]}, 0x45c) (async)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async)
futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x111)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da5"], 0x310) (async)
mkdir(&(0x7f0000000000)='./file0\x00', 0x2) (async)
mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='noswap,huge=never,nr_blocks=']) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000007c0)={[{@index_on}]}) (async)
syz_open_dev$loop(&(0x7f0000000100), 0x20400000f01c, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r2, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
clock_getres(0xfffffffffffffffd, 0x0) (async)
bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e23, 0x4000f, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}, 0x80ab}, 0x1c)
ioctl$SIOCGSTAMPNS(r3, 0x8907, &(0x7f0000000180))
write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2000)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @mcast2, 0x5}, 0x1c) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) (async)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0)

296.582234ms ago: executing program 2 (id=3447):
r0 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x0)
r1 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}, @empty, 0x0, 0x1, 0x0, 0x1}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}})
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0)
mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x182)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000005340)={0x61a4, 0xd, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x3790, 0x3, 0x0, 0x1, [{0x234, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x4d, 0x6, 0x1, 0x0, "13257969ec0ad419456820b03d233b8247270c09a429d6cd3b92d4579c8a8f61b52294b661e29a15796858d82677d0301f001aba8e8877085448f35830e851144667f0215af6a6243a"}, @NFTA_SET_ELEM_USERDATA={0x93, 0x6, 0x1, 0x0, "2357fc5ff87e4434c8f22a0c88899d85af1e40be46d0b098e46c83425a797ca67e84d39333d9e00addca5351fdb1ae8b95c6c9a7af918cf91dcf9602e380e8d755172b2e1433ffb783916360ac552d07fa0b309f5b33ee11509746d0e1cb1adc4cd5b4019325731ae1e2687a773ea780479740a1679ade5eae000a10eb07197891fd03459140d51f44a2f95c615e4a"}, @NFTA_SET_ELEM_KEY_END={0x14c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb8, 0x1, "a0520337be30967bea4b4483a80e4536a90483bf12ed217045f65975f2668b1b9438f574b90056043e2c877e46995474fd3fa2676e10e53848101c789114480327474089f4a08315260777a0460a8a48e5d88a2df1ea1b39d06b5e31e97f02d6da4cd9b9688be3e685df611d7ccd76ad62c24270554442d6429e8c4f14f959497a917f499c0e9c151b36789f7076b48ed1a7f7b83971d8501356ff58c4bd3144b9ac1294ffefc43f27dfbdfbd299001381391c82"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x11, 0x1, "1699694c5d5df08833843b4559"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x3558, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_DATA={0x1300, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcf, 0x1, "af142db3d87434db11ed1fa7489960a53dd2eeef38f4290872725b2014b0f0aba777f38f120d78dd1788eaf9d786487d754bfaab59ca0a86a28ff3cbe2f3ad7980c51e6aab95f33dcf26840c66d7e5269efeca3ecb2f015210c90839ffcfdfb042086f1370bae64d343a9801a06bc4e741d8868ecfdf56c93f254ee8314b3d15c645d7df87c6a12296c8fe939e2e8057b349c738e250d22e99ae6cc62b3506d51ef9afc5653680bccaafe5d2fa817bc941d68cbce920cbc3a0c910bacebfdad36231db61264d5f127f32d6"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x98, 0x1, "1f966a8fdc20d003e61191bcea15e14a39230d74974a794aad15ca72a66a6e75b390b13f22de07c9f720271d3373e1026f3e1c76dfdf269d121bed6d4d04057404f8acc1e06e91869f82b47782299f645ffa9fce9533510492b2c9d63ae23ca93c41f76dc4965a78693cc50641df113a8c9bf6a29267f1b9faea1274cd445a39e8230e8672ba09f6a8cdc7b7e7ac4badcc77a2e7"}, @NFTA_DATA_VALUE={0xf0, 0x1, "08e4632e9cc0fa6b115a7edc3b3d1d6cce803fd852c787bd6a56647f65a7df25314faf1d29f3b200835cf867f970400968b64ab7bcb9cbd722022c3d1c704b86ebbd420ac9a0f44820a6f8b6425ff9f85c5496a4a422db08a61733cdd5f67043b4e7efdd0a873660656cae456aca39e0679586e94c5f641281a24cd3724b5d6c5b8cdb35f462c58c4f1e5e20d690f5b823e10b10b7ccd3a418e5c45d246044f7dc9bb92fa6cbae0b220533568bf191d852c7187a8abd80e5d4c280f84d899fca6fc6143b23ec518ff0f0ec7e821cb3a7e07cafaf1717bb29619eb65ef7ffb53b2ab43f360819acfef716b642"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_DATA={0x10e4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xdb, 0x1, "e552cbf35a7adbe3461761233380438296d10ed0cf590984cc1bcee47a570091029049ae8e15ab3e73afe5ae78cce95c856864ed44b8b8ef897f98f384c95c24f8122f83b157b12e9e2540a94c77b71dbd3d83354183970e6d909f5b0b662ee3070ab4aa6275a4e4cbab2ba1f48e61fabd539db4dfb6cc7cb83006300146c296a76ac257985a73769718f24db8b426fe5696829ac471c92979c211fcd41eac79d05334849b9924c762f50360d78fe89e7f42d09aa522dd176738292bc19661209620a2f22c2f7c6e3a9217a6d8bddb10e926ad60f54fb5"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1000}, @NFTA_SET_ELEM_EXPRESSIONS={0x7c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x68, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfff}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xe6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xf0}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffff80000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x10bc, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x6c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x48, 0x1, "2877d0afa6ebd04807148037420c47ebee154cc9288cacca0f90bdb25a67b64acdb96446eba09ddc3f2283b45bb8013f097326d7619c05f628e23e640cbfa019cf06313b"}, @NFTA_DATA_VALUE={0x1004, 0x1, "68f240810eacc15c9dbba8e4d1a890343a73f438999536b68d82259788f97652e98575f487422cddcdea7a779ae17a8d908af62f00a476643383b001a000a174e18924c6da0159da6e58c3de88205ec8fc9fb560ead69daac524bd8e6770b8ed9c2c82963af96c54f7d4af6d5f0c03c3da7fcaafb2cca55c186ae1eb91dea1a4582bfa4166ee89b8fcc586f7079e2911845ffe94452894ebc1bf219de1729a59a37409493cb63d6db5db0cf8e7581f4ddaed7af0606cf6184e41cd59a4c4d3088c0bf8727a4a7d65a7de278d13271f107617bc4f2ff92ecf26b761ef0a45db04db02e3f73f7a1b93133c2704f560a7af7e94257924000683552a4fed0e97a10df1c0cb38c2477833981690804fe6962af428fcf86c39660a6f3cfed841cebba92d5b108cd19432d022cd4ab6dc638fa669a2a8b6946e933ee4248a2ad8a56aea4bc21f36928a04ef356cbbad59104d501948f4e61713486447372635443fb5860b19f63ffcb12e24bef48f803f2d6cc385967e8f4d4a949a55cddab33d396bd73bbfe46877c9c60e27ebac412f111e72280171d98c22ee2af3ef758b2b1eefd0b4764bdde5eb097296038ca9f60657f85bc94faa7126c2eccd181024fe08560f32cfdcbdb0517d5ce1337aa8c0cb0da81fa11152e3c8609dfd26056b54eac5b71fdd9a8d516106c3371502b1f911de8396d76a35b32495730ff0ae1841d49fe43325cae8e618d9ae60512d15c292edae7ab294f17ceabe49e33f0161c956fb1662373544e45a4eb3d498c8aaa3515e795c87c2c7d69e4d97160e6ee7921c85125bc55aa9f59de1b91646c08f200088a94f5782bf506290352aadd8b1e1b3d3b6425aca0392d870e520ef1bf8ded573f0f9005190d53268bba6e48c1879b5805649fa8a06d279276284d0447495b8c6fc6131efe50ded2dfa91d7ed4c42d08500fc4cc74bdae6fc5c83b7cefeab8ae6eb6f69d635b48396ce975391f41aaff4f425de5f8aa3dd7abac07c866f3001cc308ffc7f8e8a55ad95c7c31e0c86616f65d31ae377406d805d62831d0d0a7efb4a161d72e0b6e54cc78358b3e323936a82f8a020a7ecf1924b4e1be9967061227ad1ae152a55dd3028ef2daad2d9959b79ba73240e3bfa5066280acd1488e967712e1f86643d1229756a3588d3ef7e56397b407f0242f23261d33e1264483acb04a6813f7fa9fc2137e46533cf26c20e7a691a904407c896294cbb2e279877dec8df3f52363cf9e2e0211ec85dc6997fa04c0a8c232507028a89f19a697b095ceaf8f1b11f7565b80c860ffa1d1a00a312be8168826f11dd62664d85465d90209f49f133df5f224a4493aaec133d6110f20466a9d2e6e2a854c327d3d1228773798ba46eadd43877cf879a30c4a89cd807f07465f6585164d48173044d1da5d4986644f370992e98744dd80f492cf94eb0c062fb58cbbf58e2cb0f02a9ea7a8cc64c484a91cdaedd60645e40e79ec671544aae6bc67cd239115b6ad66a9de63dba1bcbc508d79c974d8c2e7622ff4da0864fc9acd8c644d5608a6de681e4ce02ec11e6753326d765425181565438e81eff297169259783ab8189127af5611470892cfd0b0c2fc51279694d1cf77e938e41ff148336918badb778e9c86baf2412dc280fd163c1729f1999f7d92d86011cb8af539ba7bd571fce52479e1b1ea2a9f2694141b8e4004707103fff66fa314663f914f4c6b7cf076b34afa2cae8b1520af256f77f044e9e4f38503f4d87a2ddbd7315aa4027fc9afca0cb0ec57c6f983a39df5972e4854bf6ac6ebf471ea3a5d1e42e90ce56968b1b2c1bd7bbd313e4be1a9697b0db628df0365c031c59de6eb2a4acd2ee6f48689ddceace70e86bf60051c93cf61b296700d479765ccc0d4b11d4ff42057558fafad1aa3b80a1fb97b7a4c1a962be130c58b93d500a154e50fa8c318d6124b923b35e3a17c7b65b62f0ad3f9cbf03c7ac9aaf34e4538bfd8d2afc510c47067f2c3a843761a5e1e505bc608679c148bb0017ec01bcb8ea055e8e1ca8111355f4d47357ab5b21685105c339eed345a3de8f03348616c5dd2c1c120df98548817a2a93c33e6697ded8f925a24c4a31bf9aaf2989fc0d686467529e147e791c8707d92740d3b9ba56e38cd6ae253520a6df09210b9ae828c51f8157bca161c984c1e8b24332b51dd83e43efc2170deff0a1db1fc5182e141ce405e825c4687e9384b651170a2e26a3cd57f9561359a726e718ef380dae770dc172e674b6c095477ffee973d9c79401a1a6b255c86fdc340dcd47d3e0f36779f0ab5719a019742117f6d768bbe73b85a2159d42d7c35b10011987129e21b68e27b0ac9e190518913cd90805859f823ac9b8a8f5c159e3e49eccb868fa5961f2816c54850c5e3f051e1c8b85d383a087ecf26f7492db38ebba3625f4ae00940986512f34a3146ac94f601815ae7c78d94eb6480f1906b40e93f494e1df36e52b6c1af93a2582dcbc6d5128125268bc8d76447aade5e13b8f2620721f19013fbc739c3c2a4accf377c5ae5b68aab507cb6e12eb98fd5a46cacbc9f8f14399af4f1fa23c03b6ddc5bff80d0fcf67e317c56feef73e1d436ccd31d3efa25657b5c8818acb0f015381a4c1e3b8bb47d32be6a5fcacc5ce28a51a9375ab573321e538a7728ae1e696c673c029f963aa9cc77b5dafc6eeb150f5d7af082c346bd74119f454ba4915c532a3789ff671e00f0a2185280176db0f2041f93cad827be26c9085da8da738c7cf3cde999e63a47afa5c8a3810152e6f1d531276d5c9d6de98efd8e77fa102f3fff10e6e95600c75b6f06c77fe6ed062173175e90f4cfa0207756778b29a1c610d333ace78cb438417cb30297a7fb3e7cb97bd853e29cf0b52c2eb056022bef9372f6399771e7b3b6991c236d52bfd8f70d206c8e2e27e709334e78120e51d46dbc0f55f8d3758db7788484544894de89d5f6f21960bdcd0487f170d0375b839ca74a65814c35b11ae99555838f04521f960ade2ef52a470994b67fcb84e2797ad670345b9dd0d51fa247b9634a2eed687684edfee1192beb9ac8046d48b562fe3798d011f3662927b0e71eeabcda3bdec19bb68d70320571ccb946b9cb73670579f40e2b0874910e30d36382f551715fbdd09266c7f570cf4eb08e252b02fa3903449e9de91b011633b05752a56655d04010b95813382c304dea018151773e8f3530a7def95eb7d3cd02e106e74f4ff45ac00f3367324a477983785af87def3eceab3480a12ac70923fb45b7af2fef6e4f266898e261f1045f0e2f16a793f6758bf321edd915ef74ae1ea30913aebd2546eb589406c6d3d06e4a2417f6a0c29a50ab09734e873995dbfc392bbe957f3c8f19419782ec49bce2135918282bd3898be0f094b9a08ab3b085d5395b6a86d627831fb37fc76bca019c6b899eb80b3957f755eae56f5aa84289a7785f2cec3fc144d7da3768e175afd983dfeac212462adfd73231fd64b3ec2c840316ae0db8aeb15eb3ae3a92e488b80c11916ecdd89bb060289171b1e87519acfd00301247b403c751d4a69f22b578fbfbe401c97007ca1010761438de48906a28ef027942aed90b8ff6a77570dc2abbbb8a73bc33b24459f56dbed1f0002d1489bdef7fb47fe618911e0f045606a2634fd7ce6fde8f360fbe99b9cd500b167e1603bdb5799cda9416bd893666cb15a9ccaad9bf9068f3c2d5483f18408370d1dc13351d7c16290eec104f4c65c49c423b579e28e232c8b0c38f3692e2d91580bbd80122d0b9f87f1ecca0a9cdf22897e38b3fc832e57d8be328fd8ee45e85e0b41e7d41e1304a10b698b263d299b369eed3d2b9937a36d6240ff883db0af55d12d43ce1b851090ecc6c88f6f96a6bf808e59028d428d31cec94735a353c322b56408ec7346d89bf5141cd6d4ca08976f5a2732e59e08415cac7fdce4009c453b8d61fe08b1bbe5790527b9605978f5a259c5607f336bcf4140487a5b6544fbdb11cfbd37a0444bb21eade7e10a09e424f9ca82883090e8401ac2f1538066df518a62d9eafff388e12f6c5ea0b4a1ca7cf9d423cfaba44b98d75655cf379bc1c911beade1a5078273a07927691d3fbcbca59f273ec274ab9a006d75860611a53e16b370c78089b519325704ae1e1083c284fde86aec3dbd64824ac1547dc9521ab8248651f1e3e0182ba0ccded2e72ade764d117929c49cd6f4dd2584fded2ef1874530f48acbbde590059a575ee641d754ea7c66da941adb86cf73ca77f4f9543636c66506738968cb4004d5bd1a7bbca1e4bc81f2bb364a4b09c65bfd657f1c6129ea2ff9ec86e5d33b9737e199d943e7af8660b5ae2f0998dc72f82221b9270d3aa0eb6b49570925ea77c3e6e50614f1fdad46f3a747d5ca3acc6e33a5d8b527faeffdc86c06058a83b51cab10269e91a6fada67a0f48f4373f94329ba43596d21684ebd3c5d4a034eae6292e25679704d82e806eba6d94f8e99286bef88589a9c9b6e3d23febd7af1b3d6f02c45a2bafcb158bae1859fb5ce2d046086f1e3fd60548238967f293d16b02e05d8661dc7541d8ce02e11359c1c25d416df05ec12c724d3dbb9b25ddae8a481cec111e36b6ad3532015d8f5d9fa33c8e8b6f1ff5866188706618606a5916b53ed0172310733baf4bcdf31bcf7a32e49be1c25bda37502cf8694c7a0d57247eff633036d5a8cc322d3674ec6e45b7848e7366b0787b5ca0b71469bf5d1274b089ee1a1488010c8e3799c1720515a8dcb87089a6a1ddd70f31e8f9c5bf1a00f9776cb1432dc5adf8e060ac9b3856767b6b9f14bb3008faeab964c19fab6fdd352bc1e5d9d1ecda09cb98c7d9e937ea913a78dbd68492d85232d519dc5863670a4314f1381221d24cbfe256318806c45343cd07ed00594e6b14c43c3b50b146ee1a62a03eab72130ff26832e567f92e6e8c9c7a177dc7436c39363a2b2afc4864214d39caa8b3906e7478653b3cb4f6faa9273ff2796db3154ddd52f0a4cdea851d86b7976fc40d104c5c3c6085066e5e91c401b2b568d84acd79df85d5cc4820031e9fa9b0ab5ee2b93226abb7efbf744dd24248bb28a814ded904ddecc7eb2d72e290ec0f2041ca49f8b2222c445f2c3fc9735d87f4676cf570205e360562f4be503c43c4ed95f63ae54d9e865b7fc0cfcf6e8755cc68ad97a8cef9cee1d9f49509335336386f0645ac555b2d629f5f57375466bd8bfb80be51096a2880b418ff9ada2ae65f67478cb7526680053a5a44909053b7b121aec38052bee9b3588f044626f0f76ff6e4d5141d207280557989ce983700b1f6fed3c84ce31a42ef478ca204111c45e5d3cae3a3cf14048ecf1329c2b374626a8430a4644cda57f2560d7d816ba234834eb366375e5d87ae308d8c94f77d650c2099a44ed031f0195ebc1835de37f731a65dbe9d39479819998e036d50c632f88c9e4468045a4227cc506ee088ff586dea163c58527d8ff479a8e202866270b8b22052592c7b32f98e0c56fc93d0b393a33ae89befc878f9fed670bc068b151a9e5f776f5af5aada7f240006442021fe85d40c853d3f867658680bb9bbce92d9161abf6ba27d9223194d615bec67ca0a231a8fd31e8fc16d6c8989417bf8cd5ea920867d018090fea1c6f5d3ce1955ba020f701b8b15603eb42e290166f9f25aa05996b3b8904fc5814b7f987a13dacbb2979b92262af4e419c0687888a3f49828b8e4cffc328b1ec1e41451e4e546af2a7696d5ec439eab3623055a81b4e0af9802ef91980f9475b8933dbb40698"}]}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", "", "", ""]}}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7fffffffffffffff}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x29e8, 0x3, 0x0, 0x1, [{0xec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0xd4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcf, 0x1, "90e512d0a6e61bc1098fd1d761a6ca1e9f7d3d08623173aa51f28517658b16cd836dd6ed8ea71f52aa3f94af8f7c8ec106d130edcd197f6ccce62e2b0cee3d0cf26ff934ade0923e2c61bccc5dd06699eb3999e7e14f35cf051ce61358d399a81f341aade69ea7cef54d3bd517c479f58f8a05caef1d11b2faf1cc8afd645f60f6b8a03a105caa6df1dd3a49a836ed81b3c24d00b4b4ff16cd55352846819a606e572aac945bfaf9c2dbf7c4a0651e1bbd584bc10101428651dff773b64bbf2608f48c6d5cfb409b8a7db4"}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0xdc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xa9, 0x6, 0x1, 0x0, "efae20169406a0cbba74a4e750bf39e79f121020ec79a84de88a29e8557f6d756902ab96d3cf4de4c385da387ec41a93e5f6c0fba43b609c5aa27008ac6e0af9a669628489a7d6952717f87320f5819cab24d19c73b5801e9945cdb5d8f6a3994c28d7567f94ccaf04adab9df549fa7647251e83f3aa6721de1ac8c78cc581b742d0310fdc91aae377f85ce7779ad5b8917d75e300ba960e347ccdf771d4ada686f135fc84"}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}, {0x12e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xb4, 0x7, 0x0, 