last executing test programs:

4m42.295293979s ago: executing program 32 (id=219):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

4m35.457945739s ago: executing program 33 (id=353):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x142ba3)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0xf)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x2000000000000006, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4ad24bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}})
ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000280))
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4)
ppoll(&(0x7f0000000500)=[{r0, 0xb041}, {r2, 0x7060}], 0x2, &(0x7f0000000540)={0x77359400}, &(0x7f0000000580)={[0x9]}, 0x8)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x303}, "3d8b00", "eb8e7ba12faf3700", "8000", "c16cb41f00bd22fc"}, 0x38)
sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137)
r3 = socket$inet6_icmp(0xa, 0x2, 0x3a)
recvmmsg(r3, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x40000042, 0x0)
getsockopt(r0, 0x8, 0x5, &(0x7f0000000380)=""/234, &(0x7f00000004c0)=0xea)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
truncate(&(0x7f0000000080)='./cgroup/pids.max\x00', 0x6)
connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
writev(r4, &(0x7f0000000740)=[{&(0x7f00000002c0)="589224d2c334c1f63d8a621843f389412830dbab71374ae05f97e6e70c4963661dfdab277efd0f190d8751d9d425965e353e53940b202700ca7397ce47d12c2f1442b0af79f7afbc60261390920f78d8f8798aa12e3305b6400000020000000077148704b6cbfbb42d3228e32f061093a3e22906aed35e4407f6f2384f03957aa93423e7c21735d372423f3f1cc868b904373f127f13c5d68b907c74fdcc8d105e2e2538000000", 0xfeb7}], 0x1)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x800, 0x0, 0x2, 0x3, 0x0, 0x6}, 0x20)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
readv(r4, &(0x7f00000006c0)=[{&(0x7f00000001c0)=""/60, 0x3c}], 0x1)
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0)

3m55.21499326s ago: executing program 34 (id=1069):
r0 = open(&(0x7f0000000080)='./file0\x00', 0x100, 0x41)
r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000100)={r1})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000000)=0x2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x58, 0x0, &(0x7f00000008c0)=[@enter_looper, @release={0x40046306, 0x1}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x5, 0x0, &(0x7f0000000780)="1f4e60867a"})

3m21.057867956s ago: executing program 1 (id=1893):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) (async)
syz_io_uring_setup(0x131, 0x0, 0x0, 0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, 0x0) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
setpgid(0x0, 0x0) (async)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async)
mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) (async)
mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) (async)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async)
ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000100)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async)
write(r1, &(0x7f0000000400)="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", 0x1f000)

3m21.044942947s ago: executing program 1 (id=1894):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000140)=[@enter_looper, @dead_binder_done, @dead_binder_done, @exit_looper, @dead_binder_done, @increfs], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0})
r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000007c0)={0x150, 0x0, &(0x7f0000000540)=[@exit_looper, @clear_death, @acquire, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x7, 0x0, 0x21}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/62, 0x3e, 0x0, 0x1c}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000240)={@fd={0x66642a85, 0x0, r1}, @fda={0x66646185, 0x7, 0x1, 0x2b}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/18, 0x12, 0x682, 0x27}}, &(0x7f00000002c0)={0x0, 0x18, 0x38}}, 0x400}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0x0, 0x0, 0x3f}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000380)={0x0, 0x20, 0x38}}}, @increfs_done={0x40106308, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000400)={@fda={0x66646185, 0x4, 0x0, 0x13}, @ptr={0x70742a85, 0x1, &(0x7f00000003c0)=""/50, 0x32, 0x2, 0x13}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000500)={0x0, 0x20, 0x48}}}], 0xe0, 0x0, &(0x7f00000006c0)="d6a425c240fbeb06c9685f143c97659011526f492ada76a860b0fefcd02a843fb8cd158e07511b1b769db1aaf6a2f2a981396865ea689660499f1a9ad3e0ecf9c4a830965cb9f2dac46abe84977e79d2869f580587b588fc3da0aa8f3feb3e49759055bcffe9409dc7e742e3d5adc3454b95e99a40a1c47cf38683a8551623448e79adfbe9874c5f5576efb922edbf8b8103f3d4ebe39dcb5ea73cab8cbb8d8447d0f62be8276b35839bcca13c6b5d837dcf82c9f811ddfbdd86b8cac1ef60342c7210d8fecc0b894d014a1338f5f8f22103c00962aa9e02715bd63f3adbab80"})

3m21.000674661s ago: executing program 1 (id=1895):
r0 = open(&(0x7f0000000040)='./bus\x00', 0x163142, 0x80)
sendfile(r0, r0, 0x0, 0x1000000201005)
r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x4, 0x81, &(0x7f00000001c0)={0x20, 0x18, 0x17, 0x2}, 0x8, 0x100020, 0x1000003, 0x0, 0x4bf, 0x404, 0x0}) (async)
setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{0x1, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x1}}, {{0x3}, {0x4, 0x1}}], 0x10)
r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="12010002000000206e05fd000000000000010902240001000000040e04000005030002000921000000012205000905810308000024ff"], 0x0) (async)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4, 0x12, r1, 0xfa576000)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0)
ioctl$TCSETAF(r3, 0x5408, &(0x7f00000007c0)={0x0, 0x0, 0xf440, 0x0, 0x0, "95bff5627804ada2"}) (async)
syz_usb_control_io(r2, 0x0, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffff9]}, 0x0, 0x8) (async, rerun: 64)
timer_create(0x3, 0x0, &(0x7f0000044000)=<r4=>0x0) (rerun: 64)
timer_settime(r4, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
syz_usb_control_io(r2, &(0x7f0000000100)={0x2c, &(0x7f00000003c0)={0x40, 0xd, 0x5, {0x5, 0x11, "42a009"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async)
r5 = syz_usb_connect$sierra_net(0x6, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x7, 0x2, 0x3ff, 0xc2, 0x2, 0x5}, {0x9, 0x5, 0xe, 0x2, 0x200, 0x9, 0x8, 0xa}, {0x9, 0x5, 0xa, 0x3, 0x20, 0x2, 0x4, 0x1}}}}}}]}}, 0x0)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r6, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10)
connect$inet(r6, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) (async)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
sendto(r6, &(0x7f0000000740)='P', 0x1, 0x4008044, 0x0, 0x0) (async, rerun: 64)
r7 = socket$inet(0x2, 0x3, 0x4) (rerun: 64)
setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x10) (async)
sendto$inet(r7, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) (async)
sendto$inet(r7, &(0x7f00000008c0)="8b4ff4a01daf00", 0x7, 0x10000, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x10) (async)
sendto$inet(r6, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db", 0x1c, 0x0, 0x0, 0x0) (async)
write$tun(0xffffffffffffffff, &(0x7f0000000200)={@void, @void, @eth={@multicast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0xa, 0x14, 0x68, 0x0, 0x9, 0x6, 0x0, @multicast2, @multicast1}}}}}}, 0x26) (async)
syz_usb_control_io$sierra_net(r5, &(0x7f0000000280)={0x14, &(0x7f0000000200)={0x20, 0xb, 0x5b, {0x5b, 0xa, "bbea467a4d89e4e0329efd750a66e1d92aeb9325705b1939621821bea445cd953f177bed783452cdd195896f05322a9dacaa458f70ecef33741f9b12729cb3ed14861e63b552ee17f089240ed57a76be835ec5a6142f4048bb"}}, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40c}}}, &(0x7f0000000400)={0x1c, &(0x7f00000002c0)={0x20, 0x7, 0x8c, "dc8b759f4ce07328a69beda082cc4f962e83e9e7348d2159d56f1cd36de28961fc9620c5ebb96f7cb3ffeacf14f50c4603953de382dcb341c78d3aaa6c08d68bc614efe5f94f3569f12e36bb10c3815c1355bc8e8b594274201ca0f45754e87267345ce02d7e42fd33a90c92f2f196e80fc073418e5fe96785669e379ea4e63c2b5744e734f304b86cb0fb3d"}, &(0x7f0000000800)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000000380)}) (async)
openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0)

3m20.916482879s ago: executing program 1 (id=1896):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$selinux_create(r0, &(0x7f0000000040)=@access={'system_u:object_r:gpg_helper_exec_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x0, 0x25}, 0x4c)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="24000000000000000100000001", @ANYRES32, @ANYRES64, @ANYBLOB="2bd5bb48db59834b9328618036678ec4c6dac89cb841b8b4c8fd04de9f9a66cd495d5a1a543b82ba037c0c6e2fa0b40f4a5b546d90c1166fdd8b667154295b2d4a8097ec97e036e379d59aabd828b8f161c5fa95c5f4965b19d5b1198519c62a8c9a5e881822c07f3fd885ebf2c5f9dbb86654f0ce2bba773c64c3dd907d6f2443419a86b521da094260c5c326d9a0b9394be9c3230a8e7da852a30998bc476ae51f7d3896d507299d2f4ea3110377b9c3fd92ab6ab97f199b667aef67538172c801b0fb99c189c40b54508934a914fc837355d7d86b5c9660c42034c90001180349f0984086644cc9b69b4f10813e01b35346b2f08400416a6167ec3b577ae3fca5fa2e21bdcdd57a56a7f3ec43ecc2d9638bc2913008fd266d3cba6da35dcb5010e352b29ec1b50b41c29b2cbea62d3caee292fb62b267e02922d2412a63c9"], 0xf0, 0x1}}], 0x1, 0x44015)
r1 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108)
mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2000})
ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000000)=0x4)
syz_usb_connect$cdc_ecm(0x0, 0x77, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090265000101000004090400001002060000052406000005240000000d240f0100040000000000000115241207"], 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x51, 0xfc, 0x57, 0x40, 0x19d2, 0x1111, 0x775, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x80, 0x0, [{{0x9, 0x4, 0xbe, 0x0, 0x0, 0x2, 0x6, 0x0, 0xf9}}]}}]}}, 0x0)
mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r3, &(0x7f0000006b40)={0x2020}, 0x2020)
r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100), 0x10a00, 0x0)
open_tree(r4, &(0x7f0000000140)='./file0/file0\x00', 0x3000)

3m19.616594049s ago: executing program 1 (id=1914):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000280)={0x20, 0x30, 0x6, "8c59152d5f9a"}, 0x0, 0x0, 0x0, 0x0, 0x0})
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{}, {0x0, 0x9}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x20, 0x11, 0x4b, {0x4b, 0x21, "0efd3d80deb164cc75462769edc1457e235b182081f5117f8553156fcb6a96697f0acb2a3aa0d224bc4a391723e172441f30643a38a12b9f6fe0392b8cf178d3720cdaa7cbb0cebb05"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000200)={0x1c, &(0x7f0000000140)={0x40, 0xc, 0x26, "06819c62fbb6aadfab89115f608c4b1f6f564cce0b2a7cbe7723c8483aa289b4c7ad3a618143"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x52}})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0})

3m19.452680155s ago: executing program 1 (id=1915):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0)
r1 = mmap$binder(&(0x7f0000b11000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xfffffffffffffff7)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x20, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r1}, @acquire_done={0x40106309, 0x2}], 0x1000, 0x0, &(0x7f0000000100)="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"})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000008c0)={0xe8d, 0x6, 0x4, 0xffffffff, 0x7})
ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0)

3m19.411556389s ago: executing program 35 (id=1915):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x8031, 0xffffffffffffffff, 0x0)
r1 = mmap$binder(&(0x7f0000b11000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0xfffffffffffffff7)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x20, 0x0, &(0x7f0000000000)=[@free_buffer={0x40086303, r1}, @acquire_done={0x40106309, 0x2}], 0x1000, 0x0, &(0x7f0000000100)="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"})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000008c0)={0xe8d, 0x6, 0x4, 0xffffffff, 0x7})
ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, 0x0)

2m15.641170994s ago: executing program 5 (id=3259):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c03, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c03, 0x0) (async)
ioctl$BLKRRPART(r0, 0x125f, 0x0) (async)

2m15.640594174s ago: executing program 5 (id=3260):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0xffffffff, 0x4)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28})
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)='f2fs\x00', 0x0, 0x0)

2m15.627059146s ago: executing program 5 (id=3261):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x88102, 0x0)
mkdir(&(0x7f0000000140)='./control\x00', 0x8)
r1 = inotify_init1(0x800)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000100)={0xfffffffe, 0xe7, 0x8001, 0xfffffffe, 0x9, "ea7174ddb80fc7000002f7ffffffffd2a2d975", 0x4, 0x4})
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0xa0401, 0x0)
r4 = dup(r3)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', <r5=>0x0, 0x2f, 0x3e, 0x3, 0xffffff2b, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, 0x700, 0x7, 0x3, 0x7}})
setsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000480)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, r5}, 0xc)
r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_DEVICE(r6, 0xc00caee0, &(0x7f0000000140)={0x4, <r7=>0xffffffffffffffff})
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x20a600, 0x0)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000594000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/195, 0xc3, 0x1, &(0x7f0000000040)=""/16, 0x10}, &(0x7f0000000380)=0x40)
ioctl$KVM_HAS_DEVICE_ATTR(r7, 0x4018aee3, &(0x7f00000001c0)=@attr_other={0x0, 0x1, 0x1, 0x0})
socket$netlink(0x10, 0x3, 0x14)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f00000000c0)='/devFtR\xac\x13\x1e\x14e\x81h\xa3K\xd6\xd0^\xed\xd7\xb3\xac\xa0&&\xf8\x0f|\xe8\x15\xf2\x82\xb4\xa0\xc2\x01e\x1e\xf4\x19\x06\x03\xf5+\xc4\r\xa1\xb8DY-\x17\x0f\xf7\x8d\x7f\x9473\x1f\xc5!\xb2\x1bs\xfc\x91~c\xd1*en\xd1\xfc\t\x9c\xda\xfd\xde\xc0\xa2\xf4\x15\xf1\xd9\xe0\xe2\xf3^R\x8d\xae\x8d\x87Fc\a\xe6_\xd0V\'B?\x8b\xa6\x9cIT\x1f\x93\x8b\xfd\x814dX\x93\x89\x1a_45\x94y(\xb9\xaa\x91\xa5\xe8n\xe6\xb58.\xc4\ntJ\x11\f\xb8\x18\xfe\xb2\x93\x93\xe6\x82\\\xe8]fV\xc0#\x1c\xbf\xd1T\x809/\xc3\xa3\x17\xc4\x0e\xdby\xd6\xff\xfb\xbe\x83\xf7$\xf7\xc4\x16\xee\xa0Tn\t\x0f,|\r\xc3\xb39A\xc2wF\xb9l\'_\x89B\xf8z\xe6\xc13\x9d~\xd5\xc6\xae8\a\xa1\x90\f)M4J\xaf\x010;\xc7\xfd\xe7\x95\xfb\x95\xd6N\v\xf9\xe1=3\xe7\x8a\xc8\xca\xf12\x1aJ\xd6Xj4\x1a\x88\x04\xb1DJ\xce\x95\xdb\xd2\xab\xd6\xeb\xc6\xc6v\xd0#x@\x96\xbf\xa4E\x11\x9dH$+\xadS&\xa6\xcd>\xa2<\xe2\xa7\xa3\x99\n7c\xc5\xbb\xc2\xb9\xa3k\xaa\x9e\xe9\xb4\xd4\xbc\xda')

2m15.603656818s ago: executing program 5 (id=3262):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0)
mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, <r0=>0x0})
openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020)

2m15.548612253s ago: executing program 5 (id=3263):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000380)="de547e22bade76f1a03b79e954ee20bc43f7fe47218a02ff8ba942478a7b69462fc21aff55002ce55e854564e7d309f20d222f9220c8d9b1b0d196137252587ab17948adf2dcbba03d2f3e0e647c2e70"})
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)

2m15.523348246s ago: executing program 5 (id=3264):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x58, 0x0, &(0x7f0000000100)=[@increfs={0x40046304, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/202, 0xca, 0x2, 0xf}, @fda={0x66646185, 0x3, 0x0, 0x25}, @fd}, &(0x7f0000000000)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0})

2m15.492950438s ago: executing program 36 (id=3264):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x1ff)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000940)={0x58, 0x0, &(0x7f0000000100)=[@increfs={0x40046304, 0x3}, @dead_binder_done, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/202, 0xca, 0x2, 0xf}, @fda={0x66646185, 0x3, 0x0, 0x25}, @fd}, &(0x7f0000000000)={0x0, 0x28, 0x48}}}], 0x0, 0x0, 0x0})

2m10.280159634s ago: executing program 7 (id=3357):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x48801, 0x0)
ioctl$BLKRRPART(r0, 0x125f, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "2a882e2c4d7fb04b", "ce1650ea84388b01ec9d852f42c2a500", "46a6124f", "5e7420e2a76038e9"}, 0x28)

2m10.277745054s ago: executing program 7 (id=3358):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x1, 0x8})
lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000200)=@v2={0x2000000, [{0x7, 0x200}, {0x1, 0x100}]}, 0x14, 0x3)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff)
request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)='-:-%-(\'\xb9^/$]&\x00', r1)
write$binfmt_elf64(r0, &(0x7f0000000900)=ANY=[@ANYBLOB="7f454c4600041813cc3400000000000003003e00ecfffbff36030004000000004000000000000000f500000000000000000000002c8f380001000012faff000003000000970f000003000000000000000d000000000400000001840000000000e2"], 0xe5)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)
creat(&(0x7f0000000100)='./file0/file0\x00', 0x103)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000940)={0x44, 0x0, &(0x7f00000002c0)=[@increfs={0x40046304, 0x3}, @decrefs={0x40046307, 0x1}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={@ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/202, 0x0, 0x2, 0xf}, @fda={0x66646185, 0x3, 0x0, 0x25}, @fd}}}], 0x0, 0x0, 0x0})

2m10.250856536s ago: executing program 7 (id=3359):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x40000010})
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d})
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x10000000})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000600))
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1000000003})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000100)={0xa8, 0x0, &(0x7f00000004c0)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff67, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/238, 0xee, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0x8}, @fda={0x66646185, 0x4, 0x0, 0xfffffffffffffffd}}, &(0x7f0000000000)={0x0, 0x28, 0x48}}, 0x1000}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200)={@flat=@handle={0x73682a85, 0x0, 0x3}, @fd, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x3}, @request_death], 0x0, 0x0, 0x0})

2m10.173913114s ago: executing program 7 (id=3360):
lsm_get_self_attr(0x68, 0x0, 0x0, 0x1)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1, 0x0, 0x6}, 0x10) (async)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x0, 0x0, 0x6, 0x7}, 0x10) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r0) (async)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51)
ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8})
link(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00') (async)
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB="636f6e746578743d7379737465225f75dd47d0b90b893a03ffdf"]) (async)
setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0xc8, 0x4)

2m10.122816579s ago: executing program 7 (id=3362):
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0)
syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060d3d908381f01006a7d0102030109025b0002000000000904c1930194ef4f030a240108000802010205240404020b2404050009a1a3fe5a15052405020909050e00400000408a072501810100040924014c02000201"], 0x0)
openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000040601010000000000000000000000010900020073797a32000000003d00010007000000050001000700000005000100070000000900020073797a32040000000500010007000000050001000700000005000100070000000900020073797a30000000000900020073797a3200000000"], 0x74}, 0x1, 0x0, 0x0, 0x4040805}, 0x4004000)
r1 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000))
ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0)
socket$unix(0x1, 0x1, 0x0)
socket$inet6(0xa, 0x2, 0x3a)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/disk', 0xa0042, 0x182)
write$tcp_mem(r3, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r2)
sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="30010000", @ANYRES16=r5, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x4080}, 0x4004010)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, 0x0, 0x5f8322cb6ec77672)
preadv2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0}], 0x3, 0x9, 0xd, 0x9)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) (async)
syz_usb_connect(0x0, 0x6d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060d3d908381f01006a7d0102030109025b0002000000000904c1930194ef4f030a240108000802010205240404020b2404050009a1a3fe5a15052405020909050e00400000408a072501810100040924014c02000201"], 0x0) (async)
openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000040601010000000000000000000000010900020073797a32000000003d00010007000000050001000700000005000100070000000900020073797a32040000000500010007000000050001000700000005000100070000000900020073797a30000000000900020073797a3200000000"], 0x74}, 0x1, 0x0, 0x0, 0x4040805}, 0x4004000) (async)
syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) (async)
ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
socket$inet6(0xa, 0x2, 0x3a) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/disk', 0xa0042, 0x182) (async)
write$tcp_mem(r3, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) (async)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}}, 0x0) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r2) (async)
sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="30010000", @ANYRES16=r5, @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x4080}, 0x4004010) (async)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, 0x0, 0x5f8322cb6ec77672) (async)
preadv2(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0}], 0x3, 0x9, 0xd, 0x9) (async)

2m9.927744869s ago: executing program 7 (id=3369):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010d0000000708b5192100c7980000000109021b00022000ac00090400000107000009090585"], 0x0)
r1 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704"], 0x30}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x3})
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$inet6_tcp_int(r2, 0x6, 0x11, &(0x7f0000000180)=0x4, 0x4)
mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0xb1, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10)
sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840)
dup3(r0, r4, 0x0)
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x5, 0x6}, {0x6}]})
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r5, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"})
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x5437, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id='])
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_ro(r7, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0)
pread64(r8, &(0x7f0000001ac0)=""/4084, 0xff4, 0x2df)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
write$uinput_user_dev(r9, &(0x7f00000006c0)={'syz1\x00', {0x1, 0x5, 0x1, 0xfff}, 0x24, [0x7, 0x3, 0xffffffff, 0x4, 0xd3, 0xff, 0x0, 0xe81d, 0x10, 0x6, 0x0, 0x4, 0x8, 0x6, 0x4, 0x8, 0x9, 0x80000001, 0x80000000, 0x0, 0xaf, 0x1, 0xdf, 0xe9, 0x81, 0xc000000, 0x4, 0x80000001, 0x9, 0x8, 0x8, 0xe, 0x1, 0x8, 0x2, 0x8, 0xa, 0x80000001, 0x7ff, 0x7fffffff, 0x3, 0x3, 0x1, 0x3d3d, 0x8, 0x5, 0x10001, 0x3, 0xe2, 0x1c000000, 0x6, 0x8001, 0xff, 0x4, 0x8, 0x8, 0x8, 0x1, 0x80, 0x6, 0x675c, 0x76, 0x10000, 0x92], [0x6, 0x2, 0x8, 0x6, 0x9, 0xfffffff3, 0x0, 0x10001, 0x6, 0x1000, 0xc0e, 0xeb88, 0x7fff, 0x8, 0x401, 0x6, 0x32, 0x9d53, 0x0, 0x0, 0x4, 0x400, 0x4, 0x81, 0x45cf2eb, 0x3, 0x7fff, 0x9, 0x3, 0x40, 0x400, 0xb, 0x7, 0xffffff90, 0xf, 0x8d, 0x4, 0x7, 0x0, 0x0, 0x42b6098f, 0x8, 0x4, 0x8, 0xfffffffa, 0xfffffff7, 0x8, 0x9, 0x0, 0x5c6, 0x0, 0x10001, 0xb066, 0x6, 0x4, 0x7, 0x80000000, 0xdda9, 0x8b4, 0x9, 0x8, 0xe, 0xd, 0x60ba4ac], [0x0, 0xb, 0x2000000, 0x4, 0xfffffeff, 0x68, 0x4, 0x0, 0x5, 0xd, 0x7, 0x5428, 0x1, 0x3, 0x101, 0x81, 0x5, 0x1, 0x2, 0xb1, 0x800, 0x0, 0x1, 0x4, 0x1, 0x8001, 0x0, 0x3, 0x7, 0xe240, 0x5, 0x4, 0xd, 0x1ff, 0x80, 0x4, 0xe4, 0x8, 0x9, 0xf, 0xfd7, 0x0, 0x10, 0xaa, 0x800, 0x10, 0x4, 0x5, 0x1, 0x0, 0x800, 0x9, 0x77, 0x6, 0x0, 0x1, 0x0, 0x2, 0x4, 0x8, 0x7fffffff, 0x3, 0x7ff, 0x3], [0x2f8, 0x4, 0x7, 0x3a9d0482, 0x9, 0x6, 0xd, 0x2, 0x401, 0x796f, 0x100, 0x8, 0x4, 0x5, 0x33, 0x13c, 0x0, 0x1, 0x78, 0x9, 0x0, 0x182, 0xffff, 0x3, 0x81, 0x4, 0xff, 0x400, 0xfffffffd, 0xb, 0x3, 0x8, 0x5, 0xf, 0x100, 0x3, 0x3, 0x80000000, 0x7, 0x2, 0x100, 0xb5a, 0xdba, 0x96, 0x8, 0x2, 0x5e1, 0xffff, 0x9, 0x8, 0xb0, 0x39f0cd38, 0x6, 0xcc5, 0x3, 0x4, 0x1, 0x0, 0x7, 0x9, 0x0, 0x2, 0xffffffff, 0xc]}, 0x45c)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)