0x1, @target={{0xb}, @val={0xa4, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TARGET_INFO={0x96, 0x3, "7a96178d7559408a7e1da5fa8f6c0e44e01f410a396d72f0a872bd049c5b1875c653907431406452ce22383c33b81dd0cb93bf3e9726946060090eece90eb5740f77ba9a7fd53cea623650fd89bf60a877689c646d46ba0170b84bd64cfc9d9ca99e0fa38462c366c8bacd8c3815158a5c5af6c5690e6b71b1aff12a6e56e4203580d994414f3bfcd5fc0fc2738e68582567"}]}}}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY={0x112c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x24, 0x1, "b46840cafb262b3196614fc71168b9bb864aa5776600c04536162a6b6e7d36fa"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xaf, 0x1, "1e9e30751cb0e0de0c9f048cd928e599bddf9a530e03cf1621b0e60092ca04b7f89f166cfca731f48b07bb4d872515644cd473fe583f2b4d4ff6711d851eb63853d575d26bc7077d333ef5eb17b61c3d3855a9ce349e875c04d6d007ad7923f2ef305125af06e7922bcd9e99629059b657f8d333dbd896579ad645954dff841e2ce481a6457c6cde0c483fc88eb4cce8a0aef1b0bd0e0a3a517c7cec67b23752e2ed05a6cf1488351d81bf"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_DATA={0x88, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x36, 0x1, "67cae1fe1d3defca3c7f83c5c0e535e6c88943495a1a443822d8d51f41316299b9c923ff50627c1e2616f0ac6a024003d5f8"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x58, 0xb, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x38, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}]}, {0x1538, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x18c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x84, 0x1, "b2746c71afb1966da2ea2f93e3c6b3c59da3a346d1786461c9b52a5c767760e5ea0511c0174962c5bb4f81457c973b008761b83d38e04b91ab8bbaa5b5b16955f4cfe0b75f8976d7f540c84b36b307779138d6b866c33b0f335d2038c5afb9ea7d497e47770b8c6abdcc599cb25a0d1affc89bb948ad8471abf4776b88250dda"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x3c, 0x1, "11079308d9ae7b5dd84bdfe6a8188e4ebfb51881549a32f2ffccc76808210d46d2657dcdee7c54d59ce066e7444685d3aa867de78b94733c"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x11b0, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @bitwise={{0xc}, @void}}, {0x10c4, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x10b4, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_INNER_EXPR={0x1080, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x106c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1068, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}}}, @NFTA_INNER_FLAGS={0x8}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xd9}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x42}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_FIB_RESULT={0x8}]}}}, {0x40, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x4}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x3}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x7}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_ELEM_DATA={0x128, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa1, 0x1, "b96ef1d687875c99c2b67cc665a231bf4c10f6993d5e59c11a02c1de7f485536f65807e01b843712a247c76e0989e4e24a491d5c4d1ed5c1b209b32cde95ef5960c275602035b1ab56c6fb21f70252c1218ca9c729876cb1ffb89b1849c9d22f00270d98190dea87215105266b2e38d6f8b8f61ae1cf477c54b3b9340c6e284285b0c5b468e3717544a0488740b157f070ed0118036d5ad5a21cdb28e8"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x5d, 0x1, "09de3766e470a6a841b1b0a1343f2e28dafff56fcebcaef27170c138e65acedd5934cc5cfed9e31b105d28de1d90b11a70e3220d3497cbc81961180d9dda4b4af873f59487570d04b28d881a531ee8f702099bf37188fcf4cd"}]}, @NFTA_SET_ELEM_USERDATA={0x69, 0x6, 0x1, 0x0, "c4bc36e002a093926622a73472b2ac6eb8eccb2196f72aeca98c2a580a295fe2841ee3afd712f9925445d7694f940e112cca55f016680ae03cd21637ca9ef7d4932159615e2418c2f3ab4ca6e90af4afe1f816628c31fe2dde70e43788d48953c6111aaa6a"}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_USERDATA={0x53, 0x6, 0x1, 0x0, "a0f95a272899319cb8a4f68a4a9fdcdac5c5c0772cbc180b759b9e74bf222b89885a50fab785c71915ca13b72613ef82ac05b4cd458812ee7d5c655cd6710673559ca240025b13d63bdf773f2f6d08"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}, 0x61a4}, 0x1, 0x0, 0x0, 0x4080}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7472616e733d66642c7266646e113d", @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',\x00'])

268.436755ms ago: executing program 2 (id=3448):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = socket(0x27, 0x2, 0x800002)
setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10)
close_range(r0, 0xffffffffffffffff, 0x0)
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000180)=ANY=[@ANYBLOB="7365636c6162656c2c00c4775742007b6bf7d421c8a03e434f568af444ea2e7d11f9f4d9f690729cb4706f8825227ed04079787c619a19eca3f7b3bf953920e8fb4b95b10c9bc16c48ea4a0668383ed1d149be3091bd5ad9251da7c1bb1d3ff71c480500c6351bddc888e8c3c8f132dab3f91781741cbb114adf53afc801c5f1e6e81f1dbbbed220eac46a14316bda1d9632039b847117e0a7bd59687ab4938b43029af965145dcc6fee52a4d5c89aaae8f1b52769a8880b84d4d1c64cf33f35b3d0afd2bf2483a856b1cec1ffce17187a"])
connect$unix(r1, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e)

217.865656ms ago: executing program 1 (id=3449):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4, 0x0) (async)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RMKDIR(r1, &(0x7f00000000c0)={0x14, 0x49, 0x1, {0x4, 0x3, 0x7}}, 0x14) (async)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1) (async)
r3 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449", 0x80)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4) (async)
ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024f01c173a49b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async)
ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000040)={&(0x7f0000000000)=""/60, 0x3c})
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) (async)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) (async)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="3d000000000000b68b0abbc301da0d9f992829df09ff3af43471053830", @ANYRESHEX=r2, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00'])
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs\x00') (async)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r6, &(0x7f0000000cc0)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003bc0)=ANY=[@ANYBLOB="140000000000000029000000430000000d000000000000001400000000000000290000003e0000000100000000000000a800000000000000290000003700000084110000000000000740000000020e7ff579010000000000000001000000000000000100000000000000070000000000000001000000000000000100008000000000cd0b00000000000004011a0720c087ec9006020400080000000000000004000000000000000900000000000000c20400000005000100050200050718000000010408050001800000000000000004000000000000000038"], 0x110}}], 0x1, 0x931766f6319eed40) (async)
r7 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)={0x1c, 0x5e, 0x101, 0x0, 0x0, "", [@typed={0x8, 0x41, 0x0, 0x0, @uid}, @typed={0x4, 0xe5}]}, 0x1c}], 0x1}, 0x0) (async)
sendfile(r6, r5, 0x0, 0x80000000)

217.602126ms ago: executing program 8 (id=3450):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107d1ed430000000000001090224000100000000090400090103000100092105000001220500090481030800000000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x8, 0xffffffff, 0xd66}})
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0x44da2000)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001180)={0xd, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r4=>0x0}], 0x0, "59c43611ca348a"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000080)={{r4, 0x40000, 0x0, 0xde4f, 0x101, 0x0, 0x9, 0x9, 0x1ff, 0x5, 0x5, 0x5, 0x1a1, 0x64e, 0xfffffffffffffff0}})
futex(&(0x7f000000cffc)=0x1, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2, 0x1)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001380), 0x101100, 0x0)
read$FUSE(r5, 0x0, 0x0)
writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_int(r6, 0x1, 0x4d, 0x0, &(0x7f0000000680))
r7 = socket$inet6(0x10, 0x3, 0x0)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$can_raw(r8, &(0x7f00000001c0)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000140)=@can={{0x3}, 0x8, 0x0, 0x0, 0x0, "bd436ef11f68a010"}, 0x10}, 0x1, 0x0, 0x0, 0x4008000}, 0x24000080)
r9 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$BTRFS_IOC_GET_FEATURES(r9, 0x80189439, &(0x7f0000000040))
sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

214.661226ms ago: executing program 2 (id=3451):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r1 = mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8c001}, 0x4000054)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, r4, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x31}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0xc054}, 0x4004080)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0x10, 0x0, &(0x7f0000000ac0)=[@free_buffer={0x40086303, r1}, @enter_looper], 0x54, 0x0, &(0x7f0000000b00)="eab7eff9f911a8687976f7a6c5998dd78bac5fab3d8503b46631f279d44ff48534e4b9696e0cfd4fb45a17df1d83d3234c9910e572e34d902837352ebb7f40e638637e2d0882b350465d585835d542960a8f43e1"})
r5 = socket(0x10, 0x803, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000000)={@fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1002, 0x37}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
fsetxattr$system_posix_acl(r6, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {0x1, 0x1}, [{0x2, 0x3}], {0x4, 0x5}, [], {0x10, 0x7}, {0x20, 0x4}}, 0x2c, 0x1)
r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff)
execveat$binfmt(0xffffffffffffff9c, r7, 0x0, &(0x7f00000003c0)={[], 0xf000}, 0x1000)
execveat$binfmt(r6, r7, &(0x7f0000000600)={[&(0x7f0000000240)='\x00', &(0x7f0000000280)='{\\@m]-%[\x00', &(0x7f0000000300)='*-@&\x00', &(0x7f0000000340)='./binderfs/binder1\x00', &(0x7f00000003c0)='nl80211\x00', &(0x7f0000000440)='./binderfs/binder1\x00', &(0x7f00000004c0)='[.[-\x00', &(0x7f0000000580)='nl80211\x00', &(0x7f00000005c0)='+^{\x00']}, &(0x7f00000006c0)={[&(0x7f0000000680)='\x00']}, 0x800)

150.828477ms ago: executing program 1 (id=3452):
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0) (async)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) (async)
preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0}], 0x3, 0x9, 0xd, 0x9)

136.590498ms ago: executing program 2 (id=3453):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x109800, 0x0)
ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={<r1=>r0, 0x1, 0x99, 0x9})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r2, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x213}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}]}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x193d}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004044}, 0x4004050)
ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10)
socket$inet(0x2, 0x3, 0xa26) (async)
r5 = openat$incfs(r1, &(0x7f0000000280)='.pending_reads\x00', 0x2ac02, 0x180)
write$hidraw(r5, &(0x7f00000002c0)="c84e5f03093541ee10f9a5b88ecb2c382433a3e0582a7310b2b5a361c2564292543454df61f7c683ed377a4f6c70173b78c84e91e9d6bc7313839dbf89f34c995ed590e87f4702c2e95af886b56960f10d592fee412914a36c1b61d3415ccf3a187ceb9a514d44a4e19568846796a049c8184354", 0x74) (async)
mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x108020}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x20020091)
ioctl$KDSKBMETA(r5, 0x4b63, &(0x7f0000000480)=0x3) (async)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xe4, r2, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "90c723cd142cd38f921b99d63d0bda251d0bb1d3819a0240"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "560c362eff97a6ec5799725619eeca0a41b2ad1b8e474362"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0xe4}, 0x1, 0x0, 0x0, 0x10}, 0x0)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1)
sendmsg$NL80211_CMD_GET_MESH_CONFIG(r5, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r8, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffc, 0x6b}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x801) (async)
r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r6)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f00000008c0)={&(0x7f00000007c0), 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r9, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010100}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000084}, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r5)
sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r10, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x8000)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000a40)=0x3, 0x8)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x40485404, &(0x7f0000000a80)={{0x0, 0x2, 0x8, 0x3, 0xf}, 0x4, 0x7}) (async)
arch_prctl$ARCH_SET_CPUID(0x1012, 0x0)
sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, r2, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x3}, @NL80211_ATTR_BANDS={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000082)

37.877619ms ago: executing program 2 (id=3454):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom0\x00', 0x1002, 0x0)
fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x2, 0x1, 0x1, 0x7ff})
mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x4031, 0xffffffffffffffff, 0x9efbf000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, &(0x7f0000000000)=0x8)
mkdir(&(0x7f0000000040)='./file0\x00', 0x158)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="c7"})
getpid()
mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x46000)
r2 = openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r2, 0xc058671e, &(0x7f00000000c0))
mkdir(0x0, 0x100)
close_range(r0, 0xffffffffffffffff, 0x0)

37.585089ms ago: executing program 1 (id=3455):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x202, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1010040, &(0x7f0000000280)=ANY=[@ANYBLOB="726c6f675f70616765733d31383434363734000235363532393638323433322c00"])
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
close_range(r0, 0xffffffffffffffff, 0x2)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24)
write(r2, &(0x7f0000000080)="240000001a007f0814f9f4070009140803000000000000000006000088800f40fe00000e", 0x24)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f000000c3c0)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
r7 = dup2(r6, r4)
ftruncate(r7, 0x7)
read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020, 0x0, <r8=>0x0}, 0x2020)
newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, <r9=>0x0}, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r11=>0xffffffffffffffff})
fstat(r11, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0})
fsetxattr$system_posix_acl(r10, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="02000000010001000000000002000300", @ANYRES32=0xee00, @ANYBLOB="040004000000000008000300", @ANYRES32=r12, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r12, @ANYBLOB="08000600", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="08000500", @ANYRES32=r12, @ANYBLOB="100006000000000020"], 0x54, 0x1)
write$FUSE_CREATE_OPEN(r7, &(0x7f0000002480)={0xa0, 0x0, r8, {{0x3, 0x3, 0x1, 0x9, 0x9, 0x0, {0x3, 0x1, 0xe, 0x3000000000, 0x5, 0x8, 0x64, 0x401, 0x7, 0xa000, 0xb4a, r9, r12, 0x5, 0x6}}, {0x0, 0x1}}}, 0xa0)