2m9.831177588s ago: executing program 37 (id=3369):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010d0000000708b5192100c7980000000109021b00022000ac00090400000107000009090585"], 0x0)
r1 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000002100)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f0000001d00)=ANY=[@ANYBLOB="30000000000000000000000007000000890704"], 0x30}, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x0, 0x3})
r2 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
setsockopt$inet6_tcp_int(r2, 0x6, 0x11, &(0x7f0000000180)=0x4, 0x4)
mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0xb1, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10)
sendmmsg(r3, &(0x7f0000001c00), 0x400000000000159, 0x40840)
dup3(r0, r4, 0x0)
ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x2, &(0x7f0000000000)=[{0x5, 0x6}, {0x6}]})
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r5, 0x5408, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"})
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x5437, 0x0)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id='])
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r8 = openat$cgroup_ro(r7, &(0x7f0000000140)='memory.stat\x00', 0x0, 0x0)
pread64(r8, &(0x7f0000001ac0)=""/4084, 0xff4, 0x2df)
r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
write$uinput_user_dev(r9, &(0x7f00000006c0)={'syz1\x00', {0x1, 0x5, 0x1, 0xfff}, 0x24, [0x7, 0x3, 0xffffffff, 0x4, 0xd3, 0xff, 0x0, 0xe81d, 0x10, 0x6, 0x0, 0x4, 0x8, 0x6, 0x4, 0x8, 0x9, 0x80000001, 0x80000000, 0x0, 0xaf, 0x1, 0xdf, 0xe9, 0x81, 0xc000000, 0x4, 0x80000001, 0x9, 0x8, 0x8, 0xe, 0x1, 0x8, 0x2, 0x8, 0xa, 0x80000001, 0x7ff, 0x7fffffff, 0x3, 0x3, 0x1, 0x3d3d, 0x8, 0x5, 0x10001, 0x3, 0xe2, 0x1c000000, 0x6, 0x8001, 0xff, 0x4, 0x8, 0x8, 0x8, 0x1, 0x80, 0x6, 0x675c, 0x76, 0x10000, 0x92], [0x6, 0x2, 0x8, 0x6, 0x9, 0xfffffff3, 0x0, 0x10001, 0x6, 0x1000, 0xc0e, 0xeb88, 0x7fff, 0x8, 0x401, 0x6, 0x32, 0x9d53, 0x0, 0x0, 0x4, 0x400, 0x4, 0x81, 0x45cf2eb, 0x3, 0x7fff, 0x9, 0x3, 0x40, 0x400, 0xb, 0x7, 0xffffff90, 0xf, 0x8d, 0x4, 0x7, 0x0, 0x0, 0x42b6098f, 0x8, 0x4, 0x8, 0xfffffffa, 0xfffffff7, 0x8, 0x9, 0x0, 0x5c6, 0x0, 0x10001, 0xb066, 0x6, 0x4, 0x7, 0x80000000, 0xdda9, 0x8b4, 0x9, 0x8, 0xe, 0xd, 0x60ba4ac], [0x0, 0xb, 0x2000000, 0x4, 0xfffffeff, 0x68, 0x4, 0x0, 0x5, 0xd, 0x7, 0x5428, 0x1, 0x3, 0x101, 0x81, 0x5, 0x1, 0x2, 0xb1, 0x800, 0x0, 0x1, 0x4, 0x1, 0x8001, 0x0, 0x3, 0x7, 0xe240, 0x5, 0x4, 0xd, 0x1ff, 0x80, 0x4, 0xe4, 0x8, 0x9, 0xf, 0xfd7, 0x0, 0x10, 0xaa, 0x800, 0x10, 0x4, 0x5, 0x1, 0x0, 0x800, 0x9, 0x77, 0x6, 0x0, 0x1, 0x0, 0x2, 0x4, 0x8, 0x7fffffff, 0x3, 0x7ff, 0x3], [0x2f8, 0x4, 0x7, 0x3a9d0482, 0x9, 0x6, 0xd, 0x2, 0x401, 0x796f, 0x100, 0x8, 0x4, 0x5, 0x33, 0x13c, 0x0, 0x1, 0x78, 0x9, 0x0, 0x182, 0xffff, 0x3, 0x81, 0x4, 0xff, 0x400, 0xfffffffd, 0xb, 0x3, 0x8, 0x5, 0xf, 0x100, 0x3, 0x3, 0x80000000, 0x7, 0x2, 0x100, 0xb5a, 0xdba, 0x96, 0x8, 0x2, 0x5e1, 0xffff, 0x9, 0x8, 0xb0, 0x39f0cd38, 0x6, 0xcc5, 0x3, 0x4, 0x1, 0x0, 0x7, 0x9, 0x0, 0x2, 0xffffffff, 0xc]}, 0x45c)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)

1m27.423956999s ago: executing program 9 (id=4271):
prctl$PR_GET_NAME(0x10, &(0x7f0000000cc0)=""/142)
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
getsockopt$netlink(r2, 0x10e, 0x3, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000000010104009ca85d490000000200000004001880240001801400018008000100e000000108000200e00000010c00028005000100000000001c000f8008000140000000030800014000000008080002"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000000010104009ca85d490000000200000004001880240001801400018008000100e000000108000200e00000010c00028005000100000000001c000f8008000140000000030800014000000008080002"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$ASHMEM_GET_NAME(r0, 0x81007702, 0x0)

1m27.361244776s ago: executing program 9 (id=4274):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
setxattr$incfs_id(&(0x7f0000000000)='./bus\x00', &(0x7f0000000140), &(0x7f00000001c0)={'0000000000000000000000000000000', 0x32}, 0x20, 0x2)
write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15)
r2 = dup(r1)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000002c0)={@mcast2, @loopback, @private1={0xfc, 0x1, '\x00', 0xe}, 0x8, 0x0, 0x200, 0x400, 0xcd8, 0x86620090})
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x14210000, 0x7d, 0x1005, 0x0, 0x3}}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x1814800, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x8}}], [], 0x6b}})
r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00')
r5 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0)
sendfile(r5, r4, 0x0, 0xffffffff)

1m27.291070682s ago: executing program 9 (id=4275):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x14, 0x16, 0xa01, 0x0, 0x0, {0x10}}, 0x14}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1, 0x8, 0x300, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x28}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008800}, 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4000)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x8000, 0x0, 0x3c}, 0x18)
r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000240))
mount_setattr(r1, &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000280)={0x100000, 0x80009, 0x1c0000, {r2}}, 0x20)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mprotect(&(0x7f000000b000/0x2000)=nil, 0x2000, 0x4)
write(r3, &(0x7f0000000400)="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", 0x1f000)

1m27.200214801s ago: executing program 9 (id=4276):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901)
move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0)
mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r1, &(0x7f0000000240)='./file0/file0\x00', 0x6)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r2, 0x29, 0xcb, &(0x7f0000000080)=0x7ac6, 0x4)
r3 = epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x116}, 0x1, 0x0, 0x0, 0x44040}, 0x4008000)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000006000000000a00000008000000", @ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="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"/500], 0x23c}}, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000400)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0x6}, 0x1c, 0x0, 0x0, 0x0, 0x28, 0x7ffffff7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1400000000004702000000000000"], 0x18}}], 0x2, 0x4044800)
recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x1a3}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000000ae, 0x2000, &(0x7f0000003700)={0x77359400})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x10000004})
close(r5)
epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r5, &(0x7f00000000c0)={0x20002000})
ppoll(&(0x7f0000000000)=[{r5, 0x4450}, {r3, 0x21b9caeb5a413db8}, {r4, 0x20}, {r4, 0x1040}, {r4, 0xc2}, {r3, 0x4001}, {r5, 0x1201}, {r3, 0x100}], 0x8, &(0x7f0000000140), &(0x7f0000000180)={[0x2]}, 0x8)
r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
fcntl$setsig(r9, 0xa, 0x10)
mmap(&(0x7f0000e2c000/0x1000)=nil, 0x1000, 0x1000002, 0x28011, r8, 0xffff8000)

1m27.177735554s ago: executing program 9 (id=4277):
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000009, 0x32, 0xffffffffffffffff, 0x3000)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
ioctl$SIOCSIFHWADDR(r0, 0x8b2b, &(0x7f0000000000)={'wlan1\x00', @remote})
pselect6(0x2a, 0x0, &(0x7f0000000080)={0x1, 0xa, 0x0, 0x5, 0xf039, 0xffff, 0x2, 0x7}, &(0x7f00000000c0)={0x5, 0x7, 0xe882, 0x1000, 0x5, 0x2, 0x7f, 0x800}, &(0x7f0000000140), &(0x7f00000001c0)={0x0})
mount(&(0x7f0000000040)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='dax\x00', 0x409, 0x0)

1m26.964586205s ago: executing program 9 (id=4278):
r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
sendfile(r0, r0, 0x0, 0x1000000201005) (async)
fcntl$setlease(r0, 0x400, 0x1)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
sendfile(r1, r1, 0x0, 0x7ffff000)

1m26.964346155s ago: executing program 38 (id=4278):
r0 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
sendfile(r0, r0, 0x0, 0x1000000201005) (async)
fcntl$setlease(r0, 0x400, 0x1)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0)
sendfile(r1, r1, 0x0, 0x7ffff000)

15.300868938s ago: executing program 8 (id=5493):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_int(r0, 0x0, 0xf, 0x0, &(0x7f0000004840))
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0)
munmap(&(0x7f0000002000/0x800000)=nil, 0x800000)
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)
recvmsg(r1, 0x0, 0x0)
ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000080)=0x401)

15.236301024s ago: executing program 8 (id=5494):
recvmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000880)=""/4098, 0x1002}, {&(0x7f00000007c0)=""/186, 0xba}, {&(0x7f00000018c0)=""/256, 0x100}, {&(0x7f00000034c0)=""/197, 0xc5}, {&(0x7f0000000080)=""/223, 0xdf}, {&(0x7f00000019c0)=""/144, 0x90}, {&(0x7f0000000380)=""/155, 0x9b}], 0x7}, 0xffffffff}], 0x1, 0x2100, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)={0x18, 0x56, 0x1, 0x0, 0x800000, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1, 0x0, 0x0, 0x4000001}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1)
sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="8fdf2cbd7000030000000b"], 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x40000)
recvmmsg(r1, &(0x7f0000000440), 0x44, 0x22, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440), 0x800, 0x0)
ioctl$RTC_UIE_OFF(r3, 0x7004)
sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0x2, 0x1, 0x0, 0x2, 0x2, 0x0, 0x70bd2c}, 0x10}, 0x19}, 0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x8df3b6bc411e075b)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}})
ioctl$FS_IOC_GETFSLABEL(r5, 0x800452d2, &(0x7f0000000100))
r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a00, 0x0)
preadv2(r7, &(0x7f0000000580)=[{&(0x7f0000000000)=""/118, 0x76}, {0x0}, {0x0, 0xfe91}], 0x3, 0x9, 0xd, 0x9)

15.233344604s ago: executing program 8 (id=5496):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000003c0)={<r5=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={r5, 0x2, r4})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000040)={r5, 0x3, r1, 0x9})
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000480)={0x8000})
close_range(r0, 0xffffffffffffffff, 0x0)

14.892110558s ago: executing program 8 (id=5498):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0)
mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80000, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
setpriority(0x2565f307eda729c3, 0x0, 0x100000001)
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020)

14.8767793s ago: executing program 8 (id=5499):
waitid(0x0, 0x0, 0x0, 0x2, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) (async)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4)
recvmmsg(r0, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000003c0)=""/4107, 0x100b}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0), 0x10000000000000a6, 0x0)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x35) (async)
ioctl$KVM_CREATE_VM(r1, 0xae01, 0x35)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa8) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa8)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x161)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), 0xffffffffffffffff)
r6 = getpgid(0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), r2)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f00000014c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020011d07e93fedbdf255c00f9ff08006b007800000008006b00ee80000008006b00e0010000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
syz_pidfd_open(r6, 0x0) (async)
syz_pidfd_open(r6, 0x0)
syz_pidfd_open(r6, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002abd4a3d9b19307000fbdbdf251400000008001d00", @ANYRES32, @ANYBLOB="0c0006000200000002000000"], 0x28}}, 0x4000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x4000000)
sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}}, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x18c0}, 0x1, 0x0, 0x0, 0x8080}, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
ioctl$ASHMEM_GET_NAME(r9, 0x81007702, &(0x7f00000001c0)=""/215) (async)
ioctl$ASHMEM_GET_NAME(r9, 0x81007702, &(0x7f00000001c0)=""/215)

14.77623515s ago: executing program 8 (id=5500):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
syz_usb_connect$uac1(0x5, 0xd7, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0x4, 0x10, 0x25, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x8}, [@processing_unit={0x8, 0x24, 0x7, 0x1, 0x6, 0x2, "a0"}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x10, "c3"}, @mixer_unit={0x5, 0x24, 0x4, 0x3, 0x8f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x4, 0x2, 0x0, 0xff, "17b1"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xa995, 0x6bf1, 0x7f, "379ebd8fd28a4d"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x4, 0x0, 0x9, "", "ad51"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x4, 0xd, 0x1, {0x7, 0x25, 0x1, 0x80, 0x3, 0x3ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xf, 0x1, 0x5, 0x3, "7dc855bd84f1d971c7"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xa, 0xfff7, 0x7, "c5701b95"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x3, 0x3, 0x8, "", 'uH'}, @as_header={0x7, 0x24, 0x1, 0x6, 0x8, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x7f, 0x0, 0x6, {0x7, 0x25, 0x1, 0x1, 0x1, 0x85e}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x3, 0x5, 0x4, 0x10, 0x25}, 0x3c, &(0x7f00000002c0)={0x5, 0xf, 0x3c, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x7, 0xfffc}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "e4ef36361642bc9a4d1f80001dfadb85"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2a, 0x5, 0x2f, 0x5, 0xc}, @wireless={0xb, 0x10, 0x1, 0xc, 0xe, 0x2d, 0x9, 0x0, 0x3}]}, 0x1, [{0x67, &(0x7f0000000300)=@string={0x67, 0x3, "252a7f43ac9eb8c38f703201f02e6ee54e146688f04d4724be07c14280fe65985c3f6a5fe913162efad7f50e63cb8dab5c1e56407710e3b14f64223ce0bc8f19a0cbadb440a42828ba2a88195a952b8afb6dd70bb98c0646f6db7b885d5dd0a8ecc918f8be"}}]})
r1 = syz_open_pts(0xffffffffffffffff, 0xb283fd9bce74baf6)
syz_open_pts(r1, 0x8040)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

14.764230661s ago: executing program 39 (id=5500):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
syz_usb_connect$uac1(0x5, 0xd7, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc5, 0x3, 0x1, 0x4, 0x10, 0x25, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x8}, [@processing_unit={0x8, 0x24, 0x7, 0x1, 0x6, 0x2, "a0"}, @mixer_unit={0x6, 0x24, 0x4, 0x4, 0x10, "c3"}, @mixer_unit={0x5, 0x24, 0x4, 0x3, 0x8f}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x4, 0x2, 0x0, 0xff, "17b1"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xa995, 0x6bf1, 0x7f, "379ebd8fd28a4d"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x8, 0x4, 0x0, 0x9, "", "ad51"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x4, 0xd, 0x1, {0x7, 0x25, 0x1, 0x80, 0x3, 0x3ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xf, 0x1, 0x5, 0x3, "7dc855bd84f1d971c7"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xa, 0xfff7, 0x7, "c5701b95"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x3, 0x3, 0x3, 0x8, "", 'uH'}, @as_header={0x7, 0x24, 0x1, 0x6, 0x8, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x7f, 0x0, 0x6, {0x7, 0x25, 0x1, 0x1, 0x1, 0x85e}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x3, 0x5, 0x4, 0x10, 0x25}, 0x3c, &(0x7f00000002c0)={0x5, 0xf, 0x3c, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x7, 0xfffc}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "e4ef36361642bc9a4d1f80001dfadb85"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2a, 0x5, 0x2f, 0x5, 0xc}, @wireless={0xb, 0x10, 0x1, 0xc, 0xe, 0x2d, 0x9, 0x0, 0x3}]}, 0x1, [{0x67, &(0x7f0000000300)=@string={0x67, 0x3, "252a7f43ac9eb8c38f703201f02e6ee54e146688f04d4724be07c14280fe65985c3f6a5fe913162efad7f50e63cb8dab5c1e56407710e3b14f64223ce0bc8f19a0cbadb440a42828ba2a88195a952b8afb6dd70bb98c0646f6db7b885d5dd0a8ecc918f8be"}}]})
r1 = syz_open_pts(0xffffffffffffffff, 0xb283fd9bce74baf6)
syz_open_pts(r1, 0x8040)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x3}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

8.613777879s ago: executing program 6 (id=5602):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0x40005)
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f})
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) (async)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) (async)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/52, 0x0, 0xeeee8000}) (async)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/52, 0x0, 0xeeee8000})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000940)=""/101, &(0x7f00000009c0)=""/81})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)={0x1, 0x0, [{0x3000, 0xc, &(0x7f0000000300)=""/12}]}) (async)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0)={0x1, 0x0, [{0x3000, 0xc, &(0x7f0000000300)=""/12}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000780)=0x1)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000})
ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x2, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x2, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1381, 0x3})
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r4, 0x29, 0xcb, &(0x7f0000000080)=0x7ac6, 0x4)
r5 = socket$inet6(0xa, 0x80000, 0x7fffffff)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r5, 0x6, 0x6, 0x3}) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r6=>r5, 0x6, 0x6, 0x3})
ioctl$BINDER_SET_CONTEXT_MGR(r6, 0x40046207, 0x0)

8.613368239s ago: executing program 6 (id=5603):
socket$unix(0x1, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, 0x0, 0x8000)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40980, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf)
r2 = socket(0x10, 0x2, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
close_range(r2, 0xffffffffffffffff, 0x0)
ioctl$TCFLSH(r1, 0x400455c8, 0x4)
ioctl$TIOCSTI(r1, 0x5412, 0x0)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0x8fe69000)
munlockall()
mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x10, 0x20010, 0xffffffffffffffff, 0x10000000)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)

8.553789215s ago: executing program 6 (id=5605):
unshare(0x64000600)
syz_clone(0x80801600, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)
ioctl$KDSETLED(r0, 0x4b32, 0x3ff)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x40000100000200)
fstat(r0, &(0x7f00000000c0))
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000bc0)={0x18, 0x0, @ioapic={0x33325000, 0xb, 0xa, 0xfffffffc, 0x0, [{0xc, 0x6, 0x7, '\x00', 0xb4}, {0x83, 0x7, 0x4, '\x00', 0x4b}, {0xfc, 0xe, 0x7, '\x00', 0xf8}, {0x0, 0x9, 0x40, '\x00', 0x7}, {0x8, 0x10, 0x8, '\x00', 0xa8}, {0x2, 0x9, 0x6, '\x00', 0xff}, {0x6, 0xe, 0x47, '\x00', 0x6}, {0x5, 0x8c, 0x4, '\x00', 0xe9}, {0xe, 0x4, 0x8, '\x00', 0xff}, {0x5, 0x7, 0x6, '\x00', 0x4}, {0x2, 0xd, 0x15, '\x00', 0x5}, {0x6, 0x7, 0x6, '\x00', 0x7}, {0x4, 0x8a, 0x80, '\x00', 0xdd}, {0x3, 0xf1, 0x6, '\x00', 0x9}, {0x7, 0x65, 0xb, '\x00', 0xfd}, {0x6, 0x9b, 0x19, '\x00', 0x5}, {0x7, 0x2, 0x4, '\x00', 0x7}, {0xef, 0x6, 0x9, '\x00', 0x6a}, {0xf, 0x6, 0x6, '\x00', 0x9}, {0x6, 0x3, 0x3, '\x00', 0x4}, {0x1, 0x3, 0x7, '\x00', 0x4}, {0xd, 0x40, 0x7, '\x00', 0x6}, {0xfe, 0xfd, 0x7, '\x00', 0xff}, {0x92, 0x6, 0xfa}]}})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000001c0)={'veth0_vlan\x00', @random="010000201000"})
io_setup(0x8, &(0x7f0000004200)=<r6=>0x0)
r7 = syz_open_procfs(0x0, &(0x7f0000000300)='comm\x00')
io_submit(r6, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x7, 0xfffe, r7, 0x0}])
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000440)='\xa1\xc4\xe8g\bv\xe3\x90\x8e\x14c\xfew\xd3J\xb2\n\xe7\xb37\xb4K\xd4+\xd7Mz\x9d;iC\xc3\xefV\xcf\xe7\x0f\xeaR<nB\r2v\x1f\xa2u\xc0I\xd6\xb4\xa3\xac\x90\x9d)\\\x94o\x8d\xed\'\xa2Js\xd7t{\xa3pvn^&\x0e%\xda-,sI\xc4\x95h\xa6\xe5Z\x7f#\xc0\x94\xcd\xf2) p\xf3\x94\xda*\xdb\x82O\xc1G\xf18\x16dl\xde\xf8\x8b\xf0\x8c\xa8\x89\xf9~$\x1c\x04\x14AN\x84\x9f\x83Q\xadB\xbb+w\xc1\xebEF\xb0J\t\xa5\xfa8\xb60)\xbc\x11\xbd9\xad\xc6\x17[\xb5\x9fD\x82 \xf9\xf9\xfdfnh@\xa7\xa4\xab\xe4\xe5\xc7\xaa\r\x1e\\\xa4\xd1\xfcHT\x8a\xb1R[\xf9\xe2+\xc2\x8f\xa9\xceS\xbao\x0e\x98W\xf6dMK\xd4\xbdSe\xd4\x9a\xdb\xd4o&\xc9Akd\xfc\x01\xa6$\xd6-\xe6I\xea\xc1 c!,\xf3l\x98\'\xb1\'\xe7F\xfa\x058\xcdD\x1e4#L\x14\xd9{L\x94\xe6^\x1c4ir4`@\xf9\x11:\'6P_~\xca\xe8Fr\x0eZ\xcd\xe6u\xd3K\xbc<\x94R\x80\x7f\x86\x95+\x87J\xebB\xcb\xb5\x97\xf1tg|dOp\xc0vvV\"\xc6B\xd2\xca\xf2\xa6|\a\\^[\'\xb0 \x88ij\x01gB\t\xd2\xf9\xd7\x16\x9b\xc2jTa}\xba\xdf\xb2\xd8\xd0`\x0fl\xcfv@[\f\x05+\xb6\x9f9\xa5\x10\xb1{\xc4\x89.H\xe5\x17\xe9\xe2\xab\x1f\x1a~\xe5\xc8\xf4\xc9\xdb\xae.`x%\x8e\xb1`\x90\x88H\'\xdes\rW\x9c\xb9\xf3\xcb\xd2P+z\xac\xfa\x8d\x8a\xaeY+\x01]\xe7\x1c\x01\xfcU\x1b_3\xad\"\nr`\x85\xe9\xeaC}\x9d\x8c\xf7\xd6`\x8a\'\x1d\xd4kT\xb8rS2z\xfc\x00\x00\x00\x00\xb56\x99\x94\x82&m\x17\b\xe5\x19\x10\x86\xb9\xc5\x85\x98\xdb\x11\xc321\x1d\x83\x90\x92\xf1\x94\x8c\x13n\xb4\x16\x1d&\x04\x9cs`\x9e\xe5U\xa7\xd4\xa6\b\xdd0\xb0\xe4[AC\x9b\a\xeb\xb2E0n\xa0\xd0\xcfz\x9e6\xa7\xcf\xbf\x19\xacQT\x172wbh\x849O\xd1\x87\xe1V\x8ff\xc9\xbfA.X\xfa\xa0\x92?\xb4AIk\xb7\x8e\xe4\x0f\xd3Ac\xb8>4\xebh\xe2\xd4')
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={<r8=>0x0}, &(0x7f0000000140)=0xc)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x14, 0x1, 0x3, 0x101}, 0x14}}, 0x0)
ptrace$poke(0x4, r8, &(0x7f0000000180), 0x0)
mmap(&(0x7f0000018000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x85b83000)

8.39477328s ago: executing program 6 (id=5606):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async)
mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0)
mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80000, 0x0) (async)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000000)=0x8, 0x4) (async)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000006b40)={0x2020}, 0x2020)

8.384398132s ago: executing program 6 (id=5607):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0)
read$FUSE(r2, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f00000011c0)=ANY=[@ANYBLOB="8704040000000000fc02000000619cc069610000000000000003"], 0x28)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x80)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000500200000000000000000b"])
r5 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046})
syz_usb_control_io(r5, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000980)=ANY=[@ANYBLOB="201532"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r5, 0x0, &(0x7f0000000c80)={0x84, &(0x7f00000009c0)={0x40, 0x7, 0x2, "facd"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0)
prlimit64(0x0, 0x6, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0)
fspick(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)

8.280408792s ago: executing program 6 (id=5608):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
keyctl$session_to_parent(0x12) (async)
r0 = add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) (async, rerun: 64)
r1 = socket$unix(0x1, 0x1, 0x0) (rerun: 64)
bind$unix(r1, &(0x7f0000019080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async)
keyctl$session_to_parent(0x12) (async)
listen(r1, 0x0) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x9, 0x4) (async)
listen(r1, 0x2) (async)
request_key(&(0x7f0000000240)='logon\x00', 0x0, 0x0, 0xfffffffffffffff9) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4ca41, 0x40)
r3 = getuid()
quotactl$Q_QUOTAON(0xffffffff80000202, 0x0, r3, &(0x7f0000000380)='./file0\x00') (async, rerun: 64)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)) (rerun: 64)
keyctl$session_to_parent(0x12)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1b) (async)
r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r0)
keyctl$restrict_keyring(0xa, r5, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='d\x00+\x88\xfe\xf7\x01') (async, rerun: 32)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000001c0)={0x7}) (async, rerun: 32)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r7, 0x11, 0xa, 0x0, &(0x7f0000000100)) (async)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/custom0\x00', 0x1000, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) (async, rerun: 32)
ioprio_get$pid(0x2, 0x0) (rerun: 32)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

8.275716692s ago: executing program 40 (id=5608):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
keyctl$session_to_parent(0x12) (async)
r0 = add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) (async, rerun: 64)
r1 = socket$unix(0x1, 0x1, 0x0) (rerun: 64)
bind$unix(r1, &(0x7f0000019080)=@abs={0x1, 0x0, 0x4e20}, 0x6e) (async)
keyctl$session_to_parent(0x12) (async)
listen(r1, 0x0) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x9, 0x4) (async)
listen(r1, 0x2) (async)
request_key(&(0x7f0000000240)='logon\x00', 0x0, 0x0, 0xfffffffffffffff9) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4ca41, 0x40)
r3 = getuid()
quotactl$Q_QUOTAON(0xffffffff80000202, 0x0, r3, &(0x7f0000000380)='./file0\x00') (async, rerun: 64)
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000340)) (rerun: 64)
keyctl$session_to_parent(0x12)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1b) (async)
r5 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, r0)
keyctl$restrict_keyring(0xa, r5, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='d\x00+\x88\xfe\xf7\x01') (async, rerun: 32)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000001c0)={0x7}) (async, rerun: 32)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1}) (async)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r6, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r7, 0x11, 0xa, 0x0, &(0x7f0000000100)) (async)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/custom0\x00', 0x1000, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) (async, rerun: 32)
ioprio_get$pid(0x2, 0x0) (rerun: 32)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

3.221162082s ago: executing program 4 (id=5714):
unshare(0x62040200)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r2, &(0x7f0000006b40)={0x2020}, 0x206e)

3.205986313s ago: executing program 4 (id=5715):
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8fe69000)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

3.112561713s ago: executing program 4 (id=5716):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
accept4$vsock_stream(r0, 0x0, 0x0, 0x0)
r1 = getpgrp(0x0)
ptrace$ARCH_MAP_VDSO_64(0x1e, r1, 0x4, 0x2003)
r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x20000000075, 0x10b701)
epoll_create(0x7)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0x2, 0xd, 0x17, 0x2, 0x2, 0x0, 0x70bd26, 0x25dfdbfc}, 0x10}}, 0x800)
ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000040)=0x1)
r4 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x10001)
read(r4, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)

3.051206649s ago: executing program 4 (id=5717):
mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000140), 0x4800, &(0x7f0000000300)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c6c617a7974696d652c00e948845b239e6682aaae76fd62d8"])
syz_usb_connect$cdc_ncm(0x2, 0x70, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x0, 0xb0, 0xfd, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "ce10"}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0x101, 0xffff, 0x7, 0x3}, {0x6, 0x24, 0x1a, 0x7ff, 0x10}}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x2, 0xfb, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x76, 0x0, 0xbb}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x3, 0x6, 0x2, 0x8, 0x7b}, 0x136, &(0x7f0000000180)={0x5, 0xf, 0x136, 0x6, [@generic={0xfe, 0x10, 0xb, "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"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0xb, 0x6, 0x3, 0x9}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x9, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0xd3, "7239ea960d17e7c5882e22f38031c5b5"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x10, 0x8, 0x1}]}, 0x4, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x412}}, {0x8, &(0x7f0000000380)=@string={0x8, 0x3, "bb2eb56d8f33"}}]})

2.580428735s ago: executing program 0 (id=5720):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect(0x6, 0x24, &(0x7f0000000200)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0x4004550e, 0x0)
openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x28e102, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x360})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, 0x0)
write(r1, &(0x7f0000000140)="a73a7576a8e5685f57d35ad52a83ffc84eaf7fa0c7388cfe23ab0044d0f9969327bdeaf3ddae3c5e583cd456075710106c5448a40800d36449f23bba0468b2dabf7408f004f7b408d8673b272e113b8dd595dda88971409d2e5998eed362f104eab18029bd951c16b589ea543f5fb0c4ec3361312224de7d91c92145226b0c5a24d3b53c16baf7f44b310aeca4f8d89f7be4149bbf8873dba4aae2d62e9bd23acc64618883fb197575937d89021e2623cce0a24482568df4c55e8cc3361d7860dca62f", 0xc3)

1.895439253s ago: executing program 0 (id=5728):
prlimit64(0xffffffffffffffff, 0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x22)
symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x10000002, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x6e20, @local}, 0x10)
syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8c83, 0x0)
ioctl$BLKRRPART(r1, 0x125f, 0x0)

1.744331478s ago: executing program 0 (id=5729):
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]})
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030025642564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1)
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x2103)
r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
ppoll(&(0x7f0000000300)=[{r2, 0x40}], 0x1, 0x0, 0x0, 0x0)
r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='(&@#\x00', 0xfffffffffffffffe)
readv(r3, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0xfffffcd9}, {0x0, 0x2000}], 0x2)

995.539952ms ago: executing program 2 (id=5743):
syz_clone(0x40000, &(0x7f0000000000)="013bcce8960b4172fa34188963433ce9cdd06ee78e6c21dcbaca929fd96b5e0cc791ce4df2dd45cc8f3ded", 0x2b, &(0x7f0000000040), &(0x7f0000000180), &(0x7f00000001c0)="b78cd75ca1bc49201e4624f6fa2b197c0f66f9dc0eedc01fee8ed237e0b7468ca856dcdc1c372012c27afe758f03a33dc82267df94dd3eb7c810ff60af48e021d5a06898bdbc41f2a8a5cb364b3eacb506864c6880a40f274603d6e4fce94f4f810dc156d605b14dfe632e3dfb75c8530fb1c041711a05d4afeb356436771c6f90bb2b5248c741ef267bee674bb30135db5b59e88639a97d35aba21ee6410ff336b717939cc6c8c03ce7d2a926bb99db7aebe211cf24dd21b0ee4aff7ed2765dcd3454b65bdf8e3501b45452a76db17102aa9e0bb75862ac6aac4116d65d0f")
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@multicast2, @empty}, 0xc)
getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/132, &(0x7f0000695ffc)=0x84)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20b00, 0x0)
preadv2(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/129, 0x81}], 0x1, 0xffffffff, 0x8, 0xd)

896.120112ms ago: executing program 2 (id=5744):
r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x165142, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
clock_gettime(0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000580)={<r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000003c0)={r2})
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000140)={0x0, 0x2c0, 0x300, &(0x7f0000000180)=[0x6bd1a313, 0xec63, 0x3, 0x8, 0x98b9, 0xfff, 0x0, 0x100000000000004, 0x10000, 0x200100, 0xfe51, 0x0, 0x3, 0x5, 0x5, 0x49, 0x3fc, 0x1, 0x3, 0x9, 0x400, 0x7, 0x1c1, 0x1000000003, 0x2, 0x2, 0x6, 0x7, 0x96, 0x3, 0xffffffff00000000, 0x0, 0x4, 0x6, 0x23b, 0x3, 0x2, 0x3, 0x4, 0x8, 0x6, 0x6, 0x8000003, 0xa3de, 0x4e, 0x8, 0x5c3e, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffff6, 0x4, 0xe, 0x7, 0x0, 0xe6, 0x200000000000101, 0x2, 0x100004, 0x63, 0x4, 0x7, 0x40000005, 0xfffffffeffffffff, 0xc, 0x11, 0x8000000000000000, 0xe8, 0x80000000, 0x6, 0x2, 0x1, 0x2, 0x2, 0x7, 0x7, 0x3, 0x2, 0x8, 0xfff, 0x101, 0x4, 0x6, 0xab6, 0x4, 0x4, 0x1, 0x80000007, 0xb, 0x39790, 0x6, 0xb, 0x5, 0x400000000008061d, 0x10000003, 0x8, 0x6, 0x4, 0x4, 0x200, 0xfffffffffffffffc, 0xe53e, 0x2c, 0x8, 0x2293332f, 0x6, 0x5, 0x0, 0xd, 0x3, 0x5, 0x1, 0x2, 0x7, 0x6f, 0xfffd, 0x10, 0x4cb, 0x8, 0x3, 0x53e0f0fe, 0xeb4, 0x3, 0xfffffffffffffffe, 0xb690, 0x3ffc00000, 0x8, 0x3]})
r3 = memfd_create(&(0x7f00000001c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0\xbc]\x12\xc0D\x9f\x80\x8f\xfe\xf2\xc2)\xccm\xacz\xc1\xad\xe4\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0)
write$binfmt_elf32(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c466000002ed8e4f97765ce27b90300060000000000000000b738000000000035f4c38422a3bc8220000500000004020300b300000000002a002400b3d7c52ebf31a8d5c8c3c6cb00000009e500d5ffffff05ffffff03"], 0xd8)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0)
rt_sigaction(0x28, &(0x7f0000001500)={&(0x7f0000001400)="66400f6e28c4c16174410f0fe55a5566f2440f5959b8660f64bb549883d766430f381c749035c4e27959ab72f1000036440f380b520ac461a5fb0431c40255962cc5feefffff", 0x90000000, &(0x7f0000001480)="c402e1aea816d4e3e1c4e2359254f799c4a2adac54f00036f67e03c423917d8629000000033e450f2d784f0f5648fe0f18c866400f38228d00000000c422790909", {[0x2]}}, 0x0, 0x8, &(0x7f0000001540))
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x380, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
munlockall()
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
write(r0, &(0x7f0000000400)="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", 0xfffffcf1)
r4 = syz_open_procfs(0x0, &(0x7f0000000140)='attr/fscreate\x00')
ftruncate(r4, 0x7fffffffffffffff)
ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000517000/0x1000)=nil, 0x1000}, 0x1})

892.235062ms ago: executing program 0 (id=5746):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async, rerun: 32)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (rerun: 32)
setxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x1)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x4, 0xc, 0x0, 0x6, 0x8, 0x8, 0x0, 0x0, 0x80, 0x9, 0x9, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff})
socket$unix(0x1, 0x1, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) (async)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async)
ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000480)={0x8000})
close_range(r5, 0xffffffffffffffff, 0x0) (async)
sendmsg$netlink(r4, 0x0, 0x8000)
r8 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40980, 0x0)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) (async)
ioctl$TCFLSH(r8, 0x400455c8, 0x4) (async)
ioctl$TIOCSTI(r8, 0x5412, 0x0)
r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r9, 0x8fe69000) (async)
munlockall()
mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x10, 0x20010, 0xffffffffffffffff, 0x10000000) (async, rerun: 32)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000880)={{{@in6=@mcast2, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0}}, {{@in6=@initdev}, 0x0, @in6=@private2}}, &(0x7f0000000340)=0xe8) (rerun: 32)
mount$incfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000001fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300), 0xc20, &(0x7f0000000a00)={[{@rlog_pages={'rlog_pages', 0x3d, 0xfff}}, {@read_timeout_ms={'read_timeout_ms', 0x3d, 0x7}}, {@no_bf_readahead={'no_bf_readahead', 0x3d, 0x1}}, {@rlog_pages={'rlog_pages', 0x3d, 0xe}}, {@no_bf_readahead={'no_bf_readahead', 0x3d, 0x1}}, {@rlog_pages={'rlog_pages', 0x3d, 0x80}}, {@no_bf_cache}, {@no_bf_cache}, {@no_bf_cache={'no_bf_cache', 0x3d, 0x1}}], [{@uid_gt={'uid>', r10}}, {@subj_role={'subj_role', 0x3d, '/dev/rnullb0\x00'}}]}) (async, rerun: 64)
r11 = socket$xdp(0x2c, 0x3, 0x0) (rerun: 64)
setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)

812.34316ms ago: executing program 3 (id=5748):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
mount(&(0x7f0000000b80)=@loop={'/dev/loop', 0x0}, &(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)='ocfs2_dlmfs\x00', 0x0, &(0x7f0000000c40)='\xf7@/$$^-\x00')
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="00220f000000540b4550182195f57584b3"], 0x0}, 0x0)
r1 = syz_usb_connect(0x6, 0x398, &(0x7f0000000580)={{0x12, 0x1, 0x300, 0x1f, 0x6e, 0x6f, 0x10, 0xb48, 0x3011, 0x69c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x386, 0x1, 0x5, 0x1, 0x1e0, 0x8, [{{0x9, 0x4, 0xf8, 0x33, 0x8, 0xd6, 0x34, 0xf8, 0x8, [@uac_as={[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x81, 0x1, 0x1, 0x2}]}, @generic={0x58, 0x31, "41b8990f7f06d58114c559bc156a6c749e56f874475abc303ddc2ee7adddf8155000d99f8a3204d5edc1f8a6cf8631171957736089b0959be340dd5c7f8783ecbba76d467f911ec31d99386315c4445cc03bcbd26596"}], [{{0x9, 0x5, 0xd, 0xc, 0x10, 0x4, 0x4, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xf}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x5, 0x9, 0x89, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x8d}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x22, 0x4, 0x28, [@generic={0xb2, 0xe, "a84779eb9dbf7f2b89476de6db65115092daecca67fbd52c73946e5b68ffbdd5b525d429d3b3b22028824e5f1f13d446babf9da6bdc8eb8127b5dd876b124bc6779d230b64b2c3c70c91f087f0a8622b3eaec728aa04e21fe0b5efe3a19273ae5a0014a6e259f913edc397f9845729bc5090f8160e59bfec8312e623dbddeef65cff8071e1848b85c000896bb4e2c41a5bbadc80606537a6d1f94f99f84bcca359250f9f9a0b9b968653a6ad21322e64"}, @generic={0xc5, 0x3, "e805dd7d50b4fb7422b4789181658e05cb6f3d2f91ee3f54802180f566b6e3128b02bd13dca7302d715aa17934d0c0c567bb03c713e31e55063452096e9f7580b8d15129548edd05e3015a28dd6867e8a0752811f7aa86ef25c7c2a10c2271a13b372b9bcd77867532862f68037a3f82791628256a36c7a29a1d046f1b4e22c89e428551de38fec17c70269572b2f2e2a2c2993e421ea5cbec1cca5765003f25e476a102696e39280c0f919f64541b0ca81504c2e868bd3fee5a7dad42b2aab582d5dd"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x187, 0x7, 0x0, 0x8e, [@generic={0x3e, 0xd, "e9f8160ed69268c9a075e3914e1b1b81081d10ad4a3a3e8b80cedab915d141eafc3fd1e0404c27011653986f69c3283bb8d765e401ccad6ce2cd07eb"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x3ff, 0x4, 0x8, 0x8, [@generic={0xb8, 0x1, "c1202e0143a351d7cbd7761adbb6d46e7b47fdb3b863fb18cf4600ee1d42e43c940fe22f20c2d187c76af5788ead4f3d96f52d685189a74407b76c86db47f28185d83385d8abf3362ef184a14d1365076716e52cc86c525d7c687abecb03f8daf99b39808ea117716dc1a63d7264c3835061f5d3d238d034fce00f83abf9d9fd23421656da31de75ea6d0df94eff60c21f637386c0042326e9471fe0fa136cb669b651403e93653bccfa26fe182c41b09c047ceed6bc"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x20, 0x2, 0x17, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0x4}]}}, {{0x9, 0x5, 0x1, 0x1, 0x40, 0x5, 0x9, 0xd, [@generic={0x3c, 0xa, "0f3fbb200ef476772d6078e45d7064d0a796dcc5999bab884b7ec20058ac356bad2122dbd19996947169dca11a5eee401b254ed3042dd97773c6"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x0, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x4}]}}]}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x7, 0x1, 0x7, 0x8, 0x66}, 0xf, &(0x7f0000000080)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x5, 0x7, 0x8001}]}, 0x7, [{0x6d, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d03476b55d33128566f7aaf529157ee8ebe93890bdbb5ff01000039f808aae951c1ffcc275eeb863d58e2fc1d324bd5a63d46aec00ec92519a94ed5d01c17591644061c4b32a229b492f0853b0ddc5c1000000000000000ee05adf32da869d06a620a66faf211eb027523bced"]}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x180c}}, {0x2e, &(0x7f0000000240)=@string={0x2e, 0x3, "084c0c971f262298fb50353390a1d1732302458bd731cbe9a3633b8df083bf76259fdca4f3532a9b84524f11"}}, {0x2, &(0x7f0000000280)=@string={0x2}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x4817}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x3409}}]})
syz_usb_control_io$hid(r1, &(0x7f00000009c0)={0x24, &(0x7f0000000400)={0x40, 0x6, 0x47, {0x47, 0x9, "a547a35b0da4ebd3f90f3caa60ec4b7132ce0d4d6b05bd93218e0a174c4be5e49fa7543e61ff01c505eac97229cab0f5fa50e822826b41e0965c531b86c49a448f97e98702"}}, &(0x7f0000000c80)={0x0, 0x3, 0x21, @string={0x21, 0x3, "be157dfa089d7d46c213820f3806c83ea1a873114bb933e3949ad4a6939729"}}, &(0x7f0000000480)={0x0, 0x22, 0x3, {[@global=@item_012={0x2, 0x1, 0xa, "7fdf"}]}}, &(0x7f0000000980)={0x0, 0x21, 0x9, {0x9, 0x21, 0xd, 0xc, 0x1, {0x22, 0x7e5}}}}, &(0x7f0000000b40)={0x2c, &(0x7f0000000a00)={0x20, 0x15, 0x1a, "2fbaaf9c490900000000000000e589c0ab53195d380b9b495cf9"}, &(0x7f0000000a40)={0x0, 0xa, 0x1}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000ac0)={0x20, 0x1, 0x16, "52f375d32ba2b704367195384bd7ba4f05ff5d7a7d51"}, &(0x7f0000000b00)={0x20, 0x3, 0x1, 0x10}})
r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000180)={0x40, 0x5, 0x1b, "767467e5f64f1543f970e441837d000100001a6038079364863473"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$HIDIOCGUCODE(r2, 0xc018480d, 0x0)
r3 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$ASHMEM_SET_SIZE(r3, 0x40087703, 0x3d29)
mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0)
ioctl$ASHMEM_SET_NAME(r3, 0x40087707, &(0x7f0000000ec0)='\x00\x00\x00\x00\x00\x00\x00\x1f\x00x\x92\x12\xac\x06^\xbewV\xf3\"\xc4\x04\xbb\x0642\x9c\x1a\xd1\xcb{\xb0\xd6\x1e\x00gQ\xca\x0eU\xf7\'\x8c\xc1\xc6\xbb\xc5\x1c\xf7\xaf\x95\x83=\t7\x96\x1a\xad\xd0\xd0\xee\x9c\x962\bu\xba\xfc\xae\xc2\x19\xeb\x91\xc9\t\xbc\xc1\xcb\xba\xe3\x8e\xf6\x89\xc2\'\xdfn(Q=v-<\r\x87\xa3\xd1?$\x8b\x17Bn\x17h\x1b\xac\xfc\x82\x1c\xf4\xd0\xf5\xd5\x80\xc0\xb4a \x15\x9a\x9f\xfc\"\xee\xc4\x93Q\x82\x16\xbf\xe3c\x8d \x0f\xb1\xe9\xf2o \x00\x00\x00\x00\x00\x00\x00H\xaf\t\x18\xc8\x1b\x1e\xbe\xd8>\xec\x9f~\xa7\xf7\xafdd\xf1\xdbjE\x01\xd1sD\x89\x94&\\U\f\x18\x99]\xaba\xe93\x01\xa23\xc9hP1\xdc-\'\xd0\x9e}\x89\xff\x8c\xec^\x84\x19\x9f_D\xbdt/\'\xf6\xc3\x8c\xb8\vS\x80\xad\xf8\xbf\xa2\xa0\x99\xc2\x16=\xcc\xb0\x1b^:4\xeb\xd37\xe3-\'\x02\x16\xf5\xe6\x93\x02E\n\xe8\x00\x00\x8c\xed\x11\xf7\xf2J\xf6\x90A@\x01\x13\xc7`g\xcb\xd7\xdb\x1e\xb2\xc9\xfd\xf7\xa9\x96\xf8/0Hd\xcf\xb9\xa2\x1d\x13\x8fC\xd2&\xd8\x9d\x8b\xe0E\xd2\xc6\x1a\xf3\xa8\x0e\xba\xecOv$\xc8\"\a\xd7T\xfb\xfc\xfauT\xf8\x9e\x86\xef.\xc9\x91\xbfB\xe7\x80\x1a\a\t+x_B=\xe7\xa5\x89\xfb\xa2\xc6\x97\xeb\xdecY{\x0e\xc2\x00\x00\x00\x00\x00\x00\x00\a\xf4\x88\x06\xe3\xcb\xc8\xe0\xcc\vE\x18\"\x87\xa0\xa9:\xceY\xf0\xa2\xe0\x9d\x8c\x8e\x11\xb7\x98\xa5\xda$\x94D\xb4\xf2>\x01\x00+\xfa\xa9 \xe1\x13Y\x86\xd8\xbfH\xc6\x9c\x8cs4\r\xcd\xd1\x83JT\xf9\xa2\x83?\xb3\x0f\xc6&\x1d\xa3\xc4\xc3\xd2\xfd\xad\xa35o\xe8\xcd^/\xd8\xf4[n\x9fJ\xf4\n\x92c\xaa\xddT&L<+\x19R\a\xfc\xf2\x17\xb8$\xa9]\xc2\\\xda<\xc8d.w\x9c\xaf4\xbb\xe8Co\xb3\xd8\x82\x92\xba+\x99PXB\xdc\xc26\x06\x10\x92\xc7\xa55\x9fZ\xff*ir\x1e\xe8\a\x00\x00\x00\x00\x00\x00\x00\x88\x19\xf7\xdd\xa8\xef\xa0\x98\xcd\x81\x10>\xc7{\x84\xb9\xc0B\xe1\t\x00\xbaQj\x81\xc8\xf8\x146%Z\x83H\xabF\x18<\x86h\x01=\x03i\xc4\t\x8e/\x12\a\xdf\xe7zU\x1d\x15\x0e\xc1?\xeau\xb4\x84\x1b\xdaR-\xf4\xe9\x1f\xcd\x05\x0fz_\x8d,^\xde\xfd\xd1\xbed\xed\xa1\xf5\xc6(p\xb4;\x0e\x18\xf7/A\xfd\x92\xd0}ur\xaag\xdb&e$\f\rrT\xd8\x88~\x13\xc22t\xf6\xf4Fs\xc1\x05\xfa\x99\x15\x87\x14\x13$\t\xa8?\xee\x94W\x8e\xe1\xcc\xc3U\x84\xc6]:\x9a|W\xec\x84\x18\bb\x82\x8f\xc0\xab\xe3a\x99\x17\x85\x9a\x05\x06\x00\x00\x00\xf2\xd5\b^[D~\x00\x00\x00\x00\x00\x00\x00')

612.46552ms ago: executing program 0 (id=5749):
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) (async, rerun: 64)
r0 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e25, @empty}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f00000000c0)=0x100000001, 0x4) (async)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async)
sendto$inet(r0, &(0x7f00000003c0)="d33dd4", 0x3, 0x80, 0x0, 0x0) (async)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40902, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000000)={0x0, @adiantum, 0x0, @desc1}) (async, rerun: 32)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x8fe69000) (async, rerun: 32)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

554.643085ms ago: executing program 0 (id=5750):
r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
mount$binderfs(0x0, &(0x7f0000000100)='./binderfs\x00', 0x0, 0x2c000, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[], 0x154}}, 0x4000800)
r2 = add_key$keyring(&(0x7f0000000100), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0)
keyctl$chown(0x4, r2, 0xffffffffffffffff, 0x0)
r3 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe64, 0x1ff, @empty, 0x2}, 0x1c)
r4 = socket(0xa, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)
keyctl$assume_authority(0x10, r0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x4)
r7 = socket(0x6, 0x80000, 0x0)
sendmsg(r7, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000a0100000005fe060c10880008001e00fff3c00e", 0x24}], 0x1}, 0x0)
io_setup(0x2007, &(0x7f0000000980)=<r8=>0x0)
r9 = eventfd2(0x0, 0x0)
io_submit(r8, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x1, r9}])
ppoll(&(0x7f00000003c0)=[{r9, 0x200}], 0x1, 0x0, 0x0, 0x0)
shutdown(r6, 0x0)
keyctl$KEYCTL_MOVE(0x1e, r0, r2, r2, 0x0)
r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1380, 0x3})
ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000000)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x7624f2802272dfee, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x40000000000000, 0xe}, @flat=@binder={0x73622a85, 0x200, 0x2}, @flat=@weak_binder={0x77622a85, 0x1000}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}, 0x400}], 0x52, 0x0, &(0x7f0000000300)="6cc2517326f0182dfaea8b9b0efefe72ca2b3f10c526bb82d4a3786efb2df4fda2a1e2888f71a664cc5a261719fe4cead4d24dcc14edceace088490d882b563ef630b62d95fb3e1b01b472ec8da1d1df52fc"})

279.189632ms ago: executing program 3 (id=5751):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x1})
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef096ec866400fe2de0fae4e0afaf24e6ff00fc01ebbf3470fa7c063df", 0xdc000006, 0x0, {[0x39a]}}, 0x0, 0x8, &(0x7f0000000300))
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[@ANYRESDEC=r4], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r4, 0x0)
ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x4, 0xcf4e74310708dfc1, 0xc})
sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf250b00de2704000580"], 0x18}, 0x1, 0x0, 0x0, 0x24040084}, 0x84)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1000, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000480))
ioprio_get$pid(0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x20, 0x0, &(0x7f0000000180)=[@exit_looper, @increfs, @increfs_done], 0xb6, 0x0, &(0x7f00000001c0)="bfddccb7039d803b8cf92b46785f099d1303eb05adcff67c68bb36a9c4434a8c0f4c8db44765101f8886c08e28583e4423d1b4633f71c2348e96b329adb4f887fe9f80369e26fcf98388971ab20e2feb6756940786f1cc8bca8dc6569d7ab4e3f54c858bcf69ddbf314f53a7fee4eca2bd96ecf5bd185bbdb8f6082eb46d6ff245238613c7ca4d75f5aba028ceaf81a0aa183cf610782f520ed5816218a69999e99c4d9b8e6a8622fd35580597b9df09a5b8bafdea7c"})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000040)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000100)={@flat=@weak_binder, @flat=@binder={0x73622a85, 0x0, 0x3}, @flat=@binder={0x73622a85, 0x100a, 0x1003}}, &(0x7f0000000000)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