r13 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0)
r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x2)
ioctl$KVM_SET_CPUID(r14, 0x4008ae8a, &(0x7f00000002c0)={0x8, 0x0, [{0x80000019, 0x8001, 0x1, 0x3, 0x9}, {0x7, 0xe, 0x8, 0xffff, 0xff}, {0x4, 0x7fff, 0x6, 0x1, 0x7}, {0xb, 0x1, 0x7fff, 0xf, 0x8}, {0x80000000, 0xffff, 0x3, 0xa, 0x8}, {0xc0000001, 0x3ac, 0x2041136f, 0x485, 0x1}, {0x80000019, 0x8, 0xea5, 0x6, 0xf}, {0x80000019, 0x200, 0x1, 0x10001, 0x8}]})

0s ago: executing program 2 (id=3456):
r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000040)={0xc0000, 0x0, [0xfffffffffffeffff, 0x0, 0x5, 0x8000000000000000, 0x0, 0x100000001, 0x8, 0x1]})
linkat(r0, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0x400)
write$tun(r0, &(0x7f0000000140)={@void, @val={0x2, 0x0, 0x200, 0x3, 0x2, 0x40}, @arp=@generic={0x308, 0x88f5, 0x6, 0x3, 0x1, @broadcast, "dfe9fa", @broadcast, "b0b8248470b5e0ac4fb4d7ba72ce3989"}}, 0x31)
ioctl$KVM_SET_NESTED_STATE(r0, 0x4080aebf, &(0x7f0000000180)={{0x2, 0x0, 0x80, {0xd000, 0xeeee0000, 0x1}}, "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", "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"})
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_SET_TSC_KHZ_cpu(r0, 0xaea2, 0x3)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1, &(0x7f0000002200)=0x101, 0x4)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x110, r1, 0x6dc96000)
syz_clone3(&(0x7f0000003440)={0x244044040, &(0x7f0000002240)=<r2=>0xffffffffffffffff, &(0x7f0000002280), &(0x7f00000022c0), {0x5}, &(0x7f0000002300)=""/225, 0xe1, &(0x7f0000002400)=""/4096, &(0x7f0000003400)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x6, {r0}}, 0x58)
quotactl_fd$Q_GETINFO(r2, 0xffffffff80000500, 0xffffffffffffffff, &(0x7f00000034c0))
r3 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$TIPC_IMPORTANCE(r3, 0x10f, 0x7f, &(0x7f0000003500), &(0x7f0000003540)=0x4)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000003580)={0x4, 0x4, 0x5, 0x0, 0x6})
r4 = socket$inet(0x2, 0x1, 0x2)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000003600)={{<r5=>0x0, 0x1, 0x0, 0x6, 0xffffffff, 0x6, 0x1, 0x9, 0x8, 0xc, 0x2, 0x9, 0x5, 0x3, 0xa}, 0x8, [0x0]})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r4, 0xc0709411, &(0x7f0000003680)={{r5, 0x0, 0x8, 0x200, 0x2, 0x5, 0x100, 0x0, 0x2c, 0x1, 0x9, 0x1, 0x9b8, 0x604a, 0xfd}, 0x10, [0x0, 0x0]})
ioctl$FITHAW(r4, 0xc0045878)
read$FUSE(r0, &(0x7f0000003700)={0x2020}, 0x2020)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000005900)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000005740)=""/202, 0xca, 0x1, &(0x7f0000005840)=""/152, 0x98}, &(0x7f0000005940)=0x40)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000059c0), r4)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000005ac0)={&(0x7f0000005980)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000005a80)={&(0x7f0000005a00)={0x68, r7, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x2, @media='eth\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0)
read$FUSE(r0, &(0x7f0000005b00)={0x2020}, 0x2020)
r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
r9 = syz_io_uring_complete(r8)
fcntl$getown(r9, 0x9)
ioctl$NS_GET_OWNER_UID(r9, 0xb704, &(0x7f0000007b40))
getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000007b80)={'ah\x00'}, &(0x7f0000007bc0)=0x1e)

kernel console output (not intermixed with test programs):

 irqentry_exit_to_user_mode+0x4e/0xb0
[  144.448569][ T5852]  irqentry_exit+0x16/0x60
[  144.448590][ T5852]  exc_page_fault+0x66/0xc0
[  144.448611][ T5852]  asm_exc_page_fault+0x2b/0x30
[  144.448632][ T5852] RIP: 0033:0x7ffabff8ebf1
[  144.448648][ T5852] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[  144.448666][ T5852] RSP: 002b:00000000fffffd10 EFLAGS: 00010217
[  144.448686][ T5852] RAX: 0000000000000000 RBX: 00007ffac01c6180 RCX: 00007ffabff8ebe9
[  144.448701][ T5852] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000
[  144.448714][ T5852] RBP: 00007ffac0011e19 R08: 0000000000000000 R09: 0000000000000000
[  144.448726][ T5852] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  144.448743][ T5852] R13: 00007ffac01c6218 R14: 00007ffac01c6180 R15: 00007fffb5191188
[  144.448757][ T5852]  </TASK>
[  144.448842][ T5852] memory: usage 296544kB, limit 307200kB, failcnt 54190
[  144.921031][ T5852] memory+swap: usage 431004kB, limit 9007199254740988kB, failcnt 0
[  144.931627][ T5852] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  144.939313][ T5852] Memory cgroup stats for /syz5:
[  144.939453][ T5852] cache 313966592
[  144.954621][ T5852] rss 434176
[  144.958004][ T5852] rss_huge 0
[  144.961323][ T5852] shmem 313905152
[  144.980054][ T5852] mapped_file 12288
[  144.983906][ T5852] dirty 0
[  144.993541][ T6656] /dev/loop0: Can't lookup blockdev
[  145.002895][ T5852] writeback 0
[  145.024320][ T5852] workingset_refault_anon 52
[  145.034820][ T5852] workingset_refault_file 7471
[  145.040540][ T5852] swap 127545344
[  145.044301][ T5852] swapcached 61440
[  145.048172][ T5852] pgpgin 363918
[  145.051803][ T5852] pgpgout 288145
[  145.055509][ T5852] pgfault 105100
[  145.059165][ T5852] pgmajfault 172
[  145.062886][ T5852] inactive_anon 253878272
[  145.067489][ T5852] active_anon 58908672
[  145.071702][ T5852] inactive_file 0
[  145.075520][ T5852] active_file 0
[  145.079198][ T5852] unevictable 0
[  145.082766][ T5852] hierarchical_memory_limit 314572800
[  145.088691][ T5852] hierarchical_memsw_limit 9223372036854771712
[  145.094974][ T5852] total_cache 313966592
[  145.099180][ T5852] total_rss 434176
[  145.102961][ T5852] total_rss_huge 0
[  145.106781][ T5852] total_shmem 313905152
[  145.111170][ T5852] total_mapped_file 12288
[  145.115588][ T5852] total_dirty 0
[  145.119119][ T5852] total_writeback 0
[  145.123062][ T5852] total_workingset_refault_anon 52
[  145.128254][ T5852] total_workingset_refault_file 7471
[  145.133628][ T5852] total_swap 127545344
[  145.139879][ T6670] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  145.151648][ T6670] 9pnet_fd: Insufficient options for proto=fd
[  145.163311][ T5852] total_swapcached 61440
[  145.172058][ T5852] total_pgpgin 363918
[  145.181071][ T5852] total_pgpgout 288145
[  145.189737][ T5852] total_pgfault 105100
[  145.198234][ T5852] total_pgmajfault 172
[  145.208198][ T5852] total_inactive_anon 253878272
[  145.218440][ T5852] total_active_anon 58908672
[  145.223089][ T5852] total_inactive_file 0
[  145.227526][ T5852] total_active_file 0
[  145.231589][ T5852] total_unevictable 0
[  145.235621][ T5852] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1858,pid=5823,uid=0
[  145.250527][ T5852] Memory cgroup out of memory: Killed process 5823 (syz.5.1858) total-vm:90168kB, anon-rss:1020kB, file-rss:53864kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0
[  145.820405][ T5821] syz.5.1858 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[  145.862415][ T5821] CPU: 0 UID: 0 PID: 5821 Comm: syz.5.1858 Not tainted syzkaller #0 3f7d833acb9715dc4d925f14855ea176aa3f9a02
[  145.862452][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  145.862465][ T5821] Call Trace:
[  145.862470][ T5821]  <TASK>
[  145.862478][ T5821]  __dump_stack+0x21/0x30
[  145.862507][ T5821]  dump_stack_lvl+0x10c/0x190
[  145.862528][ T5821]  ? __cfi_dump_stack_lvl+0x10/0x10
[  145.862552][ T5821]  ? ___ratelimit+0x3f7/0x5a0
[  145.862573][ T5821]  dump_stack+0x19/0x20
[  145.862596][ T5821]  dump_header+0xd7/0x490
[  145.862616][ T5821]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  145.862652][ T5821]  oom_kill_process+0x4c0/0x7e0
[  145.862676][ T5821]  ? sched_clock_cpu+0x75/0x400
[  145.862702][ T5821]  out_of_memory+0x7ee/0xbd0
[  145.862724][ T5821]  ? __cfi_out_of_memory+0x10/0x10
[  145.862746][ T5821]  ? mutex_lock_killable+0x92/0x1c0
[  145.862768][ T5821]  ? __cfi_mutex_lock_killable+0x10/0x10
[  145.862791][ T5821]  mem_cgroup_out_of_memory+0x279/0x350
[  145.862811][ T5821]  ? drain_obj_stock+0xed0/0xed0
[  145.862831][ T5821]  ? memcg1_oom_prepare+0x2c6/0x3a0
[  145.862850][ T5821]  try_charge_memcg+0x8f7/0xde0
[  145.862875][ T5821]  ? __cfi_try_charge_memcg+0x10/0x10
[  145.862899][ T5821]  ? __alloc_pages_noprof+0x31f/0x7b0
[  145.862921][ T5821]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  145.862944][ T5821]  ? __folio_batch_add_and_move+0x2ab/0x370
[  145.862968][ T5821]  __mem_cgroup_charge+0xf6/0x410
[  145.862995][ T5821]  ? _raw_spin_lock+0x8c/0x120
[  145.863020][ T5821]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  145.863046][ T5821]  shmem_alloc_and_add_folio+0x86d/0x1050
[  145.863069][ T5821]  ? put_swap_device+0x130/0x130
[  145.863091][ T5821]  ? shmem_huge_global_enabled+0x2da/0x360
[  145.863111][ T5821]  ? shmem_allowable_huge_orders+0x1f7/0x430
[  145.863133][ T5821]  ? __kasan_check_write+0x18/0x20
[  145.863158][ T5821]  ? _raw_spin_lock+0x8c/0x120
[  145.863183][ T5821]  shmem_get_folio_gfp+0x5f0/0x1380
[  145.863206][ T5821]  ? shmem_get_folio+0xc0/0xc0
[  145.863225][ T5821]  ? follow_page_pte+0xa5c/0xb90
[  145.863261][ T5821]  ? inode_to_bdi+0x6d/0x100
[  145.863286][ T5821]  shmem_write_begin+0xf4/0x270
[  145.863308][ T5821]  generic_perform_write+0x330/0x960
[  145.863336][ T5821]  ? __cfi_generic_perform_write+0x10/0x10
[  145.863361][ T5821]  ? down_write+0xe9/0x2a0
[  145.863384][ T5821]  ? file_update_time+0xa3/0x220
[  145.863409][ T5821]  shmem_file_write_iter+0x105/0x130
[  145.863433][ T5821]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  145.863457][ T5821]  __kernel_write_iter+0x395/0x830
[  145.863476][ T5821]  ? __cfi_shmem_file_write_iter+0x10/0x10
[  145.863501][ T5821]  ? __cfi___kernel_write_iter+0x10/0x10
[  145.863520][ T5821]  ? get_dump_page+0x160/0x220
[  145.863542][ T5821]  ? __asan_memset+0x39/0x50
[  145.863568][ T5821]  ? iov_iter_bvec+0xc0/0x180
[  145.863591][ T5821]  dump_user_range+0xb06/0xdf0
[  145.863611][ T5821]  ? __cfi_dump_emit+0x10/0x10
[  145.863645][ T5821]  ? __cfi_dump_user_range+0x10/0x10
[  145.863664][ T5821]  ? elf_coredump_extra_notes_write+0x42f/0x4c0
[  145.863691][ T5821]  ? __cfi_elf_coredump_extra_notes_write+0x10/0x10
[  145.863720][ T5821]  elf_core_dump+0x2cd9/0x3810
[  145.863745][ T5821]  ? __cfi_elf_core_dump+0x10/0x10
[  145.863773][ T5821]  ? dump_interrupted+0xf0/0xf0
[  145.863800][ T5821]  ? filp_open+0x182/0x1d0
[  145.863824][ T5821]  ? 0xffffffffff600000
[  145.863841][ T5821]  do_coredump+0x1bfa/0x2bd0
[  145.863871][ T5821]  ? __cfi_do_coredump+0x10/0x10
[  145.863897][ T5821]  ? asm_exc_page_fault+0x2b/0x30
[  145.863926][ T5821]  ? __kasan_slab_free+0x6a/0x80
[  145.863947][ T5821]  ? kmem_cache_free+0x1c1/0x510
[  145.863975][ T5821]  ? get_signal+0xa75/0x14f0
[  145.863999][ T5821]  get_signal+0x11fd/0x14f0
[  145.864025][ T5821]  arch_do_signal_or_restart+0x96/0x720
[  145.864054][ T5821]  ? __cfi_arch_do_signal_or_restart+0x10/0x10
[  145.864085][ T5821]  irqentry_exit_to_user_mode+0x4e/0xb0
[  145.864109][ T5821]  irqentry_exit+0x16/0x60
[  145.864131][ T5821]  exc_page_fault+0x66/0xc0
[  145.864153][ T5821]  asm_exc_page_fault+0x2b/0x30
[  145.864173][ T5821] RIP: 0033:0x7ffabff8ebf1
[  145.864191][ T5821] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 <c3> 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f
[  145.864209][ T5821] RSP: 002b:00000000fffffd10 EFLAGS: 00010217
[  145.864228][ T5821] RAX: 0000000000000000 RBX: 00007ffac01c6180 RCX: 00007ffabff8ebe9
[  145.864243][ T5821] RDX: 0000000000000000 RSI: 00000000fffffd10 RDI: 0000000001000000
[  145.864257][ T5821] RBP: 00007ffac0011e19 R08: 0000000000000000 R09: 0000000000000000
[  145.864274][ T5821] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[  145.864285][ T5821] R13: 00007ffac01c6218 R14: 00007ffac01c6180 R15: 00007fffb5191188
[  145.864300][ T5821]  </TASK>
[  146.327174][ T5821] memory: usage 307200kB, limit 307200kB, failcnt 55444
[  146.334420][ T5821] memory+swap: usage 431716kB, limit 9007199254740988kB, failcnt 0
[  146.342495][ T5821] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  146.349435][ T5821] Memory cgroup stats for /syz5:
[  146.349556][ T5821] cache 314195968
[  146.358339][ T5821] rss 303104
[  146.361550][ T5821] rss_huge 0
[  146.364835][ T5821] shmem 314183680
[  146.368465][ T5821] mapped_file 0
[  146.371935][ T5821] dirty 0
[  146.374924][ T5821] writeback 0
[  146.378207][ T5821] workingset_refault_anon 77
[  146.382800][ T5821] workingset_refault_file 8747
[  146.387756][ T5821] swap 127504384
[  146.391304][ T5821] swapcached 102400
[  146.395401][ T5821] pgpgin 378297
[  146.399013][ T5821] pgpgout 302519
[  146.402738][ T5821] pgfault 105980
[  146.406545][ T5821] pgmajfault 207
[  146.411385][ T5821] inactive_anon 37818368
[  146.415704][ T5821] active_anon 276742144
[  146.419950][ T5821] inactive_file 8192
[  146.424024][ T5821] active_file 4096
[  146.427972][ T5821] unevictable 0
[  146.431442][ T5821] hierarchical_memory_limit 314572800
[  146.436867][ T5821] hierarchical_memsw_limit 9223372036854771712
[  146.443101][ T5821] total_cache 314195968
[  146.447344][ T5821] total_rss 303104
[  146.452394][ T5821] total_rss_huge 0
[  146.456266][ T5821] total_shmem 314183680
[  146.460418][ T5821] total_mapped_file 0
[  146.464518][ T5821] total_dirty 0
[  146.467969][ T5821] total_writeback 0
[  146.471777][ T5821] total_workingset_refault_anon 77
[  146.478513][ T5821] total_workingset_refault_file 8747
[  146.484060][   T36] audit: type=1400 audit(1756867114.718:49259): avc:  denied  { setattr } for  pid=6704 comm="syz.0.2127" name="RAW" dev="sockfs" ino=29468 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  146.507040][ T5821] total_swap 127504384
[  146.511121][ T5821] total_swapcached 102400
[  146.515490][ T5821] total_pgpgin 378297
[  146.519561][ T5821] total_pgpgout 302519
[  146.523624][ T5821] total_pgfault 105980
[  146.527733][ T5821] total_pgmajfault 207
[  146.531874][ T5821] total_inactive_anon 37818368
[  146.536803][ T5821] total_active_anon 276742144
[  146.541654][ T5821] total_inactive_file 8192
[  146.546109][ T5821] total_active_file 4096
[  146.550354][ T5821] total_unevictable 0
[  146.554392][ T5821] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1858,pid=5821,uid=0
[  146.569427][ T5821] Memory cgroup out of memory: Killed process 5821 (syz.5.1858) total-vm:90168kB, anon-rss:1020kB, file-rss:53760kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0
[  147.069928][   T36] audit: type=1326 audit(1756867115.298:49260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6711 comm="syz.1.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cb698ebe9 code=0x7fc00000
[  147.814312][   T36] audit: type=1326 audit(1756867116.028:49261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6711 comm="syz.1.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3cb698ebe9 code=0x7fc00000
[  147.855161][ T6715] netlink: 'syz.1.2130': attribute type 4 has an invalid length.