235.592327ms ago: executing program 3 (id=5752):
r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x404802, 0x2)
r1 = open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x80000)
pipe2(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x400)
r4 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$HIDIOCGUSAGES(r0, 0xd01c4813, &(0x7f0000000100)={{0x3, 0x100, 0x2, 0xfff, 0x2, 0x3}, 0x2ba, [0x6, 0x3, 0x2, 0xed1, 0x74, 0x6, 0xa, 0x3, 0xea1, 0x3ff, 0x4, 0x28, 0x8, 0x1, 0xa4, 0x7fff, 0x5, 0xfffffeb2, 0xfffffff7, 0xfffffeff, 0x1, 0x3, 0x4, 0x1, 0x101, 0x3, 0x9, 0x0, 0x9, 0xca06, 0xfffffffb, 0x1, 0x7, 0xfffffff1, 0xcac, 0x4d69, 0xd439, 0x3, 0x6, 0xd, 0xfffffff8, 0x8001, 0x7f, 0x6, 0xff, 0x2, 0x5, 0x5, 0x6, 0x3, 0x4, 0x48, 0xeb7, 0x9, 0x7, 0x4, 0xa5, 0x1e, 0x4e79, 0xfffffe00, 0x6, 0x7ff, 0x462c, 0x2, 0x5, 0x8, 0xf, 0x34, 0x4, 0x1, 0x4, 0xffff, 0xca26, 0x7, 0x9, 0xa28, 0x800, 0x10001, 0x200, 0x10000, 0x3, 0x3, 0xffffffff, 0x6, 0x400, 0x1000, 0xaf, 0x4, 0x4, 0xd38f, 0x2, 0x882, 0xad, 0x3, 0x3, 0x80000001, 0x8, 0x0, 0x2, 0x80000001, 0x5, 0x0, 0x8, 0x4, 0x101, 0x4, 0xfffff001, 0xffff, 0xdffe, 0x7, 0x9, 0x10000, 0x8, 0x4cc2, 0x7, 0x5, 0x5, 0x2c20, 0x0, 0xffff, 0x6, 0x304, 0xfffffff9, 0x1, 0x0, 0x5, 0x400, 0x4, 0x8, 0x1, 0x2, 0x0, 0x8, 0x5, 0x5, 0x4, 0x7, 0x4, 0xfffffffd, 0x3, 0x80000, 0x8000, 0x8, 0x2, 0x800, 0x4, 0x8, 0xc44, 0x53, 0x7, 0x3, 0xfff, 0x0, 0x5, 0x8, 0x5, 0x7, 0x9, 0x8, 0x7, 0x7, 0x1, 0x1000, 0x6, 0xffff, 0x5, 0x81, 0x1, 0x81, 0x5, 0x7fff, 0x9, 0xb, 0x80, 0x1, 0x1, 0x10000, 0x3, 0x4, 0x9, 0x6, 0x6, 0x9, 0x9, 0x7, 0x9, 0x4, 0x4c0e, 0x3, 0x9, 0x1c000000, 0xffffffff, 0x39d2, 0x1, 0x9, 0x7, 0x5, 0x1, 0x9, 0x6, 0x9, 0x2, 0x80000000, 0x6, 0x4, 0x200, 0x6, 0x5, 0x3, 0xfffffffc, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0xffff8001, 0x5, 0x6, 0x400, 0x401, 0x1, 0x4, 0xffff0000, 0x0, 0x1, 0x0, 0x9, 0x1, 0xa, 0x44419bf1, 0x5, 0x1c000, 0xfa, 0x518, 0x76ed89ee, 0x9b98, 0x7f, 0x0, 0x2, 0x1000, 0x39, 0x5, 0xf, 0x200, 0x8, 0x81, 0x7f, 0x70f, 0x6, 0x8, 0x2, 0x0, 0x6, 0x8, 0x7, 0x1, 0xff, 0x7fff, 0x200, 0x10, 0x6, 0xc9, 0x80000001, 0x2, 0x7, 0x5, 0x6, 0x92, 0x4, 0x8001, 0x5, 0x0, 0x40, 0x4, 0x9a, 0x7, 0x401, 0x5, 0x2, 0x2, 0xef, 0x0, 0x101, 0x1, 0xfffffffe, 0x7, 0x7fff, 0x4, 0x5, 0x3, 0x5, 0x69f, 0x894, 0x1, 0xd0, 0xd, 0x81, 0x5, 0x2, 0x4, 0x0, 0x2, 0xee33, 0x2, 0x0, 0x1, 0x7858, 0x8, 0x3, 0x60, 0x80000000, 0x915, 0x5, 0x3, 0xf, 0x4, 0x3ff, 0x5, 0xffc00000, 0x7, 0x5cf1d399, 0x9, 0x2, 0x7fff, 0x1, 0x6, 0x9, 0x3ff, 0x2, 0x4, 0x400, 0x3, 0x7, 0x4, 0x1000, 0x9, 0x120, 0x4, 0xaa, 0x9, 0x1, 0xc0, 0x3, 0x3, 0x200, 0x8000, 0xe25, 0x8, 0x9, 0xf9cd, 0x1b3, 0x0, 0x9, 0x9, 0xfb, 0x80, 0x7f, 0x4f, 0x466, 0x81, 0x9, 0x844, 0x7000, 0x525, 0x10001, 0x7, 0x2, 0x9a7, 0x98f, 0x3, 0x3, 0x4, 0x9c, 0x5, 0x7, 0x9, 0x9, 0x200, 0x1, 0xffff, 0x2c, 0x1, 0x3, 0x125, 0x5, 0x9db, 0x2c, 0x80000000, 0x80, 0xfffffffa, 0x0, 0x9, 0x4, 0x8, 0x4, 0x6, 0x2, 0x8, 0x0, 0x9, 0x0, 0x5, 0x2, 0x2, 0x1, 0x8, 0x1, 0x800, 0x53, 0x7, 0x1, 0x1, 0x8, 0x0, 0x100, 0x2, 0x4, 0x81, 0x8ce2, 0xea0, 0x6, 0x3, 0xce, 0xfffff091, 0x6, 0xc, 0xffff, 0x30a, 0x4, 0xd, 0x7, 0x0, 0x76c, 0xffffffff, 0x6, 0x3, 0x8, 0x4, 0x2, 0xfffffff8, 0x6, 0x0, 0x800, 0x79d, 0x1, 0x3, 0x3, 0x3, 0x5a0671ee, 0x189, 0x8, 0xd, 0x8, 0x1, 0x3, 0x7, 0x1000, 0x2, 0x101, 0x7, 0x2, 0x5, 0x8, 0xfffffffa, 0x7, 0x5, 0x6, 0x2aa, 0x6, 0x6, 0x7, 0x7, 0x40, 0x400, 0x1, 0x5, 0x4, 0x4, 0x9, 0xeae, 0x3, 0x3, 0xfffffff7, 0x9, 0x59, 0x0, 0x49, 0x3, 0x3ff, 0xa062, 0x2, 0x7, 0x1, 0x6, 0x5, 0x1d2e, 0xfffffffe, 0xfffff5a3, 0x10, 0x1, 0x5, 0x8, 0x9, 0x4, 0x1, 0xae, 0x800, 0x3, 0xfffffffb, 0x0, 0x38, 0xffffffff, 0x8a, 0x1000, 0x5, 0xb1e, 0x9, 0x6, 0xe00e, 0x9, 0x8000, 0x1000, 0x4, 0x91, 0xfffffff8, 0x7, 0x7, 0x8450, 0x0, 0x3a, 0x3, 0xc, 0x4, 0x9, 0xe, 0x0, 0xa, 0xb5e, 0x80000000, 0x4, 0xa946, 0x3, 0x8, 0x8, 0x0, 0x7, 0x9, 0x4, 0xba97, 0xfffffffc, 0x5, 0x859, 0x6, 0x80000001, 0xffffe706, 0x4eac53cb, 0x4b2, 0x3b5, 0x8, 0x1, 0x800, 0x9, 0x3, 0xffffff5f, 0xffffffff, 0x5, 0x14d, 0xff, 0x59, 0xffffffff, 0x101, 0x9, 0x77, 0x3, 0xffff, 0x6, 0x8, 0x2, 0x1ff, 0x1, 0x6, 0x3, 0x8001, 0xd4, 0x9, 0x1, 0x2, 0x10, 0x4259, 0x8, 0x8, 0x40, 0x0, 0x5800000, 0x3, 0x7fffffff, 0x80000000, 0x251dd34b, 0x9, 0x7, 0x8, 0xf, 0x5, 0x8, 0xffffffff, 0xe, 0x8, 0x0, 0xc, 0x0, 0xa, 0x4, 0x6f23, 0xfffffff9, 0x7, 0x9, 0x9, 0x6, 0x10, 0x100, 0x9, 0x8, 0x2, 0xfffff45d, 0x7, 0x8, 0x9, 0x401, 0x7, 0x6, 0x5bde, 0x4, 0x8, 0x100, 0x0, 0x7, 0xfffffffe, 0x401, 0x7, 0x9, 0x1, 0xd4c, 0x200, 0x1, 0x9, 0x244c000, 0xfffffff7, 0x4, 0x4, 0xfffffff8, 0x6, 0xfffffffa, 0x3, 0x0, 0x8, 0xc, 0xc2b, 0x3e4, 0x5, 0x1, 0x0, 0xd, 0xd2, 0x8001, 0x7ff, 0x400, 0x2, 0x4, 0x1ff, 0xb, 0xf260, 0x8, 0x101, 0x3, 0xdf, 0xff, 0x9, 0x9, 0x790, 0x5, 0x9, 0x9, 0x1, 0x0, 0x7fffffff, 0x0, 0xe9, 0x0, 0x26, 0x1, 0x2, 0xad4, 0x8, 0xc, 0x7, 0x1, 0xffffffff, 0x0, 0x8, 0x6, 0x5b9, 0x4, 0x19f74, 0x100, 0xbc3, 0x3, 0x4, 0x7, 0xc2b, 0xd, 0x8100000, 0x2, 0x0, 0x9, 0xa, 0x2, 0x2, 0x3, 0x7fffffff, 0x0, 0x1000, 0xa, 0x2, 0x8, 0xd, 0x8, 0xfffffffe, 0x6, 0x7, 0x1, 0x1, 0xb, 0x1, 0x2cf, 0x6, 0x7f, 0x5, 0x8, 0x4, 0x80000000, 0x4, 0x6, 0x10001, 0x8, 0xa, 0x33c, 0x6, 0x83, 0x3ff, 0xff, 0x101, 0x3, 0x0, 0x5a, 0x7, 0x0, 0x740, 0xb21a, 0x1, 0x1, 0xfffffff1, 0x401, 0x0, 0x6, 0xd50, 0xd, 0x5, 0x400, 0x80000001, 0x0, 0x100, 0xc, 0x1, 0x5, 0xfffffffa, 0x7, 0x5, 0x4, 0x5, 0x983, 0x3, 0x7, 0x3, 0x2, 0x1, 0x21, 0x4, 0x8, 0x6, 0x6, 0x11d, 0x6, 0x5, 0x7, 0x4, 0x4, 0x3, 0x401, 0x2, 0x1, 0x40, 0x8, 0x8000, 0x2d00, 0x7f, 0x9, 0x3, 0xca, 0x4, 0x9, 0x1, 0xcb, 0x4, 0x3, 0x7, 0x5, 0x8, 0x800000, 0x80000001, 0xc3e, 0xe28c, 0xd9, 0xe8000000, 0x1, 0x1, 0x8bb3, 0x3, 0xfffff001, 0x1d8a, 0xe00000, 0x3, 0xb86, 0x100, 0x4, 0x1000, 0x8, 0x40, 0x6, 0x0, 0x7, 0x5, 0x7fbd, 0xff, 0x0, 0x2, 0x3ff, 0x9, 0xf, 0x8, 0x9, 0x4, 0xb7, 0x1, 0xf, 0x4, 0xfffffffc, 0x8, 0x5, 0x401, 0x0, 0x7fff, 0x0, 0x9b, 0x3, 0x7fff, 0x8, 0x1, 0x6164, 0x8, 0x1ff, 0x2, 0x9, 0xcb, 0x10001, 0xffff, 0x401, 0x39, 0x3ff, 0x632, 0x8, 0x9, 0x2, 0xa, 0x8, 0x0, 0x69, 0x1, 0x3, 0x8001, 0x9e8, 0xaf5a, 0x8, 0x80000001, 0x6, 0x8, 0x4, 0x10, 0xb, 0x2, 0x7, 0x7, 0xfffeffff, 0xf, 0xd0, 0x2, 0x100, 0x6, 0x8cb, 0x2, 0x3, 0x5, 0x200, 0x0, 0x59a5, 0x10001, 0x1, 0x1000, 0x4, 0x770cbc46, 0x8, 0x1, 0x3, 0xae7b, 0x106, 0x6, 0x9, 0xffffe56c, 0x5, 0x0, 0xfffffff4, 0x4, 0xc1, 0x7, 0x3, 0x9, 0x5, 0x0, 0x6, 0xfffffffc, 0x9, 0xfff, 0x9, 0x2, 0x3, 0x5, 0x4, 0x4, 0x1000, 0xff, 0x10001, 0x5, 0x81, 0x7, 0x5, 0x2, 0x10, 0x8f1, 0x4, 0x800, 0xc0825f7, 0x6, 0x4, 0x7, 0x3ff, 0x8, 0x8000, 0x3, 0x8, 0x6, 0x8000, 0xb7, 0x4, 0x8, 0x2, 0x8, 0x7ff, 0xcbfb, 0x566, 0x6, 0x62f, 0x2, 0x240, 0x8877, 0x6, 0x9, 0x43c, 0x80000001, 0x5, 0x0, 0x2, 0x8000, 0x0, 0xffff, 0x6, 0x9, 0x8552, 0x7, 0xbd, 0xfffff2ea, 0x4, 0x0, 0xc, 0xf, 0x1, 0xfffff654, 0x9, 0x6, 0x22c7, 0xfffffffa, 0x1, 0x5, 0x101, 0x19f, 0x5, 0x39f, 0x1, 0xffff, 0x2, 0xffffffff, 0x3, 0xb6da, 0x5, 0x9]})
sendmsg$inet6(r3, &(0x7f0000004580)={&(0x7f0000001140)={0xa, 0x4e23, 0x1c8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xf913}, 0x1c, &(0x7f00000043c0)=[{&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000002180)="afe0db559df11bb07ea69929a6ab5e290e6d7802d39e1cc1e7e958f8e93c358f657cb87fde40086fc5dfedeff09f752ff50c8956533ac4dfc98b80cc5c3d1050419960742a931b74a4f3af47dc94e99bf9131895550c51907a6d5802b6202a019130a2f6507e078748bd81c8b1de72dd562e674e1cd4bd4c6737fcd2fc1d7a2f79082306ae5fdd81e52e8022bac064fac927dd4901d972caa609ea75332e08ce22e807177a8e142eda056346eb00dccfeeee5f566691898bce50f00fd43204e99695ba474b7a08d83dd2fd298ce356db0ca7bf1d6d", 0xd5}, {&(0x7f0000002280)="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", 0x1000}, {&(0x7f0000003280)="40fc851d8dd64243c15265a1e804861dfbfe104a68b57eb11950467a685f54344104c25da22d6fcfe84fe81825dc7e05615e4d18deff91f38b57dd477defb8886785f809e1cde0473ae4294b61ad4cefb78439fb5c9d105535dfc75e5a5903b7024ba97c90416a3d2a9a455536d753ccbb289607f7b1b8ed3dac418e78146d2b2dbf1c14b673aeb5cc9576f551892265120f48396ea5050d6ab1bb0f07", 0x9d}, {&(0x7f0000003340)="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", 0x1000}, {&(0x7f0000004340)="6634bafc63859e80ed4486f5ef532bc6abb59a2e89ae730b545731f1a7205bafeecdfb0697cc923e32e6d01eb0dfc78cb179a24fd83f0c2b5eba4b915d526a6dfba8bba00a516aca51a0d84d5d2bec04624d973bb5c4b812241add4ecfa5351d886fde2b", 0x64}], 0x6, &(0x7f0000004440)=[@rthdr_2292={{0x78, 0x29, 0x39, {0x87, 0xc, 0x0, 0x7d, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @mcast1, @private2, @dev={0xfe, 0x80, '\x00', 0x1d}, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x0, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x10000}]}}}, @rthdr={{0x78, 0x29, 0x39, {0x21, 0xc, 0x2, 0x8, 0x0, [@local, @ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x38}, @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x33, 0x0, '\x00', [@enc_lim]}}}], 0x130}, 0xc040)
pipe2$watch_queue(&(0x7f00000045c0)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x80)
r6 = getpgid(0x0)
write$P9_RGETLOCK(r5, &(0x7f0000004600)={0x37, 0x37, 0x2, {0x2, 0x0, 0x40, r6, 0x19, '/selinux/avc/cache_stats\x00'}}, 0x37)
write$char_usb(r3, &(0x7f0000004640)="eb9da46d1c35703a0c7d12a628fd2e78559866fc39a56698deffe593f91801ddebd9e6f59f9c9b625bf1d1c70e6029e712c61f051dd10cd4f36e33237afb23e262df9b49891af7f2c9e27d6395f0a14adced59710b4c2f1d7218eff9f765584a607b5ee43cfebbf3a03f33a3fa64efa035134be4b83f0836cf7d2c786e4d491d72048dcad4de33c8b25b946b24184c0463ea3b67242e0a4966d76c223ed8f2edef958f8a05a13bc77aac24c9a082b5bc37c00326954910d9f6d7514de3de0e7f2b2911c52ed5c05c0999152918bf", 0xce)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r5, 0x8008f512, &(0x7f0000004740))
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000004780)=0x2, 0x4)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000004800), r2)
sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f00000049c0)={&(0x7f00000047c0), 0xc, &(0x7f0000004980)={&(0x7f0000004840)={0x11c, r7, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x99}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'geneve1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipvlan1\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000800}, 0x1)
eventfd(0xf7a)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004a40), r4)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000004b00)={&(0x7f0000004a00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000004ac0)={&(0x7f0000004a80)={0x24, r8, 0x200, 0x6, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x48010)
r9 = timerfd_create(0x8, 0x80000)
ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000004b40)=0x20)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000004b80)=0xffffffffffffffff, 0x4)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r4, &(0x7f0000004c80)={&(0x7f0000004bc0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004c40)={&(0x7f0000004c00)={0x24, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x401}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x844)
socket$packet(0x11, 0x3, 0x300)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x1d, &(0x7f0000004cc0)={0x4067, 0x7, 0xf, 0x7, 0xdef}, 0x14)
write$P9_RXATTRWALK(r0, &(0x7f0000004d00)={0xf, 0x1f, 0x1, 0xa}, 0xf)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x38)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000004d80), r2)
sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000004ec0)={&(0x7f0000004d40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004e80)={&(0x7f0000004dc0)={0xa8, r11, 0x915, 0x70bd25, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40001}, 0x4)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000004fc0)={&(0x7f0000004f00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004f80)={&(0x7f0000004f40)={0x1c, r8, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xb24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000)

233.200977ms ago: executing program 3 (id=5753):
syz_io_uring_setup(0x43a, 0x0, &(0x7f0000000200), &(0x7f0000000240))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00b320908400f30d6d60826f30fc7b2050000000f326691dac7110ff56198030ff5619803980f320f3566b857000f00d0", 0x5c}], 0x1, 0x15, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
readv(r0, 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0)
mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f00000005c0)={[0x5000, 0x80a0000, 0x3000, 0x2], 0x8, 0x20, 0x6})
write$binfmt_register(0xffffffffffffffff, &(0x7f0000000080)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x5, 0x3a, '\x00'/10, 0x3a, '](\xdb\x96\r\xde\xf9.\x9a\x98\x00\x00\x00\x00', 0x3a, './file0'}, 0x3f)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x0, 0x0})
r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000740), 0xc0001, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, &(0x7f0000000780)={0x0, r4, 0x9, 0x3, 0x100000000, 0xffffffffffffff8c})
r5 = socket$inet6(0xa, 0x80000, 0x401)
capset(0x0, &(0x7f0000000080)={0x4, 0x10ffff, 0x3000000, 0xffffffff})
sendmsg(r5, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)

232.802107ms ago: executing program 3 (id=5754):
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0)
setreuid(0x0, 0xee00)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
pipe(0x0)
r1 = add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @auto=[0x35, 0x64, 0x33, 0x33, 0x33, 0x61, 0x66, 0x34, 0x64, 0x32, 0x30, 0x31, 0x57, 0x65, 0x1b8720dacd700de2, 0x61]}, &(0x7f00000001c0)={0x0, "8e1d24f3e1695bcbd5a775f97b0b55d73b257390b2af9cdb18a91d218ed88a623b8717db3a596b92dd94839edd523f14b0f4059a34a91050d9b22a3fb3876809", 0x2d}, 0x48, 0xfffffffffffffffe)
keyctl$revoke(0x3, r1)
keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f00000000c0)='/dev/ashmem\x00')
ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x1000001)
r2 = socket$tipc(0x1e, 0x5, 0x0)
getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000040)=0x4)
mmap(&(0x7f0000018000/0x2000)=nil, 0x2000, 0xa8ca3411d3c26009, 0x13, r0, 0x22e7c000)

184.320272ms ago: executing program 3 (id=5755):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000773604202404019957c2010203010902240001000010000904430002317d5500090502"], 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r1, 0x40383d0c, &(0x7f0000000040)={{0x4eb, 0x109003ff}, {0x4eb, 0x109003ff}, 0x9, 0x6})
syz_usb_connect$rtl8150(0x6, 0x3f, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000180)={0x40, 0x12, 0x4, "00010000"}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, &(0x7f0000000240)={0x0, 0x22, 0xd5, {0xd5, 0x24, "22eb6238c5abc45eb78dfeb3a60a52559b789cb90cd8fe6616b41e660297fb32e092c942e4169ee1f1d3bfe8b5b3ad111188bad6f43f0ae010463e278318af0e76e25d1a1afbd38dd2f5fe635dc23f7ca0be45ac093bc2d7a661e5a2d760ac3bb493d506121bb4c56b8087344bde0a7ff8384a7d537ca2e4c2792c33e96f4cba1f629e800ac91f1024989858b4662ed7c811cca65f6f3d97598a0d2df05d6906268105d84b70900b532b935dc0c8e314fcc9f9d73b58f4a2ab824514f4a6640dc084282c9d0e8b91119c86ccb88b2122ea64f8"}}, &(0x7f0000000380)=ANY=[@ANYBLOB="00038e0000008e0389e439c120748480beb66b0efd6fc035613aa1912a95cfb6ec6d7b3997b002f57b32d7a0ab44bcac775728b9999c87ae4179d7ca2ca6b84adb947dc42e173f97532ff24425dae38484eef09a95bba543005938453788174d787d74fb1b044268b1262ec90131ed7e56836100"/128], &(0x7f0000000080)={0x0, 0x22, 0x4, {[@local=@item_012={0x2, 0x2, 0x7, "a906"}, @global=@item_012={0x0, 0x1, 0x2}]}}, &(0x7f0000000100)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x7, 0x1, {0x22, 0x952}}}}, &(0x7f0000000600)={0x2c, &(0x7f0000000440)={0x0, 0xd, 0xcc, "7651a7191e8f981887959c475198a3f4479dd80ad58c4346b575f4a8063338e3bbf5494cd88d0e2bac27d8cad11d479f9ffd361690d01bf8ee8e68cab5df404816b456ce06141646c9b1d8bd61abb850a2c9c5a30fa004ee74e731d4ea7ab24b358810ba2dcacef2d6ff926b74cb69a1e609c7478387e4bf0251ed3cc4bb068fa9450204425cd1880ca33e1111347ea4af5ee0953aa35ae9a6b0eaec595d61165c89f25281b62452ef6f129289efb8919a84d9ba5a61ca00c04d833cd1e488934cde63e20a5eac21108bab24"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x28}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0xc2}, &(0x7f0000000580)={0x20, 0x1, 0x39, "05413a3802108288233bcffbabf93b33f8199be7239b5301f5bd0c2f03c7259f215cf48915e5be0b1c6269e42e0f7c654847a67c7c51d79528"}, &(0x7f00000005c0)={0x20, 0x3, 0x1, 0x8}})
mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x208003, 0x0)

78.086122ms ago: executing program 4 (id=5756):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/custom1\x00', 0x800, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000380)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="266a7b7fc2aa3cee411b1dbf3e6d8cb76c000000000000000000000007000000440c05e3ac1414bb0000000000000000d1282c1fff9ec646c47e00000000000000a1ab2ea0"], 0x20}, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
mknodat$loop(r1, &(0x7f0000000200)='./file1\x00', 0x40, 0x1)
chdir(&(0x7f00000003c0)='./bus\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, &(0x7f0000000140)={0x17fffffd})
read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020)
open(&(0x7f0000000140)='./file0\x00', 0x0, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x2, 0x300)
add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000040))
add_key$user(&(0x7f00000007c0), &(0x7f0000000800)={'syz', 0x0}, &(0x7f0000000840)="3c3120beb24598875fb90e8de04b358cccba2f3b530ca124427af7b3b03e3a41a6cb8bd8b03fc7e8157a7583ca5d0636fbd9bd0865f7847a9eab3cf53cbeda8cb59f3d", 0x43, 0xfffffffffffffff8)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="0100"/24])
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00))
sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000024c0)=ANY=[@ANYBLOB="240000c6b86d7c84dd643442ccb7b1ce0caf9ab4f3f3ca8dd64a29a2081980e91e8fdf0898a52c54ac5192e973030595bc60069ed311b3c7a71fc65c084554268593eb8de24018edc10187e788d29e6500e8919a395c2b420a8f494e0d59abf9da455a9a0694af", @ANYRES16=0x0, @ANYRES32=r4], 0x24}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002000010002000000000000000a0000"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0)
mount$incfs(&(0x7f0000000580)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)

57.442675ms ago: executing program 2 (id=5757):
mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0)

2.10009ms ago: executing program 2 (id=5758):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff})
r0 = fsopen(&(0x7f00000000c0)='devtmpfs\x00', 0x1)
fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000040)='^\\\x8c\'\x00', &(0x7f0000000200)='./file0\x00', r0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x20400, 0x0)
ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x2ae)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000140)={'geneve0\x00', 0x200})
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='binder\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x8c48, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000900)={0x0, <r4=>0x0, <r5=>0x0}, &(0x7f0000000940)=0xc)
clock_adjtime(0x0, &(0x7f0000000100)={0x540, 0x7, 0xd26, 0xfffffffffffffff6, 0x3, 0x8, 0x8000, 0x194d, 0x7ba, 0x7fffffffffffffff, 0x7, 0x7f, 0x8000000000000000, 0x0, 0x100000000, 0x0, 0x14000000, 0x404, 0x5, 0x39d, 0xfffffffffffffff7, 0x715, 0x1ff, 0xff, 0x5f1, 0x6})
getgroups(0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff])
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x50, r1, 0x60071000)
r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f0000000240)={{0x0, 0x0, 0x4, 0x3}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r6, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006, 0x0, 0x0, 0x35d75c374ee2fd0b})
keyctl$chown(0x4, 0x0, r4, r5)
rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300))
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req={0xfffffffc, 0x7, 0x1, 0x4}, 0x10)
poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7)
socket$inet6_tcp(0xa, 0x1, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
write$UHID_CREATE2(r7, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r7, 0x0)

1.46197ms ago: executing program 2 (id=5759):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458002, 0x55)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, 0x1)
ioctl$TCXONC(r1, 0x540a, 0x2)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r2 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r2, 0x107, 0x13, 0x0, &(0x7f0000000240)=0xffffffffffffff94)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0xffffffffffffff5d, 0x0, &(0x7f0000002680)=[@clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0})

639.45µs ago: executing program 2 (id=5760):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$inet_mreqn(r2, 0x0, 0x20, 0x0, &(0x7f0000000300))
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x2e)
recvmmsg(r1, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/123, 0x7b}, {&(0x7f0000000580)=""/150, 0x96}, {&(0x7f00000000c0)=""/24, 0x18}], 0x3, &(0x7f0000000640)=""/244, 0xf4}, 0x10000}, {{&(0x7f0000000280)=@un=@abs, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000340)=""/68, 0x44}, {&(0x7f0000000800)=""/53, 0x35}, {&(0x7f0000000840)=""/100, 0x64}], 0x3, &(0x7f0000000900)=""/128, 0x80}, 0x9}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/184, 0xb8}, {&(0x7f0000000a40)=""/118, 0x76}, {&(0x7f0000000ac0)=""/236, 0xec}, {&(0x7f0000000bc0)=""/113, 0x71}, {&(0x7f0000000c40)=""/162, 0xa2}], 0x5, &(0x7f0000000d80)=""/43, 0x2b}, 0x9}, {{&(0x7f0000000dc0)=@qipcrtr, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000e40)=""/120, 0x78}], 0x1, &(0x7f0000000f00)=""/81, 0x51}, 0xb}, {{&(0x7f0000000f80)=@nfc_llcp, 0x80, &(0x7f00000012c0)=[{&(0x7f0000001000)=""/236, 0xec}, {&(0x7f0000001100)=""/12, 0xc}, {&(0x7f0000001140)=""/122, 0x7a}, {&(0x7f00000011c0)=""/233, 0xe9}], 0x4, &(0x7f0000001300)=""/39, 0x27}, 0xcc23}], 0x5, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'nr0\x00'})
setsockopt$inet_group_source_req(r3, 0x0, 0x2b, &(0x7f0000000400)={0x3ff, {{0x2, 0x4e21, @loopback}}, {{0x2, 0x4e20, @multicast1}}}, 0x108)
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57)
syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0x3, 0x2, 0x2, 0x0, 0x80, {{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8, 0x0, 0x3}}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1, 0x8, 0x9}}], {}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xe9, 0x0, 0x2}}}}}]}}]}}, 0x0)
mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000000)=ANY=[])

0s ago: executing program 4 (id=5761):
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae03, 0x38)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19)
r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr, 0x2}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r4 = fcntl$dupfd(r3, 0x0, r3)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000100)=@ccm_128={{0x304}, "2697312e4e898ca7", "35e23ca3a988def7dfbd438c536346cd", "11398f4a", "50cc97386065eda9"}, 0x28)
sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
write(r1, &(0x7f0000000400)="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", 0x1f000)

kernel console output (not intermixed with test programs):

_socket pid=11509 comm=syz.2.3777
[  226.403027][T11508] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3776'.
[  226.531992][T11522] syz.2.3782: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0
[  226.546896][T11522] CPU: 1 UID: 0 PID: 11522 Comm: syz.2.3782 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[  226.546924][T11522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  226.546938][T11522] Call Trace:
[  226.546945][T11522]  <TASK>
[  226.546953][T11522]  __dump_stack+0x21/0x30
[  226.546985][T11522]  dump_stack_lvl+0x10c/0x190
[  226.547014][T11522]  ? __cfi_dump_stack_lvl+0x10/0x10
[  226.547043][T11522]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  226.547073][T11522]  dump_stack+0x19/0x20
[  226.547101][T11522]  warn_alloc+0x1bc/0x2a0
[  226.547130][T11522]  ? __cfi_warn_alloc+0x10/0x10
[  226.547157][T11522]  ? kasan_save_track+0x4f/0x80
[  226.547179][T11522]  ? __kasan_kmalloc+0x96/0xb0
[  226.547202][T11522]  ? __kmalloc_cache_noprof+0x24c/0x490
[  226.547223][T11522]  ? do_sock_setsockopt+0x26d/0x400
[  226.547254][T11522]  ? __x64_sys_setsockopt+0x1b8/0x250
[  226.547284][T11522]  ? x64_sys_call+0x2adc/0x2ee0
[  226.547314][T11522]  ? do_syscall_64+0x58/0xf0
[  226.547341][T11522]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  226.547365][T11522]  __vmalloc_node_range_noprof+0x135/0x1420
[  226.547399][T11522]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  226.547430][T11522]  ? kasan_save_alloc_info+0x40/0x50
[  226.547459][T11522]  ? __kasan_kmalloc+0x96/0xb0
[  226.547482][T11522]  ? __kmalloc_cache_noprof+0x24c/0x490
[  226.547502][T11522]  ? futex_setup_timer+0xb4/0xd0
[  226.547522][T11522]  vmalloc_user_noprof+0x77/0x90
[  226.547572][T11522]  ? xskq_create+0xdb/0x2a0
[  226.547621][T11522]  xskq_create+0xdb/0x2a0
[  226.547657][T11522]  xsk_init_queue+0xb6/0x120
[  226.547691][T11522]  xsk_setsockopt+0x43f/0x6f0
[  226.547724][T11522]  ? __cfi_xsk_setsockopt+0x10/0x10
[  226.547758][T11522]  ? do_futex+0x309/0x500
[  226.547782][T11522]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[  226.547813][T11522]  ? security_socket_setsockopt+0x33/0xd0
[  226.547838][T11522]  ? __cfi_xsk_setsockopt+0x10/0x10
[  226.547872][T11522]  do_sock_setsockopt+0x26d/0x400
[  226.547906][T11522]  ? __cfi_do_sock_setsockopt+0x10/0x10
[  226.547944][T11522]  __x64_sys_setsockopt+0x1b8/0x250
[  226.547979][T11522]  x64_sys_call+0x2adc/0x2ee0
[  226.548014][T11522]  do_syscall_64+0x58/0xf0
[  226.548054][T11522]  ? clear_bhb_loop+0x50/0xa0
[  226.548079][T11522]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  226.548102][T11522] RIP: 0033:0x7f36b0d8f6c9
[  226.548120][T11522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  226.548159][T11522] RSP: 002b:00007f36b1ba5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  226.548183][T11522] RAX: ffffffffffffffda RBX: 00007f36b0fe5fa0 RCX: 00007f36b0d8f6c9
[  226.548202][T11522] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  226.548217][T11522] RBP: 00007f36b0e11f91 R08: 0000000000000004 R09: 0000000000000000
[  226.548233][T11522] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  226.548260][T11522] R13: 00007f36b0fe6038 R14: 00007f36b0fe5fa0 R15: 00007ffe68839bb8
[  226.548280][T11522]  </TASK>
[  226.548289][T11522] Mem-Info:
[  226.846646][T11522] active_anon:31921 inactive_anon:1094 isolated_anon:0
[  226.846646][T11522]  active_file:11792 inactive_file:12609 isolated_file:0
[  226.846646][T11522]  unevictable:16394 dirty:98 writeback:0
[  226.846646][T11522]  slab_reclaimable:7275 slab_unreclaimable:79354
[  226.846646][T11522]  mapped:29952 shmem:24555 pagetables:1151
[  226.846646][T11522]  sec_pagetables:0 bounce:0
[  226.846646][T11522]  kernel_misc_reclaimable:0
[  226.846646][T11522]  free:1463997 free_pcp:7427 free_cma:0
[  226.892333][T11522] Node 0 active_anon:131584kB inactive_anon:4376kB active_file:47168kB inactive_file:50436kB unevictable:65576kB isolated(anon):0kB isolated(file):0kB mapped:123708kB dirty:392kB writeback:0kB shmem:102020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7532kB pagetables:4504kB sec_pagetables:0kB all_unreclaimable? no
[  226.925066][T11522] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:5656kB free_cma:0kB
[  226.955139][T11522] lowmem_reserve[]: 0 3921 3921
[  226.960046][T11522] Normal free:2891204kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:141784kB inactive_anon:4376kB active_file:47168kB inactive_file:50436kB unevictable:65576kB writepending:392kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:15372kB local_pcp:14152kB free_cma:0kB
[  226.992175][T11522] lowmem_reserve[]: 0 0 0
[  226.996576][T11522] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[  227.012125][T11522] Normal: 24*4kB (UME) 970*8kB (UME) 987*16kB (UME) 466*32kB (UE) 346*64kB (UE) 18*128kB (UE) 17*256kB (UME) 56*512kB (ME) 30*1024kB (ME) 4*2048kB (UME) 671*4096kB (UME) = 2883360kB
[  227.030254][T11522] 72871 total pagecache pages
[  227.034951][T11522] 1150 pages in swap cache
[  227.039376][T11522] Free swap  = 120120kB
[  227.043651][T11522] Total swap = 124996kB
[  227.047813][T11522] 2097051 pages RAM
[  227.051627][T11522] 0 pages HighMem/MovableOnly
[  227.056347][T11522] 351537 pages reserved
[  227.060509][T11522] 0 pages cma reserved
[  227.067221][T11522] Memory allocations:
[  227.071235][T11522]          0 B        0 init/main.c:1370 func:do_initcalls
[  227.078469][T11522]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  227.086575][T11522]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  227.094242][T11522]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  227.102141][T11522]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  227.110089][T11522]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  227.118718][T11522]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  227.126649][T11522]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  227.134613][T11522]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  227.142539][T11522]          0 B        0 init/initramfs.c:101 func:find_link
[  227.181348][T11548] sit0: entered promiscuous mode
[  227.197445][T11548] netlink: 'syz.2.3790': attribute type 1 has an invalid length.
[  227.211703][T11548] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3790'.
[  227.340408][T11567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=11567 comm=syz.2.3798
[  227.732912][    T9] usb 10-1: new high-speed USB device number 12 using dummy_hcd
[  227.864109][T11593] overlayfs: failed to clone lowerpath
[  227.880298][T11598] batadv_slave_1: entered promiscuous mode
[  227.889337][    T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  227.900339][    T9] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32
[  227.911670][    T9] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  227.920829][    T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.929022][    T9] usb 10-1: Product: syz
[  227.933302][    T9] usb 10-1: Manufacturer: syz
[  227.937974][    T9] usb 10-1: SerialNumber: syz
[  228.143919][T11574] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  228.696538][T11636] /dev/rnullb0: Can't lookup blockdev
[  228.752068][T11574] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  228.951162][T11648] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3823'.
[  228.960286][T11648] tipc: Invalid UDP bearer configuration
[  228.960308][T11648] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  228.975191][    T9] cdc_ncm 10-1:1.0: failed to get mac address
[  228.981595][    T9] cdc_ncm 10-1:1.0: bind() failure
[  228.989143][    T9] cdc_ncm 10-1:1.1: probe with driver cdc_ncm failed with error -71
[  228.997497][    T9] cdc_mbim 10-1:1.1: probe with driver cdc_mbim failed with error -71
[  229.013199][    T9] usb 10-1: USB disconnect, device number 12
[  229.129659][T11665] netlink: 'syz.8.3829': attribute type 1 has an invalid length.
[  229.260443][T11672] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  229.268805][T11672] overlayfs: missing 'lowerdir'
[  229.288571][T11672] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  229.297588][T11672] overlayfs: missing 'lowerdir'
[  229.463993][T11686] fuse: Bad value for 'fd'
[  229.468551][T11686] fuse: Bad value for 'fd'
[  229.545104][   T36] audit: type=1400 audit(1762962419.497:3096): avc:  denied  { connect } for  pid=11703 comm="syz.6.3842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  229.648259][T11724] binder: Unknown parameter 'context����[7�'
[  229.697138][T11732] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3853'.
[  229.706540][T11732] __vm_enough_memory: pid: 11732, comm: syz.9.3853, bytes: 18014402804453376 not enough memory for the allocation
[  229.824371][T11744] kvm: faulting far call emulation tainted memory
[  229.831035][T11744] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  230.577740][T11805] netlink: 'syz.2.3876': attribute type 12 has an invalid length.
[  230.720845][   T36] audit: type=1326 audit(1762962420.667:3097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11812 comm="syz.8.3880" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9fee18f6c9 code=0x0
[  231.210623][T11822] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3883'.
[  231.364406][   T36] audit: type=1400 audit(1762962421.317:3098): avc:  denied  { append } for  pid=11829 comm="syz.9.3886" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  231.448113][T11836] usb usb8: usbfs: process 11836 (syz.9.3887) did not claim interface 0 before use
[  231.472848][   T36] audit: type=1400 audit(1762962421.417:3099): avc:  denied  { map } for  pid=11834 comm="syz.2.3888" path="socket:[44509]" dev="sockfs" ino=44509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  231.498423][   T36] audit: type=1400 audit(1762962421.417:3100): avc:  denied  { accept } for  pid=11834 comm="syz.2.3888" path="socket:[44509]" dev="sockfs" ino=44509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  231.620141][T11853] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.126366][   T36] audit: type=1326 audit(1762962422.077:3101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11860 comm="syz.9.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4f5f8f6c9 code=0x50000
[  232.149724][   T36] audit: type=1326 audit(1762962422.077:3102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11860 comm="syz.9.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4f5f8f6c9 code=0x50000
[  232.173328][   T36] audit: type=1326 audit(1762962422.077:3103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11860 comm="syz.9.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4f5f8f6c9 code=0x50000
[  232.194306][T11865] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3899'.
[  232.207212][   T36] audit: type=1326 audit(1762962422.077:3104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11860 comm="syz.9.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4f5f8f6c9 code=0x50000
[  232.250769][   T36] audit: type=1326 audit(1762962422.077:3105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11860 comm="syz.9.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4f5f8f6c9 code=0x50000
[  232.274273][   T36] audit: type=1326 audit(1762962422.077:3106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11860 comm="syz.9.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4f5f8f6c9 code=0x50000
[  232.300041][   T36] audit: type=1326 audit(1762962422.077:3107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11860 comm="syz.9.3897" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4f5f8f6c9 code=0x50000
[  232.300879][T11879] /dev/rnullb0: Can't lookup blockdev
[  232.350446][T11880] /dev/rnullb0: Can't lookup blockdev
[  232.809636][T11930] /dev/rnullb0: Can't lookup blockdev
[  233.558854][T11980] tipc: Started in network mode
[  233.566445][T11980] tipc: Node identity 4, cluster identity 4711
[  233.572615][T11980] tipc: Node number set to 4
[  234.260278][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3946'.
[  234.444636][T12019] /dev/loop8: Can't lookup blockdev
[  234.490751][T12021] incfs: Error accessing: ./file0.
[  234.502859][T12021] incfs: mount failed -20
[  234.973433][T12041] tipc: Trying to set illegal importance in message
[  235.165058][T12048] netlink: 'syz.8.3963': attribute type 21 has an invalid length.
[  235.174530][T12048] netlink: 388 bytes leftover after parsing attributes in process `syz.8.3963'.
[  235.727857][T12093] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  235.737064][T12093] overlayfs: missing 'lowerdir'
[  236.345015][T12119] fuse: Unknown parameter 'gr7 �@�F2�ouid'
[  236.351408][T12119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3988'.
[  236.423737][T12115] netlink: 'syz.6.3986': attribute type 4 has an invalid length.
[  236.498532][T12128] netlink: 'syz.6.3991': attribute type 4 has an invalid length.
[  236.748358][T12136] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3994'.
[  237.020626][T12143] tipc: Can't bind to reserved service type 0
[  237.223889][T12173] netlink: 92 bytes leftover after parsing attributes in process `syz.8.4006'.
[  237.236413][T12175] netlink: 'syz.2.4007': attribute type 4 has an invalid length.
[  237.244367][T12175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4007'.
[  237.583009][T12187] __vm_enough_memory: pid: 12187, comm: syz.9.4011, bytes: 18014402804453376 not enough memory for the allocation
[  237.636243][T12190] binder: Bad value for 'max'
[  237.922486][T12213] netlink: 'syz.6.4021': attribute type 4 has an invalid length.
[  237.937681][T12213] netlink: 'syz.6.4021': attribute type 4 has an invalid length.
[  238.132874][ T2527] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[  238.151757][T12247] netlink: 176 bytes leftover after parsing attributes in process `syz.8.4034'.
[  238.158368][T12249] netlink: 196 bytes leftover after parsing attributes in process `syz.6.4035'.
[  238.282855][ T2527] usb 10-1: Using ep0 maxpacket: 32
[  238.288884][ T2527] usb 10-1: too many configurations: 29, using maximum allowed: 8
[  238.297577][ T2527] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9D, changing to 0x8D
[  238.309201][ T2527] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  238.320222][ T2527] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  238.330852][ T2527] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9D, changing to 0x8D
[  238.342544][ T2527] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  238.353557][ T2527] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  238.364096][ T2527] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9D, changing to 0x8D
[  238.375696][ T2527] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  238.386676][ T2527] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  238.397242][ T2527] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9D, changing to 0x8D
[  238.408834][ T2527] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  238.419946][ T2527] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  238.430483][ T2527] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9D, changing to 0x8D
[  238.442099][ T2527] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  238.453123][ T2527] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  238.463638][ T2527] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9D, changing to 0x8D
[  238.475229][ T2527] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  238.486423][ T2527] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  238.498677][ T2527] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9D, changing to 0x8D
[  238.510566][ T2527] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  238.522132][ T2527] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  238.532828][ T2527] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9D, changing to 0x8D
[  238.544458][ T2527] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  238.555494][ T2527] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  238.565387][ T2527] usb 10-1: New USB device found, idVendor=0598, idProduct=0264, bcdDevice= 0.00
[  238.575556][ T2527] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.585301][ T2527] usb 10-1: config 0 descriptor??
[  238.699470][T12301] netlink: 'syz.2.4053': attribute type 46 has an invalid length.
[  238.707371][T12301] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4053'.
[  238.992569][ T2527] hid-generic 0003:0598:0264.000B: unknown main item tag 0x0
[  239.000168][ T2527] hid-generic 0003:0598:0264.000B: unknown main item tag 0x0
[  239.008660][ T2527] hid-generic 0003:0598:0264.000B: hidraw0: USB HID v0.00 Device [HID 0598:0264] on usb-dummy_hcd.9-1/input0
[  239.133905][T12331] No source specified
[  239.195036][    T9] usb 10-1: USB disconnect, device number 13
[  239.261150][   T36] kauditd_printk_skb: 25594 callbacks suppressed
[  239.261168][   T36] audit: type=1400 audit(1762962429.207:28702): avc:  denied  { remount } for  pid=12335 comm="syz.2.4064" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1
[  239.293222][T12336] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4064'.
[  239.331932][   T36] audit: type=1400 audit(1762962429.277:28703): avc:  denied  { map } for  pid=12345 comm="syz.2.4067" path="socket:[46316]" dev="sockfs" ino=46316 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  239.430521][T12357] netlink: 188 bytes leftover after parsing attributes in process `syz.6.4071'.
[  239.656627][T12385] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4081'.
[  239.665609][T12385] erspan0: left allmulticast mode
[  239.670645][T12385] erspan0: left promiscuous mode
[  239.675722][T12385] bridge0: port 3(erspan0) entered disabled state
[  239.682631][T12385] bridge_slave_1: left allmulticast mode
[  239.688340][T12385] bridge_slave_1: left promiscuous mode
[  239.694166][T12385] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.702507][T12385] bridge_slave_0: left allmulticast mode
[  239.711578][   T36] audit: type=1326 audit(1762962429.647:28704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12370 comm="syz.6.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e5f8f6c9 code=0x50000
[  239.729970][T12385] bridge_slave_0: left promiscuous mode
[  239.742870][   T36] audit: type=1326 audit(1762962429.667:28705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12370 comm="syz.6.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e5f8f6c9 code=0x50000
[  239.757502][T12385] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.774625][   T36] audit: type=1326 audit(1762962429.667:28706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12370 comm="syz.6.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e5f8f6c9 code=0x50000
[  239.797982][   T36] audit: type=1326 audit(1762962429.667:28707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12370 comm="syz.6.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e5f8f6c9 code=0x50000
[  239.821373][   T36] audit: type=1326 audit(1762962429.667:28708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12370 comm="syz.6.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e5f8f6c9 code=0x50000
[  239.845186][   T36] audit: type=1326 audit(1762962429.667:28709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12370 comm="syz.6.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e5f8f6c9 code=0x50000
[  239.868609][   T36] audit: type=1326 audit(1762962429.667:28710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12370 comm="syz.6.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e5f8f6c9 code=0x50000
[  239.892064][   T36] audit: type=1326 audit(1762962429.667:28711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12370 comm="syz.6.4076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e5f8f6c9 code=0x50000
[  240.319796][T12416] fuse: Unknown parameter 'gr�up_id'
[  240.393495][ T2524] usb 10-1: new high-speed USB device number 14 using dummy_hcd
[  240.548419][ T2524] usb 10-1: Using ep0 maxpacket: 8
[  240.554909][ T2524] usb 10-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  240.566329][ T2524] usb 10-1: config 0 interface 0 has no altsetting 0
[  240.573825][ T2524] usb 10-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00
[  240.583171][ T2524] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.595930][ T2524] usb 10-1: config 0 descriptor??
[  240.811057][ T2524] hid-multitouch 0003:0EEF:72D0.000C: unknown main item tag 0x1
[  240.827782][ T2524] hid-multitouch 0003:0EEF:72D0.000C: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.9-1/input0
[  241.016194][T12405] binder: Unknown parameter 'context����[7�'
[  241.022567][ T2524] usb 10-1: USB disconnect, device number 14
[  241.857748][ T2524] usb 10-1: new high-speed USB device number 15 using dummy_hcd
[  242.041917][ T2524] usb 10-1: Using ep0 maxpacket: 16
[  242.053320][ T2524] usb 10-1: unable to get BOS descriptor set
[  242.060726][ T2524] usb 10-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 16
[  242.073888][ T2524] usb 10-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 64
[  242.104992][ T2524] usb 10-1: config 1 interface 0 has no altsetting 0
[  242.116509][ T2524] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  242.129432][ T2524] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.140061][ T2524] usb 10-1: Product: syz
[  242.146229][ T2524] usb 10-1: Manufacturer: syz
[  242.150938][ T2524] usb 10-1: SerialNumber: syz
[  242.167213][T12460] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  242.190215][T12460] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  242.411574][T12460] x_tables: unsorted entry at hook 1
[  242.692718][T12485] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4115'.
[  242.710797][T12485] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4115'.
[  242.733571][T12485] netlink: 'syz.8.4115': attribute type 25 has an invalid length.
[  242.747237][T12485] /dev/rnullb0: Can't lookup blockdev
[  242.874670][T12506] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4122'.
[  242.886670][T12510] cgroup: release_agent respecified
[  242.887582][T12511] cgroup: release_agent respecified
[  243.611715][T12551] tipc: Started in network mode
[  243.618905][T12551] tipc: Node identity 100000, cluster identity 4711
[  243.635594][T12551] tipc: Node number set to 1048576
[  243.666040][T12554] netlink: 188 bytes leftover after parsing attributes in process `syz.8.4139'.
[  243.840121][T12559] netlink: 17 bytes leftover after parsing attributes in process `syz.8.4141'.
[  244.027620][T12574] overlayfs: failed to clone upperpath
[  244.253604][T12593] overlay: ./file0 is not a directory
[  244.915569][T12636] fuse: Unknown parameter '0x00000000000000030x0000000000000003'
[  244.916913][T12637] netlink: 'syz.6.4165': attribute type 4 has an invalid length.
[  244.940064][T12637] netlink: 'syz.6.4165': attribute type 4 has an invalid length.
[  245.063669][T12655] overlayfs: failed to clone upperpath
[  245.072391][T12656] overlayfs: failed to clone upperpath
[  245.106845][ T2524] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71
[  245.133977][ T2524] usb 10-1: USB disconnect, device number 15
[  245.162613][T12668] netlink: 4544 bytes leftover after parsing attributes in process `syz.9.4175'.
[  245.183076][T12666] incfs: Error accessing: ./file0.
[  245.193097][T12666] incfs: mount failed -20
[  245.199878][T12670] netlink: 'syz.6.4176': attribute type 13 has an invalid length.
[  245.366039][T12683] 8021q: VLANs not supported on ip6_vti0
[  245.595380][T12690] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.602469][T12690] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.610478][T12690] bridge_slave_0: entered allmulticast mode
[  245.617074][T12690] bridge_slave_0: entered promiscuous mode
[  245.623843][T12690] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.632623][T12690] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.639961][T12690] bridge_slave_1: entered allmulticast mode
[  245.648862][T12690] bridge_slave_1: entered promiscuous mode
[  245.715487][T12690] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.722588][T12690] bridge0: port 2(bridge_slave_1) entered forwarding state
[  245.729909][T12690] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.736963][T12690] bridge0: port 1(bridge_slave_0) entered forwarding state
[  245.764288][  T300] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.772266][  T300] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.789340][  T300] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.796403][  T300] bridge0: port 1(bridge_slave_0) entered forwarding state
[  245.804065][  T300] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.811123][  T300] bridge0: port 2(bridge_slave_1) entered forwarding state
[  245.937041][T12690] veth0_vlan: entered promiscuous mode
[  245.947524][T12690] veth1_macvtap: entered promiscuous mode
[  245.995498][ T2190] tipc: Left network mode
[  246.000924][ T2190] veth1_macvtap: left promiscuous mode
[  246.006594][ T2190] veth0_vlan: left promiscuous mode
[  246.194869][   T36] kauditd_printk_skb: 43443 callbacks suppressed
[  246.194887][   T36] audit: type=1400 audit(2000000000.059:72155): avc:  denied  { checkpoint_restore } for  pid=12727 comm="syz.8.4193" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  246.673002][T12771] fuseblk: Bad value for 'user_id'
[  246.678326][T12771] fuseblk: Bad value for 'user_id'
[  246.996028][  T751] usb 10-1: new full-speed USB device number 16 using dummy_hcd
[  247.147076][  T751] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  247.182518][  T751] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64
[  247.205982][  T751] usb 10-1: New USB device found, idVendor=0404, idProduct=0755, bcdDevice= 0.00
[  247.215178][  T751] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.224698][  T751] usb 10-1: config 0 descriptor??
[  247.231262][T12780] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  247.294936][T12811] overlayfs: failed to clone lowerpath
[  247.349240][T12814] /dev/rnullb0: Can't lookup blockdev
[  247.440782][T12780] binder: Unknown parameter 'defcontext01777777777777777777777'
[  247.449613][  T751] usbhid 10-1:0.0: can't add hid device: -71
[  247.455721][  T751] usbhid 10-1:0.0: probe with driver usbhid failed with error -71
[  247.464491][  T751] usb 10-1: USB disconnect, device number 16
[  248.190000][T12848] rust_binder: Write failure EINVAL in pid:13
[  248.455995][  T751] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  248.615985][  T751] usb 3-1: Using ep0 maxpacket: 16
[  248.622296][  T751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.633235][  T751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.643027][  T751] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  248.655836][  T751] usb 3-1: New USB device found, idVendor=045e, idProduct=00da, bcdDevice= 0.90
[  248.664891][  T751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.673530][  T751] usb 3-1: config 0 descriptor??
[  249.270800][T12924] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4262'.
[  249.280890][  T751] usbhid 3-1:0.0: can't add hid device: -71
[  249.291123][  T751] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  249.307017][  T751] usb 3-1: USB disconnect, device number 2
[  249.993242][T12953] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4270'.
[  250.034486][   T36] audit: type=1326 audit(2000000003.899:72156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz.6.4272" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80e5f8f6c9 code=0x0
[  250.138092][T12965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=12965 comm=syz.9.4275
[  250.243380][T12967] netlink: 388 bytes leftover after parsing attributes in process `syz.9.4276'.
[  250.318056][  T300] bridge_slave_1: left allmulticast mode
[  250.323840][  T300] bridge_slave_1: left promiscuous mode
[  250.329686][  T300] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.337871][  T300] bridge_slave_0: left allmulticast mode
[  250.343576][  T300] bridge_slave_0: left promiscuous mode
[  250.349475][  T300] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.570228][T12969] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.575349][   T36] audit: type=1326 audit(2000000004.439:72157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12972 comm="syz.8.4280" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9fee18f6c9 code=0x0
[  250.577848][T12969] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.607552][T12969] bridge_slave_0: entered allmulticast mode
[  250.614018][T12969] bridge_slave_0: entered promiscuous mode
[  250.621051][  T300] veth1_macvtap: left promiscuous mode
[  250.626658][  T300] veth0_vlan: left promiscuous mode
[  250.672377][T12969] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.679598][T12969] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.686794][T12969] bridge_slave_1: entered allmulticast mode
[  250.693056][T12969] bridge_slave_1: entered promiscuous mode
[  250.747612][T12969] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.754781][T12969] bridge0: port 2(bridge_slave_1) entered forwarding state
[  250.762085][T12969] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.769139][T12969] bridge0: port 1(bridge_slave_0) entered forwarding state
[  250.791087][ T2190] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.798386][ T2190] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.808257][ T2192] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.815338][ T2192] bridge0: port 1(bridge_slave_0) entered forwarding state
[  250.824251][ T2190] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.831323][ T2190] bridge0: port 2(bridge_slave_1) entered forwarding state
[  250.856841][T12969] veth0_vlan: entered promiscuous mode
[  250.867997][T12969] veth1_macvtap: entered promiscuous mode
[  250.897535][T12986] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 3
[  251.945067][T13012] rust_binder: Error while translating object.
[  251.945114][T13012] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT }
[  251.951370][T13012] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:10
[  251.961049][T13012] rust_binder: Failed to vm_insert_page(35184372744192): vma_addr:35184372744192 i:0 err:EBUSY