[  147.896493][ T6676] syz.5.2116 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0
[  148.006905][ T6676] CPU: 1 UID: 0 PID: 6676 Comm: syz.5.2116 Not tainted syzkaller #0 3f7d833acb9715dc4d925f14855ea176aa3f9a02
[  148.006942][ T6676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  148.006956][ T6676] Call Trace:
[  148.006963][ T6676]  <TASK>
[  148.006971][ T6676]  __dump_stack+0x21/0x30
[  148.007002][ T6676]  dump_stack_lvl+0x10c/0x190
[  148.007027][ T6676]  ? __cfi_dump_stack_lvl+0x10/0x10
[  148.007051][ T6676]  ? ___ratelimit+0x3f7/0x5a0
[  148.007071][ T6676]  dump_stack+0x19/0x20
[  148.007094][ T6676]  dump_header+0xd7/0x490
[  148.007114][ T6676]  ? __cfi_mem_cgroup_get_max+0x10/0x10
[  148.007138][ T6676]  oom_kill_process+0x4c0/0x7e0
[  148.007161][ T6676]  ? sched_clock_cpu+0x75/0x400
[  148.007187][ T6676]  out_of_memory+0x7ee/0xbd0
[  148.007208][ T6676]  ? __cfi_out_of_memory+0x10/0x10
[  148.007229][ T6676]  ? mutex_lock_killable+0x92/0x1c0
[  148.007251][ T6676]  ? __cfi_mutex_lock_killable+0x10/0x10
[  148.007272][ T6676]  mem_cgroup_out_of_memory+0x279/0x350
[  148.007291][ T6676]  ? drain_obj_stock+0xed0/0xed0
[  148.007311][ T6676]  ? memcg1_oom_prepare+0x2c6/0x3a0
[  148.007329][ T6676]  try_charge_memcg+0x8f7/0xde0
[  148.007354][ T6676]  ? __switch_to_asm+0x3d/0x70
[  148.007380][ T6676]  ? __cfi_try_charge_memcg+0x10/0x10
[  148.007407][ T6676]  ? __alloc_pages_noprof+0x31f/0x7b0
[  148.007432][ T6676]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  148.007456][ T6676]  __mem_cgroup_charge+0xf6/0x410
[  148.007483][ T6676]  ? __cfi___mem_cgroup_charge+0x10/0x10
[  148.007520][ T6676]  ? enqueue_task+0x1133/0x11f0
[  148.007548][ T6676]  ? __cfi_sched_clock_cpu+0x10/0x10
[  148.007573][ T6676]  folio_prealloc+0x67/0x240
[  148.007594][ T6676]  do_wp_page+0x1885/0x2ed0
[  148.007615][ T6676]  ? folio_put+0x90/0x90
[  148.007634][ T6676]  ? __cfi__raw_spin_lock+0x10/0x10
[  148.007658][ T6676]  ? __pte_offset_map+0x1b0/0x230
[  148.007683][ T6676]  ? pte_offset_map_rw_nolock+0xba/0x110
[  148.007709][ T6676]  handle_mm_fault+0xff7/0x1b90
[  148.007731][ T6676]  ? __cfi_handle_mm_fault+0x10/0x10
[  148.007750][ T6676]  ? lock_vma_under_rcu+0x49d/0x530
[  148.007768][ T6676]  ? __se_sys_rt_sigprocmask+0x22e/0x290
[  148.007794][ T6676]  ? __x64_sys_rt_sigprocmask+0xc0/0xc0
[  148.007819][ T6676]  do_user_addr_fault+0x96c/0x1200
[  148.007847][ T6676]  exc_page_fault+0x59/0xc0
[  148.007868][ T6676]  asm_exc_page_fault+0x2b/0x30
[  148.007888][ T6676] RIP: 0033:0x7ffabfe560b6
[  148.007905][ T6676] Code: 00 00 00 00 53 48 89 fb 48 85 ff 74 47 80 3d 44 f6 e9 00 00 75 1e 80 3d 0f c0 36 00 00 75 55 48 8b 43 18 48 c7 00 00 00 00 00 <c6> 43 48 00 5b c3 0f 1f 40 00 8b 3b 31 d2 31 c0 be 68 63 00 00 e8
[  148.007922][ T6676] RSP: 002b:00007fffb51912e0 EFLAGS: 00010246
[  148.007941][ T6676] RAX: 00007ffabf9ff000 RBX: 00007ffac01c6038 RCX: 00007ffabff461d7
[  148.007956][ T6676] RDX: 00007ffac01c5fa0 RSI: 00007ffac01c5fa0 RDI: 00007ffac01c6038
[  148.007971][ T6676] RBP: 0000000000000000 R08: 00007ffac01c5fa0 R09: 00007fffb5191187
[  148.007984][ T6676] R10: 0000000000000008 R11: 0000000000000246 R12: 00007ffac01c5fac
[  148.007998][ T6676] R13: 00007ffac01c5fa0 R14: 0000000000001d6e R15: 0000000000000002
[  148.008014][ T6676]  </TASK>
[  148.329487][ T6676] memory: usage 307200kB, limit 307200kB, failcnt 57163
[  148.336547][ T6676] memory+swap: usage 431512kB, limit 9007199254740988kB, failcnt 0
[  148.344450][ T6676] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0
[  148.351364][ T6676] Memory cgroup stats for /syz5:
[  148.351506][ T6676] cache 313942016
[  148.360459][ T6676] rss 327680
[  148.363714][ T6676] rss_huge 0
[  148.366935][ T6676] shmem 313933824
[  148.370559][ T6676] mapped_file 0
[  148.374065][ T6676] dirty 0
[  148.377018][ T6676] writeback 253952
[  148.380723][ T6676] workingset_refault_anon 100
[  148.385457][ T6676] workingset_refault_file 11814
[  148.390329][ T6676] swap 127295488
[  148.393873][ T6676] swapcached 311296
[  148.397793][ T6676] pgpgin 404815
[  148.401259][ T6676] pgpgout 329037
[  148.404831][ T6676] pgfault 106990
[  148.408432][ T6676] pgmajfault 254
[  148.411985][ T6676] inactive_anon 240340992
[  148.416322][ T6676] active_anon 73621504
[  148.420431][ T6676] inactive_file 8192
[  148.424361][ T6676] active_file 0
[  148.427880][ T6676] unevictable 0
[  148.431385][ T6676] hierarchical_memory_limit 314572800
[  148.436776][ T6676] hierarchical_memsw_limit 9223372036854771712
[  148.442972][ T6676] total_cache 313942016
[  148.447153][ T6676] total_rss 327680
[  148.450930][ T6676] total_rss_huge 0
[  148.454685][ T6676] total_shmem 313933824
[  148.458830][ T6676] total_mapped_file 0
[  148.462815][ T6676] total_dirty 0
[  148.466323][ T6676] total_writeback 253952
[  148.470561][ T6676] total_workingset_refault_anon 100
[  148.475773][ T6676] total_workingset_refault_file 11814
[  148.481191][ T6676] total_swap 127295488
[  148.485292][ T6676] total_swapcached 311296
[  148.489617][ T6676] total_pgpgin 404815
[  148.493647][ T6676] total_pgpgout 329037
[  148.497741][ T6676] total_pgfault 106990
[  148.501805][ T6676] total_pgmajfault 254
[  148.505918][ T6676] total_inactive_anon 240340992
[  148.510775][ T6676] total_active_anon 73621504
[  148.515650][ T6676] total_inactive_file 8192
[  148.520117][ T6676] total_active_file 0
[  148.524098][ T6676] total_unevictable 0
[  148.528101][ T6676] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1858,pid=5842,uid=0
[  148.543011][ T6676] Memory cgroup out of memory: Killed process 5842 (syz.5.1858) total-vm:90168kB, anon-rss:1116kB, file-rss:53704kB, shmem-rss:0kB, UID:0 pgtables:196kB oom_score_adj:0
[  148.857589][   T36] audit: type=1400 audit(1756867117.088:49262): avc:  denied  { map } for  pid=6740 comm="syz.1.2138" path="socket:[29527]" dev="sockfs" ino=29527 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1
[  148.951891][ T6737] bridge0: port 1(bridge_slave_0) entered blocking state
[  148.968527][ T6737] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.984252][ T6737] bridge_slave_0: entered allmulticast mode
[  148.997106][ T6737] bridge_slave_0: entered promiscuous mode
[  149.019279][   T46] bridge_slave_1: left allmulticast mode
[  149.025031][   T46] bridge_slave_1: left promiscuous mode
[  149.030667][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.038634][   T46] bridge_slave_0: left allmulticast mode
[  149.057748][   T46] bridge_slave_0: left promiscuous mode
[  149.063418][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.275354][ T6737] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.282607][ T6737] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.289934][ T6737] bridge_slave_1: entered allmulticast mode
[  149.297746][ T6737] bridge_slave_1: entered promiscuous mode
[  149.324897][   T46] tipc: Left network mode
[  149.345602][   T46] veth1_macvtap: left promiscuous mode
[  149.351207][   T46] veth0_vlan: left promiscuous mode
[  149.525717][ T6737] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.532807][ T6737] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.540218][ T6737] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.547290][ T6737] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.598192][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.608386][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.619384][  T329] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.626583][  T329] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.657994][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.665145][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.704832][ T6737] veth0_vlan: entered promiscuous mode
[  149.720384][ T6737] veth1_macvtap: entered promiscuous mode
[  149.766921][ T6827] loop2: detected capacity change from 0 to 7
[  149.773817][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  149.783010][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  149.804377][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  149.813625][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  149.821561][ T6728]  loop2: unable to read partition table
[  149.831329][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  149.840523][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  149.848938][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  149.858262][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  149.866653][ T6827]  loop2: unable to read partition table
[  149.872547][ T6827] loop_reread_partitions: partition scan of loop2 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  149.888415][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  149.897646][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  149.906370][    C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  149.915775][    C0] Buffer I/O error on dev loop2, logical block 0, async page read
[  149.923940][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  149.933144][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  149.941722][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  149.950916][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  149.964432][    C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  149.973594][    C1] Buffer I/O error on dev loop2, logical block 0, async page read
[  150.191570][   T36] audit: type=1326 audit(1756867118.418:49263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6832 comm="syz.2.2163" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf0b18ebe9 code=0x0
[  150.588902][ T6859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6859 comm=syz.5.2171
[  150.856572][ T6881] netlink: 'syz.5.2178': attribute type 4 has an invalid length.
[  151.051585][   T36] audit: type=1326 audit(1756867119.278:49264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6890 comm="syz.5.2182" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffabff8ebe9 code=0x0
[  151.216926][ T6908] fuse: Bad value for 'fd'
[  151.862901][   T36] audit: type=1326 audit(1756867120.088:49265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6920 comm="syz.0.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99f5f8ebe9 code=0x7fc00000
[  151.909370][ T6932] fuse: Unknown parameter 'fd�+Z'
[  152.052442][   T36] audit: type=1326 audit(1756867120.278:49266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6958 comm="syz.5.2204" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffabff8ebe9 code=0x0
[  152.415004][ T6963] vlan0: entered promiscuous mode
[  152.420134][ T6963] vlan0: entered allmulticast mode
[  152.425332][ T6963] veth0_vlan: entered allmulticast mode
[  152.958306][  T677] rust_binder: 6832: removing orphan mapping 0:24
[  152.977228][ T6981] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  153.089038][   T36] audit: type=1400 audit(1756867121.318:49267): avc:  denied  { write } for  pid=6988 comm="syz.2.2215" name="softnet_stat" dev="proc" ino=4026532837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  153.089607][ T6989] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10
[  153.137679][ T6996] rust_binder: Error while translating object.
[  153.146791][ T6996] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  153.152957][ T6996] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17
[  153.164934][ T6996] tipc: Started in network mode
[  153.178841][ T6996] tipc: Node identity 6a23fe26462c, cluster identity 4711
[  153.186030][ T6996] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  153.193871][ T6996] tipc: Disabling bearer <eth:syzkaller0>
[  153.464378][ T5659] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  153.614386][ T5659] usb 3-1: Using ep0 maxpacket: 16
[  153.621310][ T5659] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  153.631625][ T5659] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  153.642789][ T5659] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.652543][ T5659] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  153.665623][ T5659] usb 3-1: config 7 interface 0 has no altsetting 0
[  153.672237][ T5659] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  153.681402][ T5659] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.947887][ T7038] 9pnet: Could not find request transport: xen
[  153.980980][ T7052] 9pnet_fd: Insufficient options for proto=fd
[  154.083572][   T36] audit: type=1400 audit(1756867122.308:49268): avc:  denied  { map } for  pid=7069 comm="syz.1.2245" path="socket:[31000]" dev="sockfs" ino=31000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  154.135014][ T5659] input: HID 0458:5010 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:7.0/0003:0458:5010.0004/input/input47
[  154.165470][ T5659] kye 0003:0458:5010.0004: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.2-1/input0
[  154.171494][ T7090] overlayfs: failed to clone upperpath
[  154.183216][ T5659] usb 3-1: USB disconnect, device number 24
[  154.201119][ T7094] fido_id[7094]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory
[  154.235710][ T7102] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  154.248101][   T36] audit: type=1326 audit(1756867122.478:49269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7093 comm="syz.5.2252" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffabff8ebe9 code=0x0
[  154.286549][   T36] audit: type=1400 audit(1756867122.518:49270): avc:  denied  { create } for  pid=7116 comm="syz.0.2258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  154.307629][   T36] audit: type=1326 audit(1756867122.518:49271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7116 comm="syz.0.2258" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f99f5f8ebe9 code=0x80000000
[  154.354361][   T36] audit: type=1326 audit(1756867122.578:49272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7120 comm="syz.2.2259" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf0b18ebe9 code=0x0
[  154.904536][ T7132] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.911718][ T7132] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.919058][ T7132] bridge_slave_0: entered allmulticast mode
[  154.925405][ T7132] bridge_slave_0: entered promiscuous mode
[  154.931886][ T7132] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.939137][ T7132] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.946421][ T7132] bridge_slave_1: entered allmulticast mode
[  154.952689][ T7132] bridge_slave_1: entered promiscuous mode
[  154.959158][   T46] bridge_slave_1: left allmulticast mode
[  154.964858][   T46] bridge_slave_1: left promiscuous mode
[  154.970490][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.020778][   T36] audit: type=1400 audit(1756867123.248:49273): avc:  denied  { shutdown } for  pid=7145 comm="syz.1.2265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  155.060532][   T46] tipc: Disabling bearer <udp:syz2>
[  155.066062][   T46] tipc: Left network mode
[  155.079450][   T46] veth1_macvtap: left promiscuous mode
[  155.184139][ T7132] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.191283][ T7132] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.198588][ T7132] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.205729][ T7132] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.214232][ T7163] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2269'.
[  155.242372][ T1545] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.250446][ T1545] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.260932][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.268020][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.283038][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.290133][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.300302][ T7180] overlayfs: failed to clone upperpath
[  155.315297][ T7132] veth0_vlan: entered promiscuous mode
[  155.327225][ T7132] veth1_macvtap: entered promiscuous mode
[  155.445602][ T7202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16896 sclass=netlink_route_socket pid=7202 comm=syz.5.2280
[  155.473451][ T7204] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=102 sclass=netlink_tcpdiag_socket pid=7204 comm=syz.2.2281
[  155.573273][ T7210] netlink: 'syz.2.2282': attribute type 13 has an invalid length.
[  155.692867][ T7229] /dev/loop0: Can't lookup blockdev
[  155.705692][ T7233] IPv6: NLM_F_CREATE should be specified when creating new route
[  155.713815][ T7233] raw_sendmsg: syz.2.2289 forgot to set AF_INET. Fix it!
[  156.193819][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2300'.
[  156.204038][ T7263] devpts: called with bogus options
[  156.267230][ T7265] rust_binder: 7: no such ref 5
[  156.272235][ T7265] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3
[  156.279458][ T7265] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:7
[  156.299760][   T36] audit: type=1400 audit(1756867124.528:49274): avc:  denied  { create } for  pid=7270 comm="syz.0.2303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  156.648847][ T7290] 9pnet_fd: Insufficient options for proto=fd
[  156.681514][ T7292] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  156.681538][ T7292] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:27
[  156.702269][ T7310] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:29
[  156.702296][ T7311] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:29
[  156.926706][ T7354] 9pnet_virtio: no channels available for device /dev/rnullb0
[  157.623124][ T7368] binder: Binderfs stats mode cannot be changed during a remount
[  158.003108][   T36] kauditd_printk_skb: 3 callbacks suppressed
[  158.003125][   T36] audit: type=1326 audit(1756867126.228:49278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.1.2339" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3cb698ebe9 code=0x0
[  158.035907][   T36] audit: type=1326 audit(1756867126.228:49279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.1.2339" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3cb698ebe9 code=0x0
[  158.283753][ T7426] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2350'.
[  158.294006][   T36] audit: type=1400 audit(1756867126.508:49280): avc:  denied  { nlmsg_read } for  pid=7425 comm="syz.2.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  158.576851][   T36] audit: type=1400 audit(1756867126.808:49281): avc:  denied  { setattr } for  pid=7444 comm="syz.2.2357" name="NETLINK" dev="sockfs" ino=31695 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  158.653314][   T36] audit: type=1400 audit(1756867126.878:49282): avc:  denied  { execmem } for  pid=7446 comm="syz.2.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  158.810631][   T36] audit: type=1400 audit(1756867127.038:49283): avc:  denied  { create } for  pid=7453 comm="syz.1.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1
[  159.104371][ T5667] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  159.254370][ T5667] usb 1-1: Using ep0 maxpacket: 16
[  159.260810][ T5667] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  159.271318][ T5667] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  159.285804][ T5667] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40
[  159.294929][ T5667] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  159.303302][ T5667] usb 1-1: Product: syz
[  159.307496][ T5667] usb 1-1: Manufacturer: syz
[  159.313418][ T5667] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[  159.515592][ T5667] usb 1-1: USB disconnect, device number 15
[  160.031407][ T7498] rust_binder: 56: no such ref 1
[  160.036515][ T7498] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:56
[  160.161437][   T36] audit: type=1400 audit(1756867128.395:49284): avc:  denied  { module_load } for  pid=7505 comm="syz.0.2380" path="/sys/power/pm_trace_dev_match" dev="sysfs" ino=1461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1
[  160.347485][ T7515] netlink: 'syz.2.2383': attribute type 4 has an invalid length.