[  251.970610][T13012] rust_binder: Error in use_page_slow: EBUSY
[  251.981061][T13012] rust_binder: use_range failure EBUSY
[  251.987126][T13012] rust_binder: Failed to allocate buffer. len:4096, is_oneway:false
[  251.992667][T13012] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EBUSY }
[  252.000711][T13012] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EBUSY } my_pid:10
[  252.276066][ T2527] usb 4-1: new low-speed USB device number 5 using dummy_hcd
[  252.387790][   T36] audit: type=1326 audit(2000000006.259:72158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13034 comm="syz.8.4298" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9fee18f6c9 code=0x0
[  252.435996][ T2527] usb 4-1: Invalid ep0 maxpacket: 64
[  252.565983][ T2527] usb 4-1: new low-speed USB device number 6 using dummy_hcd
[  252.595985][ T2525] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  252.716008][ T2527] usb 4-1: Invalid ep0 maxpacket: 64
[  252.721394][ T2527] usb usb4-port1: attempt power cycle
[  252.746991][ T2525] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  252.757200][ T2525] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  252.766899][ T2525] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  252.776083][ T2525] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  252.784095][ T2525] usb 3-1: SerialNumber: syz
[  253.003286][ T2525] usb 3-1: 0:2 : does not exist
[  253.009901][ T2525] usb 3-1: USB disconnect, device number 3
[  253.028553][T12856] udevd[12856]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  253.065975][ T2527] usb 4-1: new low-speed USB device number 7 using dummy_hcd
[  253.086329][ T2527] usb 4-1: Invalid ep0 maxpacket: 64
[  253.216257][ T2527] usb 4-1: new low-speed USB device number 8 using dummy_hcd
[  253.246410][ T2527] usb 4-1: Invalid ep0 maxpacket: 64
[  253.251826][ T2527] usb usb4-port1: unable to enumerate USB device
[  253.526971][T13050] netlink: 'syz.2.4304': attribute type 27 has an invalid length.
[  253.558299][T13052] 9pnet_fd: Insufficient options for proto=fd
[  253.576041][   T36] audit: type=1326 audit(2000000007.449:72159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13053 comm="syz.2.4306" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd88518f6c9 code=0x0
[  255.013424][T13100] rust_binder: Write failure EFAULT in pid:12
[  255.073229][   T36] audit: type=1400 audit(2000000008.939:72160): avc:  denied  { setattr } for  pid=13111 comm="syz.3.4328" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[  255.115474][T13115] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4329'.
[  255.175992][   T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  255.313631][T13126] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4332'.
[  255.326104][   T10] usb 3-1: Using ep0 maxpacket: 16
[  255.332468][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  255.343460][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  255.358808][   T10] usb 3-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00
[  255.368873][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.388141][   T10] usb 3-1: config 0 descriptor??
[  255.423493][T13150] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14106 sclass=netlink_route_socket pid=13150 comm=syz.8.4340
[  255.474975][   T36] audit: type=1326 audit(2000000009.339:72161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13154 comm="syz.6.4342" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80e5f8f6c9 code=0x0
[  255.800616][   T10] ntrig 0003:1B96:0008.000D: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.2-1/input0
[  255.999875][T13098] rust_binder: 39: no such ref 0
[  256.004965][T13098] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  256.012337][T13098] rust_binder: 39: no such ref 2
[  256.017526][T13098] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false
[  256.025181][   T10] usb 3-1: USB disconnect, device number 4
[  256.234194][   T36] audit: type=1326 audit(2000000010.099:72162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13173 comm="syz.3.4347" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a9638f6c9 code=0x0
[  256.805984][ T2527] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  256.953258][T13206] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4358'.
[  256.957101][ T2527] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  256.973149][ T2527] usb 3-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00
[  256.982366][ T2527] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.991357][ T2527] usb 3-1: config 0 descriptor??
[  256.996591][T13190] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  257.407030][ T2527] wacom 0003:056A:0045.000E: Unknown device_type for 'HID 056a:0045'. Assuming pen.
[  257.417040][ T2527] wacom 0003:056A:0045.000E: hidraw0: USB HID v1.01 Device [HID 056a:0045] on usb-dummy_hcd.2-1/input0
[  257.429039][ T2527] input: Wacom Intuos2 12x18 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0045.000E/input/input14
[  257.599090][T13227] overlayfs: failed to clone lowerpath
[  257.614357][T13190] __vm_enough_memory: pid: 13190, comm: syz.2.4352, bytes: 18014402804453376 not enough memory for the allocation
[  257.635376][   T10] usb 3-1: USB disconnect, device number 5
[  258.172962][T13246] SELinux:  policydb version 1360715815 does not match my version range 15-33
[  258.182106][T13246] SELinux: failed to load policy
[  258.200285][T13248] exFAT-fs (rnullb0): invalid boot record signature
[  258.207082][T13248] exFAT-fs (rnullb0): failed to read boot sector
[  258.213527][T13248] exFAT-fs (rnullb0): failed to recognize exfat type
[  258.475491][   T36] audit: type=1400 audit(2000000012.339:72163): avc:  denied  { setattr } for  pid=13257 comm="syz.8.4378" name="[io_uring]" dev="anon_inodefs" ino=51692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  258.670063][T13286] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  258.721022][T13287] 
@0�: renamed from bond_slave_1
[  258.957006][   T36] audit: type=1400 audit(2000000012.829:72164): avc:  denied  { create } for  pid=13318 comm="syz.8.4397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  258.977096][T13320] veth1: entered allmulticast mode
[  258.982325][T13321] veth1: left allmulticast mode
[  258.992271][T13323] fuse: Bad value for 'fd'
[  259.336003][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  259.478871][T13334] netlink: 1363 bytes leftover after parsing attributes in process `syz.6.4402'.
[  259.486013][    T9] usb 3-1: Using ep0 maxpacket: 8
[  259.496868][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  259.515566][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  259.516876][T13336] netlink: 'syz.8.4403': attribute type 2 has an invalid length.
[  259.525551][    T9] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6
[  259.535066][T13336] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4403'.
[  259.555962][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10
[  259.579563][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024
[  259.593601][    T9] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  259.608817][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.619377][T13348] netlink: 'syz.3.4408': attribute type 46 has an invalid length.
[  259.621845][T13349] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4409'.
[  259.646198][    T9] hub 3-1:1.0: bad descriptor, ignoring hub
[  259.652303][    T9] hub 3-1:1.0: probe with driver hub failed with error -5
[  259.661072][    T9] cdc_wdm 3-1:1.0: skipping garbage
[  259.666531][    T9] cdc_wdm 3-1:1.0: skipping garbage
[  259.671956][    T9] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22
[  259.996063][    T9] usb 3-1: USB disconnect, device number 6
[  260.274195][T13388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13388 comm=syz.6.4422
[  260.425820][T13424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13424 comm=syz.8.4434
[  260.439650][T13424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13424 comm=syz.8.4434
[  260.465281][T13429] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  260.473761][T13430] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22
[  260.494324][T13432] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  260.494394][T13432] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  260.509216][T13436] 9pnet_fd: Insufficient options for proto=fd
[  260.518698][T13432] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:66
[  260.573150][T13443] 9pnet_fd: p9_fd_create_unix (13443): problem connecting socket: ./file0: -111
[  260.610614][T13459] rust_binder: Write failure EFAULT in pid:74
[  261.249930][T13524] netlink: 'syz.8.4468': attribute type 12 has an invalid length.
[  261.717269][T13554] netlink: 'syz.3.4479': attribute type 32 has an invalid length.
[  261.742789][T13566] binder: Bad value for 'max'
[  261.745080][T13565] binder: Bad value for 'max'
[  261.763836][T13569] SELinux: security_context_str_to_sid () failed with errno=-22
[  261.830308][T13580] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4487'.
[  261.843861][T13582] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=13582 comm=syz.2.4488
[  261.855004][T13586] /dev/nbd8: Can't lookup blockdev
[  261.917568][T13599] SELinux: security_context_str_to_sid (000000) failed with errno=-22
[  262.176026][    T9] usb 3-1: new low-speed USB device number 7 using dummy_hcd
[  262.305977][    T9] usb 3-1: device descriptor read/64, error -71
[  262.545984][    T9] usb 3-1: device descriptor read/64, error -71
[  262.787124][    T9] usb 3-1: new low-speed USB device number 8 using dummy_hcd
[  262.802357][T13644] 9p: Unknown uid 00000000004294967295
[  262.828533][T13644] 9pnet: Could not find request transport: r�ma
[  262.915971][    T9] usb 3-1: device descriptor read/64, error -71
[  262.944551][T13651] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4514'.
[  263.025150][T13669] netlink: 124 bytes leftover after parsing attributes in process `syz.8.4521'.
[  263.052012][T13673] sit0: entered promiscuous mode
[  263.058240][T13673] netlink: 'syz.3.4523': attribute type 1 has an invalid length.
[  263.066186][T13673] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4523'.
[  263.166003][    T9] usb 3-1: device descriptor read/64, error -71
[  263.276086][    T9] usb usb3-port1: attempt power cycle
[  263.616040][    T9] usb 3-1: new low-speed USB device number 9 using dummy_hcd
[  263.637029][    T9] usb 3-1: device descriptor read/8, error -71
[  263.767017][    T9] usb 3-1: device descriptor read/8, error -71
[  264.016816][    T9] usb 3-1: new low-speed USB device number 10 using dummy_hcd
[  264.037737][    T9] usb 3-1: device descriptor read/8, error -71
[  264.167014][    T9] usb 3-1: device descriptor read/8, error -71
[  264.276044][    T9] usb usb3-port1: unable to enumerate USB device
[  264.505694][T13730] syzkaller0: entered allmulticast mode
[  264.511540][T13730] syzkaller0: entered promiscuous mode
[  264.518042][T13730] syzkaller0 (unregistering): left promiscuous mode
[  264.524670][T13730] syzkaller0 (unregistering): left allmulticast mode
[  264.659612][T13746] netlink: 'syz.6.4548': attribute type 11 has an invalid length.
[  264.678710][T13748] netlink: 'syz.6.4549': attribute type 19 has an invalid length.
[  264.687303][T13748] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4549'.
[  264.723399][   T36] audit: type=1326 audit(2000000018.589:72165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13753 comm="syz.6.4551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e5f8f6c9 code=0x7ffc0000
[  264.747165][   T36] audit: type=1326 audit(2000000018.589:72166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13753 comm="syz.6.4551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e5f8f6c9 code=0x7ffc0000
[  264.770737][   T36] audit: type=1326 audit(2000000018.599:72167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13753 comm="syz.6.4551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f80e5f8f6c9 code=0x7ffc0000
[  264.794240][   T36] audit: type=1326 audit(2000000018.599:72168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13753 comm="syz.6.4551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e5f8f6c9 code=0x7ffc0000
[  264.817913][   T36] audit: type=1326 audit(2000000018.599:72169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13753 comm="syz.6.4551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7f80e5f8f6c9 code=0x7ffc0000
[  264.841315][   T36] audit: type=1326 audit(2000000018.599:72170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13753 comm="syz.6.4551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e5f8f6c9 code=0x7ffc0000
[  264.864995][   T36] audit: type=1326 audit(2000000018.599:72171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13753 comm="syz.6.4551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f80e5f8f6c9 code=0x7ffc0000
[  264.888530][   T36] audit: type=1326 audit(2000000018.599:72172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13753 comm="syz.6.4551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e5f8f6c9 code=0x7ffc0000
[  264.912123][   T36] audit: type=1326 audit(2000000018.599:72173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13753 comm="syz.6.4551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f80e5f8f6c9 code=0x7ffc0000
[  264.935655][   T36] audit: type=1326 audit(2000000018.599:72174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13753 comm="syz.6.4551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80e5f8f6c9 code=0x7ffc0000
[  265.178910][T13772] netlink: 676 bytes leftover after parsing attributes in process `syz.3.4558'.
[  265.191584][T13772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13772 comm=syz.3.4558
[  265.235378][T13789] netlink: 'syz.3.4564': attribute type 27 has an invalid length.
[  265.300174][T13799] IPv6: NLM_F_CREATE should be specified when creating new route
[  265.325967][ T2527] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  265.421258][T13825] netlink: 4636 bytes leftover after parsing attributes in process `syz.3.4579'.
[  265.491966][ T2527] usb 3-1: unable to get BOS descriptor or descriptor too short
[  265.506295][ T2527] usb 3-1: not running at top speed; connect to a high speed hub
[  265.514867][ T2527] usb 3-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config
[  265.520844][T13844] overlayfs: failed to clone upperpath
[  265.526248][ T2527] usb 3-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  265.544517][ T2527] usb 3-1: config 1 interface 0 has no altsetting 0
[  265.554649][ T2527] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  265.563813][ T2527] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.571846][ T2527] usb 3-1: Product: syz
[  265.576189][ T2527] usb 3-1: Manufacturer: syz
[  265.580785][ T2527] usb 3-1: SerialNumber: syz
[  265.683745][T13847] netlink: 'syz.3.4586': attribute type 4 has an invalid length.
[  265.691545][T13847] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4586'.
[  265.727697][T13851] netlink: 'syz.3.4588': attribute type 27 has an invalid length.
[  265.787134][T13757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.795646][T13757] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  265.804027][T13757] binder: Bad value for 'max'
[  265.810822][ T2527] cdc_ether 3-1:1.0: skipping garbage
[  265.816348][ T2527] cdc_ether 3-1:1.0: skipping garbage
[  265.821794][ T2527] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  265.831018][ T2527] usb 3-1: USB disconnect, device number 11
[  266.340870][T13881] 9pnet: p9_errstr2errno: server reported unknown error �@c�F	S+����J�x�@�P���Q[v�5o����
[  266.359016][T13886] netlink: 'syz.8.4602': attribute type 4 has an invalid length.
[  266.367675][T13887] netlink: 'syz.8.4602': attribute type 4 has an invalid length.
[  266.378667][  T300] Bluetooth: hci0: Frame reassembly failed (-84)
[  266.387043][T13881] Bluetooth: hci0: Frame reassembly failed (-90)
[  266.498953][T13911] rust_binder: 123: no such ref 1
[  267.071622][T13944] 8021q: VLANs not supported on ip_vti0
[  267.550411][T13963] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4629'.
[  267.625484][T13980] fuse: blksize only supported for fuseblk
[  268.415972][ T2406] Bluetooth: hci0: command 0x1003 tx timeout
[  268.415980][   T54] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  268.465868][T14051] rust_binder: Write failure EFAULT in pid:129
[  268.496761][T14053] rust_binder: Error while translating object.
[  268.510677][T14053] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  268.519000][T14053] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:131
[  268.530327][T14059] /dev/rnullb0: Can't lookup blockdev
[  268.563519][T14065] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22
[  268.599598][T14078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=14078 comm=syz.8.4672
[  268.612247][T14078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=14078 comm=syz.8.4672
[  268.624811][T14078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65 sclass=netlink_route_socket pid=14078 comm=syz.8.4672
[  268.637357][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4672'.
[  268.646263][T14078] netlink: 968 bytes leftover after parsing attributes in process `syz.8.4672'.
[  268.653464][T14081] /dev/rnullb0: Can't lookup blockdev
[  269.042596][T14105] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4680'.
[  269.051736][T14106] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4680'.
[  269.061267][T14105] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14105 comm=syz.6.4680
[  269.415744][T14167] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:149
[  269.441208][T14172] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  269.491074][T14181] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4708'.
[  269.510005][T14181] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4708'.
[  269.526616][T14182] overlayfs: failed to clone upperpath
[  269.590923][T14190] netlink: 'syz.2.4711': attribute type 4 has an invalid length.
[  269.603677][T14190] netlink: 'syz.2.4711': attribute type 2 has an invalid length.
[  269.621808][T14190] netlink: 'syz.2.4711': attribute type 13 has an invalid length.
[  269.630283][T14190] erspan0: refused to change device tx_queue_len
[  269.651082][T14190] rust_binder: Write failure EFAULT in pid:159
[  269.712539][T14207] __vm_enough_memory: pid: 14207, comm: syz.2.4719, bytes: 18014402804453376 not enough memory for the allocation
[  269.776162][T14220] rust_binder: 165: no such ref 2
[  269.838151][T14226] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:165
[  269.861309][T14232] overlayfs: failed to clone lowerpath
[  269.886838][T14234] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=29204 sclass=netlink_xfrm_socket pid=14234 comm=syz.6.4729
[  270.606666][   T36] kauditd_printk_skb: 46 callbacks suppressed
[  270.606684][   T36] audit: type=1326 audit(2000000024.479:72221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14254 comm="syz.3.4737" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a9638f6c9 code=0x0
[  270.652389][T14257] rust_binder: 169: no such ref 0
[  270.657781][T14257] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  270.664948][T14257] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  270.672412][T14257] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  270.692518][T14257] rust_binder: 169: no such ref 0
[  270.759680][T14261] __vm_enough_memory: pid: 14261, comm: syz.2.4739, bytes: 18014402804453376 not enough memory for the allocation
[  270.772549][T14262] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=7 sclass=netlink_xfrm_socket pid=14262 comm=syz.3.4737
[  270.802410][ T2190] tipc: Subscription rejected, illegal request
[  270.853961][   T36] audit: type=1400 audit(2000000024.719:72222): avc:  denied  { getopt } for  pid=14267 comm="syz.2.4741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  270.892168][   T36] audit: type=1400 audit(2000000024.739:72223): avc:  denied  { setattr } for  pid=14267 comm="syz.2.4741" name="NFC_RAW" dev="sockfs" ino=54037 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  270.966486][T14290] /dev/rnullb0: Can't lookup blockdev
[  270.974320][T14286] netlink: 'syz.2.4747': attribute type 27 has an invalid length.
[  271.038369][   T36] audit: type=1400 audit(2000000024.909:72224): avc:  denied  { read write } for  pid=14285 comm="syz.2.4747" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  271.064917][   T36] audit: type=1400 audit(2000000024.909:72225): avc:  denied  { open } for  pid=14285 comm="syz.2.4747" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  271.089942][   T36] audit: type=1400 audit(2000000024.929:72226): avc:  denied  { ioctl } for  pid=14285 comm="syz.2.4747" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  271.121835][T14286] tipc: Started in network mode
[  271.126810][T14286] tipc: Node identity ac1414aa, cluster identity 4711
[  271.133690][T14286] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  271.640494][T14319] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4761'.
[  271.965062][   T36] audit: type=1400 audit(2000000025.829:72227): avc:  denied  { module_load } for  pid=14330 comm="syz.2.4765" path="/sys/power/pm_trace_dev_match" dev="sysfs" ino=1461 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1
[  272.013722][   T36] audit: type=1400 audit(2000000025.879:72228): avc:  denied  { execheap } for  pid=14334 comm="syz.3.4767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[  272.756489][T14373] fuseblk: Bad value for 'fd'
[  272.780694][T14378] overlayfs: failed to resolve '/�E��': -2
[  272.961392][T14413] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4797'.
[  273.005528][T14419] overlayfs: failed to clone upperpath
[  273.006239][T14420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=14420 comm=syz.2.4799
[  273.552493][   T36] audit: type=1326 audit(2000000027.418:72229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14490 comm="syz.6.4826" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80e5f8f6c9 code=0x0
[  273.604373][   T36] audit: type=1326 audit(2000000027.468:72230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14490 comm="syz.6.4826" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f80e5f8f6c9 code=0x0
[  274.047374][T14496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14496 comm=syz.2.4827
[  274.063205][T14496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14496 comm=syz.2.4827
[  274.443340][T14527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4837'.
[  274.452509][T14527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4837'.
[  274.647501][T14540] netlink: 'syz.3.4842': attribute type 12 has an invalid length.
[  274.948868][T14572] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  274.948894][T14572] rust_binder: Read failure Err(EFAULT) in pid:251
[  274.975982][T14574] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  274.991953][T14574] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[  275.230720][T14581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4856'.
[  275.352121][T14587] devtmpfs: Unknown parameter 'fuse'
[  275.606005][ T2524] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  275.737058][T14601] tmpfs: Bad value for 'nr_blocks'
[  275.743598][T14601] overlayfs: failed to clone lowerpath
[  275.750653][T14601] 9pnet_fd: Insufficient options for proto=fd
[  275.767014][ T2524] usb 3-1: config 0 has an invalid interface number: 48 but max is 0
[  275.779210][ T2524] usb 3-1: config 0 has no interface number 0
[  275.779895][T14603] /dev/rnullb0: Can't lookup blockdev
[  275.785310][ T2524] usb 3-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30
[  275.801847][ T2524] usb 3-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  275.815249][ T2524] usb 3-1: config 0 interface 48 has no altsetting 0
[  275.825053][ T2524] usb 3-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[  275.835069][ T2524] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.843412][ T2524] usb 3-1: Product: syz
[  275.847778][ T2524] usb 3-1: Manufacturer: syz
[  275.852443][ T2524] usb 3-1: SerialNumber: syz
[  275.858578][ T2524] usb 3-1: config 0 descriptor??
[  276.067147][ T2524] asix 3-1:0.48 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  276.077766][ T2524] asix 3-1:0.48: probe with driver asix failed with error -71
[  276.086375][ T2524] usb 3-1: USB disconnect, device number 12
[  276.392255][T14618] SELinux:  Context system_u:object_r:ptmx_t:s0 is not valid (left unmapped).
[  276.401401][   T36] kauditd_printk_skb: 2 callbacks suppressed
[  276.401416][   T36] audit: type=1400 audit(2000000030.268:72233): avc:  denied  { relabelto } for  pid=14616 comm="syz.8.4870" name="rnullb0" dev="tmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ptmx_t:s0"
[  276.434242][   T36] audit: type=1400 audit(2000000030.268:72234): avc:  denied  { associate } for  pid=14616 comm="syz.8.4870" name="rnullb0" dev="tmpfs" ino=226 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ptmx_t:s0"
[  276.471180][   T36] audit: type=1326 audit(2000000030.338:72235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14615 comm="syz.3.4869" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a9638f6c9 code=0x0
[  276.514517][   T36] audit: type=1400 audit(2000000030.378:72236): avc:  denied  { read } for  pid=14633 comm="syz.8.4874" name="rnullb0" dev="tmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ptmx_t:s0"
[  276.541470][   T36] audit: type=1400 audit(2000000030.378:72237): avc:  denied  { open } for  pid=14633 comm="syz.8.4874" path="/dev/rnullb0" dev="tmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ptmx_t:s0"
[  276.609126][   T36] audit: type=1400 audit(2000000030.478:72238): avc:  denied  { write } for  pid=14640 comm="syz.8.4877" name="rnullb0" dev="tmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ptmx_t:s0"
[  276.646331][T14647] rust_binder: Write failure EFAULT in pid:268
[  276.690341][T14649] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  276.753805][T14655] tc_dump_action: action bad kind
[  277.125966][ T2524] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  277.278606][ T2524] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  277.289495][ T2524] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.297649][ T2524] usb 3-1: Product: syz
[  277.301892][ T2524] usb 3-1: Manufacturer: syz
[  277.306501][ T2524] usb 3-1: SerialNumber: syz
[  277.577391][    T9] usb 3-1: USB disconnect, device number 13
[  277.667181][   T36] audit: type=1326 audit(2000000031.538:72239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.6.4895" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80e5f8f6c9 code=0x0
[  278.170135][T14706] netlink: 'syz.2.4898': attribute type 6 has an invalid length.
[  278.212150][T14710] overlay: Bad value for 'redirect_dir'
[  278.212411][T14708] overlayfs: overlapping lowerdir path
[  278.265014][T14719] netlink: 57 bytes leftover after parsing attributes in process `syz.2.4902'.
[  278.282545][T14719] rust_binder: Write failure EFAULT in pid:298
[  278.388089][T14731] SELinux: failed to load policy
[  278.479583][T14733] rust_binder: Write failure EINVAL in pid:304
[  278.479720][T14733] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=14733 comm=syz.2.4907
[  278.567395][ T2524] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  278.576162][ T2524] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  278.603982][T14750] fido_id[14750]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  278.647723][T14757] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:316
[  278.663317][T14761] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14761 comm=syz.6.4917
[  278.714716][T14770] overlayfs: failed to clone lowerpath
[  279.073136][T14807] netlink: 182 bytes leftover after parsing attributes in process `syz.6.4931'.
[  279.215705][T14820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14820 comm=syz.8.4936
[  279.229057][T14821] netlink: 'syz.8.4936': attribute type 63 has an invalid length.
[  279.237434][T14821] netlink: 5 bytes leftover after parsing attributes in process `syz.8.4936'.
[  279.246470][T14821] gretap0: entered allmulticast mode
[  279.251906][T14821] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  279.267567][T14821] netlink: 'syz.8.4936': attribute type 63 has an invalid length.
[  279.275384][T14821] netlink: 5 bytes leftover after parsing attributes in process `syz.8.4936'.
[  279.284492][T14821] netlink: 'syz.8.4936': attribute type 63 has an invalid length.
[  279.292425][T14821] netlink: 5 bytes leftover after parsing attributes in process `syz.8.4936'.
[  279.301563][T14821] netlink: 'syz.8.4936': attribute type 63 has an invalid length.
[  279.309708][T14821] netlink: 5 bytes leftover after parsing attributes in process `syz.8.4936'.
[  279.318728][T14821] netlink: 'syz.8.4936': attribute type 63 has an invalid length.
[  279.326626][T14821] netlink: 5 bytes leftover after parsing attributes in process `syz.8.4936'.
[  279.335505][T14821] netlink: 'syz.8.4936': attribute type 63 has an invalid length.
[  279.343351][T14821] netlink: 5 bytes leftover after parsing attributes in process `syz.8.4936'.
[  279.352347][T14821] netlink: 'syz.8.4936': attribute type 63 has an invalid length.
[  279.360217][T14821] netlink: 5 bytes leftover after parsing attributes in process `syz.8.4936'.
[  279.369154][T14821] netlink: 'syz.8.4936': attribute type 63 has an invalid length.
[  279.377420][T14821] netlink: 5 bytes leftover after parsing attributes in process `syz.8.4936'.
[  279.386970][T14821] netlink: 'syz.8.4936': attribute type 63 has an invalid length.
[  279.425235][T14829] tmpfs: Bad value for 'size'
[  279.454595][T14835] /dev/rnullb0: Can't lookup blockdev
[  279.471240][   T36] audit: type=1400 audit(2000000033.338:72240): avc:  denied  { map } for  pid=14836 comm="syz.8.4943" path="/dev/rnullb0" dev="tmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ptmx_t:s0"
[  279.534963][T14849] /dev/md0: Can't lookup blockdev
[  279.571234][   T36] audit: type=1400 audit(2000000033.438:72241): avc:  denied  { ioctl } for  pid=14852 comm="syz.8.4949" path="/dev/rnullb0" dev="tmpfs" ino=226 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ptmx_t:s0"
[  279.585179][T14856] /dev/rnullb0: Can't lookup blockdev
[  279.667114][   T36] audit: type=1400 audit(2000000033.538:72242): avc:  denied  { map } for  pid=14842 comm="syz.2.4944" path="socket:[56102]" dev="sockfs" ino=56102 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1
[  280.038240][T14882] fuse: Invalid rootmode
[  280.042918][T14882] SELinux: security_context_str_to_sid (user_u) failed with errno=-22
[  280.064116][T14885] overlayfs: failed to clone upperpath
[  280.365974][ T2524] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  280.525963][ T2524] usb 3-1: Using ep0 maxpacket: 8
[  280.532226][ T2524] usb 3-1: config 0 has an invalid interface number: 66 but max is 0
[  280.540618][ T2524] usb 3-1: config 0 has no interface number 0
[  280.550526][ T2524] usb 3-1: config 0 interface 66 has no altsetting 0
[  280.557372][ T2524] usb 3-1: New USB device found, idVendor=0dba, idProduct=5000, bcdDevice=35.87
[  280.566573][ T2524] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.576282][ T2524] usb 3-1: config 0 descriptor??
[  280.739784][T14905] /dev/rnullb0: Can't lookup blockdev
[  280.786487][ T2524] usb 3-1: string descriptor 0 read error: -71
[  280.793217][ T2524] usb 3-1: MBOX3: Invalid descriptor size=18.
[  280.800052][ T2524] usb 3-1: USB disconnect, device number 14
[  281.208015][T14912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14912 comm=syz.6.4971
[  281.256000][T14917] /dev/rnullb0: Can't lookup blockdev
[  281.369722][T14928] loop5: detected capacity change from 0 to 7
[  281.655970][  T751] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  281.807023][  T751] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  281.816867][  T751] usb 3-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00
[  281.825952][  T751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.834535][  T751] usb 3-1: config 0 descriptor??
[  282.241794][  T751] elecom 0003:056E:011C.0010: global environment stack underflow
[  282.249614][  T751] elecom 0003:056E:011C.0010: item 0 4 1 11 parsing failed
[  282.257058][  T751] elecom 0003:056E:011C.0010: probe with driver elecom failed with error -22
[  282.456109][T14928] Invalid logical block size (1)
[  282.462887][  T751] usb 3-1: USB disconnect, device number 15
[  282.803986][T14974] /dev/rnullb0: Can't lookup blockdev
[  282.994534][   T36] kauditd_printk_skb: 7 callbacks suppressed
[  282.994553][   T36] audit: type=1400 audit(2000000036.858:72249): avc:  denied  { remount } for  pid=14990 comm="syz.2.5000" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  283.285964][ T2524] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  283.435972][ T2524] usb 3-1: Using ep0 maxpacket: 16
[  283.442524][ T2524] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  283.453438][ T2524] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  283.466271][ T2524] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  283.475328][ T2524] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.484860][ T2524] usb 3-1: config 0 descriptor??
[  283.589611][T15012] __nla_validate_parse: 28 callbacks suppressed
[  283.589632][T15012] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5008'.
[  283.700571][ T2524] usbhid 3-1:0.0: can't add hid device: -71
[  283.713639][ T2524] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  283.721559][   T36] audit: type=1400 audit(2000000805.583:72250): avc:  denied  { setattr } for  pid=15025 comm="syz.2.5013" name="binder-control" dev="binder" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  283.746417][ T2524] usb 3-1: USB disconnect, device number 16
[  283.830312][T15035] SELinux:  policydb table sizes (0,0) do not match mine (5,6)
[  283.838731][T15035] SELinux: failed to load policy
[  283.942920][T15044] netfs: Couldn't get user pages (rc=-14)
[  284.301440][T15050] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000004'
[  284.495013][T15060] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5026'.
[  284.650361][T15080] validate_nla: 24 callbacks suppressed
[  284.650383][T15080] netlink: 'syz.6.5029': attribute type 1 has an invalid length.
[  284.857994][T15089] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  284.877660][T15091] netlink: 'syz.3.5033': attribute type 5 has an invalid length.
[  284.885431][T15091] netlink: 3681 bytes leftover after parsing attributes in process `syz.3.5033'.
[  285.230405][   T36] audit: type=1326 audit(2000000807.088:72251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15116 comm="syz.6.5040" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80e5f8f6c9 code=0x0
[  285.844330][   T36] audit: type=1326 audit(2000000807.705:72252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15103 comm="syz.3.5037" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9638f6c9 code=0x7fc00000
[  285.952662][T15143] bpf: Bad value for 'gid'
[  286.167165][T15192] overlayfs: missing 'lowerdir'
[  286.382391][T15207] tipc: Enabling of bearer <ib:vlan0> rejected, media not registered
[  286.463519][   T36] audit: type=1326 audit(2000000809.318:72253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15219 comm="syz.6.5080" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f80e5f8f6c9 code=0x0
[  286.504169][T15226] /dev/rnullb0: Can't lookup blockdev
[  287.261885][T15308] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  287.263027][T15308] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[  287.411991][T15326] rust_binder: 390: no such ref 3
[  287.425271][T15326] rust_binder: 390: no such ref 1
[  287.430538][T15326] rust_binder: Write failure EFAULT in pid:390
[  287.823232][T15364] rust_binder: Write failure EFAULT in pid:413
[  287.867843][T15372] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5134'.
[  287.962876][T15380] netlink: 324 bytes leftover after parsing attributes in process `syz.6.5138'.
[  288.337306][  T602] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  288.487328][  T602] usb 3-1: Using ep0 maxpacket: 32
[  288.493581][  T602] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  288.501758][  T602] usb 3-1: config 0 has no interface number 0
[  288.509296][  T602] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  288.518389][  T602] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.526426][  T602] usb 3-1: Product: syz
[  288.530663][  T602] usb 3-1: Manufacturer: syz
[  288.535278][  T602] usb 3-1: SerialNumber: syz
[  288.540585][  T602] usb 3-1: config 0 descriptor??
[  288.546243][  T602] smsc95xx v2.0.0
[  289.356930][  T602] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[  289.371733][  T602] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  289.381009][  T602] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  289.391885][  T602] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[  289.401092][  T602] usb 3-1: USB disconnect, device number 17
[  289.885198][T15471] binder: Unknown parameter 'm���.z�ax'
[  289.904768][T15477] rust_binder: Read failure Err(EAGAIN) in pid:426
[  290.158145][ T2527] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  290.327679][ T2527] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  290.338704][ T2527] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00
[  290.347846][ T2527] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.356776][ T2527] usb 3-1: config 0 descriptor??
[  290.470921][T15525] netlink: 288 bytes leftover after parsing attributes in process `syz.3.5187'.
[  290.501325][T15529] 9pnet_fd: p9_fd_create_unix (15529): problem connecting socket: ./file0: -2
[  290.755070][T15566] netlink: 'syz.3.5201': attribute type 28 has an invalid length.
[  290.763469][T15566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5201'.
[  290.767221][ T2527] zeroplus 0003:0C12:0005.0011: item fetching failed at offset 0/3
[  290.780781][ T2527] zeroplus 0003:0C12:0005.0011: parse failed
[  290.786821][ T2527] zeroplus 0003:0C12:0005.0011: probe with driver zeroplus failed with error -22
[  290.962183][T15569] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5202'.
[  290.993695][T15572] /dev/rnullb0: Can't lookup blockdev
[  291.204371][T15481] VFS: Mount too revealing
[  291.222780][T15481] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=26907 sclass=netlink_xfrm_socket pid=15481 comm=syz.2.5173
[  291.255263][T15481] rust_binder: Write failure EFAULT in pid:428
[  291.464169][   T36] audit: type=1326 audit(2000000814.316:72254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15617 comm="syz.3.5216" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3a9638f6c9 code=0x0
[  291.589347][T15625] Invalid ELF header type: 2 != 1
[  291.589931][   T36] audit: type=1400 audit(2000000814.446:72255): avc:  denied  { module_load } for  pid=15624 comm="syz.3.5218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1
[  291.614561][   T36] audit: type=1326 audit(2000000814.446:72256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15624 comm="syz.3.5218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9638f6c9 code=0x7ffc0000
[  291.640883][   T36] audit: type=1326 audit(2000000814.446:72257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15624 comm="syz.3.5218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3a9638df10 code=0x7ffc0000
[  291.665459][   T36] audit: type=1326 audit(2000000814.446:72258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15624 comm="syz.3.5218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3a9638df10 code=0x7ffc0000
[  291.691298][   T36] audit: type=1326 audit(2000000814.446:72259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15624 comm="syz.3.5218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9638f6c9 code=0x7ffc0000
[  291.715547][   T36] audit: type=1326 audit(2000000814.446:72260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15624 comm="syz.3.5218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f3a9638f6c9 code=0x7ffc0000
[  291.740217][   T36] audit: type=1326 audit(2000000814.446:72261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15624 comm="syz.3.5218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9638f6c9 code=0x7ffc0000
[  291.766363][  T602] usb 3-1: USB disconnect, device number 18
[  291.775891][   T36] audit: type=1326 audit(2000000814.446:72262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15624 comm="syz.3.5218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3a9638f6c9 code=0x7ffc0000
[  291.783421][T15629] /dev/loop0: Can't lookup blockdev
[  291.799581][   T36] audit: type=1326 audit(2000000814.446:72263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15624 comm="syz.3.5218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a9638f6c9 code=0x7ffc0000
[  292.040906][T15693] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5242'.
[  292.051920][T15693] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5242'.
[  292.069944][T15696] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5243'.
[  292.252996][T15736] netlink: 'syz.2.5255': attribute type 4 has an invalid length.
[  292.260847][T15736] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.5255'.
[  292.271404][T15740] overlayfs: failed to clone upperpath
[  292.499865][T15758] tc_dump_action: action bad kind
[  292.841669][T15803] veth0_to_team: entered promiscuous mode
[  292.847463][T15803] veth0_to_team: entered allmulticast mode
[  292.873990][T15805] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5280'.
[  292.904650][T15810] incfs: Options parsing error. -22
[  292.909946][T15810] incfs: mount failed -22
[  293.723468][T15825] netlink: 'syz.3.5289': attribute type 15 has an invalid length.
[  293.945853][T15865] incfs: mount failed -22
[  294.792025][T15906] 9p: Unknown uid 00000000004294967295
[  294.814043][T15906] veth1_macvtap: left promiscuous mode
[  294.819590][T15906] macsec0: entered promiscuous mode
[  294.824824][T15906] macsec0: entered allmulticast mode
[  294.840188][T15906] veth1_macvtap: entered promiscuous mode
[  294.846195][T15906] veth1_macvtap: entered allmulticast mode
[  294.852178][T15906] macsec0: left promiscuous mode
[  294.857215][T15906] macsec0: left allmulticast mode
[  294.862314][T15906] veth1_macvtap: left allmulticast mode
[  295.044812][T15908] SELinux:  Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped).
[  295.316033][T15945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5330'.
[  295.405884][T15964] /dev/loop0: Can't lookup blockdev
[  295.436574][T15976] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  295.725450][T16004] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5350'.
[  295.735271][T16005] netlink: 64 bytes leftover after parsing attributes in process `syz.8.5350'.
[  295.795993][T11599] batadv_slave_1: left promiscuous mode
[  295.901853][T16012] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.908997][T16012] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.916254][T16012] bridge_slave_0: entered allmulticast mode
[  295.922612][T16012] bridge_slave_0: entered promiscuous mode
[  295.928930][T16012] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.936004][T16012] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.943059][T16012] bridge_slave_1: entered allmulticast mode
[  295.951363][T16012] bridge_slave_1: entered promiscuous mode
[  296.014143][T16026] netlink: 'syz.6.5357': attribute type 22 has an invalid length.
[  296.026836][T16026] netlink: 'syz.6.5357': attribute type 2 has an invalid length.
[  296.096025][T16012] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.103105][T16012] bridge0: port 2(bridge_slave_1) entered forwarding state
[  296.110390][T16012] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.117458][T16012] bridge0: port 1(bridge_slave_0) entered forwarding state
[  296.151260][ T2192] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.158751][ T2192] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.175969][ T2193] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.183029][ T2193] bridge0: port 1(bridge_slave_0) entered forwarding state
[  296.204178][ T2193] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.211234][ T2193] bridge0: port 2(bridge_slave_1) entered forwarding state
[  296.250294][T16012] veth0_vlan: entered promiscuous mode
[  296.267758][T16012] veth1_macvtap: entered promiscuous mode
[  296.315412][T16066] netlink: 'syz.2.5369': attribute type 12 has an invalid length.
[  296.423128][T16076] binder: Bad value for 'max'
[  296.613329][   T36] kauditd_printk_skb: 9 callbacks suppressed
[  296.613345][   T36] audit: type=1400 audit(2000000819.473:72273): avc:  denied  { getattr } for  pid=16101 comm="syz.8.5382" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  296.615227][T16102] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL }
[  296.642197][T16102] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:15
[  296.681628][T16107] netlink: 'syz.6.5384': attribute type 27 has an invalid length.
[  296.737099][T16111] netlink: 'syz.6.5386': attribute type 4 has an invalid length.
[  296.744875][T16111] netlink: 'syz.6.5386': attribute type 6 has an invalid length.
[  296.752697][T16111] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.5386'.
[  296.811822][   T36] audit: type=1326 audit(2000000819.673:72274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16120 comm="syz.6.5390" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80e5f8f6c9 code=0x0
[  296.901435][ T2524] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  297.051505][ T2524] usb 9-1: Using ep0 maxpacket: 32
[  297.058109][ T2524] usb 9-1: config 0 has an invalid interface number: 67 but max is 0
[  297.066503][ T2524] usb 9-1: config 0 has no interface number 0
[  297.075996][ T2524] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  297.085304][ T2524] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  297.093635][ T2524] usb 9-1: Product: syz
[  297.097995][ T2524] usb 9-1: Manufacturer: syz
[  297.102957][ T2524] usb 9-1: SerialNumber: syz
[  297.131365][ T2524] usb 9-1: config 0 descriptor??
[  297.142922][ T2524] smsc95xx v2.0.0
[  297.369121][   T36] audit: type=1326 audit(2000000820.213:72275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16128 comm="syz.2.5393" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd88518f6c9 code=0x0
[  297.745923][ T2524] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71
[  297.756938][ T2524] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD
[  297.766180][ T2524] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  297.777038][ T2524] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71
[  297.786072][ T2524] usb 9-1: USB disconnect, device number 4
[  298.814317][T16183] rust_binder: 41: no such ref 0
[  298.819298][T16183] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0
[  298.826344][T16183] rust_binder: 41: no such ref 2
[  298.831292][T16183] rust_binder: Failed to allocate buffer. len:1128, is_oneway:false
[  298.959988][T16194] rust_binder: 51: no such ref 1
[  298.973048][T16194] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1
[  298.980074][T16194] rust_binder: 51: no such ref 1
[  298.985042][T16194] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:51
[  299.026621][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.035735][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.042148][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.048640][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.055078][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.061551][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.068027][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.074599][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.081036][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.087496][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.094043][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.100481][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.106918][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.113341][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.122511][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.128932][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.135391][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.141819][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.148271][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.155155][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.161624][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.168079][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.174528][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.180950][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.187406][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.193859][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.200310][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.206791][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.213236][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.219675][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.226137][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.234162][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.241216][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.247700][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.254180][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.260796][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.273354][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.279851][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.286552][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.293107][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.299736][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.306344][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.319736][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.326205][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.332651][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.341404][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.356784][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.367616][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.375393][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.381829][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.398992][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.405493][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.412067][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.418562][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.435785][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.442221][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.454068][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.464594][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.473871][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.480309][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.492259][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.502611][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.511780][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.520801][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.529322][T16203] rust_binder: BINDER_SET_CONTEXT_MGR already set
[  299.630349][T16270] netlink: 'syz.8.5434': attribute type 27 has an invalid length.
[  299.683265][T16278] rust_binder: Failed to allocate buffer. len:152, is_oneway:false
[  299.733224][   T36] audit: type=1400 audit(2000000822.592:72276): avc:  denied  { create } for  pid=16279 comm="syz.6.5435" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  299.923034][  T602] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  299.972829][T16282] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2066 sclass=netlink_route_socket pid=16282 comm=syz.2.5436
[  300.015966][T16297] veth0_to_batadv: entered allmulticast mode
[  300.025452][T16295] syz.3.5442: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0
[  300.043193][T16295] CPU: 1 UID: 0 PID: 16295 Comm: syz.3.5442 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[  300.043221][T16295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  300.043249][T16295] Call Trace:
[  300.043260][T16295]  <TASK>
[  300.043268][T16295]  __dump_stack+0x21/0x30
[  300.043298][T16295]  dump_stack_lvl+0x10c/0x190
[  300.043323][T16295]  ? __cfi_dump_stack_lvl+0x10/0x10
[  300.043349][T16295]  ? _raw_spin_unlock_irqrestore+0x4a/0x70
[  300.043376][T16295]  dump_stack+0x19/0x20
[  300.043401][T16295]  warn_alloc+0x1bc/0x2a0
[  300.043426][T16295]  ? kasan_save_free_info+0x4a/0x60
[  300.043454][T16295]  ? __cfi_warn_alloc+0x10/0x10
[  300.043479][T16295]  ? __get_vm_area_node+0x1dc/0x3a0
[  300.043506][T16295]  ? packet_set_ring+0x735/0x2850
[  300.043532][T16295]  __vmalloc_node_range_noprof+0x68e/0x1420
[  300.043558][T16295]  ? packet_set_ring+0x669/0x2850
[  300.043582][T16295]  ? do_sock_setsockopt+0x26d/0x400
[  300.043610][T16295]  ? __x64_sys_setsockopt+0x1b8/0x250
[  300.043641][T16295]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  300.043669][T16295]  ? __asan_memset+0x39/0x50
[  300.043686][T16295]  ? __alloc_pages_noprof+0xbf/0x7b0
[  300.043712][T16295]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  300.043739][T16295]  ? packet_set_ring+0x735/0x2850
[  300.043763][T16295]  vzalloc_noprof+0xfd/0x1d0
[  300.043789][T16295]  ? packet_set_ring+0x735/0x2850
[  300.043814][T16295]  ? __cfi_vzalloc_noprof+0x10/0x10
[  300.043841][T16295]  ? packet_set_ring+0x669/0x2850
[  300.043866][T16295]  packet_set_ring+0x735/0x2850
[  300.043892][T16295]  ? __cfi__raw_spin_lock_bh+0x10/0x10
[  300.043917][T16295]  ? packet_mmap+0x570/0x570
[  300.043941][T16295]  ? __check_object_size+0xe0/0x810
[  300.043958][T16295]  ? __asan_memcpy+0x5a/0x80
[  300.043976][T16295]  ? __cfi___check_object_size+0x10/0x10
[  300.043993][T16295]  ? avc_has_perm_noaudit+0x286/0x360
[  300.044020][T16295]  ? __kasan_check_write+0x18/0x20
[  300.044048][T16295]  ? _copy_from_user+0x8b/0xb0
[  300.044074][T16295]  packet_setsockopt+0xc5d/0x12a0
[  300.044099][T16295]  ? __cfi_packet_setsockopt+0x10/0x10
[  300.044125][T16295]  ? selinux_socket_setsockopt+0x2ea/0x390
[  300.044162][T16295]  ? __cfi_selinux_socket_setsockopt+0x10/0x10
[  300.044193][T16295]  ? do_futex+0x356/0x500
[  300.044215][T16295]  ? bpf_lsm_socket_setsockopt+0xd/0x20
[  300.044241][T16295]  ? security_socket_setsockopt+0x33/0xd0
[  300.044261][T16295]  ? __cfi_packet_setsockopt+0x10/0x10
[  300.044287][T16295]  do_sock_setsockopt+0x26d/0x400
[  300.044316][T16295]  ? __cfi_do_sock_setsockopt+0x10/0x10
[  300.044347][T16295]  __x64_sys_setsockopt+0x1b8/0x250
[  300.044376][T16295]  x64_sys_call+0x2adc/0x2ee0
[  300.044406][T16295]  do_syscall_64+0x58/0xf0
[  300.044431][T16295]  ? clear_bhb_loop+0x50/0xa0
[  300.044454][T16295]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  300.044475][T16295] RIP: 0033:0x7f3a9638f6c9
[  300.044492][T16295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  300.044510][T16295] RSP: 002b:00007f3a97242038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  300.044531][T16295] RAX: ffffffffffffffda RBX: 00007f3a965e5fa0 RCX: 00007f3a9638f6c9
[  300.044546][T16295] RDX: 000000000000000d RSI: 0000000000000107 RDI: 0000000000000007
[  300.044559][T16295] RBP: 00007f3a96411f91 R08: 000000000000001c R09: 0000000000000000
[  300.044573][T16295] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000
[  300.044586][T16295] R13: 00007f3a965e6038 R14: 00007f3a965e5fa0 R15: 00007ffdd66a2148
[  300.044604][T16295]  </TASK>
[  300.044772][T16295] Mem-Info:
[  300.073109][  T602] usb 9-1: Using ep0 maxpacket: 32
[  300.077646][T16295] active_anon:24741 inactive_anon:1179 isolated_anon:0
[  300.077646][T16295]  active_file:9728 inactive_file:15207 isolated_file:0
[  300.077646][T16295]  unevictable:16391 dirty:128 writeback:0
[  300.077646][T16295]  slab_reclaimable:6233 slab_unreclaimable:79932
[  300.077646][T16295]  mapped:24490 shmem:18413 pagetables:1164
[  300.077646][T16295]  sec_pagetables:0 bounce:0
[  300.077646][T16295]  kernel_misc_reclaimable:0
[  300.077646][T16295]  free:1471516 free_pcp:4151 free_cma:0
[  300.083418][  T602] usb 9-1: too many configurations: 154, using maximum allowed: 8
[  300.096463][T16295] Node 0 active_anon:98964kB inactive_anon:4716kB active_file:38912kB inactive_file:60828kB unevictable:65564kB isolated(anon):0kB isolated(file):0kB mapped:97960kB dirty:512kB writeback:0kB shmem:73652kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7844kB pagetables:4656kB sec_pagetables:0kB all_unreclaimable? no
[  300.103839][  T602] usb 9-1: unable to read config index 0 descriptor/start: -61
[  300.106642][T16295] DMA32 free:2960212kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:5724kB local_pcp:5656kB free_cma:0kB
[  300.111714][  T602] usb 9-1: can't read configurations, error -61
[  300.116840][T16295] lowmem_reserve[]:
[  300.263078][  T602] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  300.268646][T16295]  0
[  300.493204][  T602] usb 9-1: Using ep0 maxpacket: 32
[  300.538825][T16295]  3921 3921
[  300.550232][T16295] Normal free:2935096kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:99148kB inactive_anon:4716kB active_file:38912kB inactive_file:60828kB unevictable:65564kB writepending:512kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:1924kB local_pcp:1692kB free_cma:0kB
[  300.553610][  T602] usb 9-1: too many configurations: 154, using maximum allowed: 8
[  300.582297][T16295] lowmem_reserve[]: 0 0 0
[  300.593387][  T602] usb 9-1: unable to read config index 0 descriptor/start: -61
[  300.594784][T16295] DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 4*64kB (M) 3*128kB (M) 4*256kB (M) 4*512kB (M) 5*1024kB (UM) 5*2048kB (M) 718*4096kB (M) = 2960212kB
[  300.603169][  T602] usb 9-1: can't read configurations, error -61
[  300.617678][T16295] Normal: 495*4kB (UME) 1072*8kB (UME) 500*16kB (UME) 651*32kB (UME) 689*64kB (UME) 463*128kB (UME) 153*256kB (UME) 83*512kB (UME) 45*1024kB (UME) 5*2048kB (UME) 648*4096kB (UM) = 2934940kB
[  300.625245][  T602] usb usb9-port1: attempt power cycle
[  300.643376][T16295] 60965 total pagecache pages
[  300.653045][T16295] 1236 pages in swap cache
[  300.657680][T16295] Free swap  = 115364kB
[  300.661848][T16295] Total swap = 124996kB
[  300.666106][T16295] 2097051 pages RAM
[  300.670144][T16295] 0 pages HighMem/MovableOnly
[  300.675110][T16295] 351537 pages reserved
[  300.679280][T16295] 0 pages cma reserved
[  300.686359][T16295] Memory allocations:
[  300.690402][T16295]          0 B        0 init/main.c:1370 func:do_initcalls
[  300.697804][T16295]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  300.706556][T16295]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  300.714600][T16295]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  300.722554][T16295]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  300.730515][T16295]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  300.739162][T16295]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  300.747136][T16295]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  300.755138][T16295]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  300.763100][T16295]          0 B        0 init/initramfs.c:101 func:find_link
[  300.904612][T16347] overlayfs: failed to resolve './file0': -2
[  300.972895][T16364] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=16364 comm=syz.3.5465
[  300.993548][  T602] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  301.014187][  T602] usb 9-1: Using ep0 maxpacket: 32
[  301.019924][  T602] usb 9-1: too many configurations: 154, using maximum allowed: 8
[  301.032540][  T602] usb 9-1: unable to read config index 0 descriptor/start: -61
[  301.040143][  T602] usb 9-1: can't read configurations, error -61
[  301.173643][  T602] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  301.193979][  T602] usb 9-1: Using ep0 maxpacket: 32
[  301.199486][  T602] usb 9-1: too many configurations: 154, using maximum allowed: 8
[  301.208340][  T602] usb 9-1: unable to read config index 0 descriptor/start: -61
[  301.215918][  T602] usb 9-1: can't read configurations, error -61
[  301.222225][  T602] usb usb9-port1: unable to enumerate USB device