[  160.949779][ T7553] overlay: Unknown parameter 'fowner<00000000000000060929'
[  161.015855][ T7571] overlayfs: failed to resolve './file0': -2
[  161.066513][   T36] audit: type=1400 audit(1756867129.288:49285): avc:  denied  { bpf } for  pid=7588 comm="syz.5.2412" capability=39  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  161.487375][ T7593] FAT-fs (rnullb0): bogus number of reserved sectors
[  161.494114][ T7593] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  161.671707][ T7627] overlayfs: failed to clone upperpath
[  161.722759][ T7631] 9pnet_fd: Insufficient options for proto=fd
[  161.761795][ T7637] syzkaller0: entered promiscuous mode
[  161.767380][ T7637] syzkaller0: entered allmulticast mode
[  161.858294][ T7682] netlink: 'syz.0.2437': attribute type 27 has an invalid length.
[  161.873987][ T7682] lo: entered promiscuous mode
[  161.881208][ T7682] lo: entered allmulticast mode
[  161.887425][ T7682] tunl0: entered promiscuous mode
[  161.892819][ T7682] tunl0: entered allmulticast mode
[  161.898722][ T7682] gre0: entered promiscuous mode
[  161.909747][ T7702] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2437'.
[  161.918462][ T7682] gre0: entered allmulticast mode
[  161.932110][ T7682] gretap0: entered promiscuous mode
[  161.945233][ T7682] gretap0: entered allmulticast mode
[  161.954021][ T7682] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  161.977247][ T7681] netlink: 'syz.0.2437': attribute type 27 has an invalid length.
[  161.986462][ T7681] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  162.564268][ T7734] netlink: 'syz.5.2451': attribute type 4 has an invalid length.
[  162.610889][ T7745] overlayfs: failed to clone upperpath
[  162.617272][   T36] audit: type=1400 audit(1756867130.836:49286): avc:  denied  { link } for  pid=7744 comm="syz.5.2454" name="file1" dev="tmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  162.640101][   T36] audit: type=1400 audit(1756867130.836:49287): avc:  denied  { setattr } for  pid=7744 comm="syz.5.2454" name="file1" dev="tmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  162.861154][ T7755] netlink: 182 bytes leftover after parsing attributes in process `syz.1.2458'.
[  162.996181][ T7769] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:109
[  162.996608][ T7769] cgroup: Need name or subsystem set
[  163.365176][ T7798] netlink: 'syz.1.2469': attribute type 16 has an invalid length.
[  163.373919][ T7798] netlink: 'syz.1.2469': attribute type 3 has an invalid length.
[  163.382737][ T7798] netlink: 64058 bytes leftover after parsing attributes in process `syz.1.2469'.
[  163.520032][ T7803] binder: Bad value for 'max'
[  163.547102][ T7807] syz.5.2473(7807): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  163.603751][   T36] kauditd_printk_skb: 2 callbacks suppressed
[  163.603769][   T36] audit: type=1326 audit(1756867131.809:49290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7804 comm="syz.0.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5a4b8ebe9 code=0x7fc00000
[  163.681268][ T7823] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2477'.
[  163.747856][ T7838] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2482'.
[  163.928108][ T7856] overlayfs: failed to clone upperpath
[  163.992217][ T7869] 9pnet_fd: Insufficient options for proto=fd
[  164.107014][ T7872] overlayfs: failed to clone upperpath
[  164.184691][ T7876] fuseblk: Unknown parameter 'subj_role'
[  164.401433][ T7884] 9pnet_fd: Insufficient options for proto=fd
[  164.480839][   T36] audit: type=1326 audit(1756867132.682:49291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7804 comm="syz.0.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe5a4b2adb9 code=0x7fc00000
[  164.521119][   T36] audit: type=1326 audit(1756867132.682:49292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7804 comm="syz.0.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe5a4b2ae7f code=0x7fc00000
[  164.553924][   T36] audit: type=1326 audit(1756867132.682:49293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7804 comm="syz.0.2472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe5a4b8ebe9 code=0x7fc00000
[  164.796069][   T36] audit: type=1326 audit(1756867132.990:49294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.0.2500" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5a4b8ebe9 code=0x0
[  165.437114][ T7937] fuseblk: Bad value for 'user_id'
[  165.442361][ T7937] fuseblk: Bad value for 'user_id'
[  165.472671][ T7946] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  165.668264][ T7982] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2528'.
[  165.677399][ T7982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2528'.
[  165.970924][ T5667] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  165.997461][ T7993] 9pnet_fd: Insufficient options for proto=fd
[  166.024609][ T8002] 9pnet_fd: Insufficient options for proto=fd
[  166.123194][ T5667] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  166.133575][ T5667] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  166.143274][ T5667] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  166.152376][ T5667] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  166.160349][ T5667] usb 1-1: SerialNumber: syz
[  166.203405][ T8030] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2546'.
[  166.272002][ T8018] 9pnet_fd: Insufficient options for proto=fd
[  166.371775][ T5667] usb 1-1: USB disconnect, device number 17
[  166.378836][ T6728] udevd[6728]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  166.802191][ T8055] overlayfs: cannot append lower layer
[  166.899196][   T36] audit: type=1400 audit(1756867135.085:49295): avc:  denied  { append } for  pid=8080 comm="syz.0.2563" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  166.911289][ T8086] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2565'.
[  167.023555][ T8102] fuse: Bad value for 'fd'
[  167.098326][ T8115] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.2576'.
[  167.116627][ T8117] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2577'.
[  167.385305][ T8144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2587'.
[  168.126732][ T8214] fuse: Unknown parameter '9������&>�+����iO�f$���e��^��@�叩H^��Ҫ��)*����
�`Zqg�[��2�M73�M�띌���z1���4
Ȝ'*m�j�N�ە"\��ȃ”���/�'
[  168.142290][ T8214] /dev/loop1: Can't lookup blockdev
[  168.258783][ T8221] batadv_slave_1: entered promiscuous mode
[  168.274369][ T8220] batadv_slave_1: left promiscuous mode
[  168.342148][ T8234] overlayfs: missing 'workdir'
[  168.487741][ T8247] 9pnet_fd: Insufficient options for proto=fd
[  168.547439][ T8267] 9pnet_fd: Insufficient options for proto=fd
[  169.081994][   T36] audit: type=1400 audit(1756867137.240:49296): avc:  denied  { rename } for  pid=8309 comm="syz.2.2643" name="file0" dev="tmpfs" ino=757 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  169.178331][ T8312] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.185516][ T8312] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.192976][ T8312] bridge_slave_0: entered allmulticast mode
[  169.199567][ T8312] bridge_slave_0: entered promiscuous mode
[  169.206421][ T8312] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.213547][ T8312] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.220911][ T8312] bridge_slave_1: entered allmulticast mode
[  169.227486][ T8312] bridge_slave_1: entered promiscuous mode
[  169.237191][   T46] bridge_slave_1: left allmulticast mode
[  169.242891][   T46] bridge_slave_1: left promiscuous mode
[  169.249113][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.256710][   T46] bridge_slave_0: left allmulticast mode
[  169.262494][   T46] bridge_slave_0: left promiscuous mode
[  169.268469][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.374010][   T46] tipc: Left network mode
[  169.384187][   T46] veth1_macvtap: left promiscuous mode
[  169.389780][   T46] veth0_vlan: left promiscuous mode
[  169.425654][ T8312] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.432812][ T8312] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.440153][ T8312] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.447221][ T8312] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.476864][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.484633][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.494946][ T1545] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.502131][ T1545] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.511498][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.518605][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.540713][ T8312] veth0_vlan: entered promiscuous mode
[  169.551278][ T8312] veth1_macvtap: entered promiscuous mode
[  169.728527][ T8347] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:4
[  169.928395][ T8349] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2653'.
[  170.484394][ T8366] netlink: 'syz.5.2660': attribute type 4 has an invalid length.
[  170.531880][ T8377] rust_binder: Error while translating object.
[  170.531916][ T8377] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  170.538680][ T8377] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:7
[  170.766781][   T36] audit: type=1400 audit(1756867138.918:49297): avc:  denied  { listen } for  pid=8415 comm="syz.1.2679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  170.810720][ T8421] loop2: detected capacity change from 0 to 7
[  170.852433][ T8430] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8430 comm=syz.2.2684
[  171.005698][  T677] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  171.106173][   T45] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  171.136387][  T677] usb 2-1: device descriptor read/64, error -71
[  171.237066][   T45] usb 1-1: device descriptor read/64, error -71
[  171.377993][  T677] usb 2-1: device descriptor read/64, error -71
[  171.427535][ T8436] tipc: Started in network mode
[  171.432514][ T8436] tipc: Node identity 6e8848071122, cluster identity 4711
[  171.439888][ T8436] tipc: Enabled bearer <eth:xfrm0>, priority 8
[  171.448125][ T8436] tipc: Enabling of bearer <eth:xfrm0> rejected, already enabled
[  171.478601][   T45] usb 1-1: device descriptor read/64, error -71
[  171.619565][  T677] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  171.698580][   T36] audit: type=1400 audit(1756867139.842:49298): avc:  denied  { lock } for  pid=8454 comm="syz.2.2693" path="socket:[35602]" dev="sockfs" ino=35602 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  171.723022][   T45] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  171.750422][  T677] usb 2-1: device descriptor read/64, error -71
[  171.861197][   T45] usb 1-1: device descriptor read/64, error -71
[  171.991976][  T677] usb 2-1: device descriptor read/64, error -71
[  172.102797][  T677] usb usb2-port1: attempt power cycle
[  172.112793][   T45] usb 1-1: device descriptor read/64, error -71
[  172.223553][   T45] usb usb1-port1: attempt power cycle
[  172.451067][  T677] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  172.476088][  T677] usb 2-1: device descriptor read/8, error -71
[  172.565697][ T5667] tipc: Node number set to 2141865991
[  172.571255][   T45] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  172.598718][   T45] usb 1-1: device descriptor read/8, error -71
[  172.602528][ T8484] overlayfs: failed to clone upperpath
[  172.611305][  T677] usb 2-1: device descriptor read/8, error -71
[  172.727679][   T45] usb 1-1: device descriptor read/8, error -71
[  172.856212][  T677] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  172.877232][  T677] usb 2-1: device descriptor read/8, error -71
[  172.966233][   T45] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  172.987361][   T45] usb 1-1: device descriptor read/8, error -71
[  173.007336][  T677] usb 2-1: device descriptor read/8, error -71
[  173.116312][  T677] usb usb2-port1: unable to enumerate USB device
[  173.123807][   T45] usb 1-1: device descriptor read/8, error -71
[  173.226552][ T8517] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  173.236408][   T45] usb usb1-port1: unable to enumerate USB device
[  173.245822][ T8520] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2715'.
[  173.344963][ T8530] netlink: 140 bytes leftover after parsing attributes in process `syz.5.2718'.
[  173.354162][ T8530] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2718'.
[  173.372972][ T8535] veth0_vlan: left promiscuous mode
[  173.378298][ T8535] veth0_vlan: entered promiscuous mode
[  173.383815][ T8535] veth0_vlan: entered allmulticast mode
[  173.554645][ T8544] /dev/loop0: Can't lookup blockdev
[  173.863241][ T8553] 9pnet_fd: Insufficient options for proto=fd
[  173.909469][ T8563] rust_binder: Error while translating object.
[  173.909502][ T8563] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  173.916998][ T8563] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:21
[  173.942653][ T8572] __vm_enough_memory: pid: 8572, comm: syz.1.2734, bytes: 18014402804453376 not enough memory for the allocation
[  173.967665][ T8575] __vm_enough_memory: pid: 8575, comm: syz.1.2734, bytes: 18014402804453376 not enough memory for the allocation
[  174.001973][ T8582] binder: Unknown parameter '`efcintext'
[  174.060792][ T8586] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  174.062724][ T8586] netlink: 679 bytes leftover after parsing attributes in process `syz.0.2739'.
[  174.166217][ T8593] netlink: 679 bytes leftover after parsing attributes in process `syz.0.2739'.
[  174.197906][ T8598] rust_binder: Failed to allocate buffer. len:4200, is_oneway:false
[  174.198196][ T8598] rust_binder: 161: no such ref 2
[  174.206889][ T8602] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[  174.211559][ T8598] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:161
[  174.466221][ T5658] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  174.626235][ T5658] usb 1-1: Using ep0 maxpacket: 16
[  174.632552][ T5658] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  174.643071][ T5658] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  174.654276][ T5658] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.667413][ T5658] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  174.690565][ T5658] usb 1-1: config 7 interface 0 has no altsetting 0
[  174.702776][ T5658] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  174.719187][ T5658] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.794541][ T8623] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.801689][ T8623] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.809108][ T8623] bridge_slave_0: entered allmulticast mode
[  174.815713][ T8623] bridge_slave_0: entered promiscuous mode
[  174.822400][ T8623] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.829633][ T8623] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.837006][ T8623] bridge_slave_1: entered allmulticast mode
[  174.843766][ T8623] bridge_slave_1: entered promiscuous mode
[  174.915229][ T8623] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.922363][ T8623] bridge0: port 2(bridge_slave_1) entered forwarding state
[  174.929831][ T8623] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.936898][ T8623] bridge0: port 1(bridge_slave_0) entered forwarding state
[  174.968558][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.976070][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.986803][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.993876][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  175.005972][ T1545] bridge0: port 2(bridge_slave_1) entered blocking state
[  175.013068][ T1545] bridge0: port 2(bridge_slave_1) entered forwarding state
[  175.041763][ T8623] veth0_vlan: entered promiscuous mode
[  175.053770][ T8623] veth1_macvtap: entered promiscuous mode
[  175.152650][ T5658] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.0005/input/input48
[  175.167533][ T5658] kye 0003:0458:5010.0005: input,hiddev96,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0
[  175.406228][ T5664] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  175.546400][ T8606] fuse: Unknown parameter 'fd��'
[  175.553411][ T5667] usb 1-1: USB disconnect, device number 22
[  175.557794][ T5664] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  175.569628][ T5664] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  175.579515][ T5664] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  175.589028][ T5664] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  175.597499][ T5664] usb 6-1: SerialNumber: syz
[  175.604293][ T5664] usb 6-1: 0:2 : does not exist
[  176.012044][   T36] audit: type=1400 audit(1756867400.150:49299): avc:  denied  { append } for  pid=8644 comm="syz.5.2750" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  176.346249][ T5667] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  176.496228][ T5667] usb 1-1: Using ep0 maxpacket: 32
[  176.503025][ T8682] batadv_slave_0: mtu less than device minimum
[  176.512860][ T5667] usb 1-1: unable to get BOS descriptor or descriptor too short
[  176.520583][ T5667] usb 1-1: no configurations
[  176.525263][ T5667] usb 1-1: can't read configurations, error -22
[  177.124928][ T8689] rust_binder: 8687 RLIMIT_NICE not set
[  177.867733][ T8705] netlink: 'syz.0.2773': attribute type 4 has an invalid length.
[  178.150124][ T5664] usb 6-1: USB disconnect, device number 9
[  178.166496][ T5658] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  178.192199][ T8726] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 3
[  178.199445][ T8726] rust_binder: Write failure EINVAL in pid:13
[  178.217560][ T8730] rust_binder: 17: no such ref 5
[  178.228749][ T8730] rust_binder: Write failure EINVAL in pid:17
[  178.230123][ T8730] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2781'.
[  178.246782][ T8730] rust_binder: 17: no such ref 5
[  178.251829][ T8730] rust_binder: Write failure EINVAL in pid:17
[  178.306212][ T5658] usb 1-1: device descriptor read/64, error -71
[  178.556260][ T5658] usb 1-1: device descriptor read/64, error -71
[  178.646260][ T5664] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  178.796210][ T5664] usb 6-1: Using ep0 maxpacket: 8
[  178.801343][ T5658] usb 1-1: new full-speed USB device number 26 using dummy_hcd
[  178.810054][ T5664] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  178.818439][ T5664] usb 6-1: config 179 has no interface number 0
[  178.824825][ T5664] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  178.836064][ T5664] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  178.847338][ T5664] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  178.858797][ T5664] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  178.869157][ T5664] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  178.882463][ T5664] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  178.892005][ T5664] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.901051][ T8744] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  178.909009][ T5664] xpad 6-1:179.65: probe with driver xpad failed with error -5
[  178.956256][ T5658] usb 1-1: device descriptor read/64, error -71
[  179.122443][ T5664] usb 6-1: USB disconnect, device number 10
[  179.196260][ T5658] usb 1-1: device descriptor read/64, error -71
[  179.306316][ T5658] usb usb1-port1: attempt power cycle
[  179.635073][ T8756] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2788'.
[  179.656247][ T5658] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[  179.673621][ T8760] rust_binder: Error while translating object.
[  179.673653][ T8760] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  179.680002][ T8760] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:47
[  179.681229][ T5658] usb 1-1: device descriptor read/8, error -71
[  179.706971][ T8762] ./cgroup: Can't lookup blockdev
[  179.838883][ T5658] usb 1-1: device descriptor read/8, error -71
[  179.918312][   T36] audit: type=1400 audit(1756867404.060:49300): avc:  denied  { write } for  pid=8787 comm="syz.5.2800" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  180.076221][ T5658] usb 1-1: new full-speed USB device number 28 using dummy_hcd
[  180.097372][ T5658] usb 1-1: device descriptor read/8, error -71
[  180.227228][ T5658] usb 1-1: device descriptor read/8, error -71
[  180.336319][ T5658] usb usb1-port1: unable to enumerate USB device
[  181.054810][ T8827] binder: Unknown parameter 'fscontext?}'
[  181.149074][   T36] audit: type=1400 audit(1756867405.290:49301): avc:  denied  { connect } for  pid=8828 comm="syz.0.2811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  181.249901][ T8838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2813'.
[  181.259473][ T8838] rust_binder: Error while translating object.
[  181.259504][ T8838] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  181.265952][ T8838] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:95
[  181.285228][ T8840] rust_binder: Error while translating object.
[  181.294688][ T8840] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  181.301202][ T8840] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:97
[  181.342352][ T8849] rust_binder: Error while translating object.
[  181.351508][ T8849] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  181.358006][ T8849] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:106
[  181.502253][ T8855] rust_binder: Write failure EFAULT in pid:112
[  181.709914][ T8867] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8867 comm=syz.2.2825
[  181.948546][ T5658] rust_binder: 8828: removing orphan mapping 0:4232
[  182.432062][ T8895] SELinux: security_context_str_to_sid (root) failed with errno=-22
[  182.796266][ T5667] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  182.947566][ T5667] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11
[  182.958741][ T5667] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  182.968590][ T5667] usb 6-1: New USB device found, idVendor=2179, idProduct=0077, bcdDevice= 0.00
[  182.977647][ T5667] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.989092][ T5667] usb 6-1: config 0 descriptor??
[  183.037882][   T36] audit: type=1400 audit(1756867407.180:49302): avc:  denied  { create } for  pid=8923 comm="syz.2.2843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  183.498408][ T8916] binder: Bad value for 'max'
[  183.645131][ T5667] usbhid 6-1:0.0: can't add hid device: -71
[  183.651250][ T5667] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  183.659984][ T5667] usb 6-1: USB disconnect, device number 11
[  184.006605][   T53] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  184.024802][   T36] audit: type=1400 audit(1756867408.160:49303): avc:  denied  { bind } for  pid=8935 comm="syz.1.2847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  184.045882][   T13] Bluetooth: hci0: Frame reassembly failed (-84)
[  184.077711][ T8944] rust_binder: Error while translating object.
[  184.077760][ T8944] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  184.083987][ T8944] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:206
[  184.175624][   T36] audit: type=1400 audit(1756867408.310:49304): avc:  denied  { accept } for  pid=8949 comm="syz.5.2852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  184.193080][ T8950] rust_binder: Got transaction with invalid offset.
[  184.204750][ T8950] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  184.211724][ T8950] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:128
[  185.209971][ T5658] rust_binder: 8967: removing orphan mapping 0:24
[  185.628532][ T8974] 9pnet_fd: Insufficient options for proto=fd
[  186.003738][ T8998] netlink: 'syz.0.2868': attribute type 16 has an invalid length.
[  186.012059][ T8999] random: crng reseeded on system resumption
[  186.014092][ T8998] netlink: 'syz.0.2868': attribute type 3 has an invalid length.
[  186.026357][ T8998] netlink: 64058 bytes leftover after parsing attributes in process `syz.0.2868'.
[  186.061591][ T9005] rust_binder: 222: no such ref 3
[  186.066701][ T9005] rust_binder: 222: no such ref 2
[  186.071747][ T9005] rust_binder: 222: no such ref 0
[  186.076883][ T9005] rust_binder: 222: no such ref 3
[  186.081922][ T9005] rust_binder: 222: no such ref 3
[  186.087032][ T1019] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  186.119586][   T36] audit: type=1400 audit(1756867410.260:49305): avc:  denied  { ioctl } for  pid=8996 comm="syz.5.2869" path="/dev/snapshot" dev="devtmpfs" ino=21 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1
[  186.147428][ T9009] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  186.147465][ T9009] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:224
[  186.182295][   T36] audit: type=1400 audit(1756867410.320:49306): avc:  denied  { unmount } for  pid=7132 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  186.282109][ T9032] overlayfs: failed to resolve './cgroup': -2
[  186.290363][   T13] bridge_slave_1: left allmulticast mode
[  186.296124][   T13] bridge_slave_1: left promiscuous mode
[  186.309149][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.316762][   T13] bridge_slave_0: left allmulticast mode
[  186.322426][   T13] bridge_slave_0: left promiscuous mode
[  186.328399][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.396218][ T5658] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  186.433073][ T9039] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.440174][ T9039] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.447379][ T9039] bridge_slave_0: entered allmulticast mode
[  186.453571][ T9039] bridge_slave_0: entered promiscuous mode
[  186.459956][ T9039] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.467070][ T9039] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.474209][ T9039] bridge_slave_1: entered allmulticast mode
[  186.480790][ T9039] bridge_slave_1: entered promiscuous mode
[  186.488000][   T13] veth1_macvtap: left promiscuous mode
[  186.493667][   T13] veth0_vlan: left promiscuous mode
[  186.563525][ T9039] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.570719][ T9039] bridge0: port 2(bridge_slave_1) entered forwarding state
[  186.578058][ T9039] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.585186][ T9039] bridge0: port 1(bridge_slave_0) entered forwarding state
[  186.592654][ T5658] usb 6-1: Using ep0 maxpacket: 8
[  186.599370][ T5658] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  186.607879][ T5658] usb 6-1: config 179 has no interface number 0
[  186.614242][ T5658] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  186.614318][ T1545] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.625340][ T5658] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  186.644699][ T1545] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.645033][ T5658] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  186.663950][ T5658] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  186.666885][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.674070][ T5658] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  186.681070][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  186.701724][ T5658] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  186.710964][ T5658] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.719979][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.727085][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  186.734468][ T9011] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  186.742383][ T5658] xpad 6-1:179.65: probe with driver xpad failed with error -5
[  186.755630][ T9039] veth0_vlan: entered promiscuous mode
[  186.766825][ T9039] veth1_macvtap: entered promiscuous mode
[  186.903433][ T9057] /dev/loop0: Can't lookup blockdev
[  186.954709][   T45] usb 6-1: USB disconnect, device number 12
[  187.246213][ T5658] usb 7-1: new low-speed USB device number 2 using dummy_hcd
[  187.376225][ T5658] usb 7-1: device descriptor read/64, error -71
[  187.521776][ T9078] rust_binder: Error while translating object.
[  187.521856][ T9078] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  187.528387][ T9078] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:158
[  187.616397][ T5658] usb 7-1: device descriptor read/64, error -71
[  187.686392][ T5664] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  187.826203][   T45] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  187.837571][ T5664] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  187.849032][ T5664] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  187.858424][ T5664] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.866776][ T5658] usb 7-1: new low-speed USB device number 3 using dummy_hcd
[  187.874476][ T5664] usb 2-1: config 0 descriptor??
[  187.976301][   T45] usb 6-1: Using ep0 maxpacket: 8
[  187.982971][   T45] usb 6-1: unable to get BOS descriptor or descriptor too short
[  187.991501][   T45] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  188.005869][   T45] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  188.014958][ T5658] usb 7-1: device descriptor read/64, error -71
[  188.021429][   T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.029480][   T45] usb 6-1: Product: syz
[  188.033648][   T45] usb 6-1: Manufacturer: syz
[  188.038296][   T45] usb 6-1: SerialNumber: syz
[  188.043837][ T9087] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  188.246762][ T5658] usb 7-1: device descriptor read/64, error -71
[  188.262604][ T9088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.271255][ T9088] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.282851][ T5664] uclogic 0003:28BD:0071.0006: interface is invalid, ignoring
[  188.356307][ T5658] usb usb7-port1: attempt power cycle
[  188.389639][   T45] usb 6-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  188.398804][   T45] usb 6-1: failed to enable PITCH for EP 0x82
[  188.405080][   T45] usb 6-1: 2:1: cannot set freq 14811412 to ep 0x82
[  188.414957][   T45] usb 6-1: USB disconnect, device number 13
[  188.502809][ T5664] usb 2-1: USB disconnect, device number 19
[  188.696267][ T5658] usb 7-1: new low-speed USB device number 4 using dummy_hcd
[  188.717261][ T5658] usb 7-1: device descriptor read/8, error -71
[  188.847251][ T5658] usb 7-1: device descriptor read/8, error -71
[  189.036285][ T9124] binder: Bad value for 'stats'
[  189.067500][ T9128] rust_binder: Failed to allocate buffer. len:10771147061988852024, is_oneway:false
[  189.067530][ T9128] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOSPC }
[  189.077584][ T9128] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOSPC } my_pid:71
[  189.096217][ T5658] usb 7-1: new low-speed USB device number 5 using dummy_hcd
[  189.108450][ T9134] rust_binder: Failed to allocate buffer. len:10558401041834454400, is_oneway:false
[  189.137179][ T5658] usb 7-1: device descriptor read/8, error -71
[  189.191101][ T5667] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0
[  189.203902][ T5667] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  189.287429][ T5658] usb 7-1: device descriptor read/8, error -71
[  189.320752][ T9153] __vm_enough_memory: pid: 9153, comm: syz.1.2917, bytes: 18014402804453376 not enough memory for the allocation
[  189.396630][ T5658] usb usb7-port1: unable to enumerate USB device
[  189.416254][ T5659] usb 6-1: new full-speed USB device number 14 using dummy_hcd
[  189.567233][ T5659] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  189.577440][ T5659] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  189.586207][ T5667] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  189.588285][ T5659] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  189.609747][ T5659] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  189.618818][ T5659] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  189.626874][ T5659] usb 6-1: SerialNumber: syz
[  189.633806][ T5659] cdc_acm 6-1:1.0: Control and data interfaces are not separated!
[  189.641701][ T5659] cdc_acm 6-1:1.0: This needs exactly 3 endpoints
[  189.648225][ T5659] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -22
[  189.746229][ T5667] usb 2-1: Using ep0 maxpacket: 16
[  189.752448][ T5667] usb 2-1: config 0 has an invalid interface number: 94 but max is 0
[  189.760578][ T5667] usb 2-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config
[  189.771003][ T5667] usb 2-1: config 0 has no interface number 0
[  189.778519][ T5667] usb 2-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=45.90
[  189.787961][ T5667] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.796012][ T5667] usb 2-1: Product: syz
[  189.800192][ T5667] usb 2-1: Manufacturer: syz
[  189.804788][ T5667] usb 2-1: SerialNumber: syz
[  189.814783][   T36] audit: type=1400 audit(1756867413.960:49307): avc:  denied  { append } for  pid=9156 comm="syz.6.2919" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  189.816212][ T5667] usb 2-1: config 0 descriptor??
[  189.846506][ T5667] usb 2-1: unsupported MDLM descriptors
[  189.854090][ T9136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  189.862713][ T9136] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  189.871420][ T9136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  189.879968][ T9136] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  189.888321][ T9136] futex_wake_op: syz.5.2911 tries to shift op by 144; fix this program
[  189.898928][ T5664] usb 6-1: USB disconnect, device number 14
[  189.909902][ T9163] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2921'.
[  189.932257][ T9165] rust_binder: Failed copying into alloc: EFAULT
[  189.932284][ T9165] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT }
[  189.938736][ T9165] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  189.947049][ T9165] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:13
[  189.966870][ T9167] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  189.976010][ T9167] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:15
[  189.998372][ T9169] rust_binder: Got transaction with invalid offset.
[  190.007652][ T9169] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  190.014360][ T9169] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:17
[  190.464871][ T9185] __vm_enough_memory: pid: 9185, comm: syz.5.2930, bytes: 18014402804453376 not enough memory for the allocation
[  190.736206][ T5664] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  190.897303][ T5664] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  190.908871][ T5664] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  190.920000][ T5664] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  190.929982][ T5664] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  190.943170][ T5664] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  190.952484][ T5664] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.961412][ T5664] usb 6-1: config 0 descriptor??
[  191.058439][   T36] audit: type=1400 audit(1756867415.200:49308): avc:  denied  { accept } for  pid=9188 comm="syz.6.2932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  191.093583][ T9191] rust_binder: Write failure EFAULT in pid:33
[  191.137821][ T9193] fuse: Unknown parameter '`d'
[  191.149080][ T9194] fuse: Unknown parameter '`d'
[  191.172840][ T9195] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2931'.
[  191.192315][ T5664] usbhid 6-1:0.0: can't add hid device: -71
[  191.201982][ T5664] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  191.218579][ T5664] usb 6-1: USB disconnect, device number 15
[  191.365807][ T9216] __vm_enough_memory: pid: 9216, comm: syz.6.2940, bytes: 21200473837568 not enough memory for the allocation
[  191.378234][ T9216] fuseblk: Bad value for 'rootmode'
[  191.454976][ T9220] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 3
[  191.462354][ T9220] rust_binder: Write failure EINVAL in pid:53
[  191.526216][ T5664] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  191.687886][ T5664] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.698918][ T5664] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.709005][ T5664] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  191.718311][ T5664] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.727193][ T5664] usb 6-1: config 0 descriptor??
[  191.736213][ T5667] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  191.886225][ T5667] usb 7-1: Using ep0 maxpacket: 16
[  191.892582][ T5667] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.903892][ T5667] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  191.913918][ T5667] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  191.927336][ T5667] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  191.938732][ T5667] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.951659][ T5667] usb 7-1: config 0 descriptor??
[  192.140176][ T9226] overlayfs: failed to clone upperpath
[  192.234213][ T9245] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  192.242789][ T9245] netlink: 'syz.2.2950': attribute type 4 has an invalid length.
[  192.294544][ T9251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=9251 comm=syz.2.2953
[  192.355500][  T677] usb 2-1: USB disconnect, device number 20
[  192.362593][ T5667] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  192.379205][ T5667] microsoft 0003:045E:07DA.0009: ignoring exceeding usage max
[  192.384585][ T9257] rust_binder: Error while translating object.
[  192.390768][ T5667] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  192.392430][ T9257] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  192.398393][ T5667] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  192.404914][ T9257] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:94
[  192.414530][ T5667] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  192.437737][ T5667] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  192.445102][ T5667] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  192.455605][ T5667] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  192.463067][ T5667] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  192.470402][ T5667] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  192.477675][ T5667] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  192.485023][ T5667] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  192.492631][ T5667] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  192.499948][ T5667] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  192.508377][ T5667] microsoft 0003:045E:07DA.0009: unknown main item tag 0x0
[  192.597861][ T5667] microsoft 0003:045E:07DA.0009: No inputs registered, leaving
[  192.605981][ T5667] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0
[  192.617450][ T5667] microsoft 0003:045E:07DA.0009: no inputs found
[  192.623796][ T5667] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway
[  192.635460][ T5667] usb 7-1: USB disconnect, device number 6
[  192.749151][ T5664] usb 6-1: USB disconnect, device number 16
[  193.114168][ T9294] netlink: 'syz.6.2967': attribute type 4 has an invalid length.
[  193.273666][ T9310] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  193.281414][ T9309] rust_binder: Write failure EINVAL in pid:199
[  193.289900][ T9312] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:202
[  193.416219][  T677] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  193.546282][ T5664] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  193.587473][  T677] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  193.598479][  T677] usb 7-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00
[  193.607886][  T677] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.616712][  T677] usb 7-1: config 0 descriptor??
[  193.696228][ T5664] usb 6-1: Using ep0 maxpacket: 32
[  193.702782][ T5664] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[  193.711029][ T5664] usb 6-1: config 0 has an invalid descriptor of length 170, skipping remainder of the config
[  193.721442][ T5664] usb 6-1: config 0 has no interface number 0
[  193.727570][ T5664] usb 6-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  193.741896][ T5664] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  193.751037][ T5664] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.759095][ T5664] usb 6-1: Product: syz
[  193.763533][ T5664] usb 6-1: Manufacturer: syz
[  193.768244][ T5664] usb 6-1: SerialNumber: syz
[  193.773600][ T5664] usb 6-1: config 0 descriptor??
[  193.779338][ T5664] smsc95xx v2.0.0
[  193.783003][ T5664] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  193.793080][ T5664] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -22
[  193.887238][ T9351] FAT-fs (rnullb0): bogus number of reserved sectors
[  193.894270][ T9351] FAT-fs (rnullb0): Can't find a valid FAT filesystem
[  194.024133][  T677] usbhid 7-1:0.0: can't add hid device: -71
[  194.026836][ T9406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2993'.
[  194.030293][  T677] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  194.039611][ T9406] bridge_slave_1: left allmulticast mode
[  194.048849][  T677] usb 7-1: USB disconnect, device number 7
[  194.056349][ T9406] bridge_slave_1: left promiscuous mode
[  194.064345][ T9406] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.073550][ T9406] bridge_slave_0: left allmulticast mode
[  194.079530][ T9406] bridge_slave_0: left promiscuous mode
[  194.085421][ T9406] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.256218][ T5664] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  194.406329][ T5664] usb 2-1: Using ep0 maxpacket: 32
[  194.412734][ T5664] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  194.423836][ T5664] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  194.433658][ T5664] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  194.443179][ T5664] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.451845][ T5664] usb 2-1: config 0 descriptor??