[  321.709372][   T36] audit: type=1326 audit(2000000844.551:72277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16385 comm="syz.3.5472" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3a9638f6c9 code=0x0
[  321.767076][T16400] rust_binder: 78: no such ref 3
[  321.772079][T16400] rust_binder: 78: no such ref 1
[  321.777226][T16400] rust_binder: Write failure EFAULT in pid:78
[  321.884775][T16414] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=16414 comm=syz.2.5479
[  321.990033][T16439] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5489'.
[  321.999236][T16439] netlink: 'syz.3.5489': attribute type 6 has an invalid length.
[  322.007339][T16439] netlink: 'syz.3.5489': attribute type 5 has an invalid length.
[  322.015261][T16439] netlink: 'syz.3.5489': attribute type 4 has an invalid length.
[  322.164202][   T36] audit: type=1400 audit(2000000845.011:72278): avc:  denied  { append } for  pid=16455 comm="syz.8.5494" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  322.316841][   T36] audit: type=1326 audit(2000000845.161:72279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16460 comm="syz.8.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c258f6c9 code=0x7fc00000
[  322.340597][   T36] audit: type=1326 audit(2000000845.161:72280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16460 comm="syz.8.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff1c258f6c9 code=0x7fc00000
[  322.364349][   T36] audit: type=1326 audit(2000000845.161:72281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16460 comm="syz.8.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c258f6c9 code=0x7fc00000
[  322.394028][   T36] audit: type=1326 audit(2000000845.161:72282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16460 comm="syz.8.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c258f6c9 code=0x7fc00000
[  322.417770][   T36] audit: type=1326 audit(2000000845.161:72283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16460 comm="syz.8.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c258f6c9 code=0x7fc00000
[  322.441509][   T36] audit: type=1326 audit(2000000845.161:72284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16460 comm="syz.8.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c258f6c9 code=0x7fc00000
[  322.465242][   T36] audit: type=1326 audit(2000000845.161:72285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16460 comm="syz.8.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c258f6c9 code=0x7fc00000
[  322.488939][   T36] audit: type=1326 audit(2000000845.161:72286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16460 comm="syz.8.5496" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1c258f6c9 code=0x7fc00000
[  322.625481][T16470] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5501'.
[  322.777021][T16484] netlink: 'syz.3.5506': attribute type 13 has an invalid length.
[  322.784966][T16474] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.792085][T16474] bridge0: port 1(bridge_slave_0) entered disabled state
[  322.799635][T16474] bridge_slave_0: entered allmulticast mode
[  322.806084][T16474] bridge_slave_0: entered promiscuous mode
[  322.813313][T16474] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.820513][T16474] bridge0: port 2(bridge_slave_1) entered disabled state
[  322.827693][T16474] bridge_slave_1: entered allmulticast mode
[  322.834247][T16474] bridge_slave_1: entered promiscuous mode
[  322.841917][T16492] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5509'.
[  322.852805][ T2192] bridge_slave_1: left allmulticast mode
[  322.858491][ T2192] bridge_slave_1: left promiscuous mode
[  322.865246][ T2192] bridge0: port 2(bridge_slave_1) entered disabled state
[  322.872682][ T2192] bridge_slave_0: left allmulticast mode
[  322.878430][ T2192] bridge_slave_0: left promiscuous mode
[  322.884100][ T2192] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.025252][T16474] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.032407][T16474] bridge0: port 2(bridge_slave_1) entered forwarding state
[  323.039696][T16474] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.046762][T16474] bridge0: port 1(bridge_slave_0) entered forwarding state
[  323.055251][ T2192] veth1_macvtap: left promiscuous mode
[  323.060799][ T2192] veth0_vlan: left promiscuous mode
[  323.115929][  T300] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.123269][  T300] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.133157][ T2193] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.140236][ T2193] bridge0: port 1(bridge_slave_0) entered forwarding state
[  323.150747][  T300] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.157839][  T300] bridge0: port 2(bridge_slave_1) entered forwarding state
[  323.183055][T16474] veth0_vlan: entered promiscuous mode
[  323.193866][T16474] veth1_macvtap: entered promiscuous mode
[  323.225877][T16504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5502'.
[  323.377563][T16507] netlink: 'syz.6.5511': attribute type 4 has an invalid length.
[  323.385412][T16507] netlink: 17 bytes leftover after parsing attributes in process `syz.6.5511'.
[  323.479090][T16513] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5513'.
[  324.564961][  T855] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  324.695001][  T855] usb 5-1: device descriptor read/64, error -71
[  324.764469][T16589] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5540'.
[  324.935103][  T855] usb 5-1: device descriptor read/64, error -71
[  325.175569][  T855] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  325.305301][  T855] usb 5-1: device descriptor read/64, error -71
[  325.387654][T16634] cgroup: No subsys list or none specified
[  325.555431][  T855] usb 5-1: device descriptor read/64, error -71
[  325.667538][  T855] usb usb5-port1: attempt power cycle
[  325.676760][T16651] overlay: filesystem on ./bus is read-only
[  325.683364][T16651] netlink: 388 bytes leftover after parsing attributes in process `syz.2.5563'.
[  326.015656][  T855] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  326.036791][  T855] usb 5-1: device descriptor read/8, error -71
[  326.166750][  T855] usb 5-1: device descriptor read/8, error -71
[  326.405866][  T855] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  326.426851][  T855] usb 5-1: device descriptor read/8, error -71
[  326.497746][T16682] netlink: 'syz.6.5574': attribute type 1 has an invalid length.
[  326.556935][  T855] usb 5-1: device descriptor read/8, error -71
[  326.578255][T16686] netlink: 156 bytes leftover after parsing attributes in process `syz.6.5576'.
[  326.676079][  T855] usb usb5-port1: unable to enumerate USB device
[  326.967498][T16694] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.974574][T16694] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.981861][T16694] bridge_slave_0: entered allmulticast mode
[  326.988167][T16694] bridge_slave_0: entered promiscuous mode
[  326.994571][T16694] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.001631][T16694] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.008702][T16694] bridge_slave_1: entered allmulticast mode
[  327.014911][T16694] bridge_slave_1: entered promiscuous mode
[  327.063559][T16694] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.070618][T16694] bridge0: port 2(bridge_slave_1) entered forwarding state
[  327.077896][T16694] bridge0: port 1(bridge_slave_0) entered blocking state
[  327.084920][T16694] bridge0: port 1(bridge_slave_0) entered forwarding state
[  327.105930][  T300] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.113646][  T300] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.122604][ T2192] bridge0: port 1(bridge_slave_0) entered blocking state
[  327.129678][ T2192] bridge0: port 1(bridge_slave_0) entered forwarding state
[  327.138432][  T300] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.145486][  T300] bridge0: port 2(bridge_slave_1) entered forwarding state
[  327.171341][T16694] veth0_vlan: entered promiscuous mode
[  327.182447][T16694] veth1_macvtap: entered promiscuous mode
[  327.358120][T16715] batadv_slave_1: entered promiscuous mode
[  327.368113][T16714] batadv_slave_1: left promiscuous mode
[  327.410375][T16731] incfs: mount failed -22
[  327.466358][   T10] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  327.616432][   T10] usb 7-1: Using ep0 maxpacket: 32
[  327.622682][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  327.633641][   T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  327.643447][   T10] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  327.652491][   T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.661245][   T10] usb 7-1: config 0 descriptor??
[  327.766496][ T2527] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  327.917684][ T2527] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[  327.930043][ T2527] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  327.940182][ T2527] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  327.954556][ T2527] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  327.963648][ T2527] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.971695][ T2527] usb 5-1: Product: syz
[  327.976108][ T2527] usb 5-1: Manufacturer: syz
[  327.980746][ T2527] usb 5-1: SerialNumber: syz
[  327.985971][ T2527] usb 5-1: config 0 descriptor??
[  327.991871][ T2527] usb-storage 5-1:0.0: USB Mass Storage device detected
[  327.999659][ T2527] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  328.068984][   T10] savu 0003:1E7D:2D5A.0012: unknown main item tag 0x0
[  328.075883][   T10] savu 0003:1E7D:2D5A.0012: unknown main item tag 0x0
[  328.082813][   T10] savu 0003:1E7D:2D5A.0012: unknown main item tag 0x0
[  328.089624][   T10] savu 0003:1E7D:2D5A.0012: unknown main item tag 0x0
[  328.096394][   T10] savu 0003:1E7D:2D5A.0012: unknown main item tag 0x0
[  328.103241][   T10] savu 0003:1E7D:2D5A.0012: unbalanced collection at end of report description
[  328.112460][   T10] savu 0003:1E7D:2D5A.0012: parse failed
[  328.118175][   T10] savu 0003:1E7D:2D5A.0012: probe with driver savu failed with error -22
[  328.193790][T16712] can0: slcan on ptm0.
[  328.218070][T16712] can0 (unregistered): slcan off ptm0.
[  328.224306][   T10] usb 5-1: USB disconnect, device number 7
[  328.270979][T16707] binder: Unknown parameter ''
[  328.276731][  T751] usb 7-1: USB disconnect, device number 14
[  328.539953][T16774] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=44 sclass=netlink_audit_socket pid=16774 comm=syz.3.5591
[  328.676808][   T36] kauditd_printk_skb: 304 callbacks suppressed
[  328.676809][T16781] No source specified
[  328.676833][   T36] audit: type=1400 audit(2000000851.507:72591): avc:  denied  { mounton } for  pid=16780 comm="syz.3.5594" path="/342/file0" dev="tmpfs" ino=1867 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1
[  328.756519][T16791] ip6tnl0: entered promiscuous mode
[  328.907744][T16809] __vm_enough_memory: pid: 16809, comm: syz.6.5605, bytes: 18014402804453376 not enough memory for the allocation
[  328.923965][T16792] ip6tnl0: left promiscuous mode
[  328.997136][   T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  329.127159][   T10] usb 5-1: device descriptor read/64, error -71
[  329.222383][T16816] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.229550][T16816] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.236616][T16816] bridge_slave_0: entered allmulticast mode
[  329.243069][T16816] bridge_slave_0: entered promiscuous mode
[  329.249783][T16816] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.256927][T16816] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.265133][T16816] bridge_slave_1: entered allmulticast mode
[  329.271481][T16816] bridge_slave_1: entered promiscuous mode
[  329.286057][ T2192] bridge_slave_1: left allmulticast mode
[  329.291750][ T2192] bridge_slave_1: left promiscuous mode
[  329.297479][ T2192] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.304940][ T2192] bridge_slave_0: left allmulticast mode
[  329.310657][ T2192] bridge_slave_0: left promiscuous mode
[  329.316251][ T2192] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.387278][   T10] usb 5-1: device descriptor read/64, error -71
[  329.426591][ T2192] veth1_macvtap: left promiscuous mode
[  329.432306][ T2192] veth0_vlan: left promiscuous mode
[  329.508724][T16816] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.515818][T16816] bridge0: port 2(bridge_slave_1) entered forwarding state
[  329.523092][T16816] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.530135][T16816] bridge0: port 1(bridge_slave_0) entered forwarding state
[  329.561715][T16850] netlink: 'syz.2.5617': attribute type 1 has an invalid length.
[  329.570943][ T2193] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.578297][ T2193] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.596729][ T2193] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.603817][ T2193] bridge0: port 1(bridge_slave_0) entered forwarding state
[  329.612378][ T2193] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.614658][   T36] audit: type=1400 audit(2000000852.447:72592): avc:  denied  { create } for  pid=16855 comm="syz.2.5619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  329.619437][ T2193] bridge0: port 2(bridge_slave_1) entered forwarding state
[  329.646305][   T36] audit: type=1326 audit(2000000852.457:72593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16855 comm="syz.2.5619" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd88518f6c9 code=0x0
[  329.647422][   T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  329.680883][T16816] veth0_vlan: entered promiscuous mode
[  329.695878][T16816] veth1_macvtap: entered promiscuous mode
[  329.731061][T16868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5609'.
[  329.750527][T16873] rust_binder: Failed to allocate buffer. len:4120, is_oneway:false
[  329.750597][T16872] rust_binder: Write failure EINVAL in pid:7
[  329.752776][   T36] audit: type=1404 audit(2000000852.587:72594): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  329.780730][   T36] audit: type=1404 audit(2000000852.617:72595): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
[  329.795905][   T36] audit: type=1400 audit(2000000852.617:72596): avc:  denied  { create } for  pid=16871 comm="syz.0.5623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[  329.816592][   T10] usb 5-1: device descriptor read/64, error -71
[  329.823629][   T36] audit: type=1400 audit(2000000852.637:72597): avc:  denied  { read write } for  pid=16816 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  329.848008][   T36] audit: type=1400 audit(2000000852.637:72598): avc:  denied  { open } for  pid=16816 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  329.872746][   T36] audit: type=1400 audit(2000000852.637:72599): avc:  denied  { ioctl } for  pid=16816 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=49 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  329.898473][   T36] audit: type=1400 audit(2000000852.637:72600): avc:  denied  { read } for  pid=16875 comm="syz.0.5624" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1
[  330.057691][   T10] usb 5-1: device descriptor read/64, error -71
[  330.067631][ T2525] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  330.167761][   T10] usb usb5-port1: attempt power cycle
[  330.228826][ T2525] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  330.240058][ T2525] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  330.250353][ T2525] usb 1-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00
[  330.259671][ T2525] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.268925][ T2525] usb 1-1: config 0 descriptor??
[  330.333486][T16907] netlink: 'syz.2.5637': attribute type 4 has an invalid length.
[  330.341246][T16907] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.5637'.
[  330.507828][   T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  330.529469][   T10] usb 5-1: device descriptor read/8, error -71
[  330.659196][   T10] usb 5-1: device descriptor read/8, error -71
[  330.881068][T16883] netlink: 'syz.0.5626': attribute type 58 has an invalid length.
[  330.898057][   T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  330.919082][   T10] usb 5-1: device descriptor read/8, error -71
[  331.049214][   T10] usb 5-1: device descriptor read/8, error -71
[  331.162318][   T10] usb usb5-port1: unable to enumerate USB device
[  331.226131][T16966] SELinux:  Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped).
[  331.703764][T16985] syz.0.5665: attempt to access beyond end of device
[  331.703764][T16985] loop0: rw=4096, sector=2, nr_sectors = 2 limit=0
[  331.716890][T16985] EXT4-fs (loop0): unable to read superblock
[  332.178656][ T2524] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  332.329804][ T2524] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  332.339630][ T2524] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00
[  332.348667][ T2524] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  332.357598][ T2524] usb 5-1: config 0 descriptor??
[  332.582489][T17029] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=261 sclass=netlink_route_socket pid=17029 comm=syz.2.5679
[  332.608368][T17033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5680'.
[  332.765201][ T2524] greenasia 0003:0E8F:0012.0014: invalid report_count 76627968
[  332.773066][ T2524] greenasia 0003:0E8F:0012.0014: item 0 4 1 9 parsing failed
[  332.780715][ T2524] greenasia 0003:0E8F:0012.0014: parse failed
[  332.786843][ T2524] greenasia 0003:0E8F:0012.0014: probe with driver greenasia failed with error -22
[  332.970964][  T751] usb 5-1: USB disconnect, device number 12
[  333.240964][T17067] fuseblk: Unknown parameter 'rootmode0000010000'
[  333.275579][T17073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5694'.
[  333.486969][T17091] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5700'.
[  333.511798][T17093] netlink: 'syz.3.5701': attribute type 1 has an invalid length.
[  333.520221][T17093] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5701'.
[  333.680682][T17101] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:20
[  333.734142][T17104] netlink: 'syz.4.5704': attribute type 1 has an invalid length.
[  333.751207][T17104] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5704'.
[  333.790153][   T36] kauditd_printk_skb: 72 callbacks suppressed
[  333.790185][   T36] audit: type=1400 audit(2000000856.625:72673): avc:  denied  { connect } for  pid=17103 comm="syz.4.5704" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  333.823253][   T36] audit: type=1400 audit(2000000856.655:72674): avc:  denied  { write } for  pid=17103 comm="syz.4.5704" laddr=fe80::3cc2:e4ff:fe1c:cd2e lport=58 faddr=ff02::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  333.850697][   T36] audit: type=1400 audit(2000000856.685:72675): avc:  denied  { ioctl } for  pid=17103 comm="syz.4.5704" path="socket:[63408]" dev="sockfs" ino=63408 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  333.879675][   T36] audit: type=1400 audit(2000000856.685:72676): avc:  denied  { sys_module } for  pid=17103 comm="syz.4.5704" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  333.926506][   T36] audit: type=1400 audit(2000000856.755:72677): avc:  denied  { read } for  pid=17108 comm="syz.4.5706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  333.950917][   T36] audit: type=1400 audit(2000000856.755:72678): avc:  denied  { connect } for  pid=17108 comm="syz.4.5706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  333.971642][   T36] audit: type=1400 audit(2000000856.755:72679): avc:  denied  { write } for  pid=17108 comm="syz.4.5706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  334.008280][   T36] audit: type=1400 audit(2000000856.835:72680): avc:  denied  { read } for  pid=17116 comm="syz.4.5709" dev="nsfs" ino=4026533407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  334.043821][   T36] audit: type=1400 audit(2000000856.835:72681): avc:  denied  { open } for  pid=17116 comm="syz.4.5709" path="net:[4026533407]" dev="nsfs" ino=4026533407 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  334.068095][   T36] audit: type=1400 audit(2000000856.835:72682): avc:  denied  { create } for  pid=17116 comm="syz.4.5709" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  334.140787][T17121] rust_binder: Error while translating object.
[  334.140825][T17121] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  334.147067][T17121] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:31
[  334.579844][   T10] usb 5-1: new full-speed USB device number 13 using dummy_hcd
[  334.729914][   T10] usb 5-1: device descriptor read/64, error -71
[  334.970035][   T10] usb 5-1: device descriptor read/64, error -71
[  335.210225][   T10] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  335.346169][   T10] usb 5-1: device descriptor read/64, error -71
[  335.600515][   T10] usb 5-1: device descriptor read/64, error -71
[  335.710467][   T10] usb usb5-port1: attempt power cycle
[  335.741229][ T2525] usb 1-1: string descriptor 0 read error: -32
[  335.747878][ T2525] uclogic 0003:256C:006E.0013: interface is invalid, ignoring
[  335.896060][T17168] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5731'.
[  336.050573][   T10] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  336.071608][   T10] usb 5-1: device descriptor read/8, error -71
[  336.211726][   T10] usb 5-1: device descriptor read/8, error -71
[  336.422158][T17197] netlink: 'syz.2.5742': attribute type 4 has an invalid length.
[  336.450797][   T10] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  336.481714][   T10] usb 5-1: device descriptor read/8, error -71
[  336.624049][   T10] usb 5-1: device descriptor read/8, error -71
[  336.735354][   T10] usb usb5-port1: unable to enumerate USB device
[  336.955653][T17223] rust_binder: Failed to allocate buffer. len:1160, is_oneway:false
[  337.378143][T17235] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5756'.
[  337.396516][T17239] overlayfs: failed to clone lowerpath
[  337.431365][T16474] ------------[ cut here ]------------
[  337.433250][T17243] netlink: 'syz.2.5760': attribute type 4 has an invalid length.
[  337.436876][T16474] WARNING: CPU: 0 PID: 16474 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190
[  337.445575][T17243] netlink: 'syz.2.5760': attribute type 4 has an invalid length.
[  337.454053][T16474] Modules linked in:
[  337.465688][T16474] CPU: 0 UID: 0 PID: 16474 Comm: syz-executor Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[  337.477532][T16474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  337.487637][T16474] RIP: 0010:ovl_dir_modified+0x15a/0x190
[  337.493318][T16474] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 48 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 97 4c 03 cc e8 16 db 42 ff <0f> 0b e9 3e ff ff ff e8 0a db 42 ff 0f 0b e9 6e ff ff ff 44 89 f9
[  337.512947][T16474] RSP: 0018:ffffc90003cdfb68 EFLAGS: 00010293
[  337.519034][T16474] RAX: ffffffff8243239a RBX: 0000000000000000 RCX: ffff8881447b5f00
[  337.527050][T16474] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  337.535051][T16474] RBP: ffffc90003cdfb90 R08: ffff888115404b9f R09: 1ffff11022a80973
[  337.543056][T16474] R10: dffffc0000000000 R11: ffffed1022a80974 R12: 0000000000000000
[  337.551036][T16474] R13: dffffc0000000000 R14: ffff888115404b00 R15: ffff888142d3cbb0
[  337.559087][T16474] FS:  000055557d156500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  337.568049][T16474] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  337.574703][T16474] CR2: 00007ffc32ba8c68 CR3: 000000012ad66000 CR4: 00000000003526b0
[  337.582788][T16474] DR0: 0000000000000011 DR1: 0000000000000001 DR2: 0000000000000003
[  337.590759][T16474] DR3: 0000000000000009 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  337.598739][T16474] Call Trace:
[  337.602053][T16474]  <TASK>
[  337.604990][T16474]  ovl_do_remove+0x7b8/0xcf0
[  337.609580][T16474]  ? ovl_set_redirect+0x780/0x780
[  337.614630][T16474]  ? down_write+0xe9/0x2a0
[  337.619075][T16474]  ? __cfi_down_write+0x10/0x10
[  337.623945][T16474]  ovl_rmdir+0x1e/0x30
[  337.628025][T16474]  vfs_rmdir+0x3dd/0x560
[  337.632286][T16474]  incfs_kill_sb+0x109/0x230
[  337.636892][T16474]  deactivate_locked_super+0xd5/0x2a0
[  337.642281][T16474]  deactivate_super+0xb8/0xe0
[  337.646967][T16474]  cleanup_mnt+0x3f1/0x480
[  337.651950][T16474]  __cleanup_mnt+0x1d/0x40
[  337.656389][T16474]  task_work_run+0x1e0/0x250
[  337.660971][T16474]  ? __cfi_task_work_run+0x10/0x10
[  337.666372][T16474]  ? __x64_sys_umount+0x126/0x170
[  337.671426][T16474]  ? __cfi___x64_sys_umount+0x10/0x10
[  337.676812][T16474]  ? __kasan_check_read+0x15/0x20
[  337.681887][T16474]  resume_user_mode_work+0x36/0x50
[  337.687042][T16474]  syscall_exit_to_user_mode+0x64/0xb0
[  337.692541][T16474]  do_syscall_64+0x64/0xf0
[  337.696970][T16474]  ? clear_bhb_loop+0x50/0xa0
[  337.701659][T16474]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  337.707559][T16474] RIP: 0033:0x7f683cd909f7
[  337.711996][T16474] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  337.731633][T16474] RSP: 002b:00007ffc32ba9418 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  337.740068][T16474] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 00007f683cd909f7
[  337.748079][T16474] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc32ba94d0
[  337.756081][T16474] RBP: 00007ffc32ba94d0 R08: 0000000000000000 R09: 0000000000000000
[  337.764073][T16474] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc32baa5c0
[  337.772073][T16474] R13: 00007f683ce11d7d R14: 000055557d1564a8 R15: 0000000000000006
[  337.780071][T16474]  </TASK>
[  337.783115][T16474] ---[ end trace 0000000000000000 ]---
[  337.788988][T16474] ------------[ cut here ]------------
[  337.794502][T16474] WARNING: CPU: 1 PID: 16474 at fs/overlayfs/util.c:602 ovl_dir_modified+0x15a/0x190
[  337.804016][T16474] Modules linked in:
[  337.807913][T16474] CPU: 1 UID: 0 PID: 16474 Comm: syz-executor Tainted: G        W          syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e
[  337.821232][T16474] Tainted: [W]=WARN
[  337.825045][T16474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  337.835157][T16474] RIP: 0010:ovl_dir_modified+0x15a/0x190
[  337.840820][T16474] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 48 99 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 cc 97 4c 03 cc e8 16 db 42 ff <0f> 0b e9 3e ff ff ff e8 0a db 42 ff 0f 0b e9 6e ff ff ff 44 89 f9
[  337.860433][T16474] RSP: 0018:ffffc90003cdfb68 EFLAGS: 00010293
[  337.866530][T16474] RAX: ffffffff8243239a RBX: 0000000000000000 RCX: ffff8881447b5f00
[  337.874521][T16474] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  337.882614][T16474] RBP: ffffc90003cdfb90 R08: ffff888115404b9f R09: 1ffff11022a80973
[  337.890595][T16474] R10: dffffc0000000000 R11: ffffed1022a80974 R12: 0000000000000000
[  337.898610][T16474] R13: dffffc0000000000 R14: ffff888115404b00 R15: ffff888142d3cbb0
[  337.906620][T16474] FS:  000055557d156500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  337.915587][T16474] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  337.922206][T16474] CR2: 00007f3a965b4198 CR3: 000000012ad66000 CR4: 00000000003526b0
[  337.930198][T16474] Call Trace:
[  337.933490][T16474]  <TASK>
[  337.936426][T16474]  ovl_do_remove+0x7b8/0xcf0
[  337.941017][T16474]  ? ovl_set_redirect+0x780/0x780
[  337.946061][T16474]  ? down_write+0xe9/0x2a0
[  337.950487][T16474]  ? __cfi_down_write+0x10/0x10
[  337.955366][T16474]  ovl_rmdir+0x1e/0x30
[  337.959454][T16474]  vfs_rmdir+0x3dd/0x560
[  337.963723][T16474]  incfs_kill_sb+0x1a0/0x230
[  337.968329][T16474]  deactivate_locked_super+0xd5/0x2a0
[  337.973748][T16474]  deactivate_super+0xb8/0xe0
[  337.978466][T16474]  cleanup_mnt+0x3f1/0x480
[  337.982906][T16474]  __cleanup_mnt+0x1d/0x40
[  337.987330][T16474]  task_work_run+0x1e0/0x250
[  337.991943][T16474]  ? __cfi_task_work_run+0x10/0x10
[  337.997065][T16474]  ? __x64_sys_umount+0x126/0x170
[  338.002122][T16474]  ? __cfi___x64_sys_umount+0x10/0x10
[  338.007521][T16474]  ? __kasan_check_read+0x15/0x20
[  338.012586][T16474]  resume_user_mode_work+0x36/0x50
[  338.017725][T16474]  syscall_exit_to_user_mode+0x64/0xb0
[  338.023197][T16474]  do_syscall_64+0x64/0xf0
[  338.027626][T16474]  ? clear_bhb_loop+0x50/0xa0
[  338.032316][T16474]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  338.038220][T16474] RIP: 0033:0x7f683cd909f7
[  338.042657][T16474] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  338.062317][T16474] RSP: 002b:00007ffc32ba9418 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  338.070739][T16474] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 00007f683cd909f7
[  338.078721][T16474] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc32ba94d0
[  338.086722][T16474] RBP: 00007ffc32ba94d0 R08: 0000000000000000 R09: 0000000000000000
[  338.094717][T16474] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc32baa5c0
[  338.102757][T16474] R13: 00007f683ce11d7d R14: 000055557d1564a8 R15: 0000000000000006
[  338.110730][T16474]  </TASK>
[  338.113765][T16474] ---[ end trace 0000000000000000 ]---
[  338.361665][    T9] usb 5-1: new full-speed USB device number 17 using dummy_hcd
[  338.491749][    T9] usb 5-1: device descriptor read/64, error -71
[  338.731865][    T9] usb 5-1: device descriptor read/64, error -71
[  338.971951][    T9] usb 5-1: new full-speed USB device number 18 using dummy_hcd
[  339.102023][    T9] usb 5-1: device descriptor read/64, error -71
[  339.342137][    T9] usb 5-1: device descriptor read/64, error -71
[  339.452295][    T9] usb usb5-port1: attempt power cycle
[  339.792359][    T9] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  339.813354][    T9] usb 5-1: device descriptor read/8, error -71
[  339.943489][    T9] usb 5-1: device descriptor read/8, error -71
[  340.182555][    T9] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  340.203574][    T9] usb 5-1: device descriptor read/8, error -71
[  340.333632][    T9] usb 5-1: device descriptor read/8, error -71
[  340.442764][    T9] usb usb5-port1: unable to enumerate USB device