[  194.457914][ T5664] hub 2-1:0.0: USB hub found
[  194.630945][ T9438] netlink: 124 bytes leftover after parsing attributes in process `syz.6.3006'.
[  194.657984][ T5664] hub 2-1:0.0: 1 port detected
[  194.686921][  T677] usb 6-1: USB disconnect, device number 17
[  194.732580][ T1545] Bluetooth: hci0: Frame reassembly failed (-84)
[  194.817575][ T9457] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  194.819104][ T9458] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  194.831816][ T9457] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  194.839112][ T9458] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 1
[  194.896246][   T13] bridge_slave_1: left allmulticast mode
[  194.901998][   T13] bridge_slave_1: left promiscuous mode
[  194.916499][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.934415][   T13] bridge_slave_0: left allmulticast mode
[  194.943982][   T13] bridge_slave_0: left promiscuous mode
[  194.954148][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.094417][ T9471] 9pnet_fd: p9_fd_create_tcp (9471): problem connecting socket to 127.0.0.1
[  195.106601][   T13] veth1_macvtap: left promiscuous mode
[  195.112161][   T13] veth0_vlan: left promiscuous mode
[  195.144073][ T9465] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.151317][ T9465] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.158674][ T9465] bridge_slave_0: entered allmulticast mode
[  195.165396][ T9465] bridge_slave_0: entered promiscuous mode
[  195.171949][ T9465] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.179364][ T9465] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.186534][ T9465] bridge_slave_1: entered allmulticast mode
[  195.192993][ T9465] bridge_slave_1: entered promiscuous mode
[  195.254876][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.261965][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  195.271101][ T1545] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.278171][ T1545] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.304295][ T9465] veth0_vlan: entered promiscuous mode
[  195.315850][ T9465] veth1_macvtap: entered promiscuous mode
[  195.367499][ T5664] hub 2-1:0.0: activate --> -90
[  195.401938][   T36] audit: type=1400 audit(1756867419.540:49309): avc:  denied  { remount } for  pid=9485 comm="syz.7.3023" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[  195.631488][   T36] audit: type=1326 audit(1756867419.770:49310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9496 comm="syz.2.3022" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf0b18ebe9 code=0x0
[  196.656405][ T5664] usb 2-1-port1: cannot reset (err = -110)
[  196.662502][ T5664] usb 2-1-port1: cannot reset (err = -32)
[  196.668584][ T5664] usb 2-1-port1: cannot reset (err = -32)
[  196.674644][ T5664] usb 2-1-port1: cannot reset (err = -32)
[  196.680609][ T5664] usb 2-1-port1: cannot reset (err = -32)
[  196.686422][ T5664] usb 2-1-port1: Cannot enable. Maybe the USB cable is bad?
[  196.693991][ T5664] usb 2-1-port1: cannot disable (err = -32)
[  196.700171][ T5664] usb 2-1-port1: cannot reset (err = -32)
[  196.706071][ T5664] usb 2-1-port1: cannot reset (err = -32)
[  196.706230][ T5667] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  196.712242][ T5664] usb 2-1-port1: cannot reset (err = -32)
[  196.725261][ T5664] usb 2-1-port1: cannot reset (err = -32)
[  196.731322][ T5664] usb 2-1-port1: cannot reset (err = -32)
[  196.737202][ T5664] usb 2-1-port1: Cannot enable. Maybe the USB cable is bad?
[  196.744767][ T5664] usb 2-1-port1: cannot disable (err = -32)
[  196.750714][ T5664] usb 2-1-port1: attempt power cycle
[  196.806246][   T53] Bluetooth: hci0: command 0x1003 tx timeout
[  196.809310][ T1019] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  196.837617][ T9519] netlink: 'syz.5.3030': attribute type 4 has an invalid length.
[  196.845486][ T9519] netlink: 'syz.5.3030': attribute type 6 has an invalid length.
[  196.853295][ T9519] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.3030'.
[  196.863196][ T9519] rust_binder: 217: no such ref 3
[  196.869006][ T9519] rust_binder: Write failure EINVAL in pid:217
[  196.876213][ T5667] usb 8-1: Using ep0 maxpacket: 8
[  196.889422][ T5667] usb 8-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 32
[  196.899559][ T5667] usb 8-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  196.915291][ T5667] usb 8-1: config 1 interface 0 has no altsetting 0
[  196.923923][ T5667] usb 8-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40
[  196.933427][ T5667] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.941635][ T5667] usb 8-1: Product: syz
[  196.945968][ T5667] usb 8-1: Manufacturer: 诇묨贝⾓譈켯攥磽ޗ଄ହ㡠ᜢ蝯ሇ⌇懶賌ቆ꼛扌啦ˆ揗莌鈪㼂㡕컻蚯招㑼뉑棁㓦ﱇ⚅粑駨쌓皢錣뿖븍曏뾤攙蛻禨ꕎ㖵訁ํ캬ꟶ䘂墻欘⏖圯᭮䙹枎㺋괎ᐶ෶飺⧳爟춝䮨活丱㾝ᡦ椨햍
[  196.972764][ T5667] usb 8-1: SerialNumber: syz
[  196.979893][ T9507] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  197.013831][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.026012][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.033685][ T5659] usb 2-1: USB disconnect, device number 21
[  197.039692][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.048372][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.055904][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.063365][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.071215][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.081229][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.089481][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.096967][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.104514][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.112080][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.119979][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.127836][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.135242][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.143086][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.145223][  T677] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  197.150705][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.159586][  T677] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  197.168114][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.182534][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.190330][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.198274][ T5667] usblp0: Disabling reads from problematic bidirectional printer
[  197.198749][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.214234][ T5667] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 4 proto 1 vid 0x03F0 pid 0x0004
[  197.214565][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.228044][ T5667] usb 8-1: USB disconnect, device number 2
[  197.235683][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.246497][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.248667][ T5667] usblp0: removed
[  197.253992][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.265027][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.272456][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.279882][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.287587][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.294974][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.302418][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.309949][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.317462][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.324847][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.332475][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.339906][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.347329][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.354716][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.362227][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.369768][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.377190][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.384568][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.392060][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.399475][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.406887][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.414270][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.421884][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.429383][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.436797][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.444177][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.451955][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.460196][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.467706][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.475168][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.482655][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.490097][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.497503][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.504907][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.512348][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.519853][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.527435][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.534887][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.542394][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.549809][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.557229][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.564622][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.572050][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.579470][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.586899][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.594318][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.601783][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.609223][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.616638][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.624128][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.631561][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.638970][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.646373][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.653770][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.661322][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.668841][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.676256][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.683636][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.691052][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.698464][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.706511][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.714120][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.722057][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.729542][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.737022][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.744428][ T5657] hid-generic 0003:0008:000F.000A: unknown main item tag 0x0
[  197.752496][ T5657] hid-generic 0003:0008:000F.000A: hidraw0: USB HID v0.00 Device [syz1] on syz1
[  197.770309][ T9552] fido_id[9552]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  197.771554][ T9554] overlayfs: failed to resolve './file2': -2
[  197.822982][ T9561] rust_binder: Error while translating object.
[  197.823015][ T9561] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  197.829262][ T9561] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:30
[  197.940874][ T1545] bridge_slave_1: left allmulticast mode
[  197.956004][ T1545] bridge_slave_1: left promiscuous mode
[  197.962256][ T1545] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.969969][ T1545] bridge_slave_0: left allmulticast mode
[  197.975711][ T1545] bridge_slave_0: left promiscuous mode
[  197.981902][ T1545] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.086509][  T677] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  198.144950][ T9572] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.152085][ T9572] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.159662][ T9572] bridge_slave_0: entered allmulticast mode
[  198.166231][ T9572] bridge_slave_0: entered promiscuous mode
[  198.173548][ T1545] veth1_macvtap: left promiscuous mode
[  198.179151][ T1545] veth0_vlan: left promiscuous mode
[  198.231772][ T9572] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.238900][  T677] usb 8-1: Using ep0 maxpacket: 16
[  198.247930][ T9572] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.255107][ T9572] bridge_slave_1: entered allmulticast mode
[  198.261882][  T677] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  198.272608][ T9572] bridge_slave_1: entered promiscuous mode
[  198.278485][  T677] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  198.295181][  T677] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  198.368502][ T9572] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.375575][ T9572] bridge0: port 2(bridge_slave_1) entered forwarding state
[  198.383003][ T9572] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.390058][ T9572] bridge0: port 1(bridge_slave_0) entered forwarding state
[  198.429026][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.436883][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.446966][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.454126][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[  198.464459][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.471545][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  198.504568][ T9572] veth0_vlan: entered promiscuous mode
[  198.519198][ T9572] veth1_macvtap: entered promiscuous mode
[  198.795889][ T9594] binder: Unknown parameter 'uid<00000000000000000000'
[  198.993892][ T5657] rust_binder: 9604: removing orphan mapping 0:24
[  199.563329][ T9623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3058'.
[  200.015887][ T9645] fuse: Bad value for 'fd'
[  200.056989][ T9648] sock: sock_timestamping_bind_phc: sock not bind to device
[  200.287169][ T9661] netlink: 'syz.2.3071': attribute type 3 has an invalid length.
[  200.407412][ T9666] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3073'.
[  200.536756][ T9670] EXT4-fs: dax option not supported
[  200.557201][ T9674] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 1
[  200.564550][ T9674] rust_binder: Write failure EINVAL in pid:52
[  200.676783][ T9684] KVM: debugfs: duplicate directory 9684-5
[  200.745218][ T9691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3081'.
[  200.819261][ T9695] SELinux: security_context_str_to_sid (`���ު��}���י�) failed with errno=-22
[  200.862085][ T9700] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3085'.
[  200.872604][  T677] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  200.884964][ T9703] /dev/rnullb0: Can't open blockdev
[  200.890577][  T677] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.916187][  T677] usb 8-1: Product: 摏
[  200.926213][  T677] usb 8-1: Manufacturer: 럛艷봥ඒߓ뚒䄆쟩檒璘仒裃茸겣섫኿筜꼆簤慖㳖抟߉긑픩鬐瑻曂搄溏೒潡嶜ꀿ盦ћ剆焝萂ﾱਔང扱싉㲒㖟輼鴤欽람좥翃랊꒴隟묣ᾴƅ㔜᭺擂戧뗴褗拪f觟땸鋬픚硈ﶩ豖纡欰焃୾魉ꃩ釜揫쨐ᓥ껵庄꧴讍䞸勃๫奍ꚛぶ仯녒抵锽䱩ꔭ泜骦ౘ
[  200.931240][ T9707] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3089'.
[  200.971886][   T36] audit: type=1400 audit(1756867425.120:49311): avc:  denied  { read write } for  pid=9702 comm="syz.7.3087" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  200.996558][  T677] usb 8-1: can't set config #1, error -71
[  201.003535][  T677] usb 8-1: USB disconnect, device number 3
[  201.012514][   T36] audit: type=1400 audit(1756867425.120:49312): avc:  denied  { open } for  pid=9702 comm="syz.7.3087" path="/10/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  201.054598][   T36] audit: type=1400 audit(1756867425.160:49313): avc:  denied  { ioctl } for  pid=9702 comm="syz.7.3087" path="/10/file0/file0" dev="fuse" ino=0 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1
[  201.090377][ T9713] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  201.406046][ T9745] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  201.416465][ T9745] overlayfs: missing 'lowerdir'
[  201.520076][ T9751] rust_binder: Error while translating object.
[  201.520118][ T9751] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  201.526933][ T9751] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:44
[  201.609115][ T9762] overlayfs: failed to clone upperpath
[  201.633116][   T36] audit: type=1400 audit(1756867425.770:49314): avc:  denied  { lock } for  pid=9752 comm="syz.7.3105" path="socket:[43242]" dev="sockfs" ino=43242 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  201.731236][   T36] audit: type=1400 audit(1756867425.870:49315): avc:  denied  { ioctl } for  pid=9776 comm="syz.7.3113" path="/dev/usbmon5" dev="devtmpfs" ino=106 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  201.763703][   T36] audit: type=1400 audit(1756867425.900:49316): avc:  denied  { shutdown } for  pid=9783 comm="syz.8.3117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  201.778752][ T9786] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  201.784496][ T9787] rust_binder: Error while translating object.
[  201.791057][ T9786] rust_binder: Error while translating object.
[  201.797323][ T9786] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  201.803501][ T9786] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:51
[  201.813333][ T9787] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  201.822600][ T9787] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:51
[  201.849280][ T9797] overlayfs: failed to clone upperpath
[  202.696189][   T36] audit: type=1400 audit(1756867426.830:49317): avc:  denied  { audit_write } for  pid=9827 comm="syz.8.3135" capability=29  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  202.733727][ T9840] loop2: detected capacity change from 0 to 7
[  203.058954][ T9877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:222
[  203.059124][ T9877] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:222
[  203.117578][ T9882] veth0_vlan: entered allmulticast mode
[  203.277818][   T36] audit: type=1400 audit(1756867427.420:49318): avc:  denied  { map } for  pid=9889 comm="syz.7.3155" path="/proc/73/task" dev="proc" ino=44075 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  203.278133][ T9890] input input54: cannot allocate more than FF_MAX_EFFECTS effects
[  203.309088][ T9893] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:73
[  203.352906][ T9901] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  203.398082][ T9910] netlink: 56 bytes leftover after parsing attributes in process `syz.8.3162'.
[  203.414636][ T9912] veth0_vlan: entered allmulticast mode
[  203.853693][   T36] audit: type=1326 audit(1756867427.990:49319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9915 comm="syz.1.3165" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd74478ebe9 code=0x0
[  203.932327][ T9922] overlayfs: missing 'lowerdir'
[  204.138103][ T9935] rust_binder: Write failure EFAULT in pid:87
[  204.718008][ T9947] tmpfs: Unknown parameter 'nosever'
[  204.740571][ T9949] rust_binder: Write failure EFAULT in pid:228
[  204.818438][ T9951] veth0_vlan: entered allmulticast mode
[  204.981547][ T9957] loop2: detected capacity change from 0 to 7
[  205.010940][ T9963] overlayfs: conflicting options: metacopy=off,verity=require
[  205.268379][ T9987] overlayfs: failed to clone upperpath
[  205.336251][ T5664] usb 8-1: new low-speed USB device number 4 using dummy_hcd
[  205.486203][ T5664] usb 8-1: Invalid ep0 maxpacket: 16
[  205.616210][ T5664] usb 8-1: new low-speed USB device number 5 using dummy_hcd
[  205.756490][   T36] audit: type=1326 audit(1756867429.900:49320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9954 comm="syz.1.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74478ebe9 code=0x7fc00000
[  205.780021][ T5664] usb 8-1: Invalid ep0 maxpacket: 16
[  205.780178][ T5664] usb usb8-port1: attempt power cycle
[  205.798014][T10005] vcan0: entered allmulticast mode
[  205.973811][T10013] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:245
[  206.128522][ T5664] usb 8-1: new low-speed USB device number 6 using dummy_hcd
[  206.156770][ T5664] usb 8-1: Invalid ep0 maxpacket: 16
[  206.201827][   T36] audit: type=1400 audit(1756867430.340:49321): avc:  denied  { write } for  pid=10040 comm="syz.8.3203" path="socket:[44391]" dev="sockfs" ino=44391 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  206.286217][ T5667] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  206.286233][ T5664] usb 8-1: new low-speed USB device number 7 using dummy_hcd
[  206.316465][ T5664] usb 8-1: Invalid ep0 maxpacket: 16
[  206.321932][ T5664] usb usb8-port1: unable to enumerate USB device
[  206.396517][T10048] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3206'.
[  206.405612][T10048] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3206'.
[  206.426654][T10048] veth0_to_hsr: entered promiscuous mode
[  206.432353][T10048] veth0_to_hsr: entered allmulticast mode
[  206.467248][ T5667] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  206.479127][ T5667] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30
[  206.497175][ T5667] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 196
[  206.520660][ T5667] usb 2-1: New USB device found, idVendor=046d, idProduct=c22e, bcdDevice= 0.00
[  206.536194][ T5667] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.549046][ T5667] usb 2-1: config 0 descriptor??
[  206.565227][ T5667] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  207.057475][T10064] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3212'.
[  207.291936][T10086] netlink: 'syz.2.3218': attribute type 4 has an invalid length.
[  207.299933][T10086] netlink: 'syz.2.3218': attribute type 4 has an invalid length.
[  207.356840][T10100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3223'.
[  207.461198][   T36] audit: type=1400 audit(1756867431.600:49322): avc:  denied  { setopt } for  pid=10016 comm="syz.1.3197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1
[  208.415548][T10150] rust_binder: Error while translating object.
[  208.415581][T10150] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  208.422839][T10150] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender.
[  208.447375][T10150] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:117
[  208.466990][ T5667] rust_binder: 10149: removing orphan mapping 0:24
[  209.000182][ T5667] usb 2-1: USB disconnect, device number 26
[  209.541514][T10196] incfs: Can't find or create .index dir in ./cgroup
[  209.563488][T10196] incfs: mount failed -22
[  209.571470][T10196] rust_binder: Write failure EFAULT in pid:260
[  209.610496][T10214] bridge0: port 3(ip6gretap0) entered blocking state
[  209.615189][T10212] rust_binder: 264: no such ref 1
[  209.618734][T10214] bridge0: port 3(ip6gretap0) entered disabled state
[  209.626241][T10212] rust_binder: 264: no such ref 4
[  209.629059][T10214] ip6gretap0: entered allmulticast mode
[  209.638126][T10212] rust_binder: 264: no such ref 1
[  209.641741][T10214] ip6gretap0: entered promiscuous mode
[  209.656603][T10214] bridge0: port 3(ip6gretap0) entered blocking state
[  209.663351][T10214] bridge0: port 3(ip6gretap0) entered forwarding state
[  209.676580][   T36] audit: type=1400 audit(1756867433.820:49323): avc:  denied  { getopt } for  pid=10213 comm="syz.8.3268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  209.717134][   T36] audit: type=1400 audit(1756867433.860:49324): avc:  denied  { create } for  pid=10228 comm="syz.2.3273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1
[  209.806271][ T5667] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  209.824336][T10235] overlayfs: workdir and upperdir must be separate subtrees
[  209.843011][   T36] audit: type=1326 audit(1756867433.980:49325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10236 comm="syz.1.3276" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd74478ebe9 code=0x0
[  209.945570][T10239] binder: Bad value for 'stats'
[  209.959123][ T5667] usb 8-1: New USB device found, idVendor=14ea, idProduct=ab11, bcdDevice=cf.a5
[  209.968330][ T5667] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.978559][ T5667] usb 8-1: config 0 descriptor??
[  210.074046][T10250] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  210.125802][T10249] rust_binder: Error while translating object.
[  210.132318][T10249] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  210.138548][T10249] rust_binder: Failure BR_FAILED_REPLY { source: EINVAL } during reply - delivering BR_FAILED_REPLY to sender.
[  210.148005][T10249] rust_binder: Transaction failed: BR_TRANSACTION_COMPLETE my_pid:285
[  210.162993][  T677] rust_binder: 10248: removing orphan mapping 0:24
[  210.175298][T10252] overlayfs: failed to resolve './file1': -2
[  210.217546][T10255] rust_binder: Failed to allocate buffer. len:4160, is_oneway:false
[  210.245398][T10261] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3284'.
[  210.272926][T10261] netlink: 'syz.8.3284': attribute type 28 has an invalid length.
[  210.281583][T10270] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  210.318374][T10282] overlayfs: failed to clone upperpath
[  210.341208][T10286] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3292'.
[  210.361093][   T36] audit: type=1326 audit(1756867434.500:49326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10287 comm="syz.2.3293" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcf0b18ebe9 code=0x0
[  210.536208][  T677] usb 2-1: new full-speed USB device number 27 using dummy_hcd
[  210.594589][T10202] rust_binder: Failed to allocate buffer. len:4232, is_oneway:false
[  210.637907][ T5667] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  210.655959][ T5667] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  210.688554][T10273] rust_binder: Write failure EFAULT in pid:300
[  210.690234][  T677] usb 2-1: unable to read config index 0 descriptor/start: -71
[  210.704140][  T677] usb 2-1: can't read configurations, error -71
[  210.826459][ T5667] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  210.836572][ T5667] asix 8-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  211.007918][ T5667] asix 8-1:0.0 eth1: register 'asix' at usb-dummy_hcd.7-1, ASIX AX88178 USB 2.0 Ethernet, aa:aa:aa:aa:aa:bb
[  211.020310][ T5667] usb 8-1: USB disconnect, device number 8
[  211.026384][ T5667] asix 8-1:0.0 eth1: unregister 'asix' usb-dummy_hcd.7-1, ASIX AX88178 USB 2.0 Ethernet
[  211.049179][   T36] audit: type=1400 audit(1756867435.190:49327): avc:  denied  { read } for  pid=148 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[  211.167622][T10296] rust_binder: 129: no such ref 2
[  211.172911][T10296] rust_binder: 129: no such ref 1
[  211.178022][T10296] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2
[  211.185236][T10296] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 2
[  211.192628][T10296] rust_binder: Error while translating object.
[  211.192660][T10296] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  211.204006][T10296] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:129
[  211.252984][T10312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3299'.
[  211.271143][T10312] bridge_slave_1: left allmulticast mode
[  211.276849][T10312] bridge_slave_1: left promiscuous mode
[  211.282487][T10312] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.290299][T10312] bridge_slave_0: left allmulticast mode
[  211.296052][T10312] bridge_slave_0: left promiscuous mode
[  211.301914][T10312] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.363262][T10324] rust_binder: Write failure EFAULT in pid:141
[  211.363763][T10325] rust_binder: Error while translating object.
[  211.370213][T10325] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EPERM }
[  211.376743][T10325] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EPERM } my_pid:304
[  211.390327][T10327] 9pnet_fd: Insufficient options for proto=fd
[  211.401915][   T36] audit: type=1400 audit(1756867435.540:49328): avc:  denied  { map } for  pid=10330 comm="syz.2.3306" path="socket:[45589]" dev="sockfs" ino=45589 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  211.432352][   T36] audit: type=1400 audit(1756867435.540:49329): avc:  denied  { read } for  pid=10330 comm="syz.2.3306" path="socket:[45589]" dev="sockfs" ino=45589 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  211.583861][T10351] pim6reg1: entered promiscuous mode
[  211.590436][T10351] pim6reg1: entered allmulticast mode
[  211.657422][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3315'.
[  211.761352][T10384] netlink: 'syz.2.3324': attribute type 4 has an invalid length.
[  211.930661][T10399] incfs: Error accessing: ./file0/file0.
[  211.936408][T10399] incfs: mount failed -2
[  211.941926][T10399] netlink: 'syz.1.3329': attribute type 4 has an invalid length.
[  211.951898][   T36] audit: type=1326 audit(1756867436.090:49330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.1.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74478ebe9 code=0x7fc00000
[  211.975709][   T36] audit: type=1326 audit(1756867436.090:49331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.1.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd74478ebe9 code=0x7fc00000
[  211.999461][   T36] audit: type=1326 audit(1756867436.090:49332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.1.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74478ebe9 code=0x7fc00000
[  212.023252][   T36] audit: type=1326 audit(1756867436.090:49333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.1.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74478ebe9 code=0x7fc00000
[  212.046858][   T36] audit: type=1326 audit(1756867436.090:49334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.1.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fd74478ebe9 code=0x7fc00000
[  212.070576][   T36] audit: type=1326 audit(1756867436.090:49335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.1.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74478ebe9 code=0x7fc00000
[  212.094176][   T36] audit: type=1326 audit(1756867436.090:49336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.1.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74478ebe9 code=0x7fc00000
[  212.118163][   T36] audit: type=1326 audit(1756867436.090:49337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10397 comm="syz.1.3329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd74478ebe9 code=0x7fc00000
[  212.164491][T10403] overlayfs: failed to resolve './file0': -2
[  212.241191][T10408] veth0_vlan: entered allmulticast mode
[  212.272971][T10412] batadv_slave_0: mtu less than device minimum
[  212.470964][T10444] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false
[  212.806228][ T5671] usb 2-1: new full-speed USB device number 29 using dummy_hcd
[  212.978323][ T5671] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  212.989154][ T5671] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  213.001997][ T5671] usb 2-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00
[  213.011164][ T5671] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.020771][ T5671] usb 2-1: config 0 descriptor??
[  213.027262][T10460] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  213.086216][ T5664] usb 8-1: new high-speed USB device number 9 using dummy_hcd
[  213.102283][T10478] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3359'.
[  213.236956][ T5664] usb 8-1: Using ep0 maxpacket: 8
[  213.244683][ T5664] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  213.257262][ T5664] usb 8-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 58880, setting to 1024
[  213.269185][ T5664] usb 8-1: config 0 interface 0 has no altsetting 0
[  213.275894][ T5664] usb 8-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00
[  213.286024][ T5664] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.305568][ T5664] usb 8-1: config 0 descriptor??
[  213.313839][T10476] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22
[  213.444393][ T5671] logitech 0003:046D:C298.000C: collection stack underflow
[  213.459463][ T5671] logitech 0003:046D:C298.000C: item 0 4 0 12 parsing failed
[  213.473774][ T5671] logitech 0003:046D:C298.000C: parse failed
[  213.479938][ T5671] logitech 0003:046D:C298.000C: probe with driver logitech failed with error -22
[  213.732438][ T5664] ntrig 0003:1B96:0004.000D: unknown main item tag 0x0
[  213.752902][ T5664] ntrig 0003:1B96:0004.000D: unknown main item tag 0x0
[  213.762032][ T5664] ntrig 0003:1B96:0004.000D: item fetching failed at offset 2/5
[  213.770608][ T5664] ntrig 0003:1B96:0004.000D: parse failed
[  213.781162][ T5664] ntrig 0003:1B96:0004.000D: probe with driver ntrig failed with error -22
[  213.857137][ T5664] usb 2-1: USB disconnect, device number 29
[  214.551489][T10518] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:362
[  214.552729][T10518] incfs: Options parsing error. -22
[  214.567606][T10518] incfs: mount failed -22
[  214.605226][T10520] rust_binder: Write failure EFAULT in pid:364
[  214.724389][T10525] SELinux: security_context_str_to_sid (E�) failed with errno=-22
[  214.800812][T10528] rust_binder: 371: no such ref 2
[  214.884875][T10539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  214.894327][T10539] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  215.116213][ T5667] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  215.278628][ T5667] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  215.296198][ T5667] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.309619][ T5667] usb 2-1: config 0 descriptor??
[  215.544465][ T5667] usb 2-1: Cannot read MAC address
[  215.556298][ T5667] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  215.577009][ T5667] usb 2-1: USB disconnect, device number 30
[  215.828523][ T5664] usb 8-1: USB disconnect, device number 9
[  216.228898][T10623] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  216.231475][T10624] overlayfs: failed to resolve './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  216.414743][   T36] kauditd_printk_skb: 486 callbacks suppressed
[  216.414762][   T36] audit: type=1400 audit(1756867440.550:49824): avc:  denied  { read write } for  pid=8312 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  216.536956][T10637] sit0: entered promiscuous mode
[  216.543803][   T36] audit: type=1400 audit(1756867440.570:49825): avc:  denied  { create } for  pid=10634 comm="syz.8.3417" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  216.544758][T10637] netlink: 'syz.8.3418': attribute type 1 has an invalid length.
[  216.566418][   T36] audit: type=1400 audit(1756867440.580:49826): avc:  denied  { create } for  pid=10634 comm="syz.8.3417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  216.597533][T10637] netlink: 1 bytes leftover after parsing attributes in process `syz.8.3418'.
[  216.607271][   T36] audit: type=1400 audit(1756867440.600:49827): avc:  denied  { create } for  pid=10636 comm="syz.8.3418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  216.633406][   T36] audit: type=1400 audit(1756867440.600:49828): avc:  denied  { setopt } for  pid=10636 comm="syz.8.3418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  216.678302][T10642] rust_binder: Error while translating object.
[  216.678334][T10642] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBADF }
[  216.689523][   T36] audit: type=1400 audit(1756867440.610:49829): avc:  denied  { write } for  pid=10636 comm="syz.8.3418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  216.690018][T10642] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBADF } my_pid:401
[  216.699168][   T36] audit: type=1400 audit(1756867440.610:49830): avc:  denied  { create } for  pid=10636 comm="syz.8.3418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  216.788195][   T36] audit: type=1400 audit(1756867440.610:49831): avc:  denied  { create } for  pid=10636 comm="syz.8.3418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  216.842489][T10654] audit: audit_backlog=65 > audit_backlog_limit=64
[  216.858011][   T36] audit: type=1400 audit(1756867440.610:49832): avc:  denied  { setopt } for  pid=10636 comm="syz.8.3418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  216.942187][T10662] IPv6: NLM_F_CREATE should be specified when creating new route
[  216.962946][T10662] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  216.970239][T10662] IPv6: NLM_F_CREATE should be set when creating new route
[  217.246743][T10677] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:205
[  217.359652][T10683] rust_binder: 209: no such ref 3
[  217.515957][T10688] netlink: 'syz.7.3436': attribute type 27 has an invalid length.
[  217.767667][T10721] 9pnet_fd: Insufficient options for proto=fd
[  217.849871][T10730] 9pnet_fd: Insufficient options for proto=fd
[  218.001912][T10746] ------------[ cut here ]------------
[  218.007477][T10746] WARNING: CPU: 1 PID: 10746 at mm/page_alloc.c:5228 __alloc_pages_noprof+0xe8/0x7b0
[  218.017020][T10746] Modules linked in:
[  218.020936][T10746] CPU: 1 UID: 0 PID: 10746 Comm: syz.1.3455 Not tainted syzkaller #0 3f7d833acb9715dc4d925f14855ea176aa3f9a02
[  218.032617][T10746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  218.042720][T10746] RIP: 0010:__alloc_pages_noprof+0xe8/0x7b0
[  218.048682][T10746] Code: 00 0f 1f 44 00 00 83 fb 0b 72 28 b8 00 20 00 00 23 44 24 40 75 1d 80 3d 69 41 ee 05 00 0f 85 be 00 00 00 c6 05 5c 41 ee 05 01 <0f> 0b 31 c0 e9 b0 00 00 00 83 fb 0a 0f 87 a5 00 00 00 44 8b 64 24
[  218.068465][T10746] RSP: 0018:ffffc9000af6f880 EFLAGS: 00010246
[  218.074645][T10746] RAX: 0000000000000000 RBX: 0000000000000015 RCX: 0000000000000000
[  218.082673][T10746] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000af6f938
[  218.090788][T10746] RBP: ffffc9000af6f9a8 R08: ffffc9000af6f937 R09: 0000000000000000
[  218.098874][T10746] R10: ffffc9000af6f920 R11: fffff520015edf27 R12: ffffc9000af6f8c0
[  218.106938][T10746] R13: dffffc0000000000 R14: 1ffff920015edf14 R15: 0000000000000000
[  218.114976][T10746] FS:  00007fd74569f6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  218.123984][T10746] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  218.130658][T10746] CR2: 0000200000001000 CR3: 000000011bf20000 CR4: 00000000003526b0
[  218.138777][T10746] DR0: ffffffffffffffff DR1: 0000000000000047 DR2: 0000000000000005
[  218.146873][T10746] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  218.154867][T10746] Call Trace:
[  218.158213][T10746]  <TASK>
[  218.161338][T10746]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  218.167484][T10746]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  218.173220][T10746]  ? incfs_realloc_mount_info+0xa7/0x4d0
[  218.178882][T10746]  ___kmalloc_large_node+0xb5/0x250
[  218.184102][T10746]  ? incfs_realloc_mount_info+0xa7/0x4d0
[  218.189777][T10746]  __kmalloc_large_node_noprof+0x1e/0xe0
[  218.195450][T10746]  ? incfs_realloc_mount_info+0xa7/0x4d0
[  218.201227][T10746]  __kmalloc_noprof+0x26d/0x450
[  218.206103][T10746]  incfs_realloc_mount_info+0xa7/0x4d0
[  218.211653][T10746]  ? incfs_add_sysfs_node+0x118/0x240
[  218.217131][T10746]  incfs_alloc_mount_info+0x479/0x600
[  218.222524][T10746]  incfs_mount_fs+0x3ca/0x960
[  218.227239][T10746]  ? __cfi_incfs_mount_fs+0x10/0x10
[  218.232463][T10746]  ? vfs_parse_fs_string+0x102/0x170
[  218.237879][T10746]  ? selinux_capable+0x38/0x50
[  218.242681][T10746]  legacy_get_tree+0x103/0x1b0
[  218.247540][T10746]  ? __cfi_incfs_mount_fs+0x10/0x10
[  218.252777][T10746]  vfs_get_tree+0xa1/0x290
[  218.257423][T10746]  do_new_mount+0x251/0xb40
[  218.262023][T10746]  ? security_capable+0xcf/0xf0
[  218.266929][T10746]  path_mount+0x688/0x1050
[  218.271376][T10746]  ? putname+0x113/0x150
[  218.275713][T10746]  __se_sys_mount+0x2bd/0x480
[  218.280511][T10746]  ? __x64_sys_mount+0xf0/0xf0
[  218.285299][T10746]  ? __kasan_check_write+0x18/0x20
[  218.290475][T10746]  ? fpregs_restore_userregs+0x11d/0x260
[  218.296128][T10746]  __x64_sys_mount+0xc3/0xf0
[  218.300793][T10746]  x64_sys_call+0x2021/0x2ee0
[  218.305470][T10746]  do_syscall_64+0x58/0xf0
[  218.309925][T10746]  ? clear_bhb_loop+0x50/0xa0
[  218.314611][T10746]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  218.320540][T10746] RIP: 0033:0x7fd74478ebe9
[  218.324963][T10746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.344868][T10746] RSP: 002b:00007fd74569f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  218.353383][T10746] RAX: ffffffffffffffda RBX: 00007fd7449c5fa0 RCX: 00007fd74478ebe9
[  218.361389][T10746] RDX: 0000200000000140 RSI: 0000200000000100 RDI: 00002000000000c0
[  218.369412][T10746] RBP: 00007fd744811e19 R08: 0000200000000280 R09: 0000000000000000
[  218.377452][T10746] R10: 0000000001010040 R11: 0000000000000246 R12: 0000000000000000
[  218.385435][T10746] R13: 00007fd7449c6038 R14: 00007fd7449c5fa0 R15: 00007ffcdf8376c8
[  218.393435][T10746]  </TASK>
[  218.396491][T10746] ---[ end trace 0000000000000000 ]---
[  218.401998][T10746] incfs: Error allocating mount info. -12
[  218.408939][T10746] incfs: mount failed -